$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/1420f73f-ea1d-3fb3-8575-aba2c9823fb0.roa File: 1420f73f-ea1d-3fb3-8575-aba2c9823fb0.roa (raw, json) Hash identifier: bo+3tB1I9P+cvrZN0f7Y7T5DHP3/EYzh1viRCjjs1cE= Subject key identifier: AC:D4:FB:E6:27:39:B4:9D:C5:7B:C6:EB:EE:5B:D7:B4:65:D2:1D:71 Certificate issuer: /CN=7d6bea32-db4c-4326-93a0-713364b8aa44 Certificate serial: 010D0C9F4328584B48E21429841022448EF06080 Authority key identifier: D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/1420f73f-ea1d-3fb3-8575-aba2c9823fb0.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 22351 IP address blocks: 216.250.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e2:14:29:84:10:22:44:8e:f0:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d6bea32-db4c-4326-93a0-713364b8aa44 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=03fc02a3-c6b5-4428-b050-1e8ffedfc13c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:cc:e8:5a:9a:36:09:6d:b5:25:b8:2c:f9:fa: 77:84:b1:05:0d:39:7d:3a:86:9d:49:c2:ec:44:16: 9f:8e:a1:f0:9a:d3:1a:8a:55:e7:a4:3a:58:dc:66: 6f:93:4b:44:b4:f2:b9:dc:47:42:91:54:ac:ef:67: a7:82:ad:ab:2e:48:25:e7:99:03:66:20:42:f3:d1: 86:ac:d0:82:8f:84:26:13:2d:9a:77:69:94:b0:4f: f9:65:9a:5d:9e:0b:ae:7b:55:28:7d:40:67:58:b1: 05:b7:02:e9:37:31:e1:f5:14:60:06:93:08:fe:b2: e6:eb:1b:cd:55:1b:b5:71:e2:2b:d9:c9:af:1f:33: f3:12:9c:c5:02:00:7b:1a:c5:91:6f:c6:03:42:e2: c8:2f:62:54:69:9d:8c:14:df:4e:d0:7c:c5:e1:d3: a8:32:ae:1e:a6:e6:66:f8:8e:e9:19:52:69:52:79: 57:d4:8a:5b:dd:4f:c5:f1:6c:3c:bf:ba:8e:1a:c6: 05:7f:cf:45:c4:5e:48:8c:99:2a:59:09:66:5b:a9: 5c:80:1f:90:97:d4:53:ea:aa:32:c6:de:6a:63:9e: a8:99:4b:45:8d:bc:0b:4c:1c:98:39:ec:91:1e:28: d9:d9:50:8a:75:5e:d9:fe:bd:42:c0:c1:cc:c4:76: bd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D4:FB:E6:27:39:B4:9D:C5:7B:C6:EB:EE:5B:D7:B4:65:D2:1D:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/1420f73f-ea1d-3fb3-8575-aba2c9823fb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl X509v3 Authority Key Identifier: keyid:D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer sbgp-ipAddrBlock: critical IPv4: 216.250.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:e9:21:e9:bf:f4:d9:1b:b6:b4:e0:5c:2e:ec:c1:f1:02:45: e3:c1:4f:fe:15:2c:e1:80:de:51:ea:21:bd:77:1d:9d:4d:09: b5:dc:7e:89:cc:50:80:e4:4d:3c:50:ac:78:ab:c5:09:1d:f0: f1:f8:13:ef:4a:6a:00:cc:e9:c7:fd:5d:d0:7a:e5:94:2f:7c: 79:ac:e8:14:97:41:ff:c5:c5:ea:4c:2a:4d:4d:e9:41:31:e7: f4:e2:a3:a8:26:5b:93:a2:96:8f:81:d4:d3:22:2b:05:64:ab: a4:b8:fb:39:02:86:14:10:cd:23:7a:9f:51:04:8e:cd:9b:e1: 9e:d1:0b:dd:eb:62:90:f8:14:f5:79:32:24:86:54:e3:b4:79: b8:30:f4:a4:e9:0c:8e:96:4f:81:2c:ba:99:fb:35:72:b8:71: 20:7f:a0:86:f4:66:64:8c:68:31:d5:33:17:34:8e:bd:e8:e7: 13:51:f3:cb:0c:5a:49:e5:7b:6c:16:73:a9:11:fd:0b:3e:9b: 59:96:46:48:68:93:28:be:44:b0:9c:f8:f5:bc:90:88:4e:71: 9e:a3:89:20:25:84:67:c0:e5:57:5b:10:a5:6a:5e:3f:6e:27: 4e:2b:e7:b6:51:73:a6:55:30:d0:a8:02:b4:55:0e:01:16:7b: 1d:a5:59:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4hQphBAiRI7wYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Q2YmVhMzItZGI0Yy00MzI2LTkzYTAtNzEzMzY0Yjhh YTQ0MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MDNmYzAyYTMtYzZiNS00NDI4LWIwNTAtMWU4ZmZlZGZjMTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgszoWpo2CW21Jbgs+fp3hLEFDTl9OoadScLs RBafjqHwmtMailXnpDpY3GZvk0tEtPK53EdCkVSs72engq2rLkgl55kDZiBC89GG rNCCj4QmEy2ad2mUsE/5ZZpdnguue1UofUBnWLEFtwLpNzHh9RRgBpMI/rLm6xvN VRu1ceIr2cmvHzPzEpzFAgB7GsWRb8YDQuLIL2JUaZ2MFN9O0HzF4dOoMq4epuZm +I7pGVJpUnlX1Ipb3U/F8Ww8v7qOGsYFf89FxF5IjJkqWQlmW6lcgB+Ql9RT6qoy xt5qY56omUtFjbwLTByYOeyRHijZ2VCKdV7Z/r1CwMHMxHa9owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzU++YnObSdxXvG6+5b17Rl0h1xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83ZDZi ZWEzMi1kYjRjLTQzMjYtOTNhMC03MTMzNjRiOGFhNDQvMTQyMGY3M2YtZWExZC0z ZmIzLTg1NzUtYWJhMmM5ODIzZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvN2Q2YmVhMzItZGI0Yy00MzI2LTkz YTAtNzEzMzY0YjhhYTQ0LzdkNmJlYTMyLWRiNGMtNDMyNi05M2EwLTcxMzM2NGI4 YWE0NC5jcmwwHwYDVR0jBBgwFoAU13vCe9o3Nfdsvxl4cDowOSWIciMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83ZDZiZWEzMi1kYjRjLTQzMjYtOTNhMC03MTMz NjRiOGFhNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PrPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDpIem/9NkbtrTgXC7swfECRePBT/4VLOGA3lHqIb13HZ1NCbXcfonM UIDkTTxQrHirxQkd8PH4E+9KagDM6cf9XdB65ZQvfHms6BSXQf/FxepMKk1N6UEx 5/Tio6gmW5Oilo+B1NMiKwVkq6S4+zkChhQQzSN6n1EEjs2b4Z7RC93rYpD4FPV5 MiSGVOO0ebgw9KTpDI6WT4Esupn7NXK4cSB/oIb0ZmSMaDHVMxc0jr3o5xNR88sM Wknle2wWc6kR/Qs+m1mWRkhokyi+RLCc+PW8kIhOcZ6jiSAlhGfA5VdbEKVqXj9u J04r57ZRc6ZVMNCoArRVDgEWex2lWWg= -----END CERTIFICATE-----Generated at Wed Nov 5 00:52:16 2025 by rpki-client