$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4c15b7cd-d5c6-3194-b9a9-57f3cdd9c474.roa File: 4c15b7cd-d5c6-3194-b9a9-57f3cdd9c474.roa (raw, json) Hash identifier: U4PdRt3Qh1+Z1In5U7kmiop7bJCjj5nAL0iDqVJ2LB4= Subject key identifier: 5F:D5:C4:D0:C4:95:37:FE:2E:96:AA:C7:39:F5:45:A2:0F:89:C7:B1 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584B3126EC5FA9EF0151C2301800 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4c15b7cd-d5c6-3194-b9a9-57f3cdd9c474.roa Signing time: Sun 14 Sep 2025 13:00:42 +0000 ROA not before: Sun 14 Sep 2025 13:00:42 +0000 ROA not after: Sat 13 Dec 2025 14:00:42 +0000 asID: 30336 IP address blocks: 207.96.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:31:26:ec:5f:a9:ef:01:51:c2:30:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Sep 14 13:00:42 2025 GMT Not After : Dec 13 14:00:42 2025 GMT Subject: CN=36bbb252-0c7f-4619-95a2-af471c2f07c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a9:0a:42:12:0c:fe:35:da:9c:c5:01:a7:94: 3b:a4:b5:a1:f6:43:63:82:30:e5:71:4d:ec:5b:42: f9:b6:2f:a0:29:16:6d:38:ea:09:49:d6:8f:ff:a1: ec:db:b5:c1:9b:43:68:3b:c0:ca:11:b8:40:fe:1a: 93:24:ea:0d:7e:e0:14:22:c8:c1:9f:66:59:6d:86: 9c:08:d2:e8:0a:46:93:d2:1b:02:89:2d:21:62:da: 39:af:c9:7d:cb:6a:70:91:a3:97:84:38:28:10:26: 16:76:45:d9:08:8c:07:75:42:b1:e2:32:28:1c:81: cd:78:16:77:c6:5e:f8:e8:66:14:bf:97:c7:0a:73: 36:cf:d1:f6:a9:a4:33:72:70:57:13:9a:27:69:9d: ca:40:40:fd:04:c2:54:c6:53:5a:a3:1c:97:d8:db: 90:f9:4c:21:cb:64:f6:cb:cb:a4:08:d9:83:c3:58: 8c:b4:ff:4e:a8:8e:36:16:ca:ac:1d:03:3c:1e:62: 22:f9:19:4b:ea:f6:3a:59:58:8a:f0:6c:0b:61:f7: d5:98:dd:90:9a:4d:88:20:11:99:5c:a7:92:ca:68: 26:7a:c4:06:8a:76:54:29:6f:14:99:10:61:40:60: 76:6e:33:df:a2:ed:0e:59:14:14:cb:2e:8c:0a:6b: 34:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D5:C4:D0:C4:95:37:FE:2E:96:AA:C7:39:F5:45:A2:0F:89:C7:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4c15b7cd-d5c6-3194-b9a9-57f3cdd9c474.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 207.96.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:c6:b2:83:9a:39:f7:4c:83:19:99:95:32:95:d9:a9:af:3e: de:a7:90:19:2e:0c:06:f7:8c:08:59:53:07:18:94:df:cd:28: 6f:02:db:2f:a4:b5:92:63:db:74:88:0d:b9:56:99:4f:2c:ae: b3:dd:8b:f5:0c:6b:af:2f:53:e4:5e:04:58:ed:6c:6d:3b:ed: dd:e4:77:d1:51:e0:c8:1a:02:5c:cf:53:56:03:a5:71:e5:eb: 75:25:ee:3b:48:64:8d:d3:b6:34:5a:16:ad:28:ec:08:21:30: e4:16:d0:3d:70:9f:9f:71:33:17:54:4c:8b:5f:dc:b3:1c:c4: 83:f7:89:18:c0:1b:50:58:4b:1b:88:7a:1c:51:2e:fe:ab:e5: da:d9:42:dd:3d:6c:92:8e:d8:1c:4a:8b:3c:3a:74:22:d8:a5: 3b:af:4a:9a:60:9a:01:7c:fa:59:31:61:01:9c:a6:47:15:1c: 38:02:b1:a5:08:92:14:dc:c4:63:1e:38:ce:8a:b1:00:fa:f4: fa:ce:2e:6d:d0:3c:41:4b:74:e9:b1:c0:94:94:1d:64:a6:74: 27:39:4b:c3:19:a7:72:04:8c:25:6d:84:25:ae:f7:c0:b0:b8: 56:f0:49:90:d9:5a:da:89:2d:d7:a3:df:65:57:38:77:43:20: ff:cd:bc:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsxJuxfqe8BUcIwGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDkxNDEzMDA0MloXDTI1MTIxMzE0MDA0MlowLzEtMCsGA1UEAxMk MzZiYmIyNTItMGM3Zi00NjE5LTk1YTItYWY0NzFjMmYwN2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKkKQhIM/jXanMUBp5Q7pLWh9kNjgjDlcU3s W0L5ti+gKRZtOOoJSdaP/6Hs27XBm0NoO8DKEbhA/hqTJOoNfuAUIsjBn2ZZbYac CNLoCkaT0hsCiS0hYto5r8l9y2pwkaOXhDgoECYWdkXZCIwHdUKx4jIoHIHNeBZ3 xl746GYUv5fHCnM2z9H2qaQzcnBXE5onaZ3KQED9BMJUxlNaoxyX2NuQ+Uwhy2T2 y8ukCNmDw1iMtP9OqI42FsqsHQM8HmIi+RlL6vY6WViK8GwLYffVmN2Qmk2IIBGZ XKeSymgmesQGinZUKW8UmRBhQGB2bjPfou0OWRQUyy6MCms0lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/VxNDElTf+Lpaqxzn1RaIPicexMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvNGMxNWI3Y2QtZDVjNi0z MTk0LWI5YTktNTdmM2NkZDljNDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz2DxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjGsoOaOfdMgxmZlTKV2amvPt6nkBkuDAb3jAhZUwcYlN/NKG8C2y+k tZJj23SIDblWmU8srrPdi/UMa68vU+ReBFjtbG077d3kd9FR4MgaAlzPU1YDpXHl 63Ul7jtIZI3TtjRaFq0o7AghMOQW0D1wn59xMxdUTItf3LMcxIP3iRjAG1BYSxuI ehxRLv6r5drZQt09bJKO2BxKizw6dCLYpTuvSppgmgF8+lkxYQGcpkcVHDgCsaUI khTcxGMeOM6KsQD69PrOLm3QPEFLdOmxwJSUHWSmdCc5S8MZp3IEjCVthCWu98Cw uFbwSZDZWtqJLdej32VXOHdDIP/NvI4= -----END CERTIFICATE-----Generated at Thu Sep 18 11:40:29 2025 by rpki-client