$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/fecbe1fc-3e5d-325a-98d9-8f31d7ba2987.roa File: fecbe1fc-3e5d-325a-98d9-8f31d7ba2987.roa (raw, json) Hash identifier: WmK9+PaAfJHWLVwu5mqIKkpFjODZYOfMgdCDJJNIWyo= Subject key identifier: D2:72:F1:D5:4B:A8:2B:C6:71:95:0A:03:6D:64:CD:9A:C2:6D:98:00 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D0782B5F261E32269BF40 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/fecbe1fc-3e5d-325a-98d9-8f31d7ba2987.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 22616 IP address blocks: 209.55.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:07:82:b5:f2:61:e3:22:69:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=a00c52ae-5d2c-4f95-bdc3-86c1d281afd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7f:75:9a:12:d1:8e:7b:5e:bf:92:7d:d1:cc: cc:76:20:5e:d1:c4:53:25:d3:b4:e2:08:ea:a4:02: af:de:ca:69:82:25:3d:14:cc:a2:31:8b:8f:b1:86: fc:6a:df:ca:f5:18:67:8a:a1:0f:14:31:8d:86:4c: 06:f9:f5:aa:75:98:9c:8b:04:d0:66:d2:8b:76:97: 83:25:7f:bf:05:85:9f:b4:41:12:b9:53:61:90:79: 6e:21:c8:b7:a3:f7:8c:d9:55:e3:87:48:38:d2:8b: 9e:7b:73:8d:a0:ed:a9:d7:c6:79:68:a3:1d:40:34: 1b:3b:d5:b7:f7:3b:03:1c:e8:76:28:7e:78:5d:34: d3:93:1e:11:2d:52:90:56:b1:84:de:ce:28:5f:cb: fc:ac:18:78:9d:8e:46:0a:8e:53:12:1d:c2:ec:8d: 4a:fd:97:c3:c3:28:86:98:58:5b:52:e3:85:67:4f: 57:49:45:57:63:d2:80:bc:8a:ec:8d:d3:8f:79:55: 8f:cd:78:a0:33:42:77:fc:4e:4b:08:b0:a2:2e:65: bd:cd:ef:dd:49:cc:f3:02:fa:ad:03:9b:36:98:ac: f9:59:d0:d1:f1:ce:be:7b:8a:06:ac:dc:56:62:93: 3d:42:10:59:78:75:59:73:46:21:64:39:b8:2e:aa: e6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:72:F1:D5:4B:A8:2B:C6:71:95:0A:03:6D:64:CD:9A:C2:6D:98:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/fecbe1fc-3e5d-325a-98d9-8f31d7ba2987.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:e8:78:00:9c:52:28:b9:d1:ca:4f:85:61:27:33:3f:4b:28: 47:55:9e:3f:b6:cb:a9:08:6c:89:df:6b:2a:8d:e5:1d:f6:74: 3c:c8:8a:5c:2f:bd:05:7c:01:04:7f:5b:d7:44:da:d4:f8:69: ca:fa:8f:4e:3e:e1:49:44:96:ae:ef:bf:82:47:69:15:ed:55: be:89:d5:46:b1:4a:5e:c5:1a:f0:d6:ea:86:51:f0:11:60:d6: 1f:77:e4:f7:76:f5:5f:01:da:b5:91:2b:03:9b:11:36:30:b4: ec:57:62:69:a7:b0:6f:f2:c8:bc:87:1d:48:58:00:db:a3:c8: c2:10:a2:90:fe:12:17:56:12:8e:eb:9f:6b:c2:4b:bd:32:60: 47:e7:13:a6:25:75:a1:0a:ce:fe:b9:b7:8f:34:f6:92:7e:e3: ec:b7:bf:57:c7:69:3b:99:07:31:82:53:1a:09:cb:ca:78:a3: eb:76:33:56:57:a0:97:4b:6d:f0:27:0d:8b:15:e4:29:ff:48: fd:95:60:e6:14:db:a1:8b:28:0c:e2:d4:ba:4a:cf:3e:31:bc: 12:7a:0e:c3:d9:59:9c:28:50:87:aa:5b:a2:2a:67:63:c0:39: ae:28:3e:99:81:10:17:d7:35:41:0f:fc:5e:6f:71:e8:e2:90: 30:33:0d:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQeCtfJh4yJpv0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk YTAwYzUyYWUtNWQyYy00Zjk1LWJkYzMtODZjMWQyODFhZmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX91mhLRjntev5J90czMdiBe0cRTJdO04gjq pAKv3sppgiU9FMyiMYuPsYb8at/K9RhniqEPFDGNhkwG+fWqdZiciwTQZtKLdpeD JX+/BYWftEESuVNhkHluIci3o/eM2VXjh0g40ouee3ONoO2p18Z5aKMdQDQbO9W3 9zsDHOh2KH54XTTTkx4RLVKQVrGE3s4oX8v8rBh4nY5GCo5TEh3C7I1K/ZfDwyiG mFhbUuOFZ09XSUVXY9KAvIrsjdOPeVWPzXigM0J3/E5LCLCiLmW9ze/dSczzAvqt A5s2mKz5WdDR8c6+e4oGrNxWYpM9QhBZeHVZc0YhZDm4LqrmcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJy8dVLqCvGcZUKA21kzZrCbZgAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZmVjYmUxZmMtM2U1ZC0z MjVhLTk4ZDktOGYzMWQ3YmEyOTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TelMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAroeACcUii50cpPhWEnMz9LKEdVnj+2y6kIbInfayqN5R32dDzIilwv vQV8AQR/W9dE2tT4acr6j04+4UlElq7vv4JHaRXtVb6J1UaxSl7FGvDW6oZR8BFg 1h935Pd29V8B2rWRKwObETYwtOxXYmmnsG/yyLyHHUhYANujyMIQopD+EhdWEo7r n2vCS70yYEfnE6YldaEKzv65t4809pJ+4+y3v1fHaTuZBzGCUxoJy8p4o+t2M1ZX oJdLbfAnDYsV5Cn/SP2VYOYU26GLKAzi1LpKzz4xvBJ6DsPZWZwoUIeqW6IqZ2PA Oa4oPpmBEBfXNUEP/F5vcejikDAzDYc= -----END CERTIFICATE-----Generated at Wed Nov 5 08:49:17 2025 by rpki-client