$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/c491c12d-818f-3600-85d3-2274f8c724f7.roa File: c491c12d-818f-3600-85d3-2274f8c724f7.roa (raw, json) Hash identifier: jQipDWcSrG2jE4G2Sue4zy428YTootuBXLjkwbjIl2Y= Subject key identifier: B7:5F:3B:36:DA:9C:D9:D6:93:68:D2:74:B4:8C:6C:21:9D:CC:40:C6 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584B68FC9818D2DE758550BE8D00 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/c491c12d-818f-3600-85d3-2274f8c724f7.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 22652 IP address blocks: 107.161.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:98:18:d2:de:75:85:50:be:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=8692ef2f-86d9-4318-a918-7b3f28c31f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:05:b3:ff:9f:b9:46:a8:0f:4f:a1:dd:16:90: 41:05:31:95:6b:a3:d0:30:70:61:ee:7e:92:c9:00: 67:99:e1:fa:91:e9:69:98:2e:16:3d:ef:49:00:6a: 40:3b:1f:f0:ed:34:21:99:7a:0f:1a:14:e4:7c:11: d4:64:44:0f:ae:fe:61:e4:2c:50:08:4f:b2:ce:2d: 5a:ed:10:0c:2a:3e:4b:35:30:70:09:a8:45:e6:fa: c6:aa:11:53:fd:03:b6:a0:c4:18:b7:cd:10:6c:d2: 44:0b:7f:67:2e:bb:d7:36:f3:d1:00:7d:d7:c5:1c: 1f:2f:a6:89:08:73:98:cc:cf:77:72:0c:0f:83:de: 60:20:f6:cd:a1:94:47:18:40:f1:1a:f1:f3:33:e9: 70:33:a5:ec:5e:5c:52:0a:bb:15:e2:65:6d:78:b8: 60:9e:e4:5f:3e:0b:0b:e3:43:c0:86:bd:a2:0c:fb: 37:53:c0:f8:16:0b:3d:34:79:e3:50:7e:a1:51:9b: d8:cd:f4:bd:aa:06:53:4c:a8:26:52:5e:e0:da:71: 22:2b:47:c1:e2:98:62:f1:1b:df:12:87:76:e8:ae: 22:13:7b:97:ad:57:e0:10:a1:77:ac:5e:d2:1a:50: c4:fc:60:23:08:98:49:0d:39:fe:4e:cd:85:16:ba: 25:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:5F:3B:36:DA:9C:D9:D6:93:68:D2:74:B4:8C:6C:21:9D:CC:40:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/c491c12d-818f-3600-85d3-2274f8c724f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 107.161.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:d1:7c:7e:42:a0:23:7a:c2:72:c3:cb:2a:c0:25:69:40:6e: ea:9f:21:7c:05:db:27:39:0e:df:73:21:fc:1f:5e:88:00:ea: 91:6a:4d:20:33:66:df:c1:ae:fa:2e:dc:6b:75:b5:df:06:d0: f9:5b:66:65:53:0c:2b:b5:22:44:f2:63:6d:0f:fd:4c:16:84: 18:d0:4c:67:9b:51:97:15:48:ca:42:15:3e:a7:61:4b:ea:bd: b3:ab:29:6c:36:95:09:80:69:d6:f9:b9:be:11:a2:c4:21:c0: fa:49:9e:bf:e5:b9:c0:46:e2:00:ed:33:d0:77:e1:b2:ff:ef: 26:80:c3:61:52:c7:73:16:82:29:91:6f:84:73:33:a8:68:90: 2b:f5:5c:7e:e4:27:7b:38:4b:88:b6:dd:a8:75:1c:9b:f5:8f: d2:ed:ed:0d:13:c3:11:72:68:00:68:09:3d:7e:99:45:ec:a7: 90:88:4a:24:11:8e:82:b9:67:1f:55:5f:e9:2b:c9:e5:bc:2b: f1:0c:78:f9:0b:cb:4a:74:1e:17:c4:4a:08:5f:11:b5:bc:58: d7:a1:d2:fb:cd:be:03:12:13:77:3c:62:32:ba:94:31:82:ce: 83:f9:2b:bc:dc:ac:2b:5d:78:7f:d1:d8:44:d1:72:f9:b3:cc: 5f:2e:04:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/JgY0t51hVC+jQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk ODY5MmVmMmYtODZkOS00MzE4LWE5MTgtN2IzZjI4YzMxZjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwWz/5+5RqgPT6HdFpBBBTGVa6PQMHBh7n6S yQBnmeH6kelpmC4WPe9JAGpAOx/w7TQhmXoPGhTkfBHUZEQPrv5h5CxQCE+yzi1a 7RAMKj5LNTBwCahF5vrGqhFT/QO2oMQYt80QbNJEC39nLrvXNvPRAH3XxRwfL6aJ CHOYzM93cgwPg95gIPbNoZRHGEDxGvHzM+lwM6XsXlxSCrsV4mVteLhgnuRfPgsL 40PAhr2iDPs3U8D4Fgs9NHnjUH6hUZvYzfS9qgZTTKgmUl7g2nEiK0fB4phi8Rvf Eod26K4iE3uXrVfgEKF3rF7SGlDE/GAjCJhJDTn+Ts2FFrolPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdfOzbanNnWk2jSdLSMbCGdzEDGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvYzQ5MWMxMmQtODE4Zi0z NjAwLTg1ZDMtMjI3NGY4YzcyNGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEa6EAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXRfH5CoCN6wnLDyyrAJWlAbuqfIXwF2yc5Dt9zIfwfXogA6pFqTSAz Zt/Brvou3Gt1td8G0PlbZmVTDCu1IkTyY20P/UwWhBjQTGebUZcVSMpCFT6nYUvq vbOrKWw2lQmAadb5ub4RosQhwPpJnr/lucBG4gDtM9B34bL/7yaAw2FSx3MWgimR b4RzM6hokCv1XH7kJ3s4S4i23ah1HJv1j9Lt7Q0TwxFyaABoCT1+mUXsp5CISiQR joK5Zx9VX+kryeW8K/EMePkLy0p0HhfESghfEbW8WNeh0vvNvgMSE3c8YjK6lDGC zoP5K7zcrCtdeH/R2ETRcvmzzF8uBDw= -----END CERTIFICATE-----Generated at Mon Nov 3 06:57:15 2025 by rpki-client