$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/afb5daae-194e-3c70-a1c7-61e5faf147c0.roa File: afb5daae-194e-3c70-a1c7-61e5faf147c0.roa (raw, json) Hash identifier: nqR+MLpCC/qIdYJmqP6M7Chay1DnxUNtuHc1IWFxIZQ= Subject key identifier: B7:57:E5:2A:A7:D7:6F:02:D7:CA:A1:E9:E3:87:51:89:7C:EC:62:AE Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D0A9DF835C51F79012FE0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/afb5daae-194e-3c70-a1c7-61e5faf147c0.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 209.55.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:0a:9d:f8:35:c5:1f:79:01:2f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=3c986ae6-b236-4004-af48-ffd143603ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:39:ed:b5:fa:6e:9c:fa:a1:7f:53:5d:6e:80: 44:f8:ff:cd:75:73:44:94:04:f5:27:bf:7a:3d:bb: e8:7b:77:a9:88:3a:95:5c:92:a1:58:36:7c:69:7c: 57:57:70:38:dc:bb:47:fa:ec:47:5e:be:89:61:94: 2f:73:62:f7:e5:1f:28:30:38:6e:7e:4c:36:b3:1f: bc:5d:75:df:08:8c:48:7d:b9:36:0c:ef:dc:07:5a: 48:c8:3e:0a:c6:dd:df:f8:1c:45:19:55:c1:0f:7f: 62:9e:23:34:fa:60:5f:e4:58:2c:4f:43:b1:23:fa: 66:48:cd:7f:fa:fa:06:32:02:f5:9c:a0:b1:55:f9: ff:14:e0:d7:a6:41:ef:d6:07:86:5b:73:f1:50:82: 21:5a:dc:e3:cd:4b:c0:32:b0:7d:ba:dc:4d:c4:92: 7a:ab:a2:39:b1:6b:cf:6e:85:a3:61:78:bf:b4:0f: 64:3a:d8:e3:58:5d:36:f1:d9:09:b6:1f:4c:f8:79: 4a:d8:a2:be:f0:f2:ff:5f:b5:b3:b8:84:63:ee:02: 1e:5f:54:ff:7f:b2:61:4a:d2:f7:a6:82:f8:90:4a: e0:09:3d:11:de:f3:e1:7a:f0:5b:55:4b:88:8f:04: 09:90:2c:f7:36:53:f9:9f:33:dd:16:3e:d3:ab:03: f0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:57:E5:2A:A7:D7:6F:02:D7:CA:A1:E9:E3:87:51:89:7C:EC:62:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/afb5daae-194e-3c70-a1c7-61e5faf147c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:67:91:9a:06:5a:b0:97:dc:e3:44:31:2b:65:8d:13:69:da: d4:bc:b7:90:88:3a:50:73:d2:93:5d:cd:e5:b2:d1:da:e4:8c: cb:a5:ff:08:b7:22:48:0f:e6:41:2d:3a:97:6b:53:63:34:d6: 7c:10:b0:d3:e4:a4:10:4e:b1:14:ab:49:ae:28:a8:8a:94:83: f1:93:17:1b:4c:a4:45:66:83:33:a5:69:e4:cb:40:3f:84:0c: d5:55:f2:12:30:34:af:24:b0:88:28:2e:d0:fa:53:ac:70:9f: b0:b2:a8:44:2e:63:6c:ee:26:10:d8:97:1c:ff:09:97:1f:0b: dc:5d:5d:8d:0f:fe:b5:e2:a2:3b:55:73:be:69:d2:56:f7:f9: 08:b5:5e:e7:f5:ba:04:ba:54:c6:a9:66:5d:b3:28:61:71:af: d8:b3:3a:d3:87:b6:68:d4:99:9c:0d:1e:3a:6c:7a:70:25:fe: 18:ba:7b:3e:21:a2:28:91:68:27:02:a4:34:5d:4f:2f:28:4e: bc:e3:2a:7f:bc:82:d7:49:f8:46:bc:de:d0:1f:50:ea:f0:85: a7:cb:ce:2e:e3:cf:68:ad:95:b3:db:0e:24:6a:51:6d:ee:87: d9:0a:79:cc:b2:c8:9a:d1:ad:c6:7e:07:10:a6:f1:fd:51:e2: ae:6b:f1:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQqd+DXFH3kBL+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk M2M5ODZhZTYtYjIzNi00MDA0LWFmNDgtZmZkMTQzNjAzYWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTnttfpunPqhf1NdboBE+P/NdXNElAT1J796 Pbvoe3epiDqVXJKhWDZ8aXxXV3A43LtH+uxHXr6JYZQvc2L35R8oMDhufkw2sx+8 XXXfCIxIfbk2DO/cB1pIyD4Kxt3f+BxFGVXBD39iniM0+mBf5FgsT0OxI/pmSM1/ +voGMgL1nKCxVfn/FODXpkHv1geGW3PxUIIhWtzjzUvAMrB9utxNxJJ6q6I5sWvP boWjYXi/tA9kOtjjWF028dkJth9M+HlK2KK+8PL/X7WzuIRj7gIeX1T/f7JhStL3 poL4kErgCT0R3vPhevBbVUuIjwQJkCz3NlP5nzPdFj7TqwPwewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdX5Sqn128C18qh6eOHUYl87GKuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYWZiNWRhYWUtMTk0ZS0z YzcwLWExYzctNjFlNWZhZjE0N2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TfcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtnkZoGWrCX3ONEMStljRNp2tS8t5CIOlBz0pNdzeWy0drkjMul/wi3 IkgP5kEtOpdrU2M01nwQsNPkpBBOsRSrSa4oqIqUg/GTFxtMpEVmgzOlaeTLQD+E DNVV8hIwNK8ksIgoLtD6U6xwn7CyqEQuY2zuJhDYlxz/CZcfC9xdXY0P/rXiojtV c75p0lb3+Qi1Xuf1ugS6VMapZl2zKGFxr9izOtOHtmjUmZwNHjpsenAl/hi6ez4h oiiRaCcCpDRdTy8oTrzjKn+8gtdJ+Ea83tAfUOrwhafLzi7jz2itlbPbDiRqUW3u h9kKecyyyJrRrcZ+BxCm8f1R4q5r8Vw= -----END CERTIFICATE-----Generated at Wed Nov 5 04:12:50 2025 by rpki-client