$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/cf78def1-fc0c-3788-99b2-9456d013f91f.roa File: cf78def1-fc0c-3788-99b2-9456d013f91f.roa (raw, json) Hash identifier: isqd5iCGEYzZQ6Bre7pmUcmibBO/XVsAomAwQ66VUSA= Subject key identifier: 61:04:71:3E:EC:47:5D:34:86:A8:3E:8C:C9:E1:26:BE:C2:83:0B:5D Certificate issuer: /CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe Certificate serial: 010D0C9F4328584B6D2C99627493B57539D5D228 Authority key identifier: 18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/cf78def1-fc0c-3788-99b2-9456d013f91f.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 393262 IP address blocks: 150.252.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:99:62:74:93:b5:75:39:d5:d2:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=7e34ac6a-5bbc-4b82-9cbd-40c67f77dc81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4e:51:70:55:2a:32:a6:01:ac:8d:89:cd:91: 27:38:79:d5:bb:d8:f8:28:7c:77:02:a0:f9:96:5d: 90:bb:50:ea:a3:28:60:6f:fa:6f:1e:0a:b0:91:27: bf:47:7f:23:40:e3:02:d3:89:29:9e:15:a3:c4:a0: 19:6e:af:b3:98:c6:40:32:e5:71:96:32:5b:a7:2d: 01:18:7d:9f:54:37:46:45:8a:bf:e1:d4:4c:52:94: 5d:2b:e9:a7:9d:0b:ba:04:00:90:e0:4b:78:13:97: 2d:f8:2d:8a:83:7a:49:f9:80:d6:17:46:8e:d2:61: 24:50:0a:8c:97:e0:fe:ce:ab:d2:68:c7:65:61:08: c6:ad:d8:43:bd:59:e0:12:e0:bc:f8:f8:af:36:45: d8:56:20:eb:02:ba:c8:a0:40:c6:20:1a:26:75:3f: 0e:b4:78:6d:03:3f:99:19:e5:f5:69:8e:d3:de:42: 31:93:19:01:cd:5f:7c:b8:ce:49:b4:1f:c7:db:c5: 0a:3a:25:02:7b:d9:f6:70:22:55:fb:83:02:87:4d: 9d:3f:3f:e4:38:7c:60:ba:34:5e:0c:67:b1:6c:b9: 75:c9:a6:fe:4a:84:5f:be:88:84:9e:ac:d8:f5:69: b3:f5:1e:54:15:6a:70:07:2f:e4:88:31:ce:bf:11: e8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:04:71:3E:EC:47:5D:34:86:A8:3E:8C:C9:E1:26:BE:C2:83:0B:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/cf78def1-fc0c-3788-99b2-9456d013f91f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl X509v3 Authority Key Identifier: keyid:18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer sbgp-ipAddrBlock: critical IPv4: 150.252.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:59:e2:6f:a6:23:c1:af:38:3d:03:4a:8c:27:ff:fc:d8:f1: fa:f6:02:37:d5:fa:5b:20:38:32:87:91:56:a0:df:07:3e:bf: 7d:1a:40:02:b3:d6:90:a0:ca:0c:44:b0:3c:a2:7b:83:7a:8a: c5:35:c6:0b:b4:f1:03:ca:ac:03:1e:61:d9:27:44:91:3f:10: b1:d9:61:7f:a2:cc:ed:be:ad:78:2a:ba:42:bd:75:c2:7a:a6: af:20:5b:58:a2:34:ff:e9:17:39:d9:c5:4d:a3:d5:41:e1:25: 0f:3c:e7:be:70:c2:dc:92:0d:86:2d:ee:f6:2c:9a:a1:16:91: 05:b6:40:ea:45:f2:89:5a:05:52:df:6f:18:6b:e9:2a:f8:ab: ee:ae:56:80:ed:04:a5:db:ee:a5:f9:0d:85:20:1a:92:8f:37: 1b:a4:59:30:e3:e7:2c:55:55:0e:c4:50:94:e4:99:1a:e8:e2: a0:10:24:ad:29:ad:c7:02:d8:93:a4:22:b6:2d:ae:4c:6d:34: 5e:ae:cc:d5:92:35:d8:c8:75:d9:5e:4c:bd:9f:4a:4d:82:32: 25:31:a0:15:8c:53:06:c2:a4:7c:e0:f5:eb:2e:6a:7c:0c:04: 9d:9b:73:0b:6e:26:3b:f5:04:f1:07:0f:36:9a:5d:06:c1:d8: ae:14:fc:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLJlidJO1dTnV0igwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2VjZTA0MDQtODBhOC00NmYyLTkyZWItOGYwYjU1OGM3 ZGJlMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk N2UzNGFjNmEtNWJiYy00YjgyLTljYmQtNDBjNjdmNzdkYzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE5RcFUqMqYBrI2JzZEnOHnVu9j4KHx3AqD5 ll2Qu1Dqoyhgb/pvHgqwkSe/R38jQOMC04kpnhWjxKAZbq+zmMZAMuVxljJbpy0B GH2fVDdGRYq/4dRMUpRdK+mnnQu6BACQ4Et4E5ct+C2Kg3pJ+YDWF0aO0mEkUAqM l+D+zqvSaMdlYQjGrdhDvVngEuC8+PivNkXYViDrArrIoEDGIBomdT8OtHhtAz+Z GeX1aY7T3kIxkxkBzV98uM5JtB/H28UKOiUCe9n2cCJV+4MCh02dPz/kOHxgujRe DGexbLl1yab+SoRfvoiEnqzY9Wmz9R5UFWpwBy/kiDHOvxHoiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEEcT7sR100hqg+jMnhJr7CgwtdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83ZWNl MDQwNC04MGE4LTQ2ZjItOTJlYi04ZjBiNTU4YzdkYmUvY2Y3OGRlZjEtZmMwYy0z Nzg4LTk5YjItOTQ1NmQwMTNmOTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2VjZTA0MDQtODBhOC00NmYyLTky ZWItOGYwYjU1OGM3ZGJlLzdlY2UwNDA0LTgwYTgtNDZmMi05MmViLThmMGI1NThj N2RiZS5jcmwwHwYDVR0jBBgwFoAUGNN/t1DuQwFGJh0iV9F4XA6RX9QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83ZWNlMDQwNC04MGE4LTQ2ZjItOTJlYi04ZjBi NTU4YzdkYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlvzyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJZ4m+mI8GvOD0DSown//zY8fr2AjfV+lsgODKHkVag3wc+v30aQAKz 1pCgygxEsDyie4N6isU1xgu08QPKrAMeYdknRJE/ELHZYX+izO2+rXgqukK9dcJ6 pq8gW1iiNP/pFznZxU2j1UHhJQ88575wwtySDYYt7vYsmqEWkQW2QOpF8olaBVLf bxhr6Sr4q+6uVoDtBKXb7qX5DYUgGpKPNxukWTDj5yxVVQ7EUJTkmRro4qAQJK0p rccC2JOkIrYtrkxtNF6uzNWSNdjIddleTL2fSk2CMiUxoBWMUwbCpHzg9esuanwM BJ2bcwtuJjv1BPEHDzaaXQbB2K4U/Fc= -----END CERTIFICATE-----Generated at Wed Nov 5 11:11:51 2025 by rpki-client