$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/c904c4e7-f7ed-3350-bab0-28d7480c0b53.roa File: c904c4e7-f7ed-3350-bab0-28d7480c0b53.roa (raw, json) Hash identifier: 5m0WZsSTmtrUjqYFiJoEt7tfk7Q0f1yfSMZcKJC81Es= Subject key identifier: EC:78:39:11:4F:E2:5B:E5:A8:F6:F0:00:6E:AB:C5:B0:A7:B5:B1:FC Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584A612B207FFEFC7FF09ADB0C80 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/c904c4e7-f7ed-3350-bab0-28d7480c0b53.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 22652 IP address blocks: 207.253.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:20:7f:fe:fc:7f:f0:9a:db:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=130f80ea-1012-4cb7-a6bf-e8484e9fa311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a0:48:bf:5a:36:db:b8:1e:f6:da:37:44:7b: c8:58:2b:55:3d:80:69:64:f2:39:5a:a6:6a:8e:1b: 4f:84:ac:86:37:ba:58:bb:76:88:6c:fd:e1:a2:d4: 43:4c:6f:26:ba:6a:25:95:85:a5:ac:64:c2:68:4b: 1d:e3:eb:d9:53:14:91:1b:32:bd:06:60:94:bb:35: e6:eb:b4:c7:37:9c:96:62:0b:c5:af:8f:62:4c:13: aa:c2:ef:f1:05:83:16:a0:d0:15:22:f5:da:40:79: a8:31:42:d4:43:ed:d2:91:57:30:45:09:b7:65:4d: b2:7d:90:80:53:ff:2a:d4:c9:ca:ee:d0:d7:3d:70: f3:d3:49:f0:95:5d:6b:55:e8:31:11:5d:5f:b3:47: 6f:e6:43:da:14:6c:a1:90:be:6d:27:d8:54:53:83: 9b:eb:a7:74:8b:a1:1f:04:26:0c:56:47:62:62:63: 04:e1:6e:06:41:d7:48:98:67:fe:a0:00:1d:0c:81: 71:6b:98:b4:a7:f5:9c:f5:6e:b5:07:d9:fa:fd:ea: 36:0c:0c:51:1c:f1:35:8e:a7:b6:78:0d:eb:a7:4a: fb:b3:c2:e6:51:2e:3d:f8:e7:d3:dd:17:fa:29:dc: 1a:ef:2c:ee:63:0c:62:5c:41:2c:25:6a:36:1a:67: d0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:78:39:11:4F:E2:5B:E5:A8:F6:F0:00:6E:AB:C5:B0:A7:B5:B1:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/c904c4e7-f7ed-3350-bab0-28d7480c0b53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 207.253.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:a6:72:97:54:77:4b:8c:22:a4:34:f4:84:09:84:a4:80:67: 51:6d:22:e5:ca:67:02:b6:24:51:2d:5a:24:27:df:a7:cb:8b: c2:23:21:7f:62:18:8d:87:8f:08:b2:16:be:22:e8:c0:28:d5: 8f:c9:fc:8a:22:ef:a2:c5:41:1e:1e:6f:42:d4:3f:f8:6a:94: c7:7f:35:a4:2b:d4:97:8f:ff:f6:b4:62:30:df:60:23:f9:f7: 21:e0:04:70:16:d2:84:1f:bb:fd:31:36:22:0c:d4:01:d3:55: 59:27:f3:74:0e:a6:2f:d5:f9:fc:a0:e7:fe:01:a9:ec:18:e1: 62:7e:65:e5:18:3d:76:5a:8f:df:c9:84:69:29:5d:ed:b3:7f: 48:55:ba:d3:5c:e0:15:29:0b:f9:81:5e:fc:50:98:9e:46:64: f9:e7:4f:67:93:07:76:68:d8:47:89:4b:96:d0:e3:59:b2:e1: 1b:38:eb:24:a9:86:fc:8a:37:0f:76:f2:f2:7c:2a:3e:d7:d8: e0:22:72:1e:3c:95:2c:1b:30:12:2d:07:68:07:95:74:39:49: db:2e:ab:8f:e2:a5:e8:ca:d0:67:bd:2c:ba:e1:d5:1e:79:c9: df:fb:ed:79:32:bd:b3:5f:af:f9:63:b6:c9:44:99:68:88:9e: 99:9c:9d:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKyB//vx/8JrbDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk MTMwZjgwZWEtMTAxMi00Y2I3LWE2YmYtZTg0ODRlOWZhMzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaBIv1o227ge9to3RHvIWCtVPYBpZPI5WqZq jhtPhKyGN7pYu3aIbP3hotRDTG8mumollYWlrGTCaEsd4+vZUxSRGzK9BmCUuzXm 67THN5yWYgvFr49iTBOqwu/xBYMWoNAVIvXaQHmoMULUQ+3SkVcwRQm3ZU2yfZCA U/8q1MnK7tDXPXDz00nwlV1rVegxEV1fs0dv5kPaFGyhkL5tJ9hUU4Ob66d0i6Ef BCYMVkdiYmME4W4GQddImGf+oAAdDIFxa5i0p/Wc9W61B9n6/eo2DAxRHPE1jqe2 eA3rp0r7s8LmUS49+OfT3Rf6Kdwa7yzuYwxiXEEsJWo2GmfQSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOx4ORFP4lvlqPbwAG6rxbCntbH8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvYzkwNGM0ZTctZjdlZC0z MzUwLWJhYjAtMjhkNzQ4MGMwYjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz/0WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKmcpdUd0uMIqQ09IQJhKSAZ1FtIuXKZwK2JFEtWiQn36fLi8IjIX9i GI2HjwiyFr4i6MAo1Y/J/Ioi76LFQR4eb0LUP/hqlMd/NaQr1JeP//a0YjDfYCP5 9yHgBHAW0oQfu/0xNiIM1AHTVVkn83QOpi/V+fyg5/4BqewY4WJ+ZeUYPXZaj9/J hGkpXe2zf0hVutNc4BUpC/mBXvxQmJ5GZPnnT2eTB3Zo2EeJS5bQ41my4Rs46ySp hvyKNw928vJ8Kj7X2OAich48lSwbMBItB2gHlXQ5Sdsuq4/ipejK0Ge9LLrh1R55 yd/77XkyvbNfr/ljtslEmWiInpmcnYs= -----END CERTIFICATE-----Generated at Mon Jul 28 22:15:39 2025 by rpki-client