$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/b7718956-829a-3e02-9a2b-7cfb84f2012b.roa File: b7718956-829a-3e02-9a2b-7cfb84f2012b.roa (raw, json) Hash identifier: eRfaUHal7xan818A/oAVxYJLUwaB2VQu4o3Ayd+5wOY= Subject key identifier: C5:B5:51:9E:BE:E7:2E:B3:7D:B9:5B:96:12:5D:92:22:CC:64:A6:95 Certificate issuer: /CN=add35f11-0294-4be9-94b7-49cac2bcb001 Certificate serial: 010D0C9F4328584AE196757968E91DE57CCF6560 Authority key identifier: A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/b7718956-829a-3e02-9a2b-7cfb84f2012b.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 212149 IP address blocks: 207.167.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:75:79:68:e9:1d:e5:7c:cf:65:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=add35f11-0294-4be9-94b7-49cac2bcb001 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=b4bac706-b249-41a2-99f4-c0b7e61a5aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:52:48:c1:2a:d1:02:f6:7a:0b:df:d8:3a:6f: c8:0c:87:49:ce:17:34:77:b0:06:47:d7:6b:19:fc: 8e:b5:22:33:31:16:c7:ae:70:f0:99:f9:53:85:11: e4:96:82:8e:9e:52:43:66:16:aa:14:d5:df:6f:14: 45:92:bd:ac:5b:80:8b:56:bc:18:31:be:01:27:c8: a2:6c:44:8a:13:4e:84:36:dd:70:e6:f5:a9:64:d5: 71:37:ca:1e:4d:d7:3c:1e:7c:c4:47:ff:1e:93:df: 36:d1:eb:d8:35:24:f2:21:9b:11:c8:71:ec:ea:f6: e1:13:16:77:16:34:31:0f:5e:d6:09:f1:79:5a:50: de:8c:02:01:be:f0:f8:5b:9a:45:9b:38:9c:c5:ec: b3:0e:08:af:0d:3a:f9:a0:d6:a6:ff:ba:b4:3d:62: 9a:c6:71:05:f6:46:25:4d:0e:15:dd:31:0b:50:55: 71:9a:61:eb:2b:61:54:52:4d:6f:c3:c0:89:19:83: e0:1b:43:1b:4a:90:bc:57:93:65:0e:c0:fc:8f:7f: 10:f6:1d:e1:28:aa:04:e4:f6:72:68:f0:8c:fd:ec: f0:69:c6:a5:1b:13:df:52:86:32:d4:b7:fa:a9:35: 05:57:69:37:6d:37:85:39:e9:b6:37:8c:2e:9d:a8: e8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B5:51:9E:BE:E7:2E:B3:7D:B9:5B:96:12:5D:92:22:CC:64:A6:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/b7718956-829a-3e02-9a2b-7cfb84f2012b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl X509v3 Authority Key Identifier: keyid:A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer sbgp-ipAddrBlock: critical IPv4: 207.167.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:87:fb:fb:b4:57:e3:11:15:c5:44:13:0a:7c:24:7f:93:d7: 7e:8d:81:b5:a7:84:f7:c6:a7:ce:5b:84:71:1e:9f:25:e6:21: a7:4e:55:3e:69:f1:04:d1:5b:51:41:cb:63:c9:c7:c0:0b:27: 28:01:d6:08:8f:aa:18:00:67:cc:d1:9b:6b:71:7b:d3:7b:4b: 5e:77:d1:e2:79:97:61:70:a1:1a:e5:3f:bd:40:ce:10:91:c0: dc:aa:b8:1f:98:69:fa:fa:d0:59:ab:8b:c9:99:8b:f2:13:2b: 5c:54:fd:e6:de:aa:a7:a4:1f:ca:27:d6:3d:3f:ac:7f:ae:b9: e2:12:2f:41:88:44:b4:64:bd:30:1a:d6:87:4a:46:6a:e6:39: c9:8c:98:ac:74:9f:6e:3f:dd:16:a8:ff:34:af:21:48:38:38: 74:ed:87:77:84:73:46:d2:3f:7a:dc:1a:e5:88:52:ee:98:6c: ae:a5:75:90:24:f1:3e:0e:35:3a:0e:32:fc:75:60:65:55:34: c4:38:50:4e:82:66:64:aa:73:ff:a0:8d:3c:69:d0:b8:a4:2f: 98:8e:93:9c:46:98:6e:e1:2c:2d:dd:c2:b9:af:3d:0d:13:2a: 2e:25:20:0b:65:48:23:57:9c:ce:fc:ec:16:50:2e:4e:81:ea: 18:7d:51:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErhlnV5aOkd5XzPZWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRkMzVmMTEtMDI5NC00YmU5LTk0YjctNDljYWMyYmNi MDAxMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk YjRiYWM3MDYtYjI0OS00MWEyLTk5ZjQtYzBiN2U2MWE1YWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVJIwSrRAvZ6C9/YOm/IDIdJzhc0d7AGR9dr GfyOtSIzMRbHrnDwmflThRHkloKOnlJDZhaqFNXfbxRFkr2sW4CLVrwYMb4BJ8ii bESKE06ENt1w5vWpZNVxN8oeTdc8HnzER/8ek9820evYNSTyIZsRyHHs6vbhExZ3 FjQxD17WCfF5WlDejAIBvvD4W5pFmzicxeyzDgivDTr5oNam/7q0PWKaxnEF9kYl TQ4V3TELUFVxmmHrK2FUUk1vw8CJGYPgG0MbSpC8V5NlDsD8j38Q9h3hKKoE5PZy aPCM/ezwacalGxPfUoYy1Lf6qTUFV2k3bTeFOem2N4wunajomwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMW1UZ6+5y6zfblblhJdkiLMZKaVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQz NWYxMS0wMjk0LTRiZTktOTRiNy00OWNhYzJiY2IwMDEvYjc3MTg5NTYtODI5YS0z ZTAyLTlhMmItN2NmYjg0ZjIwMTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWRkMzVmMTEtMDI5NC00YmU5LTk0 YjctNDljYWMyYmNiMDAxL2FkZDM1ZjExLTAyOTQtNGJlOS05NGI3LTQ5Y2FjMmJj YjAwMS5jcmwwHwYDVR0jBBgwFoAUpXphLLBJKDwfCZ0NXgzzjrlY+MowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQzNWYxMS0wMjk0LTRiZTktOTRiNy00OWNh YzJiY2IwMDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6d5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeH+/u0V+MRFcVEEwp8JH+T136NgbWnhPfGp85bhHEenyXmIadOVT5p 8QTRW1FBy2PJx8ALJygB1giPqhgAZ8zRm2txe9N7S1530eJ5l2FwoRrlP71AzhCR wNyquB+Yafr60Fmri8mZi/ITK1xU/ebeqqekH8on1j0/rH+uueISL0GIRLRkvTAa 1odKRmrmOcmMmKx0n24/3Rao/zSvIUg4OHTth3eEc0bSP3rcGuWIUu6YbK6ldZAk 8T4ONToOMvx1YGVVNMQ4UE6CZmSqc/+gjTxp0LikL5iOk5xGmG7hLC3dwrmvPQ0T Ki4lIAtlSCNXnM787BZQLk6B6hh9UWk= -----END CERTIFICATE-----Generated at Sun Aug 24 02:52:56 2025 by rpki-client