$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e7aedaf3-aafd-3d85-b68f-6e44ab47baf2.roa File: e7aedaf3-aafd-3d85-b68f-6e44ab47baf2.roa (raw, json) Hash identifier: T8yzHL3LMGXWUIYNLEeXptTVEv4ms2yhXKDQ629GyqQ= Subject key identifier: A4:15:20:FB:DC:82:EA:91:3F:A0:C5:4C:6B:7A:2C:C3:B5:B8:BB:15 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584BBE403A92572103350D6A8240 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e7aedaf3-aafd-3d85-b68f-6e44ab47baf2.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 21949 IP address blocks: 207.22.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:3a:92:57:21:03:35:0d:6a:82:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=40e409df-f444-4c4c-8f73-5c68139ab343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0a:0b:62:10:09:88:6e:7b:08:d8:84:9d:9e: 40:8f:e7:fa:a6:b3:31:df:65:c5:de:7e:e0:d6:d6: f9:30:97:54:ad:dd:48:89:8e:f2:b6:79:c8:d2:4d: ca:f7:13:5f:bf:77:5a:c3:88:22:55:e8:de:1a:0e: a4:e2:c9:83:bd:03:7f:a4:3b:77:6e:aa:53:38:da: 06:92:00:54:d0:ad:d9:85:26:86:29:0c:34:36:e9: 00:8a:ae:b1:84:2e:be:cf:91:8b:6a:fb:ee:ce:bf: ba:50:48:6b:1a:d1:3f:dd:92:c5:8f:26:fd:cc:53: 52:8a:1b:0e:b4:0c:fa:33:be:38:4e:e6:23:cb:79: 89:f5:ec:a5:ff:eb:00:47:56:86:8b:12:98:7f:2b: ed:1f:58:4a:1e:f9:88:52:fa:da:87:96:73:0e:60: f1:ea:a5:e2:93:91:ea:05:f1:43:aa:ed:8c:c3:27: 45:e6:75:72:10:68:a4:b4:32:1b:a9:04:e6:3f:15: 05:09:b1:04:db:00:3a:86:f5:d7:30:82:36:ab:a6: 47:39:d6:b0:62:4d:6e:6d:37:74:52:4f:64:b6:cd: d8:6f:07:91:77:2a:09:f1:f8:c4:ed:fa:16:6c:d6: 8e:f8:a8:1a:2a:b6:5b:ec:0d:f1:c7:80:ac:f3:61: ca:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:15:20:FB:DC:82:EA:91:3F:A0:C5:4C:6B:7A:2C:C3:B5:B8:BB:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/e7aedaf3-aafd-3d85-b68f-6e44ab47baf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 207.22.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:23:85:26:1d:8f:0e:9c:34:c4:50:ac:c5:8b:32:cf:d2:8c: 99:fa:1a:3e:f5:d2:f2:e1:34:22:66:00:34:4c:e0:88:9f:b8: d9:88:70:c5:24:c9:cb:fa:96:e4:16:8a:b7:e3:13:2a:e7:aa: 64:f3:2a:ea:b8:8a:ef:73:3a:76:d0:1d:bf:d8:d6:65:e4:37: eb:f8:6e:95:52:e8:67:ff:88:9d:28:66:30:ab:fc:0e:fa:c5: 27:eb:3b:b9:05:ec:25:12:c3:09:27:ae:53:4c:9b:ec:f3:f3: 08:6a:f8:70:ef:06:b0:6b:41:7a:3b:8e:a8:6d:05:d9:73:15: 60:67:45:eb:d9:2c:aa:68:b0:61:95:05:37:56:bd:2a:76:f0: 4f:c2:77:63:28:b2:62:2b:45:6f:fa:19:bb:0f:2f:f2:79:d3: 6c:f1:70:0d:3a:89:aa:47:2c:9f:95:5a:fa:51:5f:be:25:27: 8f:5e:d2:76:a4:44:56:a9:ff:96:73:bd:ba:2f:1b:28:b9:d5: c3:1c:57:6d:a9:ce:2f:8b:71:b6:f3:88:3c:c7:44:9c:81:40: a3:9a:a5:0f:27:25:c0:06:d9:77:cc:c3:96:0d:7b:6d:d2:65: 3e:f5:af:79:1b:1f:7d:b7:f1:f2:98:c3:18:80:cb:22:a2:26: 7c:31:3c:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QDqSVyEDNQ1qgkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NDBlNDA5ZGYtZjQ0NC00YzRjLThmNzMtNWM2ODEzOWFiMzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswoLYhAJiG57CNiEnZ5Aj+f6prMx32XF3n7g 1tb5MJdUrd1IiY7ytnnI0k3K9xNfv3daw4giVejeGg6k4smDvQN/pDt3bqpTONoG kgBU0K3ZhSaGKQw0NukAiq6xhC6+z5GLavvuzr+6UEhrGtE/3ZLFjyb9zFNSihsO tAz6M744TuYjy3mJ9eyl/+sAR1aGixKYfyvtH1hKHvmIUvrah5ZzDmDx6qXik5Hq BfFDqu2MwydF5nVyEGiktDIbqQTmPxUFCbEE2wA6hvXXMII2q6ZHOdawYk1ubTd0 Uk9kts3YbweRdyoJ8fjE7foWbNaO+KgaKrZb7A3xx4Cs82HKYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQVIPvcguqRP6DFTGt6LMO1uLsVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvZTdhZWRhZjMtYWFmZC0z ZDg1LWI2OGYtNmU0NGFiNDdiYWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzxYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMjhSYdjw6cNMRQrMWLMs/SjJn6Gj710vLhNCJmADRM4IifuNmIcMUk ycv6luQWirfjEyrnqmTzKuq4iu9zOnbQHb/Y1mXkN+v4bpVS6Gf/iJ0oZjCr/A76 xSfrO7kF7CUSwwknrlNMm+zz8whq+HDvBrBrQXo7jqhtBdlzFWBnRevZLKposGGV BTdWvSp28E/Cd2MosmIrRW/6GbsPL/J502zxcA06iapHLJ+VWvpRX74lJ49e0nak RFap/5ZzvbovGyi51cMcV22pzi+LcbbziDzHRJyBQKOapQ8nJcAG2XfMw5YNe23S ZT71r3kbH3238fKYwxiAyyKiJnwxPCY= -----END CERTIFICATE-----Generated at Wed Nov 5 06:22:28 2025 by rpki-client