$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d2efd2f1-1fc6-320f-8ef4-c0e3cc4e62f5.roa File: d2efd2f1-1fc6-320f-8ef4-c0e3cc4e62f5.roa (raw, json) Hash identifier: SEsk+S5853mG65TqaZbvB0aN1WwmUUgGoYGSiF/MqcA= Subject key identifier: 6A:9C:2F:C3:0C:EA:FA:10:FC:94:09:90:28:33:A2:7F:99:73:9A:D6 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584BA39D19AF2D5E7BCD949CA200 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d2efd2f1-1fc6-320f-8ef4-c0e3cc4e62f5.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 35997 IP address blocks: 207.67.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:19:af:2d:5e:7b:cd:94:9c:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=7476105d-2f6d-4e5b-a817-182009d12908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b6:70:08:f3:7e:2a:8f:25:19:a3:d8:88:b5: 1c:43:06:c9:48:1b:de:bc:a6:a9:3a:9c:79:d9:eb: dd:55:be:c5:1d:16:8f:b4:1f:c7:12:0f:9a:cb:eb: 07:de:5a:89:a0:18:c5:b3:1e:39:8f:db:16:17:13: d6:6a:33:b2:c4:3f:77:8e:f4:a4:36:91:a5:72:bc: 2e:fb:b1:b6:45:7f:8d:24:c1:7d:10:40:bb:bd:01: c6:15:af:bc:27:00:eb:fd:0f:14:20:ef:09:8a:d6: 82:c4:2c:96:92:40:ab:b0:17:62:10:69:32:4d:8e: 1d:fa:ef:74:ce:2f:a3:c8:4f:99:49:24:e7:2e:eb: 35:6b:bc:a4:bd:9e:18:23:4d:c6:50:f4:40:5d:8a: ef:d2:b7:fa:a8:22:d0:1f:09:94:e2:0c:d3:5e:12: fc:85:50:51:c8:43:c7:86:6d:3a:0f:0c:66:da:20: af:ca:da:3f:22:d7:d1:a4:fd:76:d3:56:b8:3f:a5: 27:e7:cc:79:dd:d1:e5:d9:35:48:ef:1c:28:c4:8c: 30:33:d9:cf:80:3e:c4:bd:0b:8c:5c:2f:4e:77:62: 17:08:ae:9b:9f:e6:4b:ae:69:26:4d:38:1c:8f:f9: 70:9c:dc:51:59:30:e4:6f:8e:cf:1a:0d:72:82:51: 26:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:9C:2F:C3:0C:EA:FA:10:FC:94:09:90:28:33:A2:7F:99:73:9A:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d2efd2f1-1fc6-320f-8ef4-c0e3cc4e62f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 207.67.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:04:0b:9c:d2:3b:30:2a:9c:ca:92:52:3e:99:ad:8a:76:14: 08:8b:cd:a3:ae:3c:7d:d6:1f:1e:ca:52:63:0c:fe:89:63:4b: 33:38:de:81:32:3a:fc:3d:68:db:03:9d:89:94:e5:0f:39:ff: f8:b9:da:67:c2:1f:7d:d2:a1:b6:c1:22:91:5a:1a:0a:00:2d: 33:b8:15:b2:b9:43:84:f3:fa:4a:ac:ce:b2:15:3a:78:6d:cf: c3:bc:22:bc:44:67:93:ad:d9:7d:76:5a:df:dc:e1:80:e5:dc: e0:8c:23:10:68:10:2d:d6:ac:9a:41:3e:9c:22:0b:0c:de:cb: a8:b7:a8:bd:10:cd:3d:65:1f:2d:ad:79:02:0f:cc:6d:34:84: c6:07:f4:96:c2:da:d8:44:85:22:bd:6b:6a:26:91:bd:57:19: dc:35:70:bd:ff:81:25:6e:c7:50:bc:a0:58:7f:4e:e5:3b:64: 3c:29:f6:e7:d6:51:c2:dd:cc:7c:4f:87:11:77:64:b1:0d:27: 69:83:0e:0e:da:34:63:12:f8:5f:a9:f1:22:cd:66:ec:2f:f2: 3e:25:b2:50:d2:b4:a8:8c:c7:32:82:0e:5c:37:60:ec:4b:f3: aa:ad:f6:89:d4:c7:f8:49:07:f3:0e:72:24:11:f8:87:b0:e9: be:48:3f:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnRmvLV57zZScogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NzQ3NjEwNWQtMmY2ZC00ZTViLWE4MTctMTgyMDA5ZDEyOTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbZwCPN+Ko8lGaPYiLUcQwbJSBvevKapOpx5 2evdVb7FHRaPtB/HEg+ay+sH3lqJoBjFsx45j9sWFxPWajOyxD93jvSkNpGlcrwu +7G2RX+NJMF9EEC7vQHGFa+8JwDr/Q8UIO8JitaCxCyWkkCrsBdiEGkyTY4d+u90 zi+jyE+ZSSTnLus1a7ykvZ4YI03GUPRAXYrv0rf6qCLQHwmU4gzTXhL8hVBRyEPH hm06Dwxm2iCvyto/ItfRpP1201a4P6Un58x53dHl2TVI7xwoxIwwM9nPgD7EvQuM XC9Od2IXCK6bn+ZLrmkmTTgcj/lwnNxRWTDkb47PGg1yglEm+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqcL8MM6voQ/JQJkCgzon+Zc5rWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZDJlZmQyZjEtMWZjNi0z MjBmLThlZjQtYzBlM2NjNGU2MmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz0MqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMEC5zSOzAqnMqSUj6ZrYp2FAiLzaOuPH3WHx7KUmMM/oljSzM43oEy Ovw9aNsDnYmU5Q85//i52mfCH33SobbBIpFaGgoALTO4FbK5Q4Tz+kqszrIVOnht z8O8IrxEZ5Ot2X12Wt/c4YDl3OCMIxBoEC3WrJpBPpwiCwzey6i3qL0QzT1lHy2t eQIPzG00hMYH9JbC2thEhSK9a2omkb1XGdw1cL3/gSVux1C8oFh/TuU7ZDwp9ufW UcLdzHxPhxF3ZLENJ2mDDg7aNGMS+F+p8SLNZuwv8j4lslDStKiMxzKCDlw3YOxL 86qt9onUx/hJB/MOciQR+Iew6b5IP1I= -----END CERTIFICATE-----Generated at Tue Nov 4 18:32:18 2025 by rpki-client