$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b41d991e-20c0-37b4-9d1b-c624b0f99039.roa File: b41d991e-20c0-37b4-9d1b-c624b0f99039.roa (raw, json) Hash identifier: i/G5+/hmjbhqMVdf4PiE5XFTiKDVmWny11ZxIxWd3MA= Subject key identifier: A0:25:5D:9B:BD:0D:A2:A7:9B:DC:77:18:42:FB:BD:AC:11:FC:93:B9 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584B2066D4C51383A44AE2C4E580 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b41d991e-20c0-37b4-9d1b-c624b0f99039.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 22652 IP address blocks: 173.242.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:d4:c5:13:83:a4:4a:e2:c4:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=e3dda14f-d3ed-46a7-913f-e227ee0872e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0f:da:f0:07:1b:1c:68:9d:fd:ec:27:bd:be: 05:c1:5f:3e:29:38:31:ea:d6:12:5c:21:fa:5b:6f: 66:0f:ec:b2:c9:3d:05:d2:d2:b6:cf:4f:98:35:f2: 34:31:ac:18:79:be:1d:08:00:df:99:91:fb:8b:24: 12:8f:15:91:50:9c:84:97:6e:3b:11:a6:51:2d:24: 51:a3:d2:e3:32:e2:33:ea:40:1d:d2:c8:f6:87:d8: c4:32:9b:91:5c:1e:fc:25:4a:27:50:12:e4:d3:27: 9f:35:d8:a7:d4:4a:a2:4a:1f:39:26:d1:71:95:34: 52:dc:0b:c9:35:f4:c3:b4:b4:fe:ae:0a:48:34:b4: c8:00:12:73:84:88:24:84:37:63:b8:24:ec:85:18: 60:3f:31:71:61:6d:8c:39:5a:f9:65:37:17:05:78: 80:6a:64:92:a7:36:f3:53:6b:ce:2e:67:dd:6c:47: ca:d4:3d:ce:ec:f7:aa:1c:1b:1d:3c:98:ae:bb:8c: 56:16:df:d0:5e:d6:48:11:90:d9:17:5d:94:43:a9: 8e:bb:5d:6f:2a:0d:b1:4e:30:97:5f:b8:53:ce:15: 2b:ce:6b:fe:29:19:71:51:bd:e0:6e:f8:3b:d9:8c: 8e:4f:30:8a:53:f8:70:60:b7:88:ae:13:9b:05:f1: 9f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:25:5D:9B:BD:0D:A2:A7:9B:DC:77:18:42:FB:BD:AC:11:FC:93:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b41d991e-20c0-37b4-9d1b-c624b0f99039.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 173.242.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:2f:68:8b:a5:47:c3:01:3d:ed:d0:ec:8b:5f:3c:a2:52:5b: 68:ab:cf:67:01:8b:09:e3:51:57:e9:dc:0b:19:67:ff:6a:43: 24:54:f4:5e:f8:0b:5a:38:d4:53:aa:ed:47:14:ca:38:bf:66: 52:bf:f6:92:94:20:24:55:6a:3c:14:f9:4b:e8:5c:ff:53:ef: c7:78:4e:11:f2:44:b6:f8:e2:ad:cf:93:49:f6:c6:9c:34:23: 15:a0:26:4c:33:bc:be:e7:73:98:00:9d:b6:d9:c2:f0:cb:bb: d7:be:00:03:d6:a6:5b:ac:5e:35:b1:51:e3:29:08:ad:14:c8: 55:f9:06:70:81:19:4e:e1:5a:44:2d:cd:59:ee:a7:1c:cb:97: dd:4a:0a:0a:41:b7:1d:ef:80:6a:49:e2:2d:47:c9:17:18:c0: 4b:e7:e4:ea:71:57:f3:37:32:a7:4b:ac:b8:b7:23:12:26:58: 57:8e:0e:24:83:9e:f8:c3:3d:24:c4:2f:76:c2:a8:bb:69:7a: 3f:c0:1d:9c:94:73:8b:a8:d9:71:4d:d4:ee:ec:72:3c:b4:b4: 67:be:88:9f:ab:24:9c:90:d7:96:6a:10:ee:8a:fd:8e:e4:3b: b9:ef:4d:10:91:53:4a:19:03:89:17:d0:9e:af:58:2f:f2:e5: 7b:6c:8f:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZtTFE4OkSuLE5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZTNkZGExNGYtZDNlZC00NmE3LTkxM2YtZTIyN2VlMDg3MmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApA/a8AcbHGid/ewnvb4FwV8+KTgx6tYSXCH6 W29mD+yyyT0F0tK2z0+YNfI0MawYeb4dCADfmZH7iyQSjxWRUJyEl247EaZRLSRR o9LjMuIz6kAd0sj2h9jEMpuRXB78JUonUBLk0yefNdin1EqiSh85JtFxlTRS3AvJ NfTDtLT+rgpINLTIABJzhIgkhDdjuCTshRhgPzFxYW2MOVr5ZTcXBXiAamSSpzbz U2vOLmfdbEfK1D3O7PeqHBsdPJiuu4xWFt/QXtZIEZDZF12UQ6mOu11vKg2xTjCX X7hTzhUrzmv+KRlxUb3gbvg72YyOTzCKU/hwYLeIrhObBfGfwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAlXZu9DaKnm9x3GEL7vawR/JO5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvYjQxZDk5MWUtMjBjMC0z N2I0LTlkMWItYzYyNGIwZjk5MDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErfKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0vaIulR8MBPe3Q7ItfPKJSW2irz2cBiwnjUVfp3AsZZ/9qQyRU9F74 C1o41FOq7UcUyji/ZlK/9pKUICRVajwU+UvoXP9T78d4ThHyRLb44q3Pk0n2xpw0 IxWgJkwzvL7nc5gAnbbZwvDLu9e+AAPWplusXjWxUeMpCK0UyFX5BnCBGU7hWkQt zVnupxzLl91KCgpBtx3vgGpJ4i1HyRcYwEvn5OpxV/M3MqdLrLi3IxImWFeODiSD nvjDPSTEL3bCqLtpej/AHZyUc4uo2XFN1O7scjy0tGe+iJ+rJJyQ15ZqEO6K/Y7k O7nvTRCRU0oZA4kX0J6vWC/y5XtsjwM= -----END CERTIFICATE-----Generated at Thu Sep 18 11:40:19 2025 by rpki-client