$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d4127f43-adbc-3358-88af-a9ae9b0a63ee.roa File: d4127f43-adbc-3358-88af-a9ae9b0a63ee.roa (raw, json) Hash identifier: EDAm/4MGxWc9vL1fX/mlcAZCvjiuMffstUyYQH0lI4U= Subject key identifier: B7:23:18:67:44:1E:53:95:5C:18:B7:5A:2C:0B:2B:F7:53:49:44:8E Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584B1806EA2BF9BCFDD652CDA200 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d4127f43-adbc-3358-88af-a9ae9b0a63ee.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 11232 IP address blocks: 67.217.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:ea:2b:f9:bc:fd:d6:52:cd:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=0bebfcce-71fa-49f1-ac95-2ce58df25b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b3:4d:7c:d6:e3:85:a8:fd:07:b3:f9:fa:a0: 9c:78:d9:25:6d:9e:40:bd:c2:14:86:12:25:33:fa: 71:3e:a3:c4:f8:60:28:ee:31:d9:a4:cf:c1:4c:52: dc:54:d3:85:27:b5:ec:7c:7f:c8:bd:92:b5:8c:91: ab:a4:2d:e8:65:0b:7a:96:f1:b2:3a:6d:76:3e:77: 24:8c:13:7a:8a:ac:da:79:f2:15:dd:2e:de:50:23: 2d:37:d4:46:1a:19:8b:85:53:e1:4d:81:d4:fd:01: 96:b6:35:7a:8e:8f:27:00:ea:40:2e:b0:1f:5c:08: da:aa:fb:1e:4e:4d:50:32:d9:17:61:83:f8:32:2e: 6e:e6:d2:cd:f4:ad:24:a7:ef:66:d6:63:77:e8:4f: af:67:2b:23:1b:9e:e9:9f:39:39:5f:56:9d:d2:62: ed:0d:68:e3:85:30:50:1f:93:52:e8:df:53:5a:2e: 90:2e:d5:b8:57:77:92:18:8f:dc:e9:59:6f:ef:df: 63:9f:04:9d:ec:a0:c6:06:a7:83:7a:eb:56:57:29: f7:2a:c9:61:38:14:ed:67:ca:88:96:a7:e4:67:83: 38:21:8e:6d:0c:cb:90:bf:4f:d4:3c:df:22:cf:fb: 20:dd:ab:99:55:be:2b:6d:23:9c:b3:9a:5e:0b:0e: 0f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:23:18:67:44:1E:53:95:5C:18:B7:5A:2C:0B:2B:F7:53:49:44:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d4127f43-adbc-3358-88af-a9ae9b0a63ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 67.217.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:ae:a9:8a:98:94:17:47:88:11:cd:6f:b6:6a:2f:6f:8b:21: 62:81:f5:9b:5c:9f:77:11:9b:d5:ce:e3:75:35:dd:3c:fb:2b: 06:c2:9d:92:b4:47:0e:80:55:92:e0:4f:c0:43:2e:ca:d0:36: 7d:73:40:da:8d:0d:e3:b8:32:bb:77:ab:7a:18:45:a7:a0:da: d5:b7:ce:18:3a:53:e6:b5:eb:f2:12:7c:d3:29:be:98:b2:ee: 66:59:19:3c:f3:4f:de:9a:60:48:e1:a3:89:2e:1d:eb:22:7d: 8d:04:d5:b2:9e:53:38:1c:a1:da:fa:34:1a:5b:7d:04:fb:77: f3:45:66:4e:92:84:ab:8e:34:24:9f:c6:70:53:25:2f:c8:11: f5:8a:69:83:ad:f7:bd:66:de:7a:45:0b:dc:08:01:26:3f:24: 7b:41:c3:5c:e4:a1:16:48:9e:b6:70:d5:82:2b:db:3e:ef:59: 25:e4:6b:22:da:67:de:3d:3b:1d:e9:86:ab:f2:a0:63:0d:81: d0:33:ee:f6:3c:63:af:ee:4b:a5:e9:fd:93:44:4f:cf:77:dd: 4e:e2:31:ec:a0:eb:76:4f:9d:a8:ad:07:d1:06:ce:e0:df:f4: a9:f0:54:04:39:e4:d7:62:61:eb:20:f8:37:80:e2:31:c7:1a: 3d:e0:2d:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBuor+bz91lLNogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk MGJlYmZjY2UtNzFmYS00OWYxLWFjOTUtMmNlNThkZjI1YjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLNNfNbjhaj9B7P5+qCceNklbZ5AvcIUhhIl M/pxPqPE+GAo7jHZpM/BTFLcVNOFJ7XsfH/IvZK1jJGrpC3oZQt6lvGyOm12Pnck jBN6iqzaefIV3S7eUCMtN9RGGhmLhVPhTYHU/QGWtjV6jo8nAOpALrAfXAjaqvse Tk1QMtkXYYP4Mi5u5tLN9K0kp+9m1mN36E+vZysjG57pnzk5X1ad0mLtDWjjhTBQ H5NS6N9TWi6QLtW4V3eSGI/c6Vlv799jnwSd7KDGBqeDeutWVyn3KslhOBTtZ8qI lqfkZ4M4IY5tDMuQv0/UPN8iz/sg3auZVb4rbSOcs5peCw4PMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcjGGdEHlOVXBi3WiwLK/dTSUSOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvZDQxMjdmNDMtYWRiYy0z MzU4LTg4YWYtYTlhZTliMGE2M2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ9kUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2uqYqYlBdHiBHNb7ZqL2+LIWKB9Ztcn3cRm9XO43U13Tz7KwbCnZK0 Rw6AVZLgT8BDLsrQNn1zQNqNDeO4Mrt3q3oYRaeg2tW3zhg6U+a16/ISfNMpvpiy 7mZZGTzzT96aYEjho4kuHesifY0E1bKeUzgcodr6NBpbfQT7d/NFZk6ShKuONCSf xnBTJS/IEfWKaYOt971m3npFC9wIASY/JHtBw1zkoRZInrZw1YIr2z7vWSXkayLa Z949Ox3phqvyoGMNgdAz7vY8Y6/uS6Xp/ZNET8933U7iMeyg63ZPnaitB9EGzuDf 9KnwVAQ55NdiYesg+DeA4jHHGj3gLeQ= -----END CERTIFICATE-----Generated at Sat Sep 20 00:42:10 2025 by rpki-client