$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/ab315a9a-bf35-3f89-9db3-78534995f4ca.roa File: ab315a9a-bf35-3f89-9db3-78534995f4ca.roa (raw, json) Hash identifier: mvYVO4hAgCDyoV99RHbwK5U2DqXW90jr1uEd18XWq8k= Subject key identifier: 07:DA:47:EE:E5:17:17:53:43:14:58:F9:1B:76:C7:97:77:2B:97:BC Certificate issuer: /CN=0c924434-62f4-44d5-b440-476f5c675f3d Certificate serial: 010D0C9F4328584BB19262319C2FA43E42DCE800 Authority key identifier: 05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/ab315a9a-bf35-3f89-9db3-78534995f4ca.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 209.178.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:62:31:9c:2f:a4:3e:42:dc:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c924434-62f4-44d5-b440-476f5c675f3d Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=66724702-fedc-4962-8cb3-6a6b7d166fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f8:00:6d:39:c4:56:b5:b6:2f:7b:67:f6:7a: 15:40:52:a7:a5:5f:7a:25:98:13:31:31:59:cc:d0: 37:e7:2a:16:35:62:b8:62:e8:13:74:43:e0:a2:8e: 87:e0:b0:c2:11:01:28:da:ea:47:cf:f4:ff:af:01: 5d:16:84:6a:67:b9:9c:fe:1f:80:fc:a3:53:0f:d1: 02:ba:16:29:d8:97:37:cb:af:83:60:cc:a2:76:a0: 84:42:17:87:b7:ef:18:2a:a3:20:9b:82:14:52:ad: 75:77:9d:39:63:97:a2:16:35:e0:83:06:75:2c:3e: fe:57:4b:be:3f:a0:66:79:56:ac:e5:3d:40:b6:82: 24:13:e1:c1:d5:cb:01:e4:5e:54:b7:b5:b6:a5:65: c5:3a:58:cd:77:85:5a:ea:c2:b6:3d:ba:52:58:07: 60:c8:04:bf:10:a1:8e:85:a4:cf:99:76:6f:b6:0d: 9c:31:2b:00:58:d6:ce:58:db:62:cb:8f:f7:83:fc: 34:93:8f:45:64:2b:42:58:06:8e:c8:c5:48:47:a5: 76:7b:60:94:93:0a:68:0c:84:9c:9b:06:0e:b1:73: af:01:af:97:18:cd:3e:bb:b0:7c:17:8f:5d:2a:51: e5:8f:9a:c0:53:f9:ca:1c:1e:86:09:79:4c:2f:f3: a1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:DA:47:EE:E5:17:17:53:43:14:58:F9:1B:76:C7:97:77:2B:97:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/ab315a9a-bf35-3f89-9db3-78534995f4ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl X509v3 Authority Key Identifier: keyid:05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer sbgp-ipAddrBlock: critical IPv4: 209.178.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:2b:d1:64:47:aa:dc:56:6d:55:0f:df:c9:28:db:f6:56:17: a3:81:c6:45:f7:9b:fa:45:92:d9:a1:fb:2f:68:92:ae:07:38: 72:6e:7d:5d:d8:61:4d:10:5a:78:19:f0:0d:31:bd:31:c2:9b: 89:37:4e:c3:d9:87:fe:0b:10:b3:18:40:c6:ba:6a:65:c0:f9: 38:33:ef:6e:08:f4:3b:a8:4f:c6:24:d3:31:b0:fd:5b:9d:cf: 10:49:e2:61:ea:19:d4:4d:bc:6a:00:e4:7b:f4:90:6c:1f:f0: d9:e5:11:cb:3a:93:8f:f0:db:c1:e1:3f:66:1d:b8:90:7c:f1: 3d:1e:ad:62:b6:ee:0e:5b:6d:b0:47:8d:ac:02:9b:cb:31:ff: d8:3d:af:88:35:27:19:38:c7:7c:2b:70:18:96:10:51:08:46: f6:37:3c:f0:06:8f:50:85:cb:34:1d:a9:31:a2:e0:9f:59:41: fd:ae:bc:50:fb:2d:c3:3a:b1:ba:17:1a:d8:94:ce:84:43:be: ef:26:c8:de:43:32:8c:de:cb:2d:b4:91:cc:46:45:c6:ef:9c: cd:58:4c:af:f0:46:dd:63:ce:f1:8c:64:81:b6:5f:76:65:3b: 20:75:11:67:33:f5:17:ec:ce:7b:9e:d8:31:1a:6c:65:6e:f3: 5a:d0:d2:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkmIxnC+kPkLc6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM5MjQ0MzQtNjJmNC00NGQ1LWI0NDAtNDc2ZjVjNjc1 ZjNkMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk NjY3MjQ3MDItZmVkYy00OTYyLThjYjMtNmE2YjdkMTY2ZmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/gAbTnEVrW2L3tn9noVQFKnpV96JZgTMTFZ zNA35yoWNWK4YugTdEPgoo6H4LDCEQEo2upHz/T/rwFdFoRqZ7mc/h+A/KNTD9EC uhYp2Jc3y6+DYMyidqCEQheHt+8YKqMgm4IUUq11d505Y5eiFjXggwZ1LD7+V0u+ P6BmeVas5T1AtoIkE+HB1csB5F5Ut7W2pWXFOljNd4Va6sK2PbpSWAdgyAS/EKGO haTPmXZvtg2cMSsAWNbOWNtiy4/3g/w0k49FZCtCWAaOyMVIR6V2e2CUkwpoDISc mwYOsXOvAa+XGM0+u7B8F49dKlHlj5rAU/nKHB6GCXlML/OhvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfaR+7lFxdTQxRY+Rt2x5d3K5e8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYzky NDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZmNWM2NzVmM2QvYWIzMTVhOWEtYmYzNS0z Zjg5LTlkYjMtNzg1MzQ5OTVmNGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGM5MjQ0MzQtNjJmNC00NGQ1LWI0 NDAtNDc2ZjVjNjc1ZjNkLzBjOTI0NDM0LTYyZjQtNDRkNS1iNDQwLTQ3NmY1YzY3 NWYzZC5jcmwwHwYDVR0jBBgwFoAUBa56uKMq0Of7tmKknnU5XIDc11gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYzkyNDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZm NWM2NzVmM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0bL0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsr0WRHqtxWbVUP38ko2/ZWF6OBxkX3m/pFktmh+y9okq4HOHJufV3Y YU0QWngZ8A0xvTHCm4k3TsPZh/4LELMYQMa6amXA+Tgz724I9DuoT8Yk0zGw/Vud zxBJ4mHqGdRNvGoA5Hv0kGwf8NnlEcs6k4/w28HhP2YduJB88T0erWK27g5bbbBH jawCm8sx/9g9r4g1Jxk4x3wrcBiWEFEIRvY3PPAGj1CFyzQdqTGi4J9ZQf2uvFD7 LcM6sboXGtiUzoRDvu8myN5DMozeyy20kcxGRcbvnM1YTK/wRt1jzvGMZIG2X3Zl OyB1EWcz9Rfsznue2DEabGVu81rQ0mQ= -----END CERTIFICATE-----Generated at Wed Nov 5 12:28:06 2025 by rpki-client