$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/8e45914f-51e5-3e68-a302-1375b40ef034.roa File: 8e45914f-51e5-3e68-a302-1375b40ef034.roa (raw, json) Hash identifier: OPvELNP5ongcwF6CpnEa8HcnlhPFukQoIGe+b/d2cF8= Subject key identifier: 26:71:C2:4A:D9:64:1B:61:39:28:F5:57:8D:D4:4D:AD:71:50:3C:45 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584A8840997B8A5774D0EB2D7EA0 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/8e45914f-51e5-3e68-a302-1375b40ef034.roa Signing time: Wed 16 Jul 2025 01:00:49 +0000 ROA not before: Wed 16 Jul 2025 01:00:49 +0000 ROA not after: Tue 14 Oct 2025 01:00:49 +0000 asID: 22652 IP address blocks: 199.244.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:40:99:7b:8a:57:74:d0:eb:2d:7e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Jul 16 01:00:49 2025 GMT Not After : Oct 14 01:00:49 2025 GMT Subject: CN=2b1f202b-1135-46be-8958-01541c68eee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:08:d3:08:a3:e9:09:f9:84:e5:e4:12:e2:cb: 5f:c8:7e:26:5b:2e:cf:f5:6f:26:30:43:60:25:24: d9:f1:06:30:bd:96:dd:9c:10:a0:02:64:05:67:57: e7:c0:d9:e3:81:ed:9e:56:0f:15:a2:0d:b1:52:da: fe:16:9a:11:8c:57:8c:75:6b:0f:71:a9:65:7e:5f: 18:7b:d8:52:f6:a0:91:20:42:40:45:c1:57:4a:dc: 7e:6b:ab:77:1e:8b:a3:4a:9d:b6:35:85:be:67:c8: 0f:ae:2d:f0:76:d6:2c:25:c3:0e:4d:94:e8:21:f6: de:7e:43:cc:99:2d:28:96:57:11:82:fa:c6:5c:f2: a3:7b:86:42:b7:4b:fb:01:ef:db:a4:56:f8:c1:fb: c7:82:df:63:ed:6e:5f:13:77:bf:22:50:7e:8e:8a: 11:eb:f9:18:fc:75:ad:a3:40:10:3a:18:ac:e6:ad: 7a:3a:19:58:2b:95:89:7b:de:27:5d:8d:ee:22:4a: 5a:da:0a:ce:71:5a:a6:76:c0:b1:97:15:2f:5f:78: 09:f9:59:18:05:f8:18:26:fa:25:35:c1:26:9a:7a: 35:8d:34:5b:d0:11:dd:7c:34:39:af:85:56:0a:8f: e0:b0:78:5b:1f:b5:59:1d:0e:9b:0c:90:13:91:c7: df:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:71:C2:4A:D9:64:1B:61:39:28:F5:57:8D:D4:4D:AD:71:50:3C:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/8e45914f-51e5-3e68-a302-1375b40ef034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 199.244.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:94:f5:83:80:e4:21:31:92:ee:05:19:d2:b6:88:a3:eb:5d: 26:b8:c4:82:ae:1d:b6:32:3b:46:f2:94:60:f1:b4:9b:87:b9: b8:c8:74:e5:a1:ca:60:35:61:07:15:13:28:18:bc:e4:fc:0c: 9c:ce:b2:27:49:5e:ed:83:50:42:cf:a3:60:c6:0e:bf:44:19: 5a:ac:01:d1:61:ed:d4:06:cf:f7:58:a9:1d:29:02:ff:bb:8d: 60:9c:c2:42:5f:33:af:02:23:dd:70:f1:39:8e:9f:c6:59:fa: 2f:d6:74:29:6d:96:a8:0a:db:f8:e3:8a:bd:58:23:f8:d5:39: 0a:49:0f:d3:26:6d:96:f1:d7:84:c8:d1:e4:6a:09:04:ac:1c: bb:6f:be:0f:4d:c8:ae:63:a7:3c:1e:ed:a4:b0:56:cd:19:04: a5:72:d0:06:d3:71:a3:c8:9b:77:9d:65:d9:f0:2f:24:69:f7: c5:3a:04:c8:72:3c:18:56:1a:84:71:bd:3c:16:f8:ba:cb:4b: e6:2d:4f:50:81:a6:ce:0e:39:87:ad:1b:28:0c:a9:fd:7d:bd: 49:cf:d7:e7:1a:77:9c:eb:94:42:ed:fe:2b:f1:c1:2a:db:b0: db:ed:c2:77:08:77:bf:b6:a4:b4:58:49:eb:45:5d:1c:b9:6a: e0:59:bb:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqIQJl7ild00OstfqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk MmIxZjIwMmItMTEzNS00NmJlLTg5NTgtMDE1NDFjNjhlZWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwjTCKPpCfmE5eQS4stfyH4mWy7P9W8mMENg JSTZ8QYwvZbdnBCgAmQFZ1fnwNnjge2eVg8Vog2xUtr+FpoRjFeMdWsPcallfl8Y e9hS9qCRIEJARcFXStx+a6t3HoujSp22NYW+Z8gPri3wdtYsJcMOTZToIfbefkPM mS0ollcRgvrGXPKje4ZCt0v7Ae/bpFb4wfvHgt9j7W5fE3e/IlB+jooR6/kY/HWt o0AQOhis5q16OhlYK5WJe94nXY3uIkpa2grOcVqmdsCxlxUvX3gJ+VkYBfgYJvol NcEmmno1jTRb0BHdfDQ5r4VWCo/gsHhbH7VZHQ6bDJATkcffcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZxwkrZZBthOSj1V43UTa1xUDxFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvOGU0NTkxNGYtNTFlNS0z ZTY4LWEzMDItMTM3NWI0MGVmMDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx/R4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKU9YOA5CExku4FGdK2iKPrXSa4xIKuHbYyO0bylGDxtJuHubjIdOWh ymA1YQcVEygYvOT8DJzOsidJXu2DUELPo2DGDr9EGVqsAdFh7dQGz/dYqR0pAv+7 jWCcwkJfM68CI91w8TmOn8ZZ+i/WdCltlqgK2/jjir1YI/jVOQpJD9MmbZbx14TI 0eRqCQSsHLtvvg9NyK5jpzwe7aSwVs0ZBKVy0AbTcaPIm3edZdnwLyRp98U6BMhy PBhWGoRxvTwW+LrLS+YtT1CBps4OOYetGygMqf19vUnP1+cad5zrlELt/ivxwSrb sNvtwncId7+2pLRYSetFXRy5auBZu3Y= -----END CERTIFICATE-----Generated at Mon Jul 28 22:16:49 2025 by rpki-client