$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/c1edb6d0-f1f7-3c46-a32f-e58478e152d8.roa File: c1edb6d0-f1f7-3c46-a32f-e58478e152d8.roa (raw, json) Hash identifier: FHx/8Ha885FjU8COfTNC8c3J16s59nkhMNkWvAyy7VA= Subject key identifier: 60:03:53:C7:EA:85:9E:02:B7:3C:CC:27:4D:E5:17:FA:BF:82:9D:84 Certificate issuer: /CN=d65fef8f-4cd2-4778-9158-f56f30242812 Certificate serial: 010D0C9F4328584B9B3CE598F5BCFAA1ECC0DEC0 Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/c1edb6d0-f1f7-3c46-a32f-e58478e152d8.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 2734 IP address blocks: 204.9.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3c:e5:98:f5:bc:fa:a1:ec:c0:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=5ff86e44-f5f1-4381-8ab9-2696bafd875b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:41:b9:08:30:ad:b8:73:10:28:8f:0e:94:04: ac:99:29:c5:d0:c3:c0:e3:ee:65:78:86:72:69:fd: 8e:c5:89:0e:db:89:3b:57:93:ea:a3:bb:b4:6c:3a: 88:76:32:77:83:02:83:68:1f:c1:a8:8a:ed:b8:b5: 3f:4b:ed:b3:54:b6:5f:db:a5:b0:ee:32:3f:87:5c: 63:5b:d0:ad:31:b3:36:f9:5a:85:5a:2c:14:07:9f: 01:30:16:11:af:74:8e:d0:e6:9a:bd:55:e6:42:5a: 22:c5:b3:0d:ed:5c:26:cf:4f:25:22:de:8b:62:13: 4e:5f:48:27:69:40:df:7b:24:a9:9b:46:d0:ff:8e: f7:df:28:3e:8f:a8:3f:66:08:7a:8f:51:69:1c:26: be:18:d5:e9:7a:2a:8e:83:4d:f3:ca:c0:27:01:61: 9f:bf:25:08:36:0f:48:28:c5:12:12:2a:a3:ff:3b: a3:61:8d:08:fb:7e:e4:ba:61:8f:9a:cb:33:33:2c: 8b:c1:16:03:a2:31:b0:6d:89:ea:83:5e:96:b0:d3: 10:84:48:c4:a1:75:b7:70:50:23:c4:36:ee:b1:0a: 2b:ca:46:f1:0a:77:46:1a:95:b0:a3:0e:68:a6:a4: c7:ff:4f:36:c2:7e:47:ea:a8:a0:56:5c:c9:30:f7: 86:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:03:53:C7:EA:85:9E:02:B7:3C:CC:27:4D:E5:17:FA:BF:82:9D:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/c1edb6d0-f1f7-3c46-a32f-e58478e152d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl X509v3 Authority Key Identifier: keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer sbgp-ipAddrBlock: critical IPv4: 204.9.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:d8:9e:e7:e3:b2:93:d8:cc:8d:5a:03:d7:1d:7d:10:81:58: da:fe:a6:21:02:e9:94:29:26:4b:63:ff:0c:ca:82:66:27:04: c0:67:0a:68:7a:ca:1b:ea:10:b5:a3:71:5d:11:a5:18:71:79: 27:f7:98:0e:1a:f0:c1:3b:d1:c3:75:02:24:54:4e:86:20:50: 0f:e2:f0:af:11:9d:b4:fb:47:95:f4:5b:d2:9f:c4:94:c0:c0: c1:61:f4:dd:ff:5e:da:74:0f:1b:03:43:84:ba:ae:ec:fa:e9: a3:5b:cb:f9:b4:7c:9e:5f:ed:8d:c2:89:9c:7c:5b:15:fa:22: f9:d8:97:30:78:07:69:f2:eb:a1:a6:a6:5b:10:17:a1:88:a6: 11:ac:0c:68:45:01:51:f2:d5:6b:27:33:3c:9e:c4:28:55:bb: 29:fe:38:94:3c:fa:b8:51:05:c2:85:d9:c4:48:1c:40:21:96: f5:7b:47:1c:77:42:ec:7e:af:1a:44:54:44:46:df:5c:0f:df: a6:25:39:7b:6d:2f:b1:68:33:5b:a9:d4:15:16:25:be:06:a7: d5:bc:ed:50:2a:b8:44:b4:f0:28:68:e5:19:3c:6c:9d:1c:73: 46:ec:7e:0b:c9:30:0d:2b:b1:72:7e:56:a8:80:69:a6:e7:96: b7:d5:a6:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPOWY9bz6oezA3sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY1ZmVmOGYtNGNkMi00Nzc4LTkxNTgtZjU2ZjMwMjQy ODEyMB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk NWZmODZlNDQtZjVmMS00MzgxLThhYjktMjY5NmJhZmQ4NzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEG5CDCtuHMQKI8OlASsmSnF0MPA4+5leIZy af2OxYkO24k7V5Pqo7u0bDqIdjJ3gwKDaB/BqIrtuLU/S+2zVLZf26Ww7jI/h1xj W9CtMbM2+VqFWiwUB58BMBYRr3SO0OaavVXmQloixbMN7Vwmz08lIt6LYhNOX0gn aUDfeySpm0bQ/4733yg+j6g/Zgh6j1FpHCa+GNXpeiqOg03zysAnAWGfvyUINg9I KMUSEiqj/zujYY0I+37kumGPmsszMyyLwRYDojGwbYnqg16WsNMQhEjEoXW3cFAj xDbusQorykbxCndGGpWwow5opqTH/082wn5H6qigVlzJMPeGXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGADU8fqhZ4CtzzMJ03lF/q/gp2EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVm ZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZmMzAyNDI4MTIvYzFlZGI2ZDAtZjFmNy0z YzQ2LWEzMmYtZTU4NDc4ZTE1MmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDY1ZmVmOGYtNGNkMi00Nzc4LTkx NTgtZjU2ZjMwMjQyODEyL2Q2NWZlZjhmLTRjZDItNDc3OC05MTU4LWY1NmYzMDI0 MjgxMi5jcmwwHwYDVR0jBBgwFoAUf5hQBZBb45yWyzsCUOY3tAKzSTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVmZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZm MzAyNDI4MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAnIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHYnufjspPYzI1aA9cdfRCBWNr+piEC6ZQpJktj/wzKgmYnBMBnCmh6 yhvqELWjcV0RpRhxeSf3mA4a8ME70cN1AiRUToYgUA/i8K8RnbT7R5X0W9KfxJTA wMFh9N3/Xtp0DxsDQ4S6ruz66aNby/m0fJ5f7Y3CiZx8WxX6IvnYlzB4B2ny66Gm plsQF6GIphGsDGhFAVHy1WsnMzyexChVuyn+OJQ8+rhRBcKF2cRIHEAhlvV7Rxx3 Qux+rxpEVERG31wP36YlOXttL7FoM1up1BUWJb4Gp9W87VAquES08Cho5Rk8bJ0c c0bsfgvJMA0rsXJ+VqiAaabnlrfVpoM= -----END CERTIFICATE-----Generated at Wed Nov 5 09:08:48 2025 by rpki-client