$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/8ecd6978-c1f1-3b9f-912e-d4f6c306c11a.roa File: 8ecd6978-c1f1-3b9f-912e-d4f6c306c11a.roa (raw, json) Hash identifier: dEHy07ZRjXQeGVG5qZd6FC120bgjNzstqy+MqhOVCEs= Subject key identifier: F1:36:63:0A:F8:2C:7C:7B:73:93:1A:DC:6E:E0:F9:BB:0F:15:4D:A7 Certificate issuer: /CN=0c924434-62f4-44d5-b440-476f5c675f3d Certificate serial: 010D0C9F4328584BB19262204900FDA4E5734E00 Authority key identifier: 05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/8ecd6978-c1f1-3b9f-912e-d4f6c306c11a.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 19198 IP address blocks: 209.178.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:62:20:49:00:fd:a4:e5:73:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c924434-62f4-44d5-b440-476f5c675f3d Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=71a30161-f20a-48ad-8898-c1ee96c4f07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f5:14:39:eb:4b:db:5d:e5:5a:f5:fb:87:b3: ce:83:0d:fb:7a:b2:88:c1:a0:82:22:3d:16:7d:d8: 39:ec:25:a4:dc:78:64:be:f0:6f:ea:0f:98:a8:b1: c7:3e:ac:31:21:12:0c:a8:62:af:eb:66:c4:e0:99: f9:bc:ac:c5:00:2e:b6:fe:0d:6d:ff:2a:f8:f3:79: e0:ce:1c:d7:6b:ae:c3:5a:37:71:81:4f:b6:54:7b: de:41:75:04:3c:d1:cb:d1:9d:55:76:e4:27:1a:da: 66:87:84:87:a9:43:68:4b:7e:ed:df:e5:08:6f:c1: ce:63:ed:3f:4f:d4:85:a3:c3:e6:a7:01:c6:75:ec: 5a:85:e6:00:7c:72:b6:1b:a9:7c:96:ed:ea:78:36: 34:2a:18:f7:f4:cd:e5:aa:40:79:19:d3:9e:a6:66: ee:2b:f7:29:de:1e:47:43:27:5c:ae:3a:66:47:d9: 59:6e:71:00:d8:b1:f9:00:33:33:3b:95:df:66:b7: d4:c7:ae:67:e2:85:40:df:54:32:81:d6:4d:8c:88: f7:7f:89:1d:91:27:a1:23:20:88:79:6b:0e:e5:31: 9e:63:71:9c:1d:48:ac:4b:46:68:16:66:07:f4:94: c8:9f:bf:9c:98:3f:0b:67:52:ba:74:67:7f:b4:5b: 59:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:36:63:0A:F8:2C:7C:7B:73:93:1A:DC:6E:E0:F9:BB:0F:15:4D:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/8ecd6978-c1f1-3b9f-912e-d4f6c306c11a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl X509v3 Authority Key Identifier: keyid:05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer sbgp-ipAddrBlock: critical IPv4: 209.178.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:d6:d7:3e:43:d2:25:3a:8c:55:d5:39:0d:ee:b9:c8:ef:e4: 05:12:3f:be:0f:32:a7:d6:d7:ef:d6:00:9f:29:46:41:05:93: 5e:fd:21:c7:ee:2b:ce:69:df:91:28:20:b4:84:37:c9:fd:e0: f5:0c:18:55:af:d8:dd:2f:ac:f8:68:31:89:73:68:4f:e1:f5: 57:16:a8:3f:b3:78:95:ae:d1:4b:63:23:44:d1:ac:b1:2f:55: cd:17:d1:1a:4e:6f:27:41:ff:6d:31:84:8b:f4:1a:3d:f0:5b: 61:81:8d:02:5c:15:49:84:33:6e:c2:73:4b:4a:7d:4a:f1:9a: f9:dd:61:84:3c:69:ff:be:cb:c4:a4:b7:f1:2e:3e:0a:28:98: 06:d1:15:b7:ab:81:d9:e4:73:36:93:06:74:80:87:2e:64:6b: 53:ce:f4:ad:c8:94:87:75:97:a2:e0:55:78:0d:e6:fb:e7:c0: ce:e5:23:65:6a:f6:5e:dd:7f:08:01:cf:7f:d2:45:78:6a:72: 65:9c:a0:42:ee:bb:d0:27:73:46:43:e6:3c:61:87:97:71:4e: ed:b3:bf:b4:6d:d9:78:df:74:af:03:52:9d:94:16:0c:a7:58: e7:18:1b:78:00:4a:82:5f:87:54:f9:34:d4:74:1d:46:cc:a0: 2b:57:f0:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkmIgSQD9pOVzTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM5MjQ0MzQtNjJmNC00NGQ1LWI0NDAtNDc2ZjVjNjc1 ZjNkMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk NzFhMzAxNjEtZjIwYS00OGFkLTg4OTgtYzFlZTk2YzRmMDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfUUOetL213lWvX7h7POgw37erKIwaCCIj0W fdg57CWk3HhkvvBv6g+YqLHHPqwxIRIMqGKv62bE4Jn5vKzFAC62/g1t/yr483ng zhzXa67DWjdxgU+2VHveQXUEPNHL0Z1VduQnGtpmh4SHqUNoS37t3+UIb8HOY+0/ T9SFo8PmpwHGdexaheYAfHK2G6l8lu3qeDY0Khj39M3lqkB5GdOepmbuK/cp3h5H QydcrjpmR9lZbnEA2LH5ADMzO5XfZrfUx65n4oVA31QygdZNjIj3f4kdkSehIyCI eWsO5TGeY3GcHUisS0ZoFmYH9JTIn7+cmD8LZ1K6dGd/tFtZ4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPE2Ywr4LHx7c5Ma3G7g+bsPFU2nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYzky NDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZmNWM2NzVmM2QvOGVjZDY5NzgtYzFmMS0z YjlmLTkxMmUtZDRmNmMzMDZjMTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGM5MjQ0MzQtNjJmNC00NGQ1LWI0 NDAtNDc2ZjVjNjc1ZjNkLzBjOTI0NDM0LTYyZjQtNDRkNS1iNDQwLTQ3NmY1YzY3 NWYzZC5jcmwwHwYDVR0jBBgwFoAUBa56uKMq0Of7tmKknnU5XIDc11gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYzkyNDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZm NWM2NzVmM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0bL0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzW1z5D0iU6jFXVOQ3uucjv5AUSP74PMqfW1+/WAJ8pRkEFk179Icfu K85p35EoILSEN8n94PUMGFWv2N0vrPhoMYlzaE/h9VcWqD+zeJWu0UtjI0TRrLEv Vc0X0RpObydB/20xhIv0Gj3wW2GBjQJcFUmEM27Cc0tKfUrxmvndYYQ8af++y8Sk t/EuPgoomAbRFbergdnkczaTBnSAhy5ka1PO9K3IlId1l6LgVXgN5vvnwM7lI2Vq 9l7dfwgBz3/SRXhqcmWcoELuu9Anc0ZD5jxhh5dxTu2zv7Rt2XjfdK8DUp2UFgyn WOcYG3gASoJfh1T5NNR0HUbMoCtX8BI= -----END CERTIFICATE-----Generated at Wed Nov 5 12:17:50 2025 by rpki-client