$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c2d00c71-36f4-3a51-91eb-873cc648d9b3.roa File: c2d00c71-36f4-3a51-91eb-873cc648d9b3.roa (raw, json) Hash identifier: nfSgmnyz448nONCMbQMZoY2PzDD+Vrr3sBuFjCiDbKo= Subject key identifier: 1E:DF:54:7F:F7:4D:6E:84:73:03:C7:57:5A:2D:9A:34:C9:04:4F:6C Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D0A6ECBCF91D65A076830 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c2d00c71-36f4-3a51-91eb-873cc648d9b3.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 209.55.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:0a:6e:cb:cf:91:d6:5a:07:68:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=09994883-f556-4761-ba74-f3b8c3eb48c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:21:59:19:aa:df:bf:78:38:ac:ee:09:8a:db: e7:10:06:d4:f4:7f:69:7c:1a:9d:4c:47:77:d1:20: 9e:53:ca:d5:e3:ce:7f:cb:70:f7:c4:86:57:bb:ca: f9:01:66:a2:11:18:f1:99:6d:36:eb:a6:35:24:88: 32:f1:31:99:bb:28:a7:0c:8e:96:e9:7d:72:28:06: e3:d6:15:3f:46:d5:50:8c:e1:04:99:8f:d2:6d:80: df:5f:07:fc:81:6a:78:d3:04:08:09:41:ee:61:17: e1:29:59:20:ec:45:c2:07:02:1f:bf:35:de:8c:b5: b4:f3:e6:9e:e7:a7:c9:71:a9:91:66:41:f6:44:ab: 01:58:ba:fe:9c:3a:d2:23:d9:ec:55:30:2f:fa:24: c0:f5:23:ec:32:9e:c4:67:f2:4c:9d:f1:6a:cf:f2: 09:04:e4:2b:bc:c1:6d:a1:52:06:c8:01:16:66:b0: a1:72:fe:35:62:43:3e:df:d5:38:05:42:61:b6:fc: 37:ca:b5:eb:69:a5:04:b5:ae:28:e6:28:a4:ae:25: c9:5c:fa:11:8e:a1:ea:04:0e:2c:2a:dc:16:44:c0: 2b:74:32:f0:a2:7b:27:d3:f0:c5:34:c1:48:44:ff: 9d:64:5d:48:1d:3e:74:40:37:e3:0b:3d:0a:f9:c5: 6e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:DF:54:7F:F7:4D:6E:84:73:03:C7:57:5A:2D:9A:34:C9:04:4F:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c2d00c71-36f4-3a51-91eb-873cc648d9b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:25:19:86:8a:04:3f:d7:2d:c0:08:73:11:9a:50:c1:5c:0a: 5a:0f:3f:5b:41:87:14:19:bf:27:c7:8b:61:69:ed:ff:90:48: 49:95:45:2e:27:37:da:3b:cd:bd:45:c5:88:ba:27:fa:68:60: 92:50:f5:03:61:11:3b:57:f3:c4:13:d8:eb:e5:32:b2:99:e3: ad:84:ee:b9:2e:e7:6f:6b:4f:dd:a3:41:31:f0:58:69:4e:fd: 79:3e:91:2b:f3:67:c4:31:92:51:24:87:9b:8a:2f:08:e8:c6: bf:9d:db:5c:d4:89:0d:eb:af:6d:be:a6:f6:30:56:69:31:21: 0e:c7:c7:a2:33:f0:80:ae:bf:36:41:64:45:bd:6b:2a:f9:40: fc:af:9e:90:68:6a:65:ab:ce:ca:6b:7a:27:b5:06:ad:88:48: b7:7d:4d:a9:36:4c:39:f8:86:67:f5:41:88:9f:7a:c5:5b:e4: 5b:39:11:c1:ff:36:1a:55:5c:d9:54:90:e7:3b:38:f0:35:af: bf:fe:56:63:39:6f:15:42:63:09:fc:3f:e5:8e:15:13:ae:e6: 43:bd:71:fb:77:29:d8:cc:06:20:6a:7f:96:34:a9:65:d9:86: cf:83:70:a0:eb:de:dd:43:0a:34:99:1b:e1:0a:f7:3f:1a:d8: 55:61:61:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQpuy8+R1loHaDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk MDk5OTQ4ODMtZjU1Ni00NzYxLWJhNzQtZjNiOGMzZWI0OGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCFZGarfv3g4rO4JitvnEAbU9H9pfBqdTEd3 0SCeU8rV485/y3D3xIZXu8r5AWaiERjxmW0266Y1JIgy8TGZuyinDI6W6X1yKAbj 1hU/RtVQjOEEmY/SbYDfXwf8gWp40wQICUHuYRfhKVkg7EXCBwIfvzXejLW08+ae 56fJcamRZkH2RKsBWLr+nDrSI9nsVTAv+iTA9SPsMp7EZ/JMnfFqz/IJBOQrvMFt oVIGyAEWZrChcv41YkM+39U4BUJhtvw3yrXraaUEta4o5iikriXJXPoRjqHqBA4s KtwWRMArdDLwonsn0/DFNMFIRP+dZF1IHT50QDfjCz0K+cVuewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7fVH/3TW6EcwPHV1otmjTJBE9sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYzJkMDBjNzEtMzZmNC0z YTUxLTkxZWItODczY2M2NDhkOWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TfZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIlGYaKBD/XLcAIcxGaUMFcCloPP1tBhxQZvyfHi2Fp7f+QSEmVRS4n N9o7zb1FxYi6J/poYJJQ9QNhETtX88QT2OvlMrKZ462E7rku529rT92jQTHwWGlO /Xk+kSvzZ8QxklEkh5uKLwjoxr+d21zUiQ3rr22+pvYwVmkxIQ7Hx6Iz8ICuvzZB ZEW9ayr5QPyvnpBoamWrzspreie1Bq2ISLd9Tak2TDn4hmf1QYifesVb5Fs5EcH/ NhpVXNlUkOc7OPA1r7/+VmM5bxVCYwn8P+WOFROu5kO9cft3KdjMBiBqf5Y0qWXZ hs+DcKDr3t1DCjSZG+EK9z8a2FVhYZM= -----END CERTIFICATE-----Generated at Wed Nov 5 04:17:38 2025 by rpki-client