$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/b67e258b-12d7-30b6-ba30-2b61891a6642.roa File: b67e258b-12d7-30b6-ba30-2b61891a6642.roa (raw, json) Hash identifier: xAdDg2gv22p7qocQuHAOFFDkuR/7JevMirU25NVh6ac= Subject key identifier: B7:54:ED:64:D6:A0:16:7A:19:B8:87:07:00:45:8C:57:85:EA:55:A0 Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F4328584AD23BAD189A2C698C32F63C38 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/b67e258b-12d7-30b6-ba30-2b61891a6642.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 394111 IP address blocks: 207.174.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:ad:18:9a:2c:69:8c:32:f6:3c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=6abf6327-95dd-4094-b50d-3d6c1e66ab9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:70:6c:2d:18:5e:1f:23:15:c5:17:62:af:58: 3d:1e:02:3e:f7:8f:99:58:62:5a:8f:20:b9:b4:54: 14:78:34:7f:d7:ef:7c:a3:b8:9c:b6:d9:ba:7f:8b: 41:a4:41:a3:b8:06:e8:bd:8a:11:3d:89:e5:5c:62: 39:41:fd:1b:34:a8:33:da:fa:98:54:53:ba:5a:7f: 8a:d9:1f:b8:b5:ea:58:e8:33:ff:3c:52:68:16:d0: 27:97:91:1a:05:90:ba:5e:46:83:53:b5:bb:91:13: ae:af:a6:4a:6e:0d:8e:a7:17:af:6d:bb:52:11:49: 12:a2:39:b0:82:aa:1b:7b:df:0c:8b:c5:09:7d:78: 7d:db:5e:e5:d7:68:a8:58:0e:29:fb:b6:25:d2:e8: 2e:95:b2:d0:ea:a0:02:55:65:be:a1:56:d9:87:c0: 88:bb:64:74:d4:25:48:73:77:05:47:a0:46:44:a9: 10:e3:10:60:d7:86:68:82:64:be:34:0c:ae:9c:12: a5:d2:4c:4a:46:76:5b:1a:8f:a0:d0:60:f9:04:e2: bd:ce:8e:6a:85:12:92:f8:38:6e:6d:fd:c8:b4:f1: 69:61:c7:bf:94:4f:7d:dd:02:b2:eb:de:b4:bb:1f: ac:bc:63:d0:62:69:c1:e2:99:78:c4:7e:5f:26:48: 17:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:54:ED:64:D6:A0:16:7A:19:B8:87:07:00:45:8C:57:85:EA:55:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/b67e258b-12d7-30b6-ba30-2b61891a6642.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv4: 207.174.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:52:38:a0:23:be:b4:0d:98:00:67:71:24:02:32:f9:8a:86: 77:95:b3:5c:40:ec:a7:ee:c4:7c:ef:71:b1:da:18:38:56:ea: 6e:c7:46:e1:75:1e:9b:ef:92:05:92:42:91:4f:37:93:2b:5e: 8b:ac:ff:93:e3:4c:42:2a:a0:b8:b9:fa:ae:c4:49:da:6d:91: 98:f2:d0:4d:d4:62:34:c0:87:d3:48:9e:c3:25:d8:68:87:6d: 75:45:e5:22:61:05:d4:76:e6:a2:22:9c:1c:52:19:85:5d:32: b6:10:1f:10:e0:bc:f8:90:63:e7:4a:fd:84:8a:b6:be:e7:82: 01:8a:7b:cd:c6:56:12:e8:3d:0d:91:c9:bd:3f:19:3b:b9:6d: 04:4c:b8:48:c0:3a:87:b1:3f:78:3a:61:70:a8:d5:c2:33:6e: 7f:d0:ce:7d:57:9b:65:4d:5c:17:b0:83:e8:ae:cb:d2:2b:93: f2:c0:7b:2a:b3:04:3b:de:99:5c:f2:43:b5:ce:7f:99:2f:69: 1b:48:23:8b:8f:db:e5:c8:5e:db:95:d9:e3:75:14:7e:88:f1: 38:d2:2c:89:13:fc:5c:9f:8a:fb:b0:ba:b2:ab:8b:1f:ce:bc: 4e:3c:c7:ad:bd:8e:d7:c3:ce:22:dc:dd:5d:ca:5b:20:99:a2: 61:07:04:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO60YmixpjDL2PDgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NmFiZjYzMjctOTVkZC00MDk0LWI1MGQtM2Q2YzFlNjZhYjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXBsLRheHyMVxRdir1g9HgI+94+ZWGJajyC5 tFQUeDR/1+98o7icttm6f4tBpEGjuAbovYoRPYnlXGI5Qf0bNKgz2vqYVFO6Wn+K 2R+4tepY6DP/PFJoFtAnl5EaBZC6XkaDU7W7kROur6ZKbg2OpxevbbtSEUkSojmw gqobe98Mi8UJfXh9217l12ioWA4p+7Yl0ugulbLQ6qACVWW+oVbZh8CIu2R01CVI c3cFR6BGRKkQ4xBg14ZogmS+NAyunBKl0kxKRnZbGo+g0GD5BOK9zo5qhRKS+Dhu bf3ItPFpYce/lE993QKy6960ux+svGPQYmnB4pl4xH5fJkgXzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdU7WTWoBZ6GbiHBwBFjFeF6lWgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvYjY3ZTI1OGItMTJkNy0z MGI2LWJhMzAtMmI2MTg5MWE2NjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz66QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5SOKAjvrQNmABncSQCMvmKhneVs1xA7KfuxHzvcbHaGDhW6m7HRuF1 HpvvkgWSQpFPN5MrXous/5PjTEIqoLi5+q7ESdptkZjy0E3UYjTAh9NInsMl2GiH bXVF5SJhBdR25qIinBxSGYVdMrYQHxDgvPiQY+dK/YSKtr7nggGKe83GVhLoPQ2R yb0/GTu5bQRMuEjAOoexP3g6YXCo1cIzbn/Qzn1Xm2VNXBewg+iuy9Irk/LAeyqz BDvemVzyQ7XOf5kvaRtII4uP2+XIXtuV2eN1FH6I8TjSLIkT/FyfivuwurKrix/O vE48x629jtfDziLc3V3KWyCZomEHBOQ= -----END CERTIFICATE-----Generated at Sun Aug 24 00:05:16 2025 by rpki-client