$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/d8efbb37-deff-31e6-8ae2-e195034d4c86.roa File: d8efbb37-deff-31e6-8ae2-e195034d4c86.roa (raw, json) Hash identifier: beMon0inzAOaGRHsQuBJcjbPBdEidI94FhpEBBdiRFo= Subject key identifier: 46:03:35:48:AD:23:36:56:FC:96:0F:86:67:F9:18:E3:7E:2C:2D:75 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584B41E704D8FFC1CBED40EFBBC0 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/d8efbb37-deff-31e6-8ae2-e195034d4c86.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 22652 IP address blocks: 207.253.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:04:d8:ff:c1:cb:ed:40:ef:bb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=672e22bf-5980-465a-9851-e8dc2ef9f02e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cf:6f:c1:d7:86:45:33:2b:0d:72:7e:3d:eb: d9:a1:24:65:d6:43:32:9c:86:eb:7b:db:7a:ba:28: 0e:70:39:b1:e6:5b:d1:b8:da:c3:d1:d2:55:c7:76: b4:55:3b:b9:ea:8d:b1:24:a9:75:6b:62:a1:a1:a8: 4e:40:48:71:6b:50:ae:38:79:fc:b1:5d:68:ca:63: e7:6e:87:13:3d:f0:dd:f9:96:d1:7b:ea:95:f5:59: 5b:2d:b8:cf:e7:a7:17:41:eb:f9:0c:07:6b:9d:0d: 8c:7e:7f:39:91:ec:b4:a0:00:f8:2a:71:2c:66:2b: 30:eb:a8:24:dd:af:aa:2a:8c:38:95:1e:5b:14:07: a7:79:fb:e8:c4:5c:cc:e8:ea:da:29:33:7e:5f:f2: 16:22:9d:08:8c:bf:96:56:2b:ef:1f:28:b1:79:04: 89:1c:a8:21:35:f6:b8:ac:de:20:09:c5:12:91:26: 52:9b:97:58:56:50:3d:c9:2b:83:aa:2b:3d:eb:19: 34:a0:7b:9d:e5:98:ef:9c:48:22:8e:33:a9:c1:e2: 62:2f:1c:c7:3c:26:ee:f9:94:f2:e8:06:83:7e:3d: f5:0a:13:dc:14:57:9d:ff:35:7f:59:0b:5d:0b:5f: 2b:d7:4b:52:3b:1f:64:31:24:03:50:d9:32:5b:ea: 73:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:03:35:48:AD:23:36:56:FC:96:0F:86:67:F9:18:E3:7E:2C:2D:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/d8efbb37-deff-31e6-8ae2-e195034d4c86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 207.253.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:ba:46:0a:a2:7b:7b:59:88:7c:08:bd:f7:3c:97:0c:e0:c6: db:b9:53:01:41:ee:a0:43:01:62:07:ab:2e:c8:98:2a:86:60: ae:c7:38:f8:f5:28:fa:ad:a1:46:54:35:a6:48:7d:66:ea:3d: 4a:3e:b7:d0:c0:0b:88:d9:3d:24:87:69:28:29:ca:1c:b7:61: b4:71:8b:0e:a8:f8:75:5b:86:e7:81:0f:ea:06:8d:a2:4c:ec: c3:49:e4:d8:6e:aa:34:e6:ba:a9:88:0b:b3:4b:2d:52:a5:25: 43:66:f4:e8:49:e8:45:50:36:00:dc:18:58:ea:92:cb:6e:95: 98:62:45:ea:fb:82:da:3c:84:b3:08:c9:58:be:1e:2d:ff:af: 5e:e7:3a:9e:43:97:30:59:2c:0d:db:23:a8:ef:8f:a6:cc:d2: 21:1c:e0:ca:b5:36:d7:0a:45:1e:45:ed:e3:00:b0:89:7d:b4: 8b:a9:64:63:a8:4d:b1:3f:c9:25:7c:82:e4:2e:e1:25:15:ed: 6c:9f:a0:dd:02:cc:18:40:92:bb:9d:7d:b6:dd:c7:21:43:33: 8f:2b:c5:39:81:37:03:09:98:1a:93:3d:51:4d:57:4d:c5:d2: 1e:ee:1e:29:12:dd:36:a2:66:c9:31:ee:6a:4d:7f:7c:9d:97: c7:ba:6d:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5wTY/8HL7UDvu8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NjcyZTIyYmYtNTk4MC00NjVhLTk4NTEtZThkYzJlZjlmMDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl89vwdeGRTMrDXJ+PevZoSRl1kMynIbre9t6 uigOcDmx5lvRuNrD0dJVx3a0VTu56o2xJKl1a2KhoahOQEhxa1CuOHn8sV1oymPn bocTPfDd+ZbRe+qV9VlbLbjP56cXQev5DAdrnQ2Mfn85key0oAD4KnEsZisw66gk 3a+qKow4lR5bFAenefvoxFzM6OraKTN+X/IWIp0IjL+WVivvHyixeQSJHKghNfa4 rN4gCcUSkSZSm5dYVlA9ySuDqis96xk0oHud5ZjvnEgijjOpweJiLxzHPCbu+ZTy 6AaDfj31ChPcFFed/zV/WQtdC18r10tSOx9kMSQDUNkyW+pzowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYDNUitIzZW/JYPhmf5GON+LC11MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvZDhlZmJiMzctZGVmZi0z MWU2LThhZTItZTE5NTAzNGQ0Yzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/33MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+6Rgqie3tZiHwIvfc8lwzgxtu5UwFB7qBDAWIHqy7ImCqGYK7HOPj1 KPqtoUZUNaZIfWbqPUo+t9DAC4jZPSSHaSgpyhy3YbRxiw6o+HVbhueBD+oGjaJM 7MNJ5NhuqjTmuqmIC7NLLVKlJUNm9OhJ6EVQNgDcGFjqkstulZhiRer7gto8hLMI yVi+Hi3/r17nOp5DlzBZLA3bI6jvj6bM0iEc4Mq1NtcKRR5F7eMAsIl9tIupZGOo TbE/ySV8guQu4SUV7WyfoN0CzBhAkrudfbbdxyFDM48rxTmBNwMJmBqTPVFNV03F 0h7uHikS3TaiZskx7mpNf3ydl8e6bUY= -----END CERTIFICATE-----Generated at Mon Oct 20 08:46:02 2025 by rpki-client