$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/63b287bf-06fb-3517-91d3-f0207f69a676.roa File: 63b287bf-06fb-3517-91d3-f0207f69a676.roa (raw, json) Hash identifier: y6am10fwy48clgi4M5HuaysaVuFGRSeLYwfZ0QEHKAY= Subject key identifier: E9:CC:19:DD:73:AF:72:8A:90:C5:0F:78:75:A0:00:63:1C:25:B8:9C Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584B1806C74FE9064A7D48EE2300 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/63b287bf-06fb-3517-91d3-f0207f69a676.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 22781 IP address blocks: 207.204.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:c7:4f:e9:06:4a:7d:48:ee:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=9bd642ca-76a3-4a32-a6a9-f7d2f3e09943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2b:95:a3:7d:e3:da:5e:e3:9f:4a:cb:04:ce: 4f:0d:56:2b:7c:5f:59:68:13:bf:f2:f2:87:28:17: 7b:72:cc:3b:aa:9c:a7:ac:f3:bf:c8:99:0d:6e:fb: 64:cc:0a:ba:15:00:f1:09:35:a9:d4:0b:08:69:f0: 8c:19:2c:dc:40:ba:02:b1:7f:1f:66:d1:95:b7:f3: 5e:9d:7e:ce:d5:fd:2a:bf:31:c7:c6:f6:d1:52:22: 18:73:3b:4a:03:d7:1e:3a:75:bc:d9:e9:26:29:fd: ef:1b:91:da:9b:55:79:d4:90:9f:75:41:d1:b7:02: 5c:0f:bf:1a:8c:06:af:45:b0:59:a6:9a:68:01:6d: bf:09:88:60:b0:64:3a:90:ca:d7:7b:80:9a:14:71: 78:fe:95:38:fa:98:cc:f5:a7:c4:24:ed:ad:b1:43: 6b:cd:1a:d8:d2:3e:02:b6:17:d6:30:ab:cd:b4:88: 34:95:59:fb:0a:bf:81:73:1e:cc:1b:50:8d:dc:8d: de:40:61:8a:b5:b9:f4:d4:b0:d2:e2:83:90:17:35: a8:54:cc:23:6a:d8:17:ca:5f:a5:10:16:7f:11:32: 1b:ae:1f:2b:3a:f7:ac:ab:95:9c:6a:18:57:97:85: 8e:91:41:79:78:a3:06:b0:67:31:81:43:6c:3b:f4: b4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:CC:19:DD:73:AF:72:8A:90:C5:0F:78:75:A0:00:63:1C:25:B8:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/63b287bf-06fb-3517-91d3-f0207f69a676.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 207.204.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:4f:eb:d0:4d:d1:dc:64:7f:2c:84:71:57:06:ea:3a:0b:4d: 89:c3:38:b3:c5:d0:90:e8:3b:36:96:c4:3d:a4:63:9b:7c:ca: 05:c2:87:ff:7d:12:19:3f:13:c7:4e:8c:74:0b:d1:ad:9b:db: 68:ae:59:74:47:62:37:4b:87:f5:de:75:2c:da:54:67:63:f8: 8a:e8:da:ce:dd:1d:d7:53:41:33:2f:5b:cf:86:e8:1a:0e:b7: 21:bc:0b:05:f6:27:73:c1:29:d8:bf:dc:9a:b2:42:8d:f6:6f: c8:0f:2d:5f:41:b5:5f:72:ec:4d:e5:e7:62:24:dd:a1:41:c0: fe:20:ee:c0:79:68:c2:6a:14:35:6c:93:2e:0d:10:61:00:46: cc:34:3e:de:ff:ae:cd:d0:35:5c:44:0c:bd:3b:9e:f2:8f:13: 53:73:1d:8e:09:7a:d0:6f:a6:b9:fa:61:17:49:c2:c0:a3:eb: d8:7c:62:d8:20:ac:b2:d0:37:b4:b9:92:ce:1d:fa:13:33:a8: 75:8f:06:28:19:32:2a:0c:bc:6d:da:17:3e:74:f1:e4:2b:65: c6:81:01:d9:be:22:74:f3:66:c3:3d:02:fe:0c:c1:3d:7f:ad: 3d:65:59:38:4a:5c:51:ac:64:d2:48:30:29:e6:2d:64:e2:70: 60:42:d2:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBsdP6QZKfUjuIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk OWJkNjQyY2EtNzZhMy00YTMyLWE2YTktZjdkMmYzZTA5OTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniuVo33j2l7jn0rLBM5PDVYrfF9ZaBO/8vKH KBd7csw7qpynrPO/yJkNbvtkzAq6FQDxCTWp1AsIafCMGSzcQLoCsX8fZtGVt/Ne nX7O1f0qvzHHxvbRUiIYcztKA9ceOnW82ekmKf3vG5Ham1V51JCfdUHRtwJcD78a jAavRbBZpppoAW2/CYhgsGQ6kMrXe4CaFHF4/pU4+pjM9afEJO2tsUNrzRrY0j4C thfWMKvNtIg0lVn7Cr+Bcx7MG1CN3I3eQGGKtbn01LDS4oOQFzWoVMwjatgXyl+l EBZ/ETIbrh8rOvesq5WcahhXl4WOkUF5eKMGsGcxgUNsO/S0OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnMGd1zr3KKkMUPeHWgAGMcJbicMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvNjNiMjg3YmYtMDZmYi0z NTE3LTkxZDMtZjAyMDdmNjlhNjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz8z8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABP69BN0dxkfyyEcVcG6joLTYnDOLPF0JDoOzaWxD2kY5t8ygXCh/99 Ehk/E8dOjHQL0a2b22iuWXRHYjdLh/XedSzaVGdj+Iro2s7dHddTQTMvW8+G6BoO tyG8CwX2J3PBKdi/3JqyQo32b8gPLV9BtV9y7E3l52Ik3aFBwP4g7sB5aMJqFDVs ky4NEGEARsw0Pt7/rs3QNVxEDL07nvKPE1NzHY4JetBvprn6YRdJwsCj69h8Ytgg rLLQN7S5ks4d+hMzqHWPBigZMioMvG3aFz508eQrZcaBAdm+InTzZsM9Av4MwT1/ rT1lWThKXFGsZNJIMCnmLWTicGBC0tE= -----END CERTIFICATE-----Generated at Fri Sep 5 19:57:16 2025 by rpki-client