$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7e2f59b7-f390-3bc3-8bfa-3bb432fdc86a.roa File: 7e2f59b7-f390-3bc3-8bfa-3bb432fdc86a.roa (raw, json) Hash identifier: ug5iFzleN4oTNu0q/eVjKlkYBrwCbHPOXbi+jJOcveY= Subject key identifier: 42:4B:A2:BF:9E:A1:4F:68:BC:F4:87:D7:3C:B0:63:22:19:90:ED:01 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584B41E709D0397B04098083A280 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7e2f59b7-f390-3bc3-8bfa-3bb432fdc86a.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 395075 IP address blocks: 207.253.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:09:d0:39:7b:04:09:80:83:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=4762661a-1128-45fc-aa2d-aa47926bd68e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:39:c4:d5:5d:aa:eb:fb:49:92:37:4b:f5:98: d3:3a:1c:cd:be:c3:9c:cc:65:05:8b:92:01:bf:98: e3:45:86:96:80:e4:4d:7f:fa:e6:e5:86:11:7e:99: 28:bc:16:f6:b4:2e:b3:05:a0:50:7f:87:6d:0d:fc: 8c:1d:c8:5e:8e:c0:cb:c9:c4:77:c3:f9:24:31:40: 1b:dd:85:94:18:0d:11:0a:3f:8e:a2:96:00:6c:54: 0e:b8:0e:1b:a3:3a:41:da:c3:56:51:4c:a0:16:e6: 6d:05:24:0a:44:8b:4a:f7:b3:11:5c:bb:8f:9a:03: b8:09:f1:ed:38:05:16:67:fe:7b:36:51:7d:91:84: 06:58:48:8b:ef:98:5e:fa:86:f1:03:e9:1b:10:96: 25:65:95:fa:73:53:70:6d:10:ff:cd:dd:77:4d:a9: 30:51:fb:2c:88:84:ab:8f:04:e1:06:aa:70:b4:ff: 5d:98:16:72:0a:70:45:db:95:83:2c:a4:6f:7a:49: ef:7b:fb:f4:8c:92:4e:fe:de:3d:45:1c:11:a0:25: 7d:e8:42:40:fa:51:ca:7d:5f:79:a0:ac:75:ab:0b: ae:b3:2c:91:b1:47:2a:a0:a5:da:3e:08:1a:37:52: 12:de:be:5d:f7:cd:1e:0a:32:6d:c2:37:8d:00:76: e3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4B:A2:BF:9E:A1:4F:68:BC:F4:87:D7:3C:B0:63:22:19:90:ED:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7e2f59b7-f390-3bc3-8bfa-3bb432fdc86a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 207.253.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:ad:10:c7:19:6f:0d:c9:b8:bb:e0:bf:f7:32:60:9c:3d:06: 04:f2:0d:da:90:45:75:80:49:89:24:44:b1:26:6e:d8:c9:fc: 7c:c3:ff:fd:11:30:63:4a:46:07:f1:86:f5:e4:e7:9e:23:6b: 7e:bf:8b:5e:04:e2:af:17:00:89:1a:c1:1e:7c:4a:bf:28:4a: 68:6a:ea:7e:30:b9:b9:b7:79:14:83:ab:9c:31:38:e3:cb:e3: 9a:54:5e:0d:65:28:db:e5:63:af:f4:55:fa:cc:7f:e1:96:83: c7:27:52:80:bc:ad:76:4e:66:41:de:65:2c:29:f2:fa:13:b1: c2:10:b1:8b:7d:fd:d4:6f:65:c8:f7:41:b5:b2:b5:0a:d8:78: b6:89:38:6f:ea:88:a7:54:3c:9e:89:e8:59:28:2c:ef:4a:e7: ff:66:9d:1b:ab:25:a1:84:13:6f:7a:d4:d7:98:2f:eb:76:53: 92:6b:70:15:1e:b4:ac:7e:96:c4:04:32:84:e5:47:a1:c6:5a: 5f:4b:65:80:92:08:ec:fd:1d:b2:6a:c0:53:62:a4:ca:d5:5a: 75:9d:06:6b:30:bc:53:5d:89:0b:91:1d:37:3f:13:41:b2:61: 6a:7b:16:2b:1d:fc:6e:51:b4:39:16:5e:eb:15:ea:e3:83:58: 17:8a:b5:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5wnQOXsECYCDooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NDc2MjY2MWEtMTEyOC00NWZjLWFhMmQtYWE0NzkyNmJkNjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTnE1V2q6/tJkjdL9ZjTOhzNvsOczGUFi5IB v5jjRYaWgORNf/rm5YYRfpkovBb2tC6zBaBQf4dtDfyMHchejsDLycR3w/kkMUAb 3YWUGA0RCj+OopYAbFQOuA4bozpB2sNWUUygFuZtBSQKRItK97MRXLuPmgO4CfHt OAUWZ/57NlF9kYQGWEiL75he+obxA+kbEJYlZZX6c1NwbRD/zd13TakwUfssiISr jwThBqpwtP9dmBZyCnBF25WDLKRveknve/v0jJJO/t49RRwRoCV96EJA+lHKfV95 oKx1qwuusyyRsUcqoKXaPggaN1IS3r5d980eCjJtwjeNAHbjWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJLor+eoU9ovPSH1zywYyIZkO0BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvN2UyZjU5YjctZjM5MC0z YmMzLThiZmEtM2JiNDMyZmRjODZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz/3sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6tEMcZbw3JuLvgv/cyYJw9BgTyDdqQRXWASYkkRLEmbtjJ/HzD//0R MGNKRgfxhvXk554ja36/i14E4q8XAIkawR58Sr8oSmhq6n4wubm3eRSDq5wxOOPL 45pUXg1lKNvlY6/0VfrMf+GWg8cnUoC8rXZOZkHeZSwp8voTscIQsYt9/dRvZcj3 QbWytQrYeLaJOG/qiKdUPJ6J6FkoLO9K5/9mnRurJaGEE2961NeYL+t2U5JrcBUe tKx+lsQEMoTlR6HGWl9LZYCSCOz9HbJqwFNipMrVWnWdBmswvFNdiQuRHTc/E0Gy YWp7Fisd/G5RtDkWXusV6uODWBeKtco= -----END CERTIFICATE-----Generated at Mon Oct 20 08:46:32 2025 by rpki-client