$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/477b7a8a-9422-3915-8bf6-d959b2380fd2.roa File: 477b7a8a-9422-3915-8bf6-d959b2380fd2.roa (raw, json) Hash identifier: XbfEXzeG3lBNN3eIVuJ7PjxpsHFYFomlMGBwI710tYE= Subject key identifier: 8B:D7:7B:04:62:09:6C:26:12:7C:09:CE:7B:0D:0E:1B:AB:AA:5B:DA Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584B2066D4EED914DEB46E8F7080 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/477b7a8a-9422-3915-8bf6-d959b2380fd2.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22652 IP address blocks: 198.154.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:d4:ee:d9:14:de:b4:6e:8f:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=72d8a469-fb2d-47dd-8738-d712555d917d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:29:4e:a5:5f:d7:0a:e4:c4:4d:dd:6c:c3:b6: 1d:fd:be:38:f4:5a:0b:fd:59:ef:d9:21:34:5c:21: 48:b5:61:73:8b:a2:00:c0:82:94:b5:7e:03:e1:e7: a7:39:cc:ec:b3:e7:4e:5b:d5:a9:9c:73:4d:eb:ce: 1a:08:8c:23:aa:e8:28:66:38:e7:fb:d7:3b:fa:03: 68:ef:ac:8d:35:35:64:5e:d8:d0:9e:0f:c4:e8:03: 6b:ff:3a:c4:f3:99:91:e5:9b:ea:70:ba:5b:e6:5e: 7c:b5:5e:d5:fc:c9:37:00:29:25:e9:f9:d1:89:ca: 71:d2:1b:27:04:b2:f5:46:d7:cd:b0:06:76:ff:08: 96:1b:cc:20:65:dd:41:37:f8:9a:32:dc:e5:08:dc: cd:4e:db:74:27:04:54:a9:96:e5:3e:85:e7:de:23: e7:97:e8:67:be:cf:55:a7:14:0d:bd:c6:ac:9e:e3: 87:b3:66:64:85:17:8e:24:6c:44:7d:9e:16:b1:5a: 24:7e:04:b5:33:40:47:4f:67:d5:32:a4:49:ac:62: a9:3a:70:cb:59:76:98:15:9e:e7:07:ac:34:23:97: f3:05:5b:84:0e:03:00:72:b7:20:96:6d:fb:2c:c7: 9c:1b:6c:0b:59:ce:cb:ca:9d:75:c8:fa:7c:fa:65: 09:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D7:7B:04:62:09:6C:26:12:7C:09:CE:7B:0D:0E:1B:AB:AA:5B:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/477b7a8a-9422-3915-8bf6-d959b2380fd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 198.154.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:01:15:64:c2:e6:37:d7:47:03:56:ac:f6:b9:95:a0:1a:72: f8:42:fe:ae:26:95:53:86:9b:7f:07:a7:f9:16:3d:ad:f9:e5: 28:54:91:ec:0f:4c:f2:13:59:e9:ca:c3:23:f1:fa:f4:2f:fb: 48:ac:c9:76:ab:16:db:41:35:b3:9d:98:8e:e5:c3:42:6c:b4: d3:2b:16:91:a1:96:65:46:74:e8:38:25:bb:77:9c:b6:df:30: e0:66:7c:63:33:1f:5d:fd:b1:a5:1f:a2:26:bd:c0:46:28:db: 55:ce:ad:74:fd:4b:be:4b:76:6f:9e:3b:46:b4:22:e5:f3:98: a2:fb:5e:2f:95:8b:c6:d9:64:c9:b1:a1:b6:94:69:fc:44:3d: c0:05:04:6e:25:08:94:a1:6b:2e:1f:84:df:91:9e:4c:2d:2d: 4c:a0:79:f2:20:b6:ca:50:94:46:e2:67:b2:30:0e:f4:49:e4: 5f:98:53:e1:cd:c2:a6:43:b7:74:1c:7f:0d:ee:fb:ab:02:5b: 87:e4:23:cc:78:41:d4:de:95:4d:b4:9c:24:75:91:52:35:0c: 27:b4:9f:74:6e:87:c9:92:69:b2:c1:63:21:8c:72:ee:f6:14: b9:55:c4:8f:29:6f:bd:29:cc:a9:a1:4d:84:61:29:d6:7c:39: 9e:32:ab:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZtTu2RTetG6PcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk NzJkOGE0NjktZmIyZC00N2RkLTg3MzgtZDcxMjU1NWQ5MTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgylOpV/XCuTETd1sw7Yd/b449FoL/Vnv2SE0 XCFItWFzi6IAwIKUtX4D4eenOczss+dOW9WpnHNN684aCIwjqugoZjjn+9c7+gNo 76yNNTVkXtjQng/E6ANr/zrE85mR5ZvqcLpb5l58tV7V/Mk3ACkl6fnRicpx0hsn BLL1RtfNsAZ2/wiWG8wgZd1BN/iaMtzlCNzNTtt0JwRUqZblPoXn3iPnl+hnvs9V pxQNvcasnuOHs2ZkhReOJGxEfZ4WsVokfgS1M0BHT2fVMqRJrGKpOnDLWXaYFZ7n B6w0I5fzBVuEDgMAcrcglm37LMecG2wLWc7Lyp11yPp8+mUJ2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvXewRiCWwmEnwJznsNDhurqlvaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvNDc3YjdhOGEtOTQyMi0z OTE1LThiZjYtZDk1OWIyMzgwZmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxpq4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsBFWTC5jfXRwNWrPa5laAacvhC/q4mlVOGm38Hp/kWPa355ShUkewP TPITWenKwyPx+vQv+0isyXarFttBNbOdmI7lw0JstNMrFpGhlmVGdOg4Jbt3nLbf MOBmfGMzH139saUfoia9wEYo21XOrXT9S75Ldm+eO0a0IuXzmKL7Xi+Vi8bZZMmx obaUafxEPcAFBG4lCJShay4fhN+RnkwtLUygefIgtspQlEbiZ7IwDvRJ5F+YU+HN wqZDt3Qcfw3u+6sCW4fkI8x4QdTelU20nCR1kVI1DCe0n3Ruh8mSabLBYyGMcu72 FLlVxI8pb70pzKmhTYRhKdZ8OZ4yq+U= -----END CERTIFICATE-----Generated at Thu Sep 18 11:42:07 2025 by rpki-client