$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f226ba9b-42bf-3231-b404-5f1a3a8a11a3.roa File: f226ba9b-42bf-3231-b404-5f1a3a8a11a3.roa (raw, json) Hash identifier: 1oDrH0c9sidf4pPxNJ71Ef3NNPxvIwCiTU2aD9yFmdw= Subject key identifier: 8C:E5:80:80:2A:52:9C:9A:26:94:76:A1:16:EB:DA:F9:43:F9:92:79 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584BB5C26DF48204C6F055BED940 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f226ba9b-42bf-3231-b404-5f1a3a8a11a3.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 3561 IP address blocks: 208.138.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:6d:f4:82:04:c6:f0:55:be:d9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=5074e703-c029-40a4-9c5c-2b94b2c7b0bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:21:c6:e7:9d:c2:ba:c2:db:f5:bf:fe:eb:8c: 31:fa:d7:5f:38:0d:be:a9:a1:68:04:b9:1b:7d:dc: 63:8e:43:2b:fe:07:0c:db:18:94:27:35:b8:e1:48: 5d:5d:14:90:20:59:da:85:24:8c:a3:73:1c:cb:61: cc:06:c8:1f:5e:cd:29:9e:4f:44:8e:c5:29:9f:ce: 4d:95:7a:67:3b:f3:2e:91:12:72:d5:e9:17:81:94: 44:df:52:ef:6b:6e:f5:f2:22:fd:d3:8f:41:4c:d1: 52:be:7a:5f:bd:e7:69:bf:22:e4:57:e7:2a:80:b1: 33:b1:aa:43:c7:19:86:8a:e4:68:44:d9:5d:b4:91: 04:5c:eb:ff:af:10:15:db:8c:35:5f:46:f7:95:ca: 8f:09:60:33:51:30:c3:53:d0:df:6a:cc:64:e8:c3: 67:3a:b8:a3:2a:77:77:c0:60:f2:63:01:21:c0:9b: 51:dd:50:68:42:e3:f7:8b:1e:1b:9a:6e:0a:a4:63: 57:0b:00:b8:6f:79:7a:46:6d:2a:ce:83:16:6c:20: 1d:a4:ef:d2:23:7f:50:fe:72:ee:dc:a0:9e:37:0b: 41:66:9f:1b:4d:dc:1b:17:3f:36:3b:49:13:06:df: 41:10:f4:b6:28:fd:de:49:da:c4:0f:68:c8:2c:d6: 14:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E5:80:80:2A:52:9C:9A:26:94:76:A1:16:EB:DA:F9:43:F9:92:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f226ba9b-42bf-3231-b404-5f1a3a8a11a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 208.138.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:03:a1:ed:ac:1c:05:69:e6:12:21:fa:91:af:e1:bd:65:8b: 46:56:bc:2c:e3:bd:aa:62:84:72:98:e8:37:4d:0a:f7:be:39: eb:11:ca:66:fe:0e:00:4d:2a:73:d7:03:0a:7c:a5:cf:8a:23: 9c:34:08:88:3e:f5:45:bf:83:fb:7a:38:3f:cd:3a:c1:dd:38: e3:b9:cc:ac:2e:2e:a4:db:61:2c:7f:7d:25:71:ec:2b:4d:e2: 7e:57:37:3c:15:fc:a2:fe:c3:ce:5f:e3:c5:32:0f:b4:f1:25: da:93:8b:67:67:75:80:72:0e:80:2d:6e:f0:e9:ad:6b:f3:2a: c7:9f:da:9c:85:88:93:e4:03:d3:c3:05:8c:61:6d:34:26:f2: e3:be:32:51:c4:a6:67:b0:b9:e8:5a:5f:c8:7c:d0:89:ac:d6: 0a:02:1a:b5:0b:f5:8c:b0:b6:e1:c4:ff:58:e4:5a:ba:63:59: ae:22:31:e6:35:20:c9:e2:0c:58:9f:a0:fc:24:83:4a:ac:3e: ee:b1:09:96:25:64:31:88:7a:ab:41:aa:b0:2a:99:3a:2c:55: 17:7c:55:24:13:c7:ff:dc:b1:27:6f:33:8b:2a:a9:0e:01:81: 0a:ef:20:32:ad:78:67:a9:a2:58:01:72:57:95:dd:dd:5a:9d: 46:6c:f9:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wm30ggTG8FW+2UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk NTA3NGU3MDMtYzAyOS00MGE0LTljNWMtMmI5NGIyYzdiMGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSHG553CusLb9b/+64wx+tdfOA2+qaFoBLkb fdxjjkMr/gcM2xiUJzW44UhdXRSQIFnahSSMo3Mcy2HMBsgfXs0pnk9EjsUpn85N lXpnO/MukRJy1ekXgZRE31Lva2718iL9049BTNFSvnpfvedpvyLkV+cqgLEzsapD xxmGiuRoRNldtJEEXOv/rxAV24w1X0b3lcqPCWAzUTDDU9Dfasxk6MNnOrijKnd3 wGDyYwEhwJtR3VBoQuP3ix4bmm4KpGNXCwC4b3l6Rm0qzoMWbCAdpO/SI39Q/nLu 3KCeNwtBZp8bTdwbFz82O0kTBt9BEPS2KP3eSdrED2jILNYUtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzlgIAqUpyaJpR2oRbr2vlD+ZJ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvZjIyNmJhOWItNDJiZi0z MjMxLWI0MDQtNWYxYTNhOGExMWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0IqgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8Doe2sHAVp5hIh+pGv4b1li0ZWvCzjvapihHKY6DdNCve+OesRymb+ DgBNKnPXAwp8pc+KI5w0CIg+9UW/g/t6OD/NOsHdOOO5zKwuLqTbYSx/fSVx7CtN 4n5XNzwV/KL+w85f48UyD7TxJdqTi2dndYByDoAtbvDprWvzKsef2pyFiJPkA9PD BYxhbTQm8uO+MlHEpmewuehaX8h80Ims1goCGrUL9YywtuHE/1jkWrpjWa4iMeY1 IMniDFifoPwkg0qsPu6xCZYlZDGIeqtBqrAqmTosVRd8VSQTx//csSdvM4sqqQ4B gQrvIDKteGepolgBcleV3d1anUZs+T0= -----END CERTIFICATE-----Generated at Tue Nov 4 23:34:28 2025 by rpki-client