$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5f9f8910-3fd7-3616-b095-415b2e2e0f90.roa File: 5f9f8910-3fd7-3616-b095-415b2e2e0f90.roa (raw, json) Hash identifier: gQRHib5r3cJW3sN7HWhSMozHRYK4+ybDPedDTBP20Lc= Subject key identifier: 36:DE:F7:DB:54:77:B3:2F:E9:66:E4:4D:91:3A:95:58:5B:0D:99:FE Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D09DE16E74D6DDE14FD80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5f9f8910-3fd7-3616-b095-415b2e2e0f90.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 209.55.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:09:de:16:e7:4d:6d:de:14:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=1dcde983-afa6-46b0-8f41-0ac922791ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b7:83:d3:1a:62:0d:ff:2c:6f:e5:97:1a:79: f7:34:ce:24:82:ba:23:93:95:82:e6:cb:29:d0:21: 3b:da:2e:c3:14:74:f6:46:00:07:79:05:8f:e2:80: 6c:3e:f1:24:91:59:d7:fe:04:34:2d:87:da:25:ef: 7c:36:0c:da:5a:80:d5:26:49:0b:94:12:fe:3a:38: b1:ab:7c:1b:00:8c:93:a8:71:f3:fb:a8:08:a8:69: 12:7a:2a:14:b7:fa:ed:fb:ed:2e:8a:65:61:37:e5: ba:5a:b5:5f:85:d5:e9:46:e6:c3:9c:d7:8f:4b:a4: 62:b5:79:02:68:ec:64:e6:6d:2b:d5:e3:30:98:73: ca:f5:c0:33:e6:18:14:48:cd:ec:b3:f5:11:f2:1b: 03:8f:b2:2a:1f:37:8d:f0:6c:5d:7d:f7:cf:d1:90: 50:28:51:ad:da:06:11:be:04:83:11:3c:a6:b0:88: 4f:3f:e5:73:3d:be:29:72:c3:08:7e:55:2a:44:87: 82:e9:c1:5b:28:c1:a2:6b:18:f4:85:03:65:83:17: d3:64:56:f3:41:d3:31:08:bb:a9:01:83:c7:b8:0e: cc:6c:7c:44:79:45:7a:99:e8:51:d2:1e:4e:c8:8e: ec:85:e1:08:b4:b9:45:21:c1:a5:c1:1d:68:4e:be: 00:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:DE:F7:DB:54:77:B3:2F:E9:66:E4:4D:91:3A:95:58:5B:0D:99:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/5f9f8910-3fd7-3616-b095-415b2e2e0f90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:cf:5a:59:9c:4c:ec:19:72:8c:45:8e:c6:ef:45:e9:c6:ac: f4:8d:64:42:46:f2:f0:6b:02:8c:2e:60:10:c6:f5:38:95:e0: 0c:e4:fc:82:eb:39:4d:92:fc:34:ec:9c:56:4b:a1:3f:51:20: b6:36:2a:ef:4e:74:6b:9a:04:8f:c7:27:92:9f:35:0e:b3:45: 13:4f:bb:23:40:34:6c:50:dc:e8:fd:74:c3:4f:97:4d:bc:cd: 70:1f:a4:13:22:65:5b:47:01:55:b1:dc:51:5e:4c:b2:ac:d5: 4a:31:99:27:19:b4:90:8e:05:78:e9:b5:bf:8d:be:64:18:2e: 58:0a:24:af:2f:46:c7:dd:f6:15:03:5e:84:23:fb:34:2f:30: 09:0f:8e:50:da:48:18:51:30:96:d0:cb:7d:78:8b:90:a2:d0: 14:1f:5f:29:dd:f8:39:14:b9:6d:5a:ba:dc:dc:5f:7a:fc:6e: 0d:03:97:12:56:96:bc:1f:c4:4b:4f:a1:8c:8d:39:14:b4:a3: 87:16:a1:a5:d6:8d:bd:cc:92:02:c0:b7:c0:ff:2e:34:61:d1: 19:5c:bc:13:3d:ed:99:4b:28:6f:b4:6c:e8:88:06:32:75:8a: 05:c1:8d:0f:8b:45:98:64:9b:b8:3c:f7:a1:df:04:ff:ea:d1: 56:8e:f1:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQneFudNbd4U/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk MWRjZGU5ODMtYWZhNi00NmIwLThmNDEtMGFjOTIyNzkxYWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLeD0xpiDf8sb+WXGnn3NM4kgrojk5WC5ssp 0CE72i7DFHT2RgAHeQWP4oBsPvEkkVnX/gQ0LYfaJe98NgzaWoDVJkkLlBL+Ojix q3wbAIyTqHHz+6gIqGkSeioUt/rt++0uimVhN+W6WrVfhdXpRubDnNePS6RitXkC aOxk5m0r1eMwmHPK9cAz5hgUSM3ss/UR8hsDj7IqHzeN8GxdfffP0ZBQKFGt2gYR vgSDETymsIhPP+VzPb4pcsMIflUqRIeC6cFbKMGiaxj0hQNlgxfTZFbzQdMxCLup AYPHuA7MbHxEeUV6mehR0h5OyI7sheEItLlFIcGlwR1oTr4AcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbe99tUd7Mv6WbkTZE6lVhbDZn+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNWY5Zjg5MTAtM2ZkNy0z NjE2LWIwOTUtNDE1YjJlMmUwZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TfRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7PWlmcTOwZcoxFjsbvRenGrPSNZEJG8vBrAowuYBDG9TiV4Azk/ILr OU2S/DTsnFZLoT9RILY2Ku9OdGuaBI/HJ5KfNQ6zRRNPuyNANGxQ3Oj9dMNPl028 zXAfpBMiZVtHAVWx3FFeTLKs1UoxmScZtJCOBXjptb+NvmQYLlgKJK8vRsfd9hUD XoQj+zQvMAkPjlDaSBhRMJbQy314i5Ci0BQfXynd+DkUuW1autzcX3r8bg0DlxJW lrwfxEtPoYyNORS0o4cWoaXWjb3MkgLAt8D/LjRh0RlcvBM97ZlLKG+0bOiIBjJ1 igXBjQ+LRZhkm7g896HfBP/q0VaO8UM= -----END CERTIFICATE-----Generated at Wed Nov 5 02:47:05 2025 by rpki-client