$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9bd9eb97-84aa-3bcd-92fd-3f083e250d28.roa File: 9bd9eb97-84aa-3bcd-92fd-3f083e250d28.roa (raw, json) Hash identifier: sm3G4khXxP1RWFeGlW+OR7d5RjG4mcAAsUxtcmy1/3Q= Subject key identifier: 78:AD:9A:54:2C:D3:F2:E0:8D:9D:99:C8:31:AF:7D:69:DC:59:55:7E Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D0AB063F9BE2514EDB1E0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9bd9eb97-84aa-3bcd-92fd-3f083e250d28.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 209.55.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:0a:b0:63:f9:be:25:14:ed:b1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=ee86db6f-c7a9-4f65-9b08-6832e983b18b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fe:e2:01:29:26:ce:94:5f:a6:4d:2e:04:61: a8:e7:71:ad:60:dc:06:87:4b:8b:02:0b:15:aa:80: b1:80:b8:37:0a:2c:3a:03:f7:28:e5:59:27:26:42: 1d:cf:79:88:63:1d:5a:78:b9:85:5b:51:d8:be:de: 91:14:bc:43:96:75:d0:24:d3:a9:af:9a:b0:c1:b4: 52:20:2f:fd:fc:a5:5c:be:c9:77:f3:a3:12:ff:05: 0d:42:20:e3:a3:0b:41:7a:93:00:ce:5e:44:4b:7e: 3a:2c:17:94:f3:0d:ce:7f:34:22:54:88:7d:fb:01: 46:3b:be:ce:1f:48:2b:ec:d5:d8:eb:f8:be:76:9a: 1e:95:ba:32:e7:46:44:80:41:f4:b9:fa:ae:45:49: e9:00:b1:51:ea:9e:35:3b:ce:21:e5:6a:11:5b:c4: 33:f1:39:0f:ed:f7:7f:bd:a3:28:89:e9:7c:aa:43: 4a:10:f2:ce:b5:e9:1f:af:f9:1c:e2:dd:6a:5a:45: 9c:19:cc:9a:3f:0e:80:4f:65:a0:96:75:52:9d:e0: 94:01:8b:02:9e:53:ae:94:02:a7:7a:75:77:f9:1e: c0:f3:88:6d:92:6e:4b:bc:57:00:c6:8d:35:3c:e0: 53:6b:d8:10:6f:e0:42:eb:79:2c:e4:63:47:f1:db: 04:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:AD:9A:54:2C:D3:F2:E0:8D:9D:99:C8:31:AF:7D:69:DC:59:55:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9bd9eb97-84aa-3bcd-92fd-3f083e250d28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:03:a4:16:4f:a6:16:0e:b2:69:62:58:4b:24:28:bf:2f:28: 7c:fb:8b:9d:51:5d:01:44:81:8a:fe:10:88:3d:83:82:05:b0: 09:aa:73:cb:9d:ef:c0:41:37:c0:d2:1e:2d:f5:b3:67:03:17: 91:1b:11:86:6e:49:42:bb:54:4f:69:cf:e8:16:1c:66:77:0b: 7c:e2:8c:b9:b6:48:a9:bb:1a:78:8f:20:ac:66:22:51:c3:eb: ab:02:08:c4:3d:ae:5c:94:a4:24:18:96:6d:49:69:71:85:72: 54:a2:4a:fe:51:60:ef:19:41:f8:d0:91:84:00:f5:a6:e7:37: 65:6c:25:0d:e6:7e:b6:6a:86:ee:09:65:f8:d0:c7:66:1e:cb: 3d:a2:b1:66:6c:53:09:59:dc:97:59:77:c6:d0:a7:e9:44:dc: ca:62:7f:7b:65:c4:a4:96:24:5c:09:0e:14:b2:ba:96:a3:f3: bb:44:8b:4b:6c:00:4a:b8:7e:73:e2:44:0b:e2:56:d5:91:45: f0:8c:68:6c:fc:81:2e:a4:9d:02:9b:3b:55:ad:ce:db:0b:0b: 5e:1c:5d:1b:4a:aa:f4:b8:fc:1f:b4:eb:bc:c3:f6:54:81:e7: 80:d1:91:ff:43:58:30:9a:45:f8:d5:f3:4f:2c:3c:dc:18:db: 67:19:e2:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQqwY/m+JRTtseAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk ZWU4NmRiNmYtYzdhOS00ZjY1LTliMDgtNjgzMmU5ODNiMThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhP7iASkmzpRfpk0uBGGo53GtYNwGh0uLAgsV qoCxgLg3Ciw6A/co5VknJkIdz3mIYx1aeLmFW1HYvt6RFLxDlnXQJNOpr5qwwbRS IC/9/KVcvsl386MS/wUNQiDjowtBepMAzl5ES346LBeU8w3OfzQiVIh9+wFGO77O H0gr7NXY6/i+dpoelboy50ZEgEH0ufquRUnpALFR6p41O84h5WoRW8Qz8TkP7fd/ vaMoiel8qkNKEPLOtekfr/kc4t1qWkWcGcyaPw6AT2WglnVSneCUAYsCnlOulAKn enV3+R7A84htkm5LvFcAxo01POBTa9gQb+BC63ks5GNH8dsEqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHitmlQs0/LgjZ2ZyDGvfWncWVV+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvOWJkOWViOTctODRhYS0z YmNkLTkyZmQtM2YwODNlMjUwZDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TfdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEDpBZPphYOsmliWEskKL8vKHz7i51RXQFEgYr+EIg9g4IFsAmqc8ud 78BBN8DSHi31s2cDF5EbEYZuSUK7VE9pz+gWHGZ3C3zijLm2SKm7GniPIKxmIlHD 66sCCMQ9rlyUpCQYlm1JaXGFclSiSv5RYO8ZQfjQkYQA9abnN2VsJQ3mfrZqhu4J ZfjQx2Yeyz2isWZsUwlZ3JdZd8bQp+lE3Mpif3tlxKSWJFwJDhSyupaj87tEi0ts AEq4fnPiRAviVtWRRfCMaGz8gS6knQKbO1WtztsLC14cXRtKqvS4/B+067zD9lSB 54DRkf9DWDCaRfjV808sPNwY22cZ4so= -----END CERTIFICATE-----Generated at Wed Nov 5 01:24:31 2025 by rpki-client