$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2a1659dd-d59c-3990-9ca4-28f1c90ccdc9.roa File: 2a1659dd-d59c-3990-9ca4-28f1c90ccdc9.roa (raw, json) Hash identifier: yRXo/eg3G89KLZBJUm89Sb5amTYevvpVFuooBo57eek= Subject key identifier: 72:D0:C9:31:AF:F0:E4:08:35:52:41:C4:7B:9A:7E:C3:8E:81:04:09 Certificate issuer: /CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9 Certificate serial: 010D0C9F4328584BB5C2531909EE6150650C5960 Authority key identifier: B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2a1659dd-d59c-3990-9ca4-28f1c90ccdc9.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 400790 IP address blocks: 207.228.217.0/24 maxlen: 24 2606:f6c0:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:53:19:09:ee:61:50:65:0c:59:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=8cf1d33c-3bf5-4f03-92fb-e35b185cb275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d0:98:41:c2:b3:08:7a:f6:9c:99:71:94:1d: c7:bc:7f:0d:27:12:36:5e:0f:c0:1b:bb:fd:ec:1f: d1:a3:ab:99:9f:e9:39:ef:bc:3b:bc:6f:b5:54:05: c2:2c:f1:0d:5e:df:2b:89:a4:7c:92:1b:6d:e3:79: 1b:ea:19:f9:e2:03:30:d4:6f:59:44:c9:d5:90:15: 50:b9:d5:c3:d4:25:cf:cc:db:66:9d:a6:89:d7:e1: 6a:8f:ae:b2:0a:84:53:33:3e:44:30:ff:97:33:e3: 6e:3e:6d:42:95:46:eb:1e:d5:60:08:83:75:ff:5c: 96:45:16:8a:7e:ba:81:62:ee:b4:81:ac:f2:41:dd: c0:ad:2f:fa:8f:5e:69:e7:e7:ce:09:7c:54:86:b6: 46:6a:03:47:b3:65:4f:5c:66:16:0e:34:50:15:b3: 2e:7d:3e:a9:fd:4f:5a:e4:84:b1:e3:9b:0c:e3:00: bf:69:00:bd:59:0c:6e:21:2d:a8:58:06:d3:9f:75: 3a:f4:b5:5e:32:c1:7b:9d:bb:19:f4:41:44:81:d3: 35:fc:9e:2e:81:86:d9:5d:d9:60:fb:6b:27:eb:b3: 71:d9:ee:e6:48:20:4a:c7:c9:f9:f2:b9:a9:90:f5: 07:ef:a7:38:82:2e:a3:cb:cb:b8:8b:4e:47:78:3d: d6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D0:C9:31:AF:F0:E4:08:35:52:41:C4:7B:9A:7E:C3:8E:81:04:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2a1659dd-d59c-3990-9ca4-28f1c90ccdc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl X509v3 Authority Key Identifier: keyid:B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer sbgp-ipAddrBlock: critical IPv4: 207.228.217.0/24 IPv6: 2606:f6c0:40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:a2:b2:4d:03:01:ab:63:ae:41:c8:d7:33:fb:dc:4e:6d:b9: b9:a0:ab:20:34:65:8f:20:e0:2e:1d:c2:fc:74:0e:c6:1e:d9: 3d:45:a7:2f:db:7d:ce:1e:25:bc:09:a0:a3:de:28:b1:64:a4: 19:24:e3:1b:a4:e4:e9:9c:ba:36:fb:51:9b:1c:61:ce:17:11: 39:47:86:f3:fb:fb:bf:0f:0a:c1:2b:87:b8:cc:d0:6a:f8:ee: cd:84:a6:68:e9:28:bc:39:31:16:48:81:a7:33:7a:45:f5:66: ed:b0:d9:ec:5a:e0:7d:a2:fb:7e:91:7b:f2:5e:27:dc:19:6e: c9:89:1e:41:d1:b9:25:66:50:0c:31:d8:91:63:27:84:af:ec: 3f:6d:a2:ae:b2:fb:ec:98:7d:4b:46:2b:22:31:d2:33:b9:26: 7d:3e:3c:d6:a5:f7:39:65:64:be:e9:f7:b8:b4:c8:54:cf:c8: 8f:41:11:d9:eb:52:9f:fc:ad:09:20:c9:49:6a:dd:91:74:42: ed:13:55:d6:49:b0:55:a8:6c:08:78:15:8e:35:3b:81:12:9c: 00:c7:38:13:65:67:f5:27:67:0c:d0:4f:90:2b:71:06:40:c4: 24:b4:59:dc:96:7d:fa:6e:22:69:6f:ca:04:18:0a:59:8a:56: 11:c4:4c:19 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEu1wlMZCe5hUGUMWWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU2OWU1NWQtM2JhZi00MWU2LTllNjctYmJlNWVkODg4 YmU5MB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk OGNmMWQzM2MtM2JmNS00ZjAzLTkyZmItZTM1YjE4NWNiMjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dCYQcKzCHr2nJlxlB3HvH8NJxI2Xg/AG7v9 7B/Ro6uZn+k577w7vG+1VAXCLPENXt8riaR8khtt43kb6hn54gMw1G9ZRMnVkBVQ udXD1CXPzNtmnaaJ1+Fqj66yCoRTMz5EMP+XM+NuPm1ClUbrHtVgCIN1/1yWRRaK frqBYu60gazyQd3ArS/6j15p5+fOCXxUhrZGagNHs2VPXGYWDjRQFbMufT6p/U9a 5ISx45sM4wC/aQC9WQxuIS2oWAbTn3U69LVeMsF7nbsZ9EFEgdM1/J4ugYbZXdlg +2sn67Nx2e7mSCBKx8n58rmpkPUH76c4gi6jy8u4i05HeD3WEQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFHLQyTGv8OQINVJBxHuafsOOgQQJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yZTY5 ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1ZWQ4ODhiZTkvMmExNjU5ZGQtZDU5Yy0z OTkwLTljYTQtMjhmMWM5MGNjZGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmU2OWU1NWQtM2JhZi00MWU2LTll NjctYmJlNWVkODg4YmU5LzJlNjllNTVkLTNiYWYtNDFlNi05ZTY3LWJiZTVlZDg4 OGJlOS5jcmwwHwYDVR0jBBgwFoAUuOVt8qT8p5onhZVWGclu3DiFdDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yZTY5ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1 ZWQ4ODhiZTkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAz+TZMA8E AgACMAkDBwAmBvbAAEAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOqKyTQMBq2OuQcjXM/vcTm25uaCrIDRl jyDgLh3C/HQOxh7ZPUWnL9t9zh4lvAmgo94osWSkGSTjG6Tk6Zy6NvtRmxxhzhcR OUeG8/v7vw8KwSuHuMzQavjuzYSmaOkovDkxFkiBpzN6RfVm7bDZ7FrgfaL7fpF7 8l4n3BluyYkeQdG5JWZQDDHYkWMnhK/sP22irrL77Jh9S0YrIjHSM7kmfT481qX3 OWVkvun3uLTIVM/Ij0ER2etSn/ytCSDJSWrdkXRC7RNV1kmwVahsCHgVjjU7gRKc AMc4E2Vn9SdnDNBPkCtxBkDEJLRZ3JZ9+m4iaW/KBBgKWYpWEcRMGQ== -----END CERTIFICATE-----Generated at Wed Nov 5 04:31:54 2025 by rpki-client