$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/c20a57c8-fa26-3fd2-9593-87259cd17345.roa File: c20a57c8-fa26-3fd2-9593-87259cd17345.roa (raw, json) Hash identifier: aX3KEKaI+wGPWOVsa0mCGPu7aMUqdBOCnfBQ6l1ZSfM= Subject key identifier: EF:46:09:21:10:F4:42:65:65:AA:69:17:73:D1:BD:4C:CA:B9:50:E4 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584B28C6EF1F1F48497F13A3AD50 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/c20a57c8-fa26-3fd2-9593-87259cd17345.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 30336 IP address blocks: 207.96.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:ef:1f:1f:48:49:7f:13:a3:ad:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=1b4db166-9d76-43f7-bf78-d3284667dbd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:90:10:6b:3f:ac:f4:c8:ab:60:67:e3:ab:10: db:64:c6:68:ce:4a:36:27:a3:70:14:78:b4:f1:01: b9:dd:96:d1:f5:4e:ab:50:f6:5a:65:42:b9:48:da: 5a:56:0f:2c:d7:1c:35:a5:e5:35:93:8b:1d:5b:ae: 60:d0:6b:e9:e2:21:ca:68:1a:bd:b6:e8:10:72:96: f8:29:20:5a:38:14:06:73:20:39:f6:a2:fe:df:ba: e6:d1:1c:6e:b4:86:59:25:94:1e:12:bf:fe:e3:78: 07:b6:dc:79:dd:29:f2:64:e6:aa:22:a0:ba:4d:22: 2f:a4:ae:40:b7:11:cf:32:f5:6c:b7:2a:a8:40:a3: 51:13:68:38:bf:63:2b:e7:48:7e:46:e5:f1:17:ed: 23:5d:7c:f9:a0:d4:dd:3f:6e:3c:42:58:9e:fc:de: 39:fa:20:38:f2:12:97:08:a0:84:46:49:ea:fe:8f: 35:da:68:e8:7e:03:d7:70:73:8d:32:ae:d3:80:58: ba:71:30:0a:f1:89:ca:0f:21:e6:19:05:44:84:a2: 68:92:b2:e0:30:a1:20:f8:14:e0:fb:1d:09:3e:46: 86:d5:f8:30:c6:5b:7e:4a:58:0c:89:56:c8:49:f0: fc:da:8a:92:c3:3f:af:c3:a7:4e:95:39:a2:0f:8f: c5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:46:09:21:10:F4:42:65:65:AA:69:17:73:D1:BD:4C:CA:B9:50:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/c20a57c8-fa26-3fd2-9593-87259cd17345.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 207.96.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:c1:84:20:e6:2d:af:82:dc:73:7f:ed:6c:e3:19:3b:da:0a: ee:fc:27:d4:ac:9d:ef:1b:bd:28:31:fb:47:eb:11:0b:7f:bb: 88:2a:56:56:47:be:8f:77:52:ac:26:2f:bc:9d:07:de:5c:06: 63:64:b9:6b:3d:b9:79:67:6a:33:06:0f:71:7c:53:e3:7d:a7: 29:c4:48:74:58:e5:9a:33:ec:98:d3:49:89:e1:bc:53:b5:d6: ce:c9:c0:a1:05:26:17:55:a1:67:d9:b1:32:b9:23:6e:c3:a8: 9a:10:16:07:22:d9:a2:52:69:54:7a:7b:0b:4a:7f:c4:aa:3d: 24:f2:11:f6:f9:b8:28:51:35:3f:ca:a3:40:db:a6:7d:8b:2c: 1e:c7:99:05:b1:ee:01:a0:f7:c3:f7:11:36:51:16:87:17:9f: 02:66:c5:cd:d4:18:ae:a3:84:b4:86:a5:e1:f7:10:36:fa:d1: e5:5b:f5:b2:cd:96:02:8c:74:03:1c:7e:62:bf:90:dc:1c:3e: a3:e1:ea:e2:22:ce:fe:88:d2:99:c3:09:d3:65:6c:ac:6a:4b: 72:54:24:11:09:ff:a7:f6:50:a3:20:36:66:e5:e3:8e:46:c7: bd:8d:c8:73:8a:63:43:ec:7d:51:d8:71:52:c3:7e:dd:aa:1a: 7d:91:41:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxu8fH0hJfxOjrVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk MWI0ZGIxNjYtOWQ3Ni00M2Y3LWJmNzgtZDMyODQ2NjdkYmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJAQaz+s9MirYGfjqxDbZMZozko2J6NwFHi0 8QG53ZbR9U6rUPZaZUK5SNpaVg8s1xw1peU1k4sdW65g0Gvp4iHKaBq9tugQcpb4 KSBaOBQGcyA59qL+37rm0RxutIZZJZQeEr/+43gHttx53SnyZOaqIqC6TSIvpK5A txHPMvVstyqoQKNRE2g4v2Mr50h+RuXxF+0jXXz5oNTdP248Qlie/N45+iA48hKX CKCERknq/o812mjofgPXcHONMq7TgFi6cTAK8YnKDyHmGQVEhKJokrLgMKEg+BTg +x0JPkaG1fgwxlt+SlgMiVbISfD82oqSwz+vw6dOlTmiD4/FlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9GCSEQ9EJlZappF3PRvUzKuVDkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvYzIwYTU3YzgtZmEyNi0z ZmQyLTk1OTMtODcyNTljZDE3MzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz2CJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfBhCDmLa+C3HN/7WzjGTvaCu78J9Ssne8bvSgx+0frEQt/u4gqVlZH vo93UqwmL7ydB95cBmNkuWs9uXlnajMGD3F8U+N9pynESHRY5Zoz7JjTSYnhvFO1 1s7JwKEFJhdVoWfZsTK5I27DqJoQFgci2aJSaVR6ewtKf8SqPSTyEfb5uChRNT/K o0Dbpn2LLB7HmQWx7gGg98P3ETZRFocXnwJmxc3UGK6jhLSGpeH3EDb60eVb9bLN lgKMdAMcfmK/kNwcPqPh6uIizv6I0pnDCdNlbKxqS3JUJBEJ/6f2UKMgNmbl445G x72NyHOKY0PsfVHYcVLDft2qGn2RQbQ= -----END CERTIFICATE-----Generated at Thu Sep 18 14:23:18 2025 by rpki-client