$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/c48fa09d-ac41-373f-aff8-5e7a3a68e428.roa File: c48fa09d-ac41-373f-aff8-5e7a3a68e428.roa (raw, json) Hash identifier: NR01l5EpJS+dDTuZqNzhmZC9RfFofVJ0JcZrpfF9sg8= Subject key identifier: B4:53:DE:41:24:3C:91:AD:73:FA:13:CF:C3:DA:42:76:42:94:00:B4 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584A9BCB751FEEC9870377451F80 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/c48fa09d-ac41-373f-aff8-5e7a3a68e428.roa Signing time: Wed 23 Jul 2025 01:00:52 +0000 ROA not before: Wed 23 Jul 2025 01:00:52 +0000 ROA not after: Tue 21 Oct 2025 01:00:52 +0000 asID: 16739 IP address blocks: 162.253.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 03 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9b:cb:75:1f:ee:c9:87:03:77:45:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Jul 23 01:00:52 2025 GMT Not After : Oct 21 01:00:52 2025 GMT Subject: CN=720c6d78-6250-4e3f-93a3-a405b4c3246b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:35:8e:89:fd:97:54:50:16:5d:30:22:ac:d5: d2:c6:20:db:62:b9:55:e3:a1:bc:8f:07:29:29:5c: 02:56:20:68:a6:fc:67:b4:3a:d7:19:b6:85:6a:d5: ce:9c:1e:9f:2f:f5:e0:3c:82:4d:b9:6b:ac:b3:3c: ec:3c:59:63:60:f3:41:c7:4c:f6:b7:a1:c7:8a:5a: 74:c7:d5:03:26:b0:68:15:8e:6d:77:1f:15:af:05: c2:72:f3:e6:80:57:a4:09:72:a4:09:66:9d:55:f0: c2:c2:a2:29:23:f7:41:bf:5c:0b:36:e1:0c:5d:c1: 0c:00:08:cd:61:7e:ca:d6:17:cc:10:74:f0:03:74: 54:20:83:7b:62:77:1f:0d:64:ab:bb:92:7d:b9:fa: 3e:b4:8b:d5:80:de:40:03:e3:5a:1a:bf:13:8a:10: 0d:55:28:0e:99:be:1d:63:91:3b:19:33:8c:22:c4: 3d:fc:39:4b:44:c3:92:84:7d:72:89:82:fc:6e:ad: cf:6b:bf:fd:1e:28:c9:a5:54:1b:56:ec:dd:b4:b7: 7e:f2:25:e2:66:68:56:73:55:b0:3b:62:fb:d7:ac: d3:50:68:d3:c6:97:dd:f9:a7:12:2e:6f:79:9d:45: eb:e0:78:71:e1:fe:bb:69:09:d7:b4:44:cf:a7:b1: 9d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:53:DE:41:24:3C:91:AD:73:FA:13:CF:C3:DA:42:76:42:94:00:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/c48fa09d-ac41-373f-aff8-5e7a3a68e428.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 162.253.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:02:56:38:0c:11:0e:b8:da:3e:ce:88:6c:52:b7:3c:2d:fc: 2c:bc:92:e0:75:e2:70:7f:4a:c9:f6:dd:ce:9e:0d:d4:ac:49: 88:77:e7:b1:c0:a4:96:d2:e8:a7:c6:29:0c:72:83:da:3e:a4: 48:a1:9d:53:9b:d3:8f:40:7d:f5:88:42:5d:7d:64:0e:a9:02: 90:7f:5d:6d:36:51:ec:1f:18:cd:19:96:dd:75:79:56:4c:83: 62:99:c4:66:19:5a:ac:62:19:6c:33:f0:b2:29:d5:b5:fc:42: c9:84:a6:e9:52:48:d7:b2:a6:0f:a0:82:6a:d3:48:87:b9:d5: 24:b7:c4:a3:65:44:4c:b7:aa:90:82:ed:63:1c:a4:ea:5a:30: 86:67:36:ab:ff:c6:f6:29:7a:e9:30:b8:f4:36:a2:6e:0b:ca: 29:ee:93:26:2a:88:a7:be:a4:e5:3b:b7:e4:7b:b8:96:5e:98: 3a:52:70:68:2c:3b:00:4c:c5:be:ba:70:0b:ce:95:ff:94:80: bb:01:1b:f4:df:22:21:6b:a4:c6:58:f6:cc:c7:f6:a0:90:d7: 19:60:e1:0c:2b:a0:88:b7:ee:22:da:05:28:6a:e0:16:33:a4: d4:04:eb:8d:47:96:4a:f0:63:a8:8e:08:20:58:00:50:c3:03: 05:9f:c0:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqby3Uf7smHA3dFH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDcyMzAxMDA1MloXDTI1MTAyMTAxMDA1MlowLzEtMCsGA1UEAxMk NzIwYzZkNzgtNjI1MC00ZTNmLTkzYTMtYTQwNWI0YzMyNDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDWOif2XVFAWXTAirNXSxiDbYrlV46G8jwcp KVwCViBopvxntDrXGbaFatXOnB6fL/XgPIJNuWusszzsPFljYPNBx0z2t6HHilp0 x9UDJrBoFY5tdx8VrwXCcvPmgFekCXKkCWadVfDCwqIpI/dBv1wLNuEMXcEMAAjN YX7K1hfMEHTwA3RUIIN7YncfDWSru5J9ufo+tIvVgN5AA+NaGr8TihANVSgOmb4d Y5E7GTOMIsQ9/DlLRMOShH1yiYL8bq3Pa7/9HijJpVQbVuzdtLd+8iXiZmhWc1Ww O2L716zTUGjTxpfd+acSLm95nUXr4Hhx4f67aQnXtETPp7GdGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRT3kEkPJGtc/oTz8PaQnZClAC0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvYzQ4ZmEwOWQtYWM0MS0z NzNmLWFmZjgtNWU3YTNhNjhlNDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCov1sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkCVjgMEQ642j7OiGxStzwt/Cy8kuB14nB/Ssn23c6eDdSsSYh357HA pJbS6KfGKQxyg9o+pEihnVOb049AffWIQl19ZA6pApB/XW02UewfGM0Zlt11eVZM g2KZxGYZWqxiGWwz8LIp1bX8QsmEpulSSNeypg+ggmrTSIe51SS3xKNlREy3qpCC 7WMcpOpaMIZnNqv/xvYpeukwuPQ2om4LyinukyYqiKe+pOU7t+R7uJZemDpScGgs OwBMxb66cAvOlf+UgLsBG/TfIiFrpMZY9szH9qCQ1xlg4QwroIi37iLaBShq4BYz pNQE641HlkrwY6iOCCBYAFDDAwWfwLc= -----END CERTIFICATE-----Generated at Sat Aug 2 13:55:09 2025 by rpki-client