$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/5260488b-3dc9-3883-8d68-3d6c2ef502f4.roa File: 5260488b-3dc9-3883-8d68-3d6c2ef502f4.roa (raw, json) Hash identifier: 0Xo45aCgntALyQeV3GKIKfXLA4DqHHg+AEqOZ28Uyog= Subject key identifier: 84:86:84:A0:2D:FF:A6:FC:F6:17:1F:EC:80:3B:54:B4:D3:C7:EF:D3 Certificate issuer: /CN=0c924434-62f4-44d5-b440-476f5c675f3d Certificate serial: 010D0C9F4328584BBE4039775DD01BD7C209FE00 Authority key identifier: 05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/5260488b-3dc9-3883-8d68-3d6c2ef502f4.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 14618 IP address blocks: 208.81.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:39:77:5d:d0:1b:d7:c2:09:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c924434-62f4-44d5-b440-476f5c675f3d Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=ab11979c-29ae-4c03-8246-81ce4215bb3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:6a:82:a3:2a:09:8f:fe:1d:6b:02:f5:88:ec: c8:d1:9d:9f:fc:5d:94:87:43:b2:9f:0b:f5:62:26: 41:10:bd:a7:f1:65:50:d7:f6:6c:40:1e:33:bb:50: b2:01:27:da:4c:b0:46:13:19:fa:89:d2:87:ea:4c: 0c:54:50:99:2f:83:53:ce:6a:ae:f6:45:e2:38:da: 49:bd:1e:c5:20:c6:08:24:ea:b6:e4:04:3c:77:44: ee:e7:f5:dd:cc:1b:56:75:09:c1:f4:65:e4:09:64: aa:7c:12:b2:cd:d6:4a:48:2a:1f:d7:0e:96:10:1f: 79:26:ba:ba:7c:59:19:06:77:1e:e8:1e:3c:84:a3: 0f:32:04:11:88:a0:fa:87:f0:80:4a:46:14:3a:da: 42:1b:6c:f6:be:6e:bb:a8:5a:51:7b:13:e9:4b:5f: 5f:3f:04:57:71:75:28:ab:55:4a:0e:a9:79:6e:60: 1a:ab:7e:7a:c6:c5:37:0f:e1:24:21:f7:a6:18:77: 5a:26:fe:ef:2e:24:f1:d9:0e:d3:54:79:b7:a6:7b: 33:69:a6:f8:e9:1f:a6:6f:b2:0c:e0:fd:2f:ee:2e: 94:43:7a:dc:7a:1e:f5:68:d3:1a:f5:cc:d5:2b:a6: 8f:e4:0f:c0:88:83:aa:0e:76:cb:81:68:a3:6d:41: ed:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:86:84:A0:2D:FF:A6:FC:F6:17:1F:EC:80:3B:54:B4:D3:C7:EF:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/5260488b-3dc9-3883-8d68-3d6c2ef502f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl X509v3 Authority Key Identifier: keyid:05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer sbgp-ipAddrBlock: critical IPv4: 208.81.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:0d:2c:42:1c:dd:da:da:3a:b2:c2:81:99:4d:c2:33:b5:9a: 72:e3:60:e0:80:7a:ff:be:1c:2d:c6:74:26:8c:04:25:ae:9f: b5:24:87:b7:1c:a2:52:52:6c:a2:46:e5:be:29:7d:12:29:60: 2e:10:13:fa:db:fe:57:94:c0:79:63:5d:9b:a8:43:43:7d:71: d1:81:ec:01:37:f3:0f:67:6d:c5:c5:83:9a:27:c3:f8:d0:2f: 49:0b:39:ac:99:91:12:71:9d:6a:4f:56:51:6b:40:93:d1:df: e4:bb:ca:e3:e4:5a:1f:9c:c4:7b:f6:d4:e1:bc:b7:20:ca:81: d0:bf:4b:0e:04:ae:c9:20:14:a5:57:44:b5:e2:fe:41:97:43: 78:76:19:ce:c5:bd:05:d2:52:dc:1b:4f:a9:37:2a:d1:55:25: af:27:e2:b2:1b:31:61:e4:81:d0:dd:8a:1a:84:e6:51:61:dc: 0d:11:13:dc:66:94:0e:81:19:d3:c6:76:88:12:9d:f6:e1:60: a9:12:c5:e3:39:d9:67:60:76:d4:93:89:ee:1a:b5:ec:6c:2f: 36:71:16:fd:fa:71:69:ad:01:d0:0b:32:d8:d0:fa:58:ec:35: f6:d7:38:57:d4:f9:a9:d1:e7:6f:8e:3f:ca:94:fa:a8:49:e6: 6d:1b:87:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QDl3XdAb18IJ/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM5MjQ0MzQtNjJmNC00NGQ1LWI0NDAtNDc2ZjVjNjc1 ZjNkMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk YWIxMTk3OWMtMjlhZS00YzAzLTgyNDYtODFjZTQyMTViYjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mqCoyoJj/4dawL1iOzI0Z2f/F2Uh0Oynwv1 YiZBEL2n8WVQ1/ZsQB4zu1CyASfaTLBGExn6idKH6kwMVFCZL4NTzmqu9kXiONpJ vR7FIMYIJOq25AQ8d0Tu5/XdzBtWdQnB9GXkCWSqfBKyzdZKSCof1w6WEB95Jrq6 fFkZBnce6B48hKMPMgQRiKD6h/CASkYUOtpCG2z2vm67qFpRexPpS19fPwRXcXUo q1VKDql5bmAaq356xsU3D+EkIfemGHdaJv7vLiTx2Q7TVHm3pnszaab46R+mb7IM 4P0v7i6UQ3rceh71aNMa9czVK6aP5A/AiIOqDnbLgWijbUHtkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISGhKAt/6b89hcf7IA7VLTTx+/TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYzky NDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZmNWM2NzVmM2QvNTI2MDQ4OGItM2RjOS0z ODgzLThkNjgtM2Q2YzJlZjUwMmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGM5MjQ0MzQtNjJmNC00NGQ1LWI0 NDAtNDc2ZjVjNjc1ZjNkLzBjOTI0NDM0LTYyZjQtNDRkNS1iNDQwLTQ3NmY1YzY3 NWYzZC5jcmwwHwYDVR0jBBgwFoAUBa56uKMq0Of7tmKknnU5XIDc11gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYzkyNDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZm NWM2NzVmM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FH7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGANLEIc3draOrLCgZlNwjO1mnLjYOCAev++HC3GdCaMBCWun7Ukh7cc olJSbKJG5b4pfRIpYC4QE/rb/leUwHljXZuoQ0N9cdGB7AE38w9nbcXFg5onw/jQ L0kLOayZkRJxnWpPVlFrQJPR3+S7yuPkWh+cxHv21OG8tyDKgdC/Sw4ErskgFKVX RLXi/kGXQ3h2Gc7FvQXSUtwbT6k3KtFVJa8n4rIbMWHkgdDdihqE5lFh3A0RE9xm lA6BGdPGdogSnfbhYKkSxeM52WdgdtSTie4atexsLzZxFv36cWmtAdALMtjQ+ljs NfbXOFfU+anR52+OP8qU+qhJ5m0bh1A= -----END CERTIFICATE-----Generated at Wed Nov 5 12:21:06 2025 by rpki-client