$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4df5c292-7aeb-3af4-846a-67b39255c210.roa File: 4df5c292-7aeb-3af4-846a-67b39255c210.roa (raw, json) Hash identifier: 2hKTkmyUq8uW4xC/Z15YWmj1Bq5k8omvuAwKTPdX6mc= Subject key identifier: 63:E9:9E:81:B3:8F:88:41:F6:00:F1:69:91:21:A1:96:66:27:6C:60 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584A480AEE6450CCFD51185096C6 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4df5c292-7aeb-3af4-846a-67b39255c210.roa Signing time: Mon 23 Jun 2025 01:00:49 +0000 ROA not before: Mon 23 Jun 2025 01:00:49 +0000 ROA not after: Sun 21 Sep 2025 01:00:49 +0000 asID: 5769 IP address blocks: 207.96.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:0a:ee:64:50:cc:fd:51:18:50:96:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Jun 23 01:00:49 2025 GMT Not After : Sep 21 01:00:49 2025 GMT Subject: CN=08bc6f7b-2bb3-4949-956f-b98d0ca05aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:05:a4:64:a6:60:50:22:d7:ac:02:72:2f:54: 8f:1e:f4:d7:c3:c6:2d:b1:9d:53:dc:51:80:74:f7: c5:e7:e7:19:05:a9:91:78:46:d7:f4:86:ba:d5:57: 0f:c8:40:22:57:85:ab:d5:58:a5:08:53:d1:41:8b: 75:2b:37:2c:23:ed:96:5b:95:47:e3:eb:88:96:49: 74:46:2e:66:93:c0:69:a3:6e:5c:b0:f3:cb:f4:e0: 42:c5:df:68:05:31:6a:a7:33:d0:b9:f6:f8:b5:5b: d0:58:1b:fd:57:b2:79:0a:b2:ad:0d:e7:f6:a6:1a: f4:5c:e3:6f:40:ff:6a:e4:f5:78:b9:c2:3f:f0:5e: 85:ad:57:65:2a:36:a4:13:9d:03:02:92:4f:37:bf: a2:de:a6:79:44:32:e3:cd:9b:04:45:7d:53:2a:4d: dd:c6:a0:2c:16:71:07:79:a2:0e:13:99:ff:f1:6c: 52:5d:ed:f9:4b:56:b9:63:f7:06:14:41:b4:00:55: 90:02:67:9e:bb:36:15:c7:32:45:c3:d9:33:5e:7b: 61:20:98:2d:dd:6e:66:7e:1e:25:0f:89:d2:ef:81: bf:61:08:9c:30:32:fc:aa:f5:1e:db:60:72:82:13: ad:de:5d:f9:f9:1b:c4:08:bc:ac:bc:e3:c2:c5:dc: 40:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E9:9E:81:B3:8F:88:41:F6:00:F1:69:91:21:A1:96:66:27:6C:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4df5c292-7aeb-3af4-846a-67b39255c210.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 207.96.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:95:3f:ac:8c:54:bb:96:d1:a4:e7:38:f1:ab:ea:e2:b5:f1: f9:7f:58:5f:5f:4b:da:cc:cc:16:a7:ee:ee:44:57:8c:25:00: 53:63:82:95:29:fe:7c:4d:54:a9:db:4b:98:aa:2e:7c:eb:33: 53:e5:c8:5d:78:f8:76:15:6e:e0:1a:2a:ba:49:86:1d:c7:7b: 53:6a:97:1c:0c:2b:41:7a:2a:a7:ff:ae:62:34:9b:17:62:54: 09:52:0b:d5:0f:c2:bd:db:09:93:63:df:88:79:60:ba:5c:c8: 8b:40:e1:ec:dc:2e:bb:ee:4f:fc:3e:7d:98:95:36:61:a3:c9: 4e:ee:77:9e:2a:6d:5f:92:37:7f:46:ea:a4:25:b4:3b:46:9d: d4:76:d1:c1:88:c5:c2:21:c6:87:cf:5b:99:11:bc:39:89:d2: 50:d7:17:5b:61:38:a9:1c:a0:c0:23:c0:ef:33:16:a6:eb:d3: d0:ef:69:4f:b3:84:2d:99:be:48:24:1f:fe:3f:de:56:3b:f3: 04:32:7a:49:12:f6:e8:1a:a8:e9:a2:ad:0b:19:2b:63:bc:21: 4b:a9:e2:63:7e:15:4b:ff:67:50:af:c9:fe:d3:b7:36:fe:25: 7b:66:aa:9e:f3:ad:ea:e4:b1:f9:05:8e:5c:e3:05:ea:b4:d1: 59:80:44:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpICu5kUMz9URhQlsYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk MDhiYzZmN2ItMmJiMy00OTQ5LTk1NmYtYjk4ZDBjYTA1YWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwWkZKZgUCLXrAJyL1SPHvTXw8YtsZ1T3FGA dPfF5+cZBamReEbX9Ia61VcPyEAiV4Wr1VilCFPRQYt1KzcsI+2WW5VH4+uIlkl0 Ri5mk8Bpo25csPPL9OBCxd9oBTFqpzPQufb4tVvQWBv9V7J5CrKtDef2phr0XONv QP9q5PV4ucI/8F6FrVdlKjakE50DApJPN7+i3qZ5RDLjzZsERX1TKk3dxqAsFnEH eaIOE5n/8WxSXe35S1a5Y/cGFEG0AFWQAmeeuzYVxzJFw9kzXnthIJgt3W5mfh4l D4nS74G/YQicMDL8qvUe22ByghOt3l35+RvECLysvOPCxdxAVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPpnoGzj4hB9gDxaZEhoZZmJ2xgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvNGRmNWMyOTItN2FlYi0z YWY0LTg0NmEtNjdiMzkyNTVjMjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz2CDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6VP6yMVLuW0aTnOPGr6uK18fl/WF9fS9rMzBan7u5EV4wlAFNjgpUp /nxNVKnbS5iqLnzrM1PlyF14+HYVbuAaKrpJhh3He1NqlxwMK0F6Kqf/rmI0mxdi VAlSC9UPwr3bCZNj34h5YLpcyItA4ezcLrvuT/w+fZiVNmGjyU7ud54qbV+SN39G 6qQltDtGndR20cGIxcIhxofPW5kRvDmJ0lDXF1thOKkcoMAjwO8zFqbr09DvaU+z hC2ZvkgkH/4/3lY78wQyekkS9ugaqOmirQsZK2O8IUup4mN+FUv/Z1Cvyf7Ttzb+ JXtmqp7zrerksfkFjlzjBeq00VmARAk= -----END CERTIFICATE-----Generated at Wed Jul 2 12:35:38 2025 by rpki-client