$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/2d0999fc-6ff4-35a6-93fa-3979f0432902.roa File: 2d0999fc-6ff4-35a6-93fa-3979f0432902.roa (raw, json) Hash identifier: dOJscA+9u6TWKEZ7LdOKG39v4NvgJoxq7xYqQoLdEzQ= Subject key identifier: FB:26:18:A5:63:F5:78:9E:EA:11:AD:EA:59:72:CB:DD:2F:65:3D:02 Certificate issuer: /CN=0c924434-62f4-44d5-b440-476f5c675f3d Certificate serial: 010D0C9F4328584BBE40398C7E5BD399EFEF6DE0 Authority key identifier: 05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/2d0999fc-6ff4-35a6-93fa-3979f0432902.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 16509 IP address blocks: 208.81.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:39:8c:7e:5b:d3:99:ef:ef:6d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c924434-62f4-44d5-b440-476f5c675f3d Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=87ef7819-dba3-4e82-a092-54494a8239c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:96:4a:89:de:76:0b:73:20:29:97:cf:79:99: 90:25:b7:24:70:ae:77:ad:35:ab:93:f6:10:97:ab: 01:9d:09:8f:ae:76:e7:fa:89:51:ca:28:b9:35:ef: e8:d9:c5:e3:0d:99:c5:d0:3e:19:2b:45:49:a1:a6: d0:76:41:96:be:b6:67:93:cc:cc:5c:a8:87:07:57: eb:cd:29:70:2f:dc:5c:b1:60:cd:f9:ee:b2:a7:3c: 29:cc:7d:70:8a:f0:97:91:69:59:9d:0e:d8:f6:df: f5:4f:ba:16:5a:39:fd:35:51:dd:10:aa:1c:d9:5b: 34:6d:55:bf:dd:7e:25:f0:7e:2d:5f:24:22:3a:d2: 83:00:37:94:dd:a1:42:60:4c:b4:f3:c3:18:8e:1c: ca:77:6c:7f:94:67:16:ad:95:5d:a0:75:95:46:cd: a7:7a:9f:80:23:6a:94:8a:a5:cf:52:9b:0a:e6:01: d0:c0:7c:88:f2:40:26:83:bb:91:ec:f6:d5:e4:f6: 2c:bc:99:da:d3:28:ee:ff:cb:54:37:39:ef:bd:40: a6:fc:70:54:b3:b5:48:09:d6:13:b1:84:d1:4a:07: 92:03:4f:15:24:65:a1:c1:46:be:63:9a:b8:77:ac: b4:d3:11:b5:8c:cc:6b:84:07:d1:9f:df:72:99:86: 67:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:26:18:A5:63:F5:78:9E:EA:11:AD:EA:59:72:CB:DD:2F:65:3D:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/2d0999fc-6ff4-35a6-93fa-3979f0432902.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl X509v3 Authority Key Identifier: keyid:05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer sbgp-ipAddrBlock: critical IPv4: 208.81.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:8c:16:bf:83:c2:9a:fa:db:68:60:82:1a:d9:a4:61:d1:e5: 80:0e:4c:fe:62:25:64:7b:00:ee:97:f8:7e:20:8d:bf:66:93: 6f:34:5f:85:a1:7f:a2:dc:ce:2d:1f:14:38:20:24:a7:31:30: ba:7f:52:65:df:c9:b7:0a:27:bd:69:ea:e6:9b:16:7f:4c:0c: c8:3b:f2:ad:ba:16:f9:08:a2:27:08:2e:2c:dd:e7:af:85:9d: 8c:fb:a0:10:f5:4e:d0:b9:ec:73:77:ba:9b:60:19:57:88:b7: ce:30:e5:4e:c5:c2:27:51:77:f3:95:26:92:97:cd:3d:64:69: 82:59:31:9f:fd:b4:2c:ed:d6:f3:3c:9c:84:2a:b6:9c:03:b8: 2c:18:db:7d:7d:49:8c:e1:14:b8:ec:98:4b:8d:b8:bf:94:d9: 20:de:7e:7f:3d:33:e2:bd:ae:b0:83:01:86:0a:88:e8:86:d3: 2a:f0:70:1b:d0:76:57:19:3c:3c:ac:9f:78:dc:36:c8:6e:28: 60:6b:b0:77:2c:8f:50:11:77:56:f4:d5:81:e6:83:94:6e:73: 79:90:47:c4:f9:c1:35:55:bc:76:d6:bb:57:5f:37:f6:8b:24: 00:f2:ee:1a:4a:cc:2d:b5:c9:d3:15:57:f3:c3:55:bf:1b:bc: 78:be:7f:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QDmMflvTme/vbeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM5MjQ0MzQtNjJmNC00NGQ1LWI0NDAtNDc2ZjVjNjc1 ZjNkMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ODdlZjc4MTktZGJhMy00ZTgyLWEwOTItNTQ0OTRhODIzOWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZZKid52C3MgKZfPeZmQJbckcK53rTWrk/YQ l6sBnQmPrnbn+olRyii5Ne/o2cXjDZnF0D4ZK0VJoabQdkGWvrZnk8zMXKiHB1fr zSlwL9xcsWDN+e6ypzwpzH1wivCXkWlZnQ7Y9t/1T7oWWjn9NVHdEKoc2Vs0bVW/ 3X4l8H4tXyQiOtKDADeU3aFCYEy088MYjhzKd2x/lGcWrZVdoHWVRs2nep+AI2qU iqXPUpsK5gHQwHyI8kAmg7uR7PbV5PYsvJna0yju/8tUNznvvUCm/HBUs7VICdYT sYTRSgeSA08VJGWhwUa+Y5q4d6y00xG1jMxrhAfRn99ymYZnLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsmGKVj9Xie6hGt6llyy90vZT0CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYzky NDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZmNWM2NzVmM2QvMmQwOTk5ZmMtNmZmNC0z NWE2LTkzZmEtMzk3OWYwNDMyOTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGM5MjQ0MzQtNjJmNC00NGQ1LWI0 NDAtNDc2ZjVjNjc1ZjNkLzBjOTI0NDM0LTYyZjQtNDRkNS1iNDQwLTQ3NmY1YzY3 NWYzZC5jcmwwHwYDVR0jBBgwFoAUBa56uKMq0Of7tmKknnU5XIDc11gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYzkyNDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZm NWM2NzVmM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FH7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiMFr+Dwpr622hgghrZpGHR5YAOTP5iJWR7AO6X+H4gjb9mk280X4Wh f6Lczi0fFDggJKcxMLp/UmXfybcKJ71p6uabFn9MDMg78q26FvkIoicILizd56+F nYz7oBD1TtC57HN3uptgGVeIt84w5U7FwidRd/OVJpKXzT1kaYJZMZ/9tCzt1vM8 nIQqtpwDuCwY2319SYzhFLjsmEuNuL+U2SDefn89M+K9rrCDAYYKiOiG0yrwcBvQ dlcZPDysn3jcNshuKGBrsHcsj1ARd1b01YHmg5Ruc3mQR8T5wTVVvHbWu1dfN/aL JADy7hpKzC21ydMVV/PDVb8bvHi+f70= -----END CERTIFICATE-----Generated at Wed Nov 5 10:01:06 2025 by rpki-client