$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/17cb60d5-3b92-3bda-a0e3-032197742f5f.roa File: 17cb60d5-3b92-3bda-a0e3-032197742f5f.roa (raw, json) Hash identifier: 7Iu8OyAiWFbi8nWYpDK/AiYhu6XInSPEQUCvcgSb9Pg= Subject key identifier: 38:7C:0A:40:5C:7C:86:AB:7E:38:45:9E:10:E8:03:AB:0C:FC:7A:0D Certificate issuer: /CN=25ec66d9-6873-4655-8a15-555b07c2edb4 Certificate serial: 010D0C9F4328584B9E07B4A6C8D86814023F2A00 Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/17cb60d5-3b92-3bda-a0e3-032197742f5f.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 400400 IP address blocks: 216.181.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b4:a6:c8:d8:68:14:02:3f:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=61621c38-4daf-4e98-9642-7c952f5ce463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e3:5d:36:74:3c:05:0e:f7:1e:8f:a2:83:2b: c5:62:20:a7:a5:a7:d0:9b:10:9b:9f:21:2f:41:d7: c8:7a:71:b5:1e:4d:70:b5:a7:b1:7a:8d:06:2e:52: f5:8d:b8:55:71:5b:04:70:70:e2:7c:56:ce:02:98: c3:14:1b:f8:99:d4:04:95:3f:a1:15:b1:e7:22:03: 74:1d:c0:b1:0d:17:4c:62:ac:15:7d:0d:fb:b2:73: f6:91:af:08:b8:73:12:ee:f8:99:c1:8c:1f:a9:f5: 5e:9b:33:3a:87:81:b4:30:de:c9:c0:d1:4c:14:5c: 08:ab:4d:89:60:d4:f2:df:5e:b4:0c:27:08:21:de: de:53:66:13:af:dc:82:20:2f:a1:65:64:3c:42:97: 49:34:01:61:f0:90:9c:6c:40:fc:c8:fb:f1:40:36: fc:58:c8:10:6c:0a:04:31:aa:98:3d:e5:6a:fe:c7: 32:e8:89:65:c3:cb:55:01:23:91:24:5d:28:d5:9d: b7:92:bf:d6:3c:0d:7a:c2:3d:52:05:cf:1f:9d:5f: 23:26:be:fe:71:ba:c8:11:c9:9d:57:69:2e:cd:25: fd:ac:c9:2a:1a:05:3c:b0:00:0d:57:76:40:a6:75: 5b:44:62:62:a3:f5:3b:8a:53:3f:98:f8:8d:c9:11: f0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:7C:0A:40:5C:7C:86:AB:7E:38:45:9E:10:E8:03:AB:0C:FC:7A:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/17cb60d5-3b92-3bda-a0e3-032197742f5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl X509v3 Authority Key Identifier: keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer sbgp-ipAddrBlock: critical IPv4: 216.181.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:e9:4c:2d:c7:83:ad:e5:2f:c7:f2:3a:14:70:12:5d:4f:01: a4:06:39:58:76:14:b5:33:53:ae:7e:ff:14:0d:b5:0a:ca:46: fd:96:79:47:15:6f:f1:99:83:92:95:ed:63:9a:00:82:24:5f: 74:50:ef:55:8d:80:e3:5d:1e:35:37:86:d6:21:9b:de:bc:24: 9b:8f:71:d1:82:14:9e:2b:74:0e:0d:db:5c:89:a8:d6:b3:fa: 5a:c6:39:3e:19:f9:ee:35:f3:f3:9d:9e:9c:c7:da:3f:f3:7d: 78:25:90:bd:0b:5e:f6:73:a6:8a:d1:92:cb:fa:ff:00:38:df: 04:4e:49:b1:43:2b:c6:bf:1e:63:d0:72:42:9b:7b:6c:2e:43: 9e:c4:79:03:0d:b2:66:61:08:06:2f:4a:35:3c:d5:fe:a7:b5: 3a:49:83:fe:58:a2:4e:e8:83:31:20:4a:03:18:61:bf:5b:a1: fd:d0:52:92:80:9b:37:2a:e5:c0:7c:f9:3d:69:f4:f9:e2:cc: 7e:ea:07:0f:28:3c:c3:19:45:a2:1b:e5:e9:41:03:78:13:50: e2:54:62:de:35:40:7a:b1:53:69:e1:cc:1c:86:10:5e:c1:13: 25:ff:22:09:0f:0f:68:2f:31:d0:df:c8:99:b3:7a:17:9c:32: af:bc:f4:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7SmyNhoFAI/KgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVlYzY2ZDktNjg3My00NjU1LThhMTUtNTU1YjA3YzJl ZGI0MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NjE2MjFjMzgtNGRhZi00ZTk4LTk2NDItN2M5NTJmNWNlNDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhONdNnQ8BQ73Ho+igyvFYiCnpafQmxCbnyEv QdfIenG1Hk1wtaexeo0GLlL1jbhVcVsEcHDifFbOApjDFBv4mdQElT+hFbHnIgN0 HcCxDRdMYqwVfQ37snP2ka8IuHMS7viZwYwfqfVemzM6h4G0MN7JwNFMFFwIq02J YNTy3160DCcIId7eU2YTr9yCIC+hZWQ8QpdJNAFh8JCcbED8yPvxQDb8WMgQbAoE MaqYPeVq/scy6Illw8tVASORJF0o1Z23kr/WPA16wj1SBc8fnV8jJr7+cbrIEcmd V2kuzSX9rMkqGgU8sAANV3ZApnVbRGJio/U7ilM/mPiNyRHwWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDh8CkBcfIarfjhFnhDoA6sM/HoNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNWVj NjZkOS02ODczLTQ2NTUtOGExNS01NTViMDdjMmVkYjQvMTdjYjYwZDUtM2I5Mi0z YmRhLWEwZTMtMDMyMTk3NzQyZjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjVlYzY2ZDktNjg3My00NjU1LThh MTUtNTU1YjA3YzJlZGI0LzI1ZWM2NmQ5LTY4NzMtNDY1NS04YTE1LTU1NWIwN2My ZWRiNC5jcmwwHwYDVR0jBBgwFoAU4SNp7dNw6XPTAABlwTj8t+2yeQYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNWVjNjZkOS02ODczLTQ2NTUtOGExNS01NTVi MDdjMmVkYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LUCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvpTC3Hg63lL8fyOhRwEl1PAaQGOVh2FLUzU65+/xQNtQrKRv2WeUcV b/GZg5KV7WOaAIIkX3RQ71WNgONdHjU3htYhm968JJuPcdGCFJ4rdA4N21yJqNaz +lrGOT4Z+e418/OdnpzH2j/zfXglkL0LXvZzporRksv6/wA43wROSbFDK8a/HmPQ ckKbe2wuQ57EeQMNsmZhCAYvSjU81f6ntTpJg/5Yok7ogzEgSgMYYb9bof3QUpKA mzcq5cB8+T1p9PnizH7qBw8oPMMZRaIb5elBA3gTUOJUYt41QHqxU2nhzByGEF7B EyX/IgkPD2gvMdDfyJmzehecMq+89Ac= -----END CERTIFICATE-----Generated at Wed Nov 5 10:52:50 2025 by rpki-client