$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5227a00f-e981-345e-81e2-cd5f0ff2364a.roa File: 5227a00f-e981-345e-81e2-cd5f0ff2364a.roa (raw, json) Hash identifier: CbYdHnbyh0vKJg+zmc7xSQh6OOlOZRHi5krxXXpPo3o= Subject key identifier: 6B:32:07:ED:C1:CC:5B:79:47:27:90:7E:6C:0C:76:B7:1F:F7:35:EC Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584A506AF565BC5AA9CD7C760DD4 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5227a00f-e981-345e-81e2-cd5f0ff2364a.roa Signing time: Thu 26 Jun 2025 01:00:49 +0000 ROA not before: Thu 26 Jun 2025 01:00:49 +0000 ROA not after: Wed 24 Sep 2025 01:00:49 +0000 asID: 30336 IP address blocks: 207.96.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:50:6a:f5:65:bc:5a:a9:cd:7c:76:0d:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Jun 26 01:00:49 2025 GMT Not After : Sep 24 01:00:49 2025 GMT Subject: CN=c8edeea3-c9b4-4bf0-b721-605b89ba6ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4b:ee:80:5a:b6:7e:ae:a3:38:72:30:3e:05: 29:d1:7f:6e:be:60:30:fb:1a:9d:bf:6f:4a:96:c6: 8a:a4:d0:de:88:a0:25:e1:d6:97:8a:fc:52:14:99: 9e:b2:73:a6:c1:de:cb:fb:87:ec:45:f4:81:a2:e3: b0:d4:07:c3:b3:e2:8f:99:23:ca:c4:7c:fa:74:fd: e1:83:41:53:4c:44:35:80:75:15:a6:e3:01:f8:ef: a0:ca:04:c8:5c:a8:27:46:d7:51:49:f9:d4:eb:67: 77:e1:a4:e6:04:75:1e:10:0a:9a:9f:a5:fd:1f:23: 85:83:17:42:83:c2:09:60:c7:16:99:4a:99:c3:0a: 1a:3f:06:73:d3:59:ea:6c:c0:a1:14:00:ec:d3:ec: e4:59:d8:a5:4a:83:1e:4a:15:72:f6:47:32:ad:25: cb:54:d7:88:7b:ec:c8:0e:b5:61:16:73:30:75:a8: 4d:9c:1a:4b:01:80:13:4c:29:e1:bf:5f:46:ee:b6: ce:9f:df:1f:29:1a:a3:9e:18:8a:9e:9a:db:d6:2e: 4e:e2:95:12:67:d6:97:3a:88:a7:fd:7a:ed:2a:b6: de:1d:48:c3:e6:d5:95:98:c1:51:bc:e2:38:68:e9: fc:5e:b8:1b:49:a1:95:15:d8:68:61:ad:c2:e4:e8: c5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:32:07:ED:C1:CC:5B:79:47:27:90:7E:6C:0C:76:B7:1F:F7:35:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5227a00f-e981-345e-81e2-cd5f0ff2364a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 207.96.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:76:31:a4:c3:27:2b:de:27:9d:b2:d4:0b:9a:4b:0d:b9:15: 65:e3:59:66:b8:55:4d:e4:0d:d5:be:27:67:93:98:7c:a5:47: 67:1f:69:2f:96:cc:06:ba:05:47:50:b5:ef:24:07:ed:81:bc: 13:c6:ee:e1:0b:a2:d2:71:9f:49:0c:88:13:ff:11:26:42:fa: 9e:32:7d:9b:9e:58:d3:0e:71:3b:f7:b7:1a:1e:10:0b:cc:f1: ec:ab:f7:4d:04:03:e2:5e:c1:3b:05:fe:c7:01:61:d3:72:a8: 8d:00:d4:31:47:b9:23:c9:08:61:9a:43:d1:66:0f:dc:f7:3d: d9:4e:43:71:2c:df:97:04:02:aa:ad:2d:d3:19:3b:f2:e8:d0: bf:74:8a:b6:76:6e:d9:e2:0e:f5:12:c3:b7:6b:95:7e:0f:0d: a1:00:73:57:94:9b:7a:2e:25:28:a2:91:2c:69:00:69:b2:e9: 11:06:17:20:b7:f9:a0:6a:e3:0e:94:bd:da:b7:3f:d7:0e:32: cc:c4:12:74:e0:e6:72:05:6d:12:81:89:63:70:bc:70:55:e8: 6a:4d:1d:ce:a0:b3:e5:8d:b7:58:b0:2a:b7:90:d8:4b:6d:92: b4:fa:1d:63:35:53:53:f5:2e:78:02:24:16:5f:85:98:6a:85: f6:05:a2:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpQavVlvFqpzXx2DdQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDYyNjAxMDA0OVoXDTI1MDkyNDAxMDA0OVowLzEtMCsGA1UEAxMk YzhlZGVlYTMtYzliNC00YmYwLWI3MjEtNjA1Yjg5YmE2Y2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUvugFq2fq6jOHIwPgUp0X9uvmAw+xqdv29K lsaKpNDeiKAl4daXivxSFJmesnOmwd7L+4fsRfSBouOw1AfDs+KPmSPKxHz6dP3h g0FTTEQ1gHUVpuMB+O+gygTIXKgnRtdRSfnU62d34aTmBHUeEAqan6X9HyOFgxdC g8IJYMcWmUqZwwoaPwZz01nqbMChFADs0+zkWdilSoMeShVy9kcyrSXLVNeIe+zI DrVhFnMwdahNnBpLAYATTCnhv19G7rbOn98fKRqjnhiKnprb1i5O4pUSZ9aXOoin /XrtKrbeHUjD5tWVmMFRvOI4aOn8XrgbSaGVFdhoYa3C5OjFJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsyB+3BzFt5RyeQfmwMdrcf9zXsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvNTIyN2EwMGYtZTk4MS0z NDVlLTgxZTItY2Q1ZjBmZjIzNjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz2D0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHV2MaTDJyveJ52y1AuaSw25FWXjWWa4VU3kDdW+J2eTmHylR2cfaS+W zAa6BUdQte8kB+2BvBPG7uELotJxn0kMiBP/ESZC+p4yfZueWNMOcTv3txoeEAvM 8eyr900EA+JewTsF/scBYdNyqI0A1DFHuSPJCGGaQ9FmD9z3PdlOQ3Es35cEAqqt LdMZO/Lo0L90irZ2btniDvUSw7drlX4PDaEAc1eUm3ouJSiikSxpAGmy6REGFyC3 +aBq4w6Uvdq3P9cOMszEEnTg5nIFbRKBiWNwvHBV6GpNHc6gs+WNt1iwKreQ2Ett krT6HWM1U1P1LngCJBZfhZhqhfYFokM= -----END CERTIFICATE-----Generated at Tue Jul 1 15:43:10 2025 by rpki-client