$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffa2eeaf-fe35-3d4e-a503-d12d8a15e643.roa File: ffa2eeaf-fe35-3d4e-a503-d12d8a15e643.roa (raw, json) Hash identifier: ouqRgxP8wJVdExPNLkwDE8Ba68lZeymwhH7Cjz0VooY= Subject key identifier: 87:1F:B4:79:EE:1D:53:CB:AF:61:6C:2D:46:4D:2A:A1:8A:60:2B:A0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAEC7C67CB106ED8EF05E2E80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffa2eeaf-fe35-3d4e-a503-d12d8a15e643.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 7342 IP address blocks: 209.131.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:c6:7c:b1:06:ed:8e:f0:5e:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=74a7a0dd-108a-4805-834b-9c0c54ba6ce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:57:91:5b:62:4f:33:8e:1c:ce:23:56:d1:bd: 91:18:68:4d:4a:66:1c:10:d3:61:fd:08:b5:57:eb: 35:a6:b8:a1:67:f4:d5:d6:22:79:36:e2:c9:25:f3: a3:e2:79:f9:6e:17:7a:a0:fd:d2:ce:36:82:3c:19: 8e:63:93:49:46:0a:9e:61:11:7d:ec:6d:56:95:cc: dc:72:a6:0e:47:f6:15:d4:8a:49:ae:f8:ec:01:f9: 2d:ae:f1:85:0b:56:07:88:a4:93:a8:82:ef:a4:93: 3d:eb:14:40:a9:a3:f9:62:6b:11:a2:f4:26:e4:52: 82:bd:b5:bc:9b:b9:9f:b3:4b:34:04:b1:3c:bf:b4: 4e:d5:52:59:0b:eb:aa:19:c8:34:89:05:ec:f7:25: c6:15:4d:cf:01:87:ec:5c:d8:4d:9a:bb:cc:0a:3e: 18:9a:5f:c9:00:46:35:44:17:31:1a:a7:9a:a8:8a: 1b:24:8b:fc:26:66:82:3b:b9:e9:44:1e:3b:6f:c8: e4:a2:82:5f:bd:94:8c:8a:2f:2e:f5:f6:73:2e:ec: 9a:89:7f:84:26:3d:83:1a:5b:ee:a4:1d:67:e1:bf: 22:7a:ba:8b:80:f9:f4:20:86:93:c9:0e:02:81:af: 19:57:10:5c:bf:13:41:a2:5e:76:8f:e6:aa:74:37: 6a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1F:B4:79:EE:1D:53:CB:AF:61:6C:2D:46:4D:2A:A1:8A:60:2B:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffa2eeaf-fe35-3d4e-a503-d12d8a15e643.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:5a:c6:a2:f3:1e:94:83:36:8a:bb:f9:5d:60:dd:86:a8:ab: 1d:c8:63:ed:53:8d:dc:00:71:90:6d:b1:ad:e4:67:f2:29:b1: c9:49:d1:4f:c7:4f:55:b6:99:ca:35:c2:1f:75:03:35:02:91: d4:fe:a0:b0:06:b8:86:51:d9:46:37:6f:60:9c:12:0b:b4:47: 51:9d:18:d0:1d:ef:75:7b:bb:1e:84:98:76:71:59:d2:01:d4: 1c:3b:b8:77:04:be:17:c8:ba:9a:9a:2e:dc:d9:77:31:4a:4b: 53:6a:40:a4:63:23:ec:c8:48:ba:d5:67:74:87:a1:ab:9f:4f: 86:a1:1d:0a:2a:66:81:18:b3:58:c8:12:05:2e:95:29:c2:8f: de:10:ec:0d:3b:b4:fe:8f:a1:d4:c5:58:3f:2b:92:3e:09:83: 56:59:fa:84:f0:65:7e:7f:55:7a:e3:9a:c2:a3:aa:62:c0:1f: 05:da:72:91:c5:6f:f3:54:84:8b:a7:05:7d:ee:3e:50:b0:c0: a5:f9:8e:65:44:de:5e:c0:fa:ee:27:6c:bc:08:ee:be:3a:fb: be:cf:09:95:0e:38:cc:05:eb:39:e7:ff:88:a7:5a:34:7c:31: a0:9a:8d:c7:79:8d:a3:fb:bd:af:0d:d9:ef:09:24:68:31:2b: f2:83:7b:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux8Z8sQbtjvBeLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk NzRhN2EwZGQtMTA4YS00ODA1LTgzNGItOWMwYzU0YmE2Y2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VeRW2JPM44cziNW0b2RGGhNSmYcENNh/Qi1 V+s1prihZ/TV1iJ5NuLJJfOj4nn5bhd6oP3SzjaCPBmOY5NJRgqeYRF97G1Wlczc cqYOR/YV1IpJrvjsAfktrvGFC1YHiKSTqILvpJM96xRAqaP5YmsRovQm5FKCvbW8 m7mfs0s0BLE8v7RO1VJZC+uqGcg0iQXs9yXGFU3PAYfsXNhNmrvMCj4Yml/JAEY1 RBcxGqeaqIobJIv8JmaCO7npRB47b8jkooJfvZSMii8u9fZzLuyaiX+EJj2DGlvu pB1n4b8ierqLgPn0IIaTyQ4Cga8ZVxBcvxNBol52j+aqdDdqzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcftHnuHVPLr2FsLUZNKqGKYCugMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmZhMmVlYWYtZmUzNS0z ZDRlLWE1MDMtZDEyZDhhMTVlNjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1axqLzHpSDNoq7+V1g3Yaoqx3IY+1TjdwAcZBtsa3kZ/IpsclJ0U/H T1W2mco1wh91AzUCkdT+oLAGuIZR2UY3b2CcEgu0R1GdGNAd73V7ux6EmHZxWdIB 1Bw7uHcEvhfIupqaLtzZdzFKS1NqQKRjI+zISLrVZ3SHoaufT4ahHQoqZoEYs1jI EgUulSnCj94Q7A07tP6PodTFWD8rkj4Jg1ZZ+oTwZX5/VXrjmsKjqmLAHwXacpHF b/NUhIunBX3uPlCwwKX5jmVE3l7A+u4nbLwI7r46+77PCZUOOMwF6znn/4inWjR8 MaCajcd5jaP7va8N2e8JJGgxK/KDe5Q= -----END CERTIFICATE-----Generated at Wed Nov 5 10:47:52 2025 by rpki-client