$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/cf4d15d6-4c1e-3733-a01b-06894d765f29.roa File: cf4d15d6-4c1e-3733-a01b-06894d765f29.roa (raw, json) Hash identifier: d0KHlgs4D/r9JoxobarGSpJE977V3kqXsLHQE328Bc0= Subject key identifier: 2D:C5:F9:6E:BC:32:D6:DE:96:C4:76:08:E3:07:71:DC:2E:E8:36:66 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584A612B1247391F5C76DD8A3880 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/cf4d15d6-4c1e-3733-a01b-06894d765f29.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 5769 IP address blocks: 207.253.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:12:47:39:1f:5c:76:dd:8a:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=6f72bd21-2ed3-4564-8c53-6fb1a1c41326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8e:61:f0:97:0a:0f:8e:38:84:0c:80:31:22: 87:84:99:e1:24:06:05:42:1d:a9:d2:9f:04:c8:2c: 63:11:18:ad:8c:10:f8:05:67:51:53:10:4f:81:22: e4:e1:33:ce:af:52:f0:f5:82:3e:fd:24:70:f2:98: b2:3c:88:2a:d1:0f:d8:85:da:19:02:9f:db:ae:e6: 49:db:f6:10:ec:72:8d:d2:63:aa:97:bb:18:0a:0c: 5d:0c:22:1a:4a:73:b7:7a:f5:c3:1a:1d:cf:f7:36: 34:00:c5:95:a7:8f:91:39:9d:04:05:b8:4a:ec:ce: fb:78:e6:79:35:fc:1f:ba:29:24:81:16:4e:2b:59: 3d:3b:a0:3e:26:aa:c7:8d:92:8f:c8:45:2e:5e:a1: a4:fe:1c:b6:8a:4d:db:29:8d:fa:38:6d:4f:44:bd: bd:de:21:13:5b:23:1a:8d:a5:13:f6:cb:7b:6d:f5: 13:61:78:0a:4e:b4:5a:77:3f:37:00:6e:62:7c:83: 95:21:14:97:c2:6b:a3:24:99:0f:da:b6:80:37:e3: df:c3:3a:f5:7f:8d:93:a6:1c:83:e5:2a:6f:e9:43: e1:ea:07:2e:68:23:63:9a:42:f8:23:49:1b:b1:5e: cc:00:41:d4:f6:f1:d2:a8:c7:ea:09:32:7d:c2:42: 28:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C5:F9:6E:BC:32:D6:DE:96:C4:76:08:E3:07:71:DC:2E:E8:36:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/cf4d15d6-4c1e-3733-a01b-06894d765f29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 207.253.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:a5:d3:23:75:66:89:24:9a:fb:f0:24:d8:54:a0:3f:fb:c8: 8c:a2:a0:70:9d:90:0f:cc:f8:4e:24:5a:40:ac:9b:d8:6b:6e: 96:9c:a9:50:85:51:b1:e6:32:1f:c1:24:28:45:74:79:1f:3f: 91:e3:5d:e3:42:27:49:e1:f1:f1:02:9e:36:6f:3b:94:fb:34: 48:4e:6a:cf:ee:d3:e7:9d:6c:f7:05:90:48:2a:99:74:5e:c6: 94:4e:7f:51:c1:7d:9c:7a:c7:45:f7:cf:dd:76:10:0b:9b:00: fa:8b:9c:94:83:a8:e1:8c:7b:6c:bf:d6:af:b8:8a:08:9c:3b: 7d:16:d5:3b:50:40:56:9e:ff:5f:c8:9f:43:4a:6f:b1:83:d7: 52:3e:af:df:1b:db:50:03:77:77:34:8d:35:d8:5c:6c:01:0b: a2:31:23:97:25:ff:b2:eb:b7:34:97:0a:31:13:74:a5:3c:21: a0:69:73:4c:c2:cd:1c:c0:42:0d:97:2c:21:34:df:31:c6:43: 29:cb:68:ef:0a:12:68:82:fb:a2:c9:95:17:cd:3e:9b:bd:79: 72:e5:36:22:0d:40:63:2a:8c:14:92:90:5d:3e:bb:96:83:4b: b2:f7:85:b9:e1:ae:10:32:fd:e9:77:b8:e5:23:02:5e:ee:41: ba:8d:9c:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKxJHOR9cdt2KOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk NmY3MmJkMjEtMmVkMy00NTY0LThjNTMtNmZiMWExYzQxMzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY5h8JcKD444hAyAMSKHhJnhJAYFQh2p0p8E yCxjERitjBD4BWdRUxBPgSLk4TPOr1Lw9YI+/SRw8piyPIgq0Q/YhdoZAp/bruZJ 2/YQ7HKN0mOql7sYCgxdDCIaSnO3evXDGh3P9zY0AMWVp4+ROZ0EBbhK7M77eOZ5 NfwfuikkgRZOK1k9O6A+JqrHjZKPyEUuXqGk/hy2ik3bKY36OG1PRL293iETWyMa jaUT9st7bfUTYXgKTrRadz83AG5ifIOVIRSXwmujJJkP2raAN+Pfwzr1f42TphyD 5Spv6UPh6gcuaCNjmkL4I0kbsV7MAEHU9vHSqMfqCTJ9wkIorwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3F+W68MtbelsR2COMHcdwu6DZmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvY2Y0ZDE1ZDYtNGMxZS0z NzMzLWEwMWItMDY4OTRkNzY1ZjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/1sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWl0yN1ZokkmvvwJNhUoD/7yIyioHCdkA/M+E4kWkCsm9hrbpacqVCF UbHmMh/BJChFdHkfP5HjXeNCJ0nh8fECnjZvO5T7NEhOas/u0+edbPcFkEgqmXRe xpROf1HBfZx6x0X3z912EAubAPqLnJSDqOGMe2y/1q+4igicO30W1TtQQFae/1/I n0NKb7GD11I+r98b21ADd3c0jTXYXGwBC6IxI5cl/7LrtzSXCjETdKU8IaBpc0zC zRzAQg2XLCE03zHGQynLaO8KEmiC+6LJlRfNPpu9eXLlNiINQGMqjBSSkF0+u5aD S7L3hbnhrhAy/el3uOUjAl7uQbqNnDE= -----END CERTIFICATE-----Generated at Tue Jul 29 20:04:15 2025 by rpki-client