$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/ff80e1a8-1841-36ce-8708-dcfd0d348438.roa File: ff80e1a8-1841-36ce-8708-dcfd0d348438.roa (raw, json) Hash identifier: XmtMuK9ZTCewsCnylmsBHSYzPsayX49ZRrCwVmgTW8g= Subject key identifier: 0E:A8:35:EF:92:BF:BE:8F:A4:08:46:F3:63:E3:A0:64:67:A1:90:EC Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584A612B0A624CCF3552E8528D80 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/ff80e1a8-1841-36ce-8708-dcfd0d348438.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 395075 IP address blocks: 207.253.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:0a:62:4c:cf:35:52:e8:52:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=21f730a4-718f-4b0d-8959-0e235cc6f296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:84:02:d7:05:a9:89:4d:4a:03:a2:86:8d:d4: 3d:0c:3b:82:f5:5f:07:53:3d:a4:59:66:27:14:fc: ca:36:2f:66:18:fb:4d:c8:cf:2a:49:68:3e:9d:71: 04:c5:d5:0e:f1:f7:d5:74:78:b4:e7:52:ee:48:20: d4:b8:3d:23:3d:dd:1f:0f:26:d0:1a:6d:e4:d6:fb: c1:92:ac:b7:bf:af:4b:68:24:90:80:6f:74:d0:41: c2:16:d7:33:57:fa:c9:3f:8e:8b:70:5e:06:d2:68: e1:99:24:26:98:bd:67:1a:eb:42:a8:22:92:1e:f8: b1:ec:8c:ae:29:93:16:d6:4f:37:9b:42:98:7f:56: 06:fa:50:72:d4:09:16:3e:11:c4:e6:78:6e:28:00: cb:c4:ba:24:51:92:12:a9:20:68:52:16:56:24:0a: b2:4d:d3:53:eb:b3:a7:b2:57:c4:55:2e:c5:e3:16: 28:8b:57:d5:82:71:1b:bd:4d:90:dd:42:21:5b:ea: 51:0c:fb:80:71:a2:bc:cb:ad:68:00:d3:ee:89:71: 2e:bd:53:dd:00:b8:36:46:50:04:02:a4:81:ef:e2: f0:d4:73:90:3a:6a:e7:05:72:4a:10:11:2a:af:3c: 1b:b1:ca:f0:d8:81:12:9f:6a:49:2d:38:bb:7e:18: 30:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A8:35:EF:92:BF:BE:8F:A4:08:46:F3:63:E3:A0:64:67:A1:90:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/ff80e1a8-1841-36ce-8708-dcfd0d348438.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 207.253.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:bc:e5:bb:c4:26:8a:22:39:0e:00:b6:8c:e3:1f:d4:f6:4c: ff:25:a5:c1:47:19:0d:28:a6:ef:8f:65:0a:da:54:38:5b:41: dd:e7:b6:29:a1:f5:be:f4:ea:84:28:4d:24:fc:c1:32:0a:96: ac:76:b4:71:b1:34:c0:12:e9:bc:b0:3f:77:de:77:7f:b1:6c: fd:15:c0:c7:40:31:51:56:32:38:b4:fe:2b:b4:89:33:a7:d9: ff:53:a3:2d:8f:1b:72:4a:e8:b7:68:6e:53:f1:8a:4b:c1:57: dc:e1:a2:5b:28:da:d2:0a:5c:06:8c:be:70:d8:94:4f:40:1a: 21:8f:d4:18:7d:3b:e5:d1:d6:b4:31:6b:83:13:9e:b7:d8:83: f9:ed:b2:eb:c2:a4:a4:53:a7:c3:02:79:83:f6:93:7a:ef:ec: ed:2d:4f:75:c9:0a:3f:fc:cf:6a:76:f7:19:b7:2b:72:ab:29: 5b:af:ef:6d:c5:07:32:2f:c0:a1:c8:0f:bb:0d:6d:64:04:7c: 2d:e9:23:92:a6:57:9c:fa:a2:58:68:ce:c9:24:25:df:9d:eb: 41:79:c6:48:70:2a:98:ce:61:27:33:54:be:7d:9a:8d:4e:a4: 8d:eb:8d:d7:89:bf:35:8b:53:b3:4d:ec:dd:bf:e9:03:87:25: 3f:c2:57:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKwpiTM81UuhSjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk MjFmNzMwYTQtNzE4Zi00YjBkLTg5NTktMGUyMzVjYzZmMjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIQC1wWpiU1KA6KGjdQ9DDuC9V8HUz2kWWYn FPzKNi9mGPtNyM8qSWg+nXEExdUO8ffVdHi051LuSCDUuD0jPd0fDybQGm3k1vvB kqy3v69LaCSQgG900EHCFtczV/rJP46LcF4G0mjhmSQmmL1nGutCqCKSHvix7Iyu KZMW1k83m0KYf1YG+lBy1AkWPhHE5nhuKADLxLokUZISqSBoUhZWJAqyTdNT67On slfEVS7F4xYoi1fVgnEbvU2Q3UIhW+pRDPuAcaK8y61oANPuiXEuvVPdALg2RlAE AqSB7+Lw1HOQOmrnBXJKEBEqrzwbscrw2IESn2pJLTi7fhgwqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6oNe+Sv76PpAhG82PjoGRnoZDsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvZmY4MGUxYTgtMTg0MS0z NmNlLTg3MDgtZGNmZDBkMzQ4NDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz/2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGC85bvEJooiOQ4AtozjH9T2TP8lpcFHGQ0opu+PZQraVDhbQd3ntimh 9b706oQoTST8wTIKlqx2tHGxNMAS6bywP3fed3+xbP0VwMdAMVFWMji0/iu0iTOn 2f9Toy2PG3JK6LdoblPxikvBV9zholso2tIKXAaMvnDYlE9AGiGP1Bh9O+XR1rQx a4MTnrfYg/ntsuvCpKRTp8MCeYP2k3rv7O0tT3XJCj/8z2p29xm3K3KrKVuv723F BzIvwKHID7sNbWQEfC3pI5KmV5z6olhozskkJd+d60F5xkhwKpjOYSczVL59mo1O pI3rjdeJvzWLU7NN7N2/6QOHJT/CV3I= -----END CERTIFICATE-----Generated at Tue Jul 29 20:15:07 2025 by rpki-client