$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/42e3201a-8346-30b4-b00a-81975dfd118a.roa File: 42e3201a-8346-30b4-b00a-81975dfd118a.roa (raw, json) Hash identifier: GXsU/2chrHOQiPezr0ggj1Qf1LWQIvz4GhHo4Nr6FGI= Subject key identifier: 5E:BE:5D:EF:1F:D8:23:1C:48:0F:10:32:97:13:B8:FF:18:1F:17:98 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D0717E8077EB37D2D2940 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/42e3201a-8346-30b4-b00a-81975dfd118a.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 209.55.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:07:17:e8:07:7e:b3:7d:2d:29:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=2e9c27b6-164b-44f2-925d-443a67458c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0f:d1:01:5e:02:a2:fc:2e:d5:b8:11:c9:d2: 01:9c:b2:b3:38:3c:91:15:b4:68:a9:ef:ec:ee:f9: e1:03:6f:62:22:44:5d:39:ab:88:2d:0c:a6:cc:24: e8:1e:e1:83:b5:e7:3f:01:7c:63:93:64:51:d0:2b: f8:70:94:d9:b2:0c:85:71:ef:b2:83:0c:34:d8:39: e3:25:c6:2e:83:91:fd:8d:75:d9:b8:0d:bb:ba:cc: 74:83:ec:ca:71:ee:69:75:65:c5:46:2a:27:da:a5: c8:15:9b:7b:ef:b0:74:92:fe:a6:92:4d:43:c5:3e: b9:f2:27:27:b0:ee:c2:f4:16:e1:33:b4:1b:e7:00: 4c:be:cc:f3:0f:97:5f:07:7b:5e:0a:21:18:cf:64: 0b:9a:49:41:1a:0a:8e:1a:5e:3c:88:36:80:43:01: f6:0e:b1:88:d3:37:fb:a3:e8:e1:14:60:37:31:95: 32:fd:2d:bb:32:3b:0d:90:e9:2f:fb:d0:e6:50:4f: ad:fd:26:be:e4:88:4f:1a:2d:f1:0c:e8:53:4d:09: d9:46:ef:b9:e8:70:62:96:c5:e0:6e:45:4c:8f:71: 7a:e8:6a:71:4f:0c:6e:a7:86:6e:2a:ec:d6:cb:7e: f7:ab:c5:9b:ea:e9:73:30:b3:23:20:af:3a:11:77: ed:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:BE:5D:EF:1F:D8:23:1C:48:0F:10:32:97:13:B8:FF:18:1F:17:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/42e3201a-8346-30b4-b00a-81975dfd118a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:5d:f0:76:f1:36:66:3f:ca:07:37:93:7c:25:8c:1d:58:e8: 57:26:7b:3e:76:b9:e5:bb:d2:ca:7e:88:f7:f7:c1:12:43:2a: 42:73:db:49:10:4a:99:32:f7:c1:cb:9b:62:e7:55:40:a7:46: f4:8b:c0:88:f9:53:35:a7:28:e5:42:57:a2:a4:ae:c9:72:90: 10:23:9f:02:45:df:a3:65:b4:d3:80:ca:b5:d3:be:9c:2c:cd: dd:e8:d9:04:a4:98:a8:13:95:49:e5:4b:02:c0:85:32:00:fa: 67:99:f7:85:1d:4e:9a:dd:30:99:05:9c:29:e7:6c:0a:64:7e: b2:54:81:cc:03:27:5b:ff:13:36:56:4d:a4:02:5c:c1:cf:73: 88:57:64:23:e1:a0:b7:ad:6b:ad:e0:c1:4d:0c:de:fb:d5:4e: e5:00:66:6f:12:8d:19:04:2e:76:b7:cf:c0:b9:5a:f0:e8:02: fc:53:c7:05:e3:18:ab:62:dc:30:24:9b:1a:9b:39:29:8f:fb: 7a:ab:61:dc:4f:17:e4:5c:b8:f5:e0:6b:d4:33:42:f1:96:6f: 0c:f9:10:ed:52:de:cd:92:17:c4:f9:b3:b6:76:26:40:3e:94: cd:8b:66:47:cd:ce:3e:9f:5e:cd:7a:d3:26:e9:f7:70:db:f6: 07:99:c2:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQcX6Ad+s30tKUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk MmU5YzI3YjYtMTY0Yi00NGYyLTkyNWQtNDQzYTY3NDU4Yzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQ/RAV4Covwu1bgRydIBnLKzODyRFbRoqe/s 7vnhA29iIkRdOauILQymzCToHuGDtec/AXxjk2RR0Cv4cJTZsgyFce+ygww02Dnj JcYug5H9jXXZuA27usx0g+zKce5pdWXFRion2qXIFZt777B0kv6mkk1DxT658icn sO7C9BbhM7Qb5wBMvszzD5dfB3teCiEYz2QLmklBGgqOGl48iDaAQwH2DrGI0zf7 o+jhFGA3MZUy/S27MjsNkOkv+9DmUE+t/Sa+5IhPGi3xDOhTTQnZRu+56HBilsXg bkVMj3F66GpxTwxup4ZuKuzWy373q8Wb6ulzMLMjIK86EXftgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6+Xe8f2CMcSA8QMpcTuP8YHxeYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNDJlMzIwMWEtODM0Ni0z MGI0LWIwMGEtODE5NzVkZmQxMThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TefMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdd8HbxNmY/ygc3k3wljB1Y6Fcmez52ueW70sp+iPf3wRJDKkJz20kQ Spky98HLm2LnVUCnRvSLwIj5UzWnKOVCV6KkrslykBAjnwJF36NltNOAyrXTvpws zd3o2QSkmKgTlUnlSwLAhTIA+meZ94UdTprdMJkFnCnnbApkfrJUgcwDJ1v/EzZW TaQCXMHPc4hXZCPhoLeta63gwU0M3vvVTuUAZm8SjRkELna3z8C5WvDoAvxTxwXj GKti3DAkmxqbOSmP+3qrYdxPF+RcuPXga9QzQvGWbwz5EO1S3s2SF8T5s7Z2JkA+ lM2LZkfNzj6fXs160ybp93Db9geZwuM= -----END CERTIFICATE-----Generated at Wed Nov 5 06:28:26 2025 by rpki-client