$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/c20a57c8-fa26-3fd2-9593-87259cd17345.roa File: c20a57c8-fa26-3fd2-9593-87259cd17345.roa (raw, json) Hash identifier: KbmAstgiWKG7RiO3liwhznnf1RySLC7QVJtxOw+WT7Y= Subject key identifier: C9:AD:6E:0A:97:78:8D:A8:39:EB:CB:B2:14:7E:8B:AE:3F:E0:96:35 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584A480AEF4AC0702C6F37584680 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/c20a57c8-fa26-3fd2-9593-87259cd17345.roa Signing time: Mon 23 Jun 2025 01:00:49 +0000 ROA not before: Mon 23 Jun 2025 01:00:49 +0000 ROA not after: Sun 21 Sep 2025 01:00:49 +0000 asID: 30336 IP address blocks: 207.96.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:0a:ef:4a:c0:70:2c:6f:37:58:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Jun 23 01:00:49 2025 GMT Not After : Sep 21 01:00:49 2025 GMT Subject: CN=2b03eef6-3349-4f67-ad3d-98ca7cab18a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:54:e8:ff:22:95:f2:70:af:4d:a1:fb:99:1a: 54:e2:6f:87:6c:f2:bf:50:5a:77:d5:51:cc:6c:8e: a1:46:ee:e3:7d:9c:c2:82:4d:d3:65:a7:a1:03:32: 8e:fc:c2:a4:cb:d9:e1:0c:31:99:3a:ac:c7:47:3d: 8c:9a:1a:a4:29:98:11:a0:00:11:b3:1c:71:c5:01: 2f:2f:8d:1b:bf:c5:44:4d:3c:55:53:a4:2a:37:b4: ba:72:08:88:3a:1c:67:ae:a9:97:2e:ad:31:8a:12: 97:98:a5:2f:50:d0:e4:57:fa:1a:14:0f:57:61:69: c4:5f:cd:e2:02:c9:8c:72:9c:d8:7c:1d:3c:15:73: 1d:2f:14:48:86:4e:51:d5:18:28:85:4d:c6:33:3e: 8b:8f:2e:96:b6:5d:d9:27:2b:b7:ce:59:33:8c:ac: 8f:6e:8d:87:51:0a:c4:05:2f:05:10:18:9d:e8:b0: a8:89:7c:c9:f7:d6:eb:e9:03:62:7c:20:2b:04:d4: 4e:93:b6:f4:61:b5:87:60:74:22:b5:33:28:17:01: 4c:17:e3:d2:25:8f:1f:f7:39:5d:fa:c0:07:07:b6: a2:78:0d:52:01:fb:2f:e2:e8:89:23:8a:cd:7a:41: 6c:42:95:aa:57:51:39:d4:fb:1e:82:9e:17:a0:9d: 80:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:AD:6E:0A:97:78:8D:A8:39:EB:CB:B2:14:7E:8B:AE:3F:E0:96:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/c20a57c8-fa26-3fd2-9593-87259cd17345.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 207.96.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:41:35:43:92:3b:d2:d4:a4:48:54:d6:3e:9c:22:25:18:54: 3c:23:f4:6a:be:eb:e8:e1:d6:1c:8d:0d:df:25:35:49:97:59: 72:c4:9f:90:da:a2:2f:3d:c0:28:72:b8:6d:5a:e0:8f:29:b8: b9:0a:07:61:2f:ec:8b:b7:28:43:88:18:9d:10:3b:a9:6e:56: c9:40:5d:34:5a:47:e4:47:19:7f:a6:17:93:f0:33:e0:62:26: 79:61:e5:fc:9f:a4:8e:17:70:5f:dd:f4:17:3a:54:ea:87:93: 11:f1:be:f8:79:d0:24:aa:be:eb:44:c2:f4:2b:21:3a:32:4f: fa:5a:f3:48:2a:ea:34:c0:ca:1e:0b:92:1c:d5:4b:97:0b:8c: 2c:c3:9b:a2:74:85:d2:fb:52:d4:94:ab:2e:e7:db:29:89:c7: c6:28:83:36:bf:da:57:f3:56:2a:ee:a8:5a:ad:ff:16:d7:e6: 57:43:83:91:c6:a8:ad:cd:f0:3f:f5:67:88:ef:b9:46:f4:9d: 61:89:b5:4c:c5:8a:d8:9c:27:3d:58:de:f8:34:07:86:e9:1e: c0:c8:4b:04:84:a7:16:56:15:e7:9d:0d:94:52:2d:ee:90:32: 2e:07:60:d6:cc:2d:49:06:f6:16:e4:2c:1b:f7:d3:45:a4:f5: 46:b1:01:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpICu9KwHAsbzdYRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk MmIwM2VlZjYtMzM0OS00ZjY3LWFkM2QtOThjYTdjYWIxOGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVTo/yKV8nCvTaH7mRpU4m+HbPK/UFp31VHM bI6hRu7jfZzCgk3TZaehAzKO/MKky9nhDDGZOqzHRz2MmhqkKZgRoAARsxxxxQEv L40bv8VETTxVU6QqN7S6cgiIOhxnrqmXLq0xihKXmKUvUNDkV/oaFA9XYWnEX83i AsmMcpzYfB08FXMdLxRIhk5R1RgohU3GMz6Ljy6Wtl3ZJyu3zlkzjKyPbo2HUQrE BS8FEBid6LCoiXzJ99br6QNifCArBNROk7b0YbWHYHQitTMoFwFMF+PSJY8f9zld +sAHB7aieA1SAfsv4uiJI4rNekFsQpWqV1E51Psegp4XoJ2AgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmtbgqXeI2oOevLshR+i64/4JY1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvYzIwYTU3YzgtZmEyNi0z ZmQyLTk1OTMtODcyNTljZDE3MzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz2CJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxBNUOSO9LUpEhU1j6cIiUYVDwj9Gq+6+jh1hyNDd8lNUmXWXLEn5Da oi89wChyuG1a4I8puLkKB2Ev7Iu3KEOIGJ0QO6luVslAXTRaR+RHGX+mF5PwM+Bi Jnlh5fyfpI4XcF/d9Bc6VOqHkxHxvvh50CSqvutEwvQrIToyT/pa80gq6jTAyh4L khzVS5cLjCzDm6J0hdL7UtSUqy7n2ymJx8Yogza/2lfzViruqFqt/xbX5ldDg5HG qK3N8D/1Z4jvuUb0nWGJtUzFiticJz1Y3vg0B4bpHsDISwSEpxZWFeedDZRSLe6Q Mi4HYNbMLUkG9hbkLBv300Wk9UaxAQ0= -----END CERTIFICATE-----Generated at Tue Jul 1 08:28:57 2025 by rpki-client