$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7fcf9442-2b02-3378-b9f3-ee398d825fac.roa File: 7fcf9442-2b02-3378-b9f3-ee398d825fac.roa (raw, json) Hash identifier: 5aXiBFrYn9irtmwh5eKoV9WYUzWj5khAL2OrFM8MQcU= Subject key identifier: 38:47:42:AC:72:24:BB:51:9A:F0:36:3E:B1:FF:B8:F7:3E:93:E2:B1 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584B1AD1980DC61F1676DBE68A80 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7fcf9442-2b02-3378-b9f3-ee398d825fac.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 22652 IP address blocks: 45.61.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:98:0d:c6:1f:16:76:db:e6:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=ab7c61f0-a25e-44f0-9b8a-0814cd8b0f2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:70:54:8e:5f:9f:de:72:c1:96:07:45:eb:aa: 79:46:25:72:5a:12:dd:80:81:9d:6d:c7:6b:0c:33: 79:e2:d2:bd:86:2b:cf:da:76:79:c8:39:4f:33:8e: 1f:94:00:05:54:7b:74:06:56:e5:d1:ec:90:37:64: 21:f2:b4:36:2f:4b:a0:1a:96:51:90:f5:af:14:9c: 19:84:e2:07:0e:86:26:d8:f3:28:d7:3a:ff:77:ef: 51:96:df:3b:4a:b9:dc:6c:8c:f7:71:61:e6:4d:1b: 81:ea:63:d0:82:85:c7:ec:03:e4:68:c2:fe:0f:7e: 52:cb:46:d7:09:2d:3c:35:61:77:3e:96:d6:17:05: e0:9c:62:a1:80:c3:c4:3f:ee:8b:d2:68:c3:ff:75: 3f:51:0f:66:b9:a0:35:91:9e:00:d2:bd:c7:21:f2: 17:d6:da:bc:1e:99:a5:4b:da:1b:20:00:c0:ea:16: 3a:53:9e:a1:e1:bb:13:dd:18:c0:f2:8a:25:b0:3f: 3d:95:22:ec:62:44:84:42:65:e9:f0:7b:97:91:a0: 8e:02:46:39:5b:92:be:32:98:a1:e8:fe:d0:cd:5a: d5:8a:eb:fb:38:52:50:1d:a3:55:a0:de:d4:a4:93: 23:4f:fe:7a:d7:96:88:e9:94:71:a0:f7:1d:5a:8f: d8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:47:42:AC:72:24:BB:51:9A:F0:36:3E:B1:FF:B8:F7:3E:93:E2:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7fcf9442-2b02-3378-b9f3-ee398d825fac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 45.61.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:f0:5e:77:21:78:2b:22:b8:03:e6:cf:9d:e8:b0:da:a0:7d: dc:1e:a4:c4:93:f2:e9:50:79:d2:e4:ae:5e:46:20:65:78:30: e5:6c:8c:79:54:8f:06:bf:8b:ce:ea:d4:51:af:87:a9:e3:71: a8:11:5a:09:5e:5f:f8:6a:43:c1:28:93:00:8e:80:1f:ab:3a: d0:6a:65:07:86:e7:1d:31:2e:ae:9e:9a:5f:b4:92:df:8c:e7: 1b:f7:0e:15:c4:44:ef:33:ea:dc:0a:5a:5d:05:31:90:ce:ea: 21:38:68:4d:fd:55:cf:69:bb:c3:38:0e:ad:c5:ee:bf:3d:ce: 72:2c:cf:03:18:2b:5f:48:2a:69:d6:b1:ef:15:30:04:e6:55: c5:c7:c5:3f:0f:05:bf:87:f9:4f:b6:75:26:62:46:e7:eb:a2: fb:44:8f:25:cd:79:b8:c7:84:23:6b:58:b7:14:d4:b5:0f:3c: ba:9f:ca:af:6d:e3:d2:b8:78:71:fc:42:84:aa:7f:e8:60:44: 65:6d:43:a2:88:85:9e:80:44:67:a7:1b:57:2c:03:89:d0:5a: 5f:a3:d7:8a:23:70:c5:d8:d8:1c:4a:8e:2a:1f:a0:70:11:37: bb:d4:34:46:54:ef:cb:fe:2d:36:a5:6c:58:23:c3:7d:0e:5e: b4:17:5f:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0ZgNxh8WdtvmioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk YWI3YzYxZjAtYTI1ZS00NGYwLTliOGEtMDgxNGNkOGIwZjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXBUjl+f3nLBlgdF66p5RiVyWhLdgIGdbcdr DDN54tK9hivP2nZ5yDlPM44flAAFVHt0Blbl0eyQN2Qh8rQ2L0ugGpZRkPWvFJwZ hOIHDoYm2PMo1zr/d+9Rlt87SrncbIz3cWHmTRuB6mPQgoXH7APkaML+D35Sy0bX CS08NWF3PpbWFwXgnGKhgMPEP+6L0mjD/3U/UQ9muaA1kZ4A0r3HIfIX1tq8Hpml S9obIADA6hY6U56h4bsT3RjA8oolsD89lSLsYkSEQmXp8HuXkaCOAkY5W5K+Mpih 6P7QzVrViuv7OFJQHaNVoN7UpJMjT/5615aI6ZRxoPcdWo/YMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhHQqxyJLtRmvA2PrH/uPc+k+KxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvN2ZjZjk0NDItMmIwMi0z Mzc4LWI5ZjMtZWUzOThkODI1ZmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALT0LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInwXncheCsiuAPmz53osNqgfdwepMST8ulQedLkrl5GIGV4MOVsjHlU jwa/i87q1FGvh6njcagRWgleX/hqQ8EokwCOgB+rOtBqZQeG5x0xLq6eml+0kt+M 5xv3DhXERO8z6twKWl0FMZDO6iE4aE39Vc9pu8M4Dq3F7r89znIszwMYK19IKmnW se8VMATmVcXHxT8PBb+H+U+2dSZiRufrovtEjyXNebjHhCNrWLcU1LUPPLqfyq9t 49K4eHH8QoSqf+hgRGVtQ6KIhZ6ARGenG1csA4nQWl+j14ojcMXY2BxKjiofoHAR N7vUNEZU78v+LTalbFgjw30OXrQXXxs= -----END CERTIFICATE-----Generated at Thu Sep 18 13:04:29 2025 by rpki-client