$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d8593efc-dba6-305b-977f-f00fc4046752.roa File: d8593efc-dba6-305b-977f-f00fc4046752.roa (raw, json) Hash identifier: gzClPPv1+Rxdy4qNFQu1pBWtfshy2UWyJny+evh50Uo= Subject key identifier: 01:8A:10:0E:EB:2D:B4:FE:F3:A0:74:41:22:7B:17:41:AA:99:A8:F3 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D075F7ACE1210F4541240 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d8593efc-dba6-305b-977f-f00fc4046752.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 209.55.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:07:5f:7a:ce:12:10:f4:54:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=70755d07-3122-40e9-ac40-941f3dd0e7a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0f:ab:b5:c4:0e:5d:ee:d8:f0:eb:f3:b2:59: ce:df:ce:0a:79:a8:aa:55:7a:5d:03:9d:96:27:68: 26:93:91:18:62:20:41:8e:0b:67:68:bb:16:3a:14: cb:c1:60:42:f4:ce:fd:73:ab:31:0c:88:82:80:3f: ce:27:6a:df:55:1d:c9:de:1c:67:bc:9b:01:15:04: 45:fb:e7:c0:ec:64:da:8c:f1:da:f1:23:90:2c:83: 1b:2b:67:43:aa:f8:c6:75:9f:60:e9:87:06:f1:be: a7:fd:3e:58:09:bf:9b:02:cc:4b:75:0f:d6:17:36: e6:2f:44:ab:09:28:2c:97:ed:36:76:cf:03:dc:0b: 7a:39:4e:cb:cc:42:54:86:7a:14:25:58:8f:95:82: 9b:77:cd:a9:25:ef:6f:19:c8:27:8f:a4:1c:80:66: f9:56:25:51:76:2f:5e:a9:ed:a7:21:39:e8:97:50: 0d:c2:29:81:ed:2d:ea:ba:8e:29:4e:9f:54:f3:5f: 0e:55:68:66:85:40:c4:81:54:95:75:1b:ff:a2:e6: b7:5c:e6:bf:84:4f:11:e7:3a:99:f8:71:85:ea:f3: 13:5b:37:98:40:72:30:77:c7:4c:06:87:b8:74:d1: 3d:b7:fc:2f:ed:f9:cd:b9:e9:32:6f:42:cc:6d:fb: 10:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:8A:10:0E:EB:2D:B4:FE:F3:A0:74:41:22:7B:17:41:AA:99:A8:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d8593efc-dba6-305b-977f-f00fc4046752.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:02:c0:58:bc:5a:99:01:1a:83:0e:89:d2:46:e7:98:34:c8: 18:7d:7e:a4:4d:4c:e9:15:a5:65:c7:f6:85:c6:ea:60:b4:08: a3:7b:73:c5:75:f6:09:b7:e1:2b:31:67:59:ff:d9:a2:b1:a9: 94:cc:c1:af:02:a7:6a:dd:20:9b:49:27:00:e5:54:5a:ed:23: 4e:69:51:c4:c5:07:80:bc:08:db:b9:14:5b:7b:0e:a9:5b:05: a1:80:f5:28:78:0c:9c:6f:89:55:b6:14:27:47:12:66:32:53: 30:7c:5f:be:5e:51:98:c1:66:eb:12:08:44:bf:fa:97:83:eb: 4d:f9:48:58:54:54:1f:c8:82:cd:c9:f7:65:9e:ed:06:f7:46: 64:07:45:da:23:2b:44:45:9c:2d:6b:c9:7c:6e:ef:c9:9e:dd: 65:09:9f:b5:83:8b:24:89:09:e1:af:62:f3:e2:c5:9f:88:57: e9:54:0e:0a:60:48:04:67:e6:10:85:f8:79:41:1e:10:13:b9: 85:8a:f8:b3:55:01:cd:eb:77:7f:5f:63:14:a9:0a:28:31:17: 89:96:29:8f:84:29:f3:d7:5e:6c:e7:f7:16:d2:a4:b8:02:21: f8:6d:4f:bc:b2:dd:5e:63:9d:9a:ed:4a:ba:d7:d5:3a:7f:f4: a9:c6:63:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQdfes4SEPRUEkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk NzA3NTVkMDctMzEyMi00MGU5LWFjNDAtOTQxZjNkZDBlN2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ+rtcQOXe7Y8OvzslnO384KeaiqVXpdA52W J2gmk5EYYiBBjgtnaLsWOhTLwWBC9M79c6sxDIiCgD/OJ2rfVR3J3hxnvJsBFQRF ++fA7GTajPHa8SOQLIMbK2dDqvjGdZ9g6YcG8b6n/T5YCb+bAsxLdQ/WFzbmL0Sr CSgsl+02ds8D3At6OU7LzEJUhnoUJViPlYKbd82pJe9vGcgnj6QcgGb5ViVRdi9e qe2nITnol1ANwimB7S3quo4pTp9U818OVWhmhUDEgVSVdRv/oua3XOa/hE8R5zqZ +HGF6vMTWzeYQHIwd8dMBoe4dNE9t/wv7fnNuekyb0LMbfsQvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGKEA7rLbT+86B0QSJ7F0GqmajzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZDg1OTNlZmMtZGJhNi0z MDViLTk3N2YtZjAwZmM0MDQ2NzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TejMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkCwFi8WpkBGoMOidJG55g0yBh9fqRNTOkVpWXH9oXG6mC0CKN7c8V1 9gm34SsxZ1n/2aKxqZTMwa8Cp2rdIJtJJwDlVFrtI05pUcTFB4C8CNu5FFt7Dqlb BaGA9Sh4DJxviVW2FCdHEmYyUzB8X75eUZjBZusSCES/+peD6035SFhUVB/Igs3J 92We7Qb3RmQHRdojK0RFnC1ryXxu78me3WUJn7WDiySJCeGvYvPixZ+IV+lUDgpg SARn5hCF+HlBHhATuYWK+LNVAc3rd39fYxSpCigxF4mWKY+EKfPXXmzn9xbSpLgC IfhtT7yy3V5jnZrtSrrX1Tp/9KnGY/0= -----END CERTIFICATE-----Generated at Wed Nov 5 04:13:31 2025 by rpki-client