$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e1b45f08-1391-33fc-a165-691d82a30f9d.roa File: e1b45f08-1391-33fc-a165-691d82a30f9d.roa (raw, json) Hash identifier: GGnY0LfiSsmpCasLk9IYZEWbb/Ykd64qRFmt1zk0760= Subject key identifier: 21:4E:68:41:75:44:90:CF:3C:81:B1:5C:1C:68:30:AF:7F:47:01:28 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D08EF09FA878CB039DA00 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e1b45f08-1391-33fc-a165-691d82a30f9d.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 209.55.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:08:ef:09:fa:87:8c:b0:39:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=4ad0a743-3c38-4fed-9ea1-5e4f30ac6f66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3c:f2:b4:8c:d5:1e:f0:52:04:c4:db:29:8e: 3d:57:4d:b1:ee:ee:46:76:c2:80:f8:9d:cc:19:cb: a6:44:64:33:a2:e5:a6:80:fb:0f:43:ff:08:72:85: e9:a2:58:41:7a:85:06:07:de:a0:c2:00:88:1b:d1: 22:3f:91:fd:d8:9c:43:59:aa:60:6b:28:44:02:a6: d3:fb:5e:be:b9:68:5d:bf:d2:5f:07:e4:a6:fd:03: 16:cb:2a:f3:ea:63:36:1e:b8:ad:c9:1d:41:7c:cf: 5b:3a:50:eb:5b:fa:05:63:5a:99:09:ee:12:42:aa: d3:df:52:06:b1:58:de:bf:72:db:51:68:36:6a:76: 39:51:35:da:62:d5:f2:72:ae:db:57:45:e4:6d:54: aa:cb:ee:3f:c2:5c:2d:8f:4f:e8:08:04:80:93:8d: 96:31:e3:18:8f:bb:b3:f0:08:5b:4d:e9:26:b8:be: c4:31:63:04:63:7c:23:46:6b:00:de:14:7b:65:b3: 19:29:48:23:e2:78:3a:2a:cc:08:04:a9:9c:dc:e8: a9:02:b2:64:53:ec:a1:05:d5:1a:d7:f4:b6:87:c8: 1c:e5:61:f1:36:f0:97:68:74:7d:b1:b2:c5:7a:43: cd:3e:da:45:a3:c7:84:98:05:06:09:53:b7:07:4b: e0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4E:68:41:75:44:90:CF:3C:81:B1:5C:1C:68:30:AF:7F:47:01:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e1b45f08-1391-33fc-a165-691d82a30f9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:30:be:14:ac:a0:c0:01:ac:ef:af:63:5a:97:41:26:38:6b: f6:68:11:23:66:22:87:3d:39:87:77:57:d0:a2:ea:70:48:ec: 02:40:d3:19:ab:be:0f:3b:d4:de:80:3b:7c:3a:f0:4d:f1:82: 0b:10:9c:81:fb:49:2b:d9:74:4f:05:10:c5:d6:a8:ce:99:5e: da:c8:a4:b3:2d:07:c9:f9:2d:c5:f1:88:86:09:6b:29:f5:7b: 53:07:8c:17:a2:0b:f7:22:7c:77:28:43:03:6e:b5:28:81:99: 05:97:9c:d1:96:4d:ef:9c:54:0c:9f:b5:8b:d3:f0:dd:2a:5d: 79:31:14:f6:76:fc:59:fa:c7:f0:e3:c1:a8:f3:35:eb:4a:a5: 65:bb:55:c6:e7:1e:6a:fa:a9:1a:62:a7:14:30:db:a5:57:8a: 79:c5:42:23:0c:3f:10:ae:ff:2a:f0:2a:ed:d9:ce:79:fd:39: 3e:cb:75:c2:0e:c6:e8:07:28:ec:fe:a9:68:b5:0b:76:79:b0: 63:a5:5d:72:67:03:60:33:73:a6:02:07:ea:e5:25:72:b8:87: 78:96:ee:fd:42:bf:06:37:bb:97:cb:ed:c9:f0:4e:45:54:ee: 57:f2:e6:28:20:3e:6a:22:0e:c9:c0:e1:20:22:69:39:af:c7: e2:80:be:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQjvCfqHjLA52gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk NGFkMGE3NDMtM2MzOC00ZmVkLTllYTEtNWU0ZjMwYWM2ZjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDzytIzVHvBSBMTbKY49V02x7u5GdsKA+J3M GcumRGQzouWmgPsPQ/8IcoXpolhBeoUGB96gwgCIG9EiP5H92JxDWapgayhEAqbT +16+uWhdv9JfB+Sm/QMWyyrz6mM2HrityR1BfM9bOlDrW/oFY1qZCe4SQqrT31IG sVjev3LbUWg2anY5UTXaYtXycq7bV0XkbVSqy+4/wlwtj0/oCASAk42WMeMYj7uz 8AhbTekmuL7EMWMEY3wjRmsA3hR7ZbMZKUgj4ng6KswIBKmc3OipArJkU+yhBdUa 1/S2h8gc5WHxNvCXaHR9sbLFekPNPtpFo8eEmAUGCVO3B0vgOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFOaEF1RJDPPIGxXBxoMK9/RwEoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZTFiNDVmMDgtMTM5MS0z M2ZjLWExNjUtNjkxZDgyYTMwZjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Te7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALwwvhSsoMABrO+vY1qXQSY4a/ZoESNmIoc9OYd3V9Ci6nBI7AJA0xmr vg871N6AO3w68E3xggsQnIH7SSvZdE8FEMXWqM6ZXtrIpLMtB8n5LcXxiIYJayn1 e1MHjBeiC/cifHcoQwNutSiBmQWXnNGWTe+cVAyftYvT8N0qXXkxFPZ2/Fn6x/Dj wajzNetKpWW7VcbnHmr6qRpipxQw26VXinnFQiMMPxCu/yrwKu3Zznn9OT7LdcIO xugHKOz+qWi1C3Z5sGOlXXJnA2Azc6YCB+rlJXK4h3iW7v1CvwY3u5fL7cnwTkVU 7lfy5iggPmoiDsnA4SAiaTmvx+KAvi0= -----END CERTIFICATE-----Generated at Wed Nov 5 06:18:40 2025 by rpki-client