$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/576ac0ab-a06d-3a24-8879-c1ab9ff682a4.roa File: 576ac0ab-a06d-3a24-8879-c1ab9ff682a4.roa (raw, json) Hash identifier: 39q2Yhq+Ix68p5sq5w0gD8Bj9qqQIxuUCBLBLi/X++8= Subject key identifier: E2:DB:94:57:C6:5D:D2:39:B0:56:F6:6F:DE:C8:BA:19:30:CD:53:CF Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584B41E721F548583AE5BF65F400 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/576ac0ab-a06d-3a24-8879-c1ab9ff682a4.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 12132 IP address blocks: 207.253.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:21:f5:48:58:3a:e5:bf:65:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=4bf40a57-953b-4a27-a363-97478a2c539a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ec:14:18:02:71:cb:22:6b:99:58:3a:20:d9: 80:5e:44:d9:eb:56:9e:7b:11:4c:4f:8f:1d:99:ff: 11:1e:49:0c:32:d5:f0:14:24:12:51:0c:da:3d:ef: f3:46:8b:44:14:cd:f9:fa:eb:12:ae:fc:09:68:ce: d4:46:9b:d4:a3:0c:01:4e:ab:37:b5:ed:14:a1:01: bb:ae:22:f2:1c:b7:67:3e:ab:86:6a:9d:fb:49:cb: e3:c4:71:39:3d:48:84:90:ac:a9:33:96:d0:7a:c3: 18:f7:25:b8:56:55:c5:93:9b:27:b0:4e:f5:9f:cb: 96:79:88:79:e6:21:7e:48:dc:cb:bb:92:7f:f7:e5: a0:c9:7f:83:3f:41:a5:07:82:80:ac:74:8c:f2:3a: 85:21:13:72:f3:18:6d:d4:ee:07:ea:4b:02:c4:e1: 44:0e:85:2f:14:22:b1:e1:a8:a8:93:22:1b:4c:bb: 53:e2:be:1a:33:8b:9a:07:76:e7:33:bb:d4:a8:27: 4b:fa:80:0e:29:63:ea:d3:24:67:5b:45:bf:f1:8b: 92:62:f5:5a:92:c1:de:d2:05:18:d0:14:e2:4d:73: 53:7a:a6:85:cd:78:f3:1d:46:3d:db:19:9d:4f:3b: 34:45:1d:80:6b:97:e9:c4:bc:c0:23:55:c3:86:c2: b7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:DB:94:57:C6:5D:D2:39:B0:56:F6:6F:DE:C8:BA:19:30:CD:53:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/576ac0ab-a06d-3a24-8879-c1ab9ff682a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 207.253.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:e7:9b:80:5f:14:b8:f2:51:8a:b2:15:fa:aa:09:b2:23:78: 1d:c9:f7:c9:71:e2:e5:60:81:37:51:c8:c4:dc:d8:8c:4b:fd: 07:ed:4c:87:bb:dc:90:8e:1d:37:e9:eb:6b:73:d0:a9:60:53: 0f:85:4a:d1:fc:dd:25:3b:19:35:f3:8a:31:ea:87:26:f3:cb: 8d:e1:9b:47:4b:b2:73:69:a1:57:40:dc:1f:d6:10:e9:d4:a0: 2a:f6:d3:28:40:05:4f:82:c4:70:92:ef:04:0c:35:d3:dc:2c: 96:b1:0f:92:ac:ad:64:9a:bd:dd:d2:e8:d8:74:85:a1:e0:8d: a4:e4:22:38:c4:27:ba:0d:bd:34:8b:d9:f6:64:af:d5:56:a2: 61:70:89:06:29:1c:0c:55:9f:0f:da:d5:68:05:42:74:0e:ae: bd:e3:48:6a:bc:3e:13:67:d7:8a:54:2e:38:66:2e:7c:b8:96: 39:eb:dc:ab:b4:19:5c:d7:1b:d4:96:a9:dc:c3:ac:a9:0d:04: fc:e7:1d:86:97:5e:c0:54:ab:8c:87:73:3b:a9:a6:3d:eb:d0: 3b:0e:99:61:bb:39:74:02:8e:14:9d:54:be:b8:2f:12:7b:9b: 93:8c:c8:32:af:4c:b1:78:bc:37:8c:9f:28:21:c1:10:71:99: 79:c2:8d:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5yH1SFg65b9l9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NGJmNDBhNTctOTUzYi00YTI3LWEzNjMtOTc0NzhhMmM1MzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuwUGAJxyyJrmVg6INmAXkTZ61aeexFMT48d mf8RHkkMMtXwFCQSUQzaPe/zRotEFM35+usSrvwJaM7URpvUowwBTqs3te0UoQG7 riLyHLdnPquGap37ScvjxHE5PUiEkKypM5bQesMY9yW4VlXFk5snsE71n8uWeYh5 5iF+SNzLu5J/9+WgyX+DP0GlB4KArHSM8jqFIRNy8xht1O4H6ksCxOFEDoUvFCKx 4aiokyIbTLtT4r4aM4uaB3bnM7vUqCdL+oAOKWPq0yRnW0W/8YuSYvVaksHe0gUY 0BTiTXNTeqaFzXjzHUY92xmdTzs0RR2Aa5fpxLzAI1XDhsK3kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLblFfGXdI5sFb2b97IuhkwzVPPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvNTc2YWMwYWItYTA2ZC0z YTI0LTg4NzktYzFhYjlmZjY4MmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz/2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7nm4BfFLjyUYqyFfqqCbIjeB3J98lx4uVggTdRyMTc2IxL/QftTIe7 3JCOHTfp62tz0KlgUw+FStH83SU7GTXzijHqhybzy43hm0dLsnNpoVdA3B/WEOnU oCr20yhABU+CxHCS7wQMNdPcLJaxD5KsrWSavd3S6Nh0haHgjaTkIjjEJ7oNvTSL 2fZkr9VWomFwiQYpHAxVnw/a1WgFQnQOrr3jSGq8PhNn14pULjhmLny4ljnr3Ku0 GVzXG9SWqdzDrKkNBPznHYaXXsBUq4yHczuppj3r0DsOmWG7OXQCjhSdVL64LxJ7 m5OMyDKvTLF4vDeMnyghwRBxmXnCjY0= -----END CERTIFICATE-----Generated at Mon Oct 20 08:46:13 2025 by rpki-client