$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/609552ca-a27a-357f-b6b6-3b4483c88884.roa File: 609552ca-a27a-357f-b6b6-3b4483c88884.roa (raw, json) Hash identifier: J/9HIrfQ6JcwetZLNS3qg/Q7I+YrZX52MQnF22G+cRM= Subject key identifier: E6:E3:0D:AA:93:9F:00:91:F2:39:B5:2E:3A:1D:F1:53:B6:79:80:2D Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BB88D26A05B3CCAC16137AD80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/609552ca-a27a-357f-b6b6-3b4483c88884.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 14717 IP address blocks: 207.156.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:26:a0:5b:3c:ca:c1:61:37:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=50e99cdb-4409-489f-9659-2db851ad4510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:34:0f:94:54:aa:57:12:b3:40:25:34:7c:3a: 19:22:c4:55:f5:83:a1:c1:75:9a:36:5c:63:0d:d7: 51:63:79:07:1a:1e:b3:c2:35:97:57:39:ba:3c:ca: 01:66:7e:ee:d8:b2:d8:7a:f3:70:7f:35:48:51:4a: 14:0b:4e:97:74:1a:c7:6b:6d:d9:6b:53:16:ea:e1: 21:6e:df:60:4c:38:2e:4b:07:63:41:4e:79:5f:64: 64:75:8a:83:c8:2f:07:f3:1a:7f:12:3b:85:49:68: 5c:fd:9a:d0:79:a2:2c:dd:01:d0:e6:4b:6e:bc:5b: fc:f6:20:d3:cd:23:0c:f0:c5:c3:ff:6e:09:04:2b: 9c:de:0d:bd:55:a0:f7:cb:ea:0e:1a:bc:e8:f3:6d: 3e:24:77:38:f7:d8:37:6d:c0:ea:0b:5f:f9:57:3b: 3c:cc:24:a1:33:8f:c8:8d:da:0a:73:01:45:99:a5: c6:2f:0a:6b:0d:9b:6c:b5:e0:a4:83:09:2b:2d:c8: c5:a4:c6:e2:99:45:25:46:39:11:fb:54:8f:60:dc: a9:ed:35:ec:22:83:d1:df:6f:ad:9f:1f:81:f5:af: b7:31:bc:3e:05:30:f3:5a:9b:9c:03:4b:d9:c9:ed: 76:94:82:d0:22:2e:71:b9:d7:a3:e6:c5:11:2c:32: 9f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E3:0D:AA:93:9F:00:91:F2:39:B5:2E:3A:1D:F1:53:B6:79:80:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/609552ca-a27a-357f-b6b6-3b4483c88884.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 207.156.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:16:29:89:2e:d9:4b:bf:6b:ca:2b:20:e7:ae:10:04:cc:4b: 51:32:b2:f0:2d:41:60:d7:2c:27:05:a6:e8:56:46:29:29:d5: d4:4b:80:37:53:fa:b7:31:00:68:9a:0d:5d:15:a6:49:ef:d5: 83:61:5f:62:be:92:c1:8a:fa:f9:18:8c:6f:14:9e:d6:a6:ff: 10:7b:71:52:8f:ae:cf:1b:26:f6:ff:24:98:e2:a2:e0:22:11: da:6f:a3:38:33:c5:a1:71:43:6e:66:bf:e3:62:11:52:ac:02: f3:e9:6b:50:f3:b7:66:73:a3:50:f3:3c:c7:62:0f:54:30:2c: ad:90:92:62:88:7e:d2:19:73:f8:c3:5e:42:d5:cf:28:27:7c: 3f:c6:f0:bf:40:4a:d3:b9:ad:14:87:57:70:bf:3d:94:3c:54: 7d:a1:eb:32:7c:ff:6e:f9:84:3a:a6:dd:62:e2:6e:1f:8f:ea: ee:3c:55:6f:cb:68:66:cd:93:b9:ac:cd:b5:0c:37:36:f1:c0: cc:e5:0c:af:e0:a7:db:5b:80:96:3f:bb:1a:ed:11:c1:21:f2: 4a:97:77:2f:e3:20:80:90:55:6e:54:1c:25:75:39:fa:9d:ce: fd:0f:d6:97:e9:e6:a6:ad:6a:ff:d3:0e:20:29:8e:2e:12:23: 44:36:f0:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jSagWzzKwWE3rYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NTBlOTljZGItNDQwOS00ODlmLTk2NTktMmRiODUxYWQ0NTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljQPlFSqVxKzQCU0fDoZIsRV9YOhwXWaNlxj DddRY3kHGh6zwjWXVzm6PMoBZn7u2LLYevNwfzVIUUoUC06XdBrHa23Za1MW6uEh bt9gTDguSwdjQU55X2RkdYqDyC8H8xp/EjuFSWhc/ZrQeaIs3QHQ5ktuvFv89iDT zSMM8MXD/24JBCuc3g29VaD3y+oOGrzo820+JHc499g3bcDqC1/5Vzs8zCShM4/I jdoKcwFFmaXGLwprDZtsteCkgwkrLcjFpMbimUUlRjkR+1SPYNyp7TXsIoPR32+t nx+B9a+3Mbw+BTDzWpucA0vZye12lILQIi5xudej5sURLDKfLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObjDaqTnwCR8jm1Ljod8VO2eYAtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNjA5NTUyY2EtYTI3YS0z NTdmLWI2YjYtM2I0NDgzYzg4ODg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz5zYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYWKYku2Uu/a8orIOeuEATMS1EysvAtQWDXLCcFpuhWRikp1dRLgDdT +rcxAGiaDV0Vpknv1YNhX2K+ksGK+vkYjG8Untam/xB7cVKPrs8bJvb/JJjiouAi EdpvozgzxaFxQ25mv+NiEVKsAvPpa1Dzt2Zzo1DzPMdiD1QwLK2QkmKIftIZc/jD XkLVzygnfD/G8L9AStO5rRSHV3C/PZQ8VH2h6zJ8/275hDqm3WLibh+P6u48VW/L aGbNk7mszbUMNzbxwMzlDK/gp9tbgJY/uxrtEcEh8kqXdy/jIICQVW5UHCV1Ofqd zv0P1pfp5qatav/TDiApji4SI0Q28Fs= -----END CERTIFICATE-----Generated at Wed Nov 5 04:44:11 2025 by rpki-client