$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e38cb166-b516-3781-a90d-5e5fdfd40689.roa File: e38cb166-b516-3781-a90d-5e5fdfd40689.roa (raw, json) Hash identifier: W2uk0dCZrccWYsRUulBt2SxlV7zyLZatBHoZv9TQcs8= Subject key identifier: F3:98:0C:42:DB:C8:07:0B:C6:1C:7A:FF:B2:9A:5A:17:56:91:83:07 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D054A0DB0CAF51C619580 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e38cb166-b516-3781-a90d-5e5fdfd40689.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 62044 IP address blocks: 209.55.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:05:4a:0d:b0:ca:f5:1c:61:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=d428933a-08ee-48ad-9f83-7db07ee7aa6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:55:ab:a8:b7:59:4d:04:7f:e1:83:86:42:1d: 45:d9:72:25:b7:e9:2b:dc:d9:81:65:67:8e:61:10: 0c:3a:9a:44:41:9f:a7:46:ae:13:5c:a1:00:5b:6d: 84:07:cf:b1:bf:5d:dc:ae:8f:33:20:51:ef:a3:20: 4a:e2:60:0e:5c:e5:50:16:b1:29:0d:02:67:67:01: 20:f6:fb:e1:8d:35:14:61:52:9e:c3:ef:75:be:c1: 66:99:47:28:b2:8a:e3:52:98:52:07:68:54:06:64: 48:24:b8:df:01:ca:06:c2:84:b4:14:8d:85:4c:ed: 14:50:68:62:8f:a0:66:85:a0:ae:47:b5:5a:8e:69: 51:b1:c3:02:02:02:13:df:44:eb:b6:00:ea:cd:d3: f6:9c:5d:78:df:83:3f:91:33:65:08:b9:79:19:5d: 06:f8:1a:10:d6:ed:a0:e3:8f:b0:37:ab:38:93:29: 69:d4:08:38:ad:98:1b:a3:b5:c5:fa:2c:5e:1a:98: b4:e6:62:3a:37:2e:59:f1:b5:8b:3e:d9:50:62:cd: 08:aa:3e:46:12:9b:d7:60:e5:42:12:ad:d8:bb:2f: ba:6b:c6:58:46:d4:c2:87:87:74:02:25:95:b8:f9: 90:9c:49:27:c5:a8:72:d7:ef:c1:19:57:58:14:d7: c5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:98:0C:42:DB:C8:07:0B:C6:1C:7A:FF:B2:9A:5A:17:56:91:83:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e38cb166-b516-3781-a90d-5e5fdfd40689.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:92:52:ca:3d:45:4c:54:95:5f:17:40:52:1d:3c:f9:ad:6d: 6d:65:b9:52:51:bf:5c:1c:fa:d7:db:16:56:af:59:9e:7e:26: fa:b6:6a:62:d9:cd:b9:15:07:3c:34:75:ad:8c:ec:68:65:8f: d5:23:4f:01:2a:72:bf:59:fc:42:40:ed:fd:46:1c:d1:16:e5: 37:fc:8d:90:12:3a:6a:3f:79:64:2e:83:b2:53:64:8b:46:60: bb:aa:64:fe:3a:2c:94:df:3e:65:6a:89:73:0e:d0:3f:be:52: e7:53:ea:26:da:32:73:4c:99:4b:d2:9f:d1:e4:ef:94:f5:81: cf:28:bf:75:65:f8:60:7d:45:e3:73:1c:86:b9:51:5d:ab:ae: 7c:4d:71:b5:6e:b7:39:02:00:8e:23:d7:85:30:2d:b0:db:9d: 23:e1:27:13:3f:b2:ce:3b:28:41:2d:58:e7:a8:90:c7:9f:25: 95:c6:44:dc:2f:a7:9f:4c:7a:98:a5:0d:ea:68:89:69:71:06: a6:55:d4:fc:c7:1e:50:43:64:e9:47:49:e4:c7:22:45:02:5e: 0c:bd:3e:83:0f:bc:a9:50:d7:0b:ce:9a:9f:44:89:0f:7f:82: 59:5f:27:fb:1a:d9:3d:d2:e4:98:b0:94:1b:aa:34:de:70:ac: 98:d7:7f:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQVKDbDK9RxhlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk ZDQyODkzM2EtMDhlZS00OGFkLTlmODMtN2RiMDdlZTdhYTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFWrqLdZTQR/4YOGQh1F2XIlt+kr3NmBZWeO YRAMOppEQZ+nRq4TXKEAW22EB8+xv13cro8zIFHvoyBK4mAOXOVQFrEpDQJnZwEg 9vvhjTUUYVKew+91vsFmmUcosorjUphSB2hUBmRIJLjfAcoGwoS0FI2FTO0UUGhi j6BmhaCuR7VajmlRscMCAgIT30TrtgDqzdP2nF1434M/kTNlCLl5GV0G+BoQ1u2g 44+wN6s4kylp1Ag4rZgbo7XF+ixeGpi05mI6Ny5Z8bWLPtlQYs0Iqj5GEpvXYOVC Eq3Yuy+6a8ZYRtTCh4d0AiWVuPmQnEknxahy1+/BGVdYFNfFGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOYDELbyAcLxhx6/7KaWhdWkYMHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZTM4Y2IxNjYtYjUxNi0z NzgxLWE5MGQtNWU1ZmRmZDQwNjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGSUso9RUxUlV8XQFIdPPmtbW1luVJRv1wc+tfbFlavWZ5+Jvq2amLZ zbkVBzw0da2M7Ghlj9UjTwEqcr9Z/EJA7f1GHNEW5Tf8jZASOmo/eWQug7JTZItG YLuqZP46LJTfPmVqiXMO0D++UudT6ibaMnNMmUvSn9Hk75T1gc8ov3Vl+GB9ReNz HIa5UV2rrnxNcbVutzkCAI4j14UwLbDbnSPhJxM/ss47KEEtWOeokMefJZXGRNwv p59MepilDepoiWlxBqZV1PzHHlBDZOlHSeTHIkUCXgy9PoMPvKlQ1wvOmp9EiQ9/ gllfJ/sa2T3S5JiwlBuqNN5wrJjXf+A= -----END CERTIFICATE-----Generated at Wed Nov 5 09:23:17 2025 by rpki-client