$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a09f29d9-8f3a-3838-8ace-3ee93d7eb3a1.roa File: a09f29d9-8f3a-3838-8ace-3ee93d7eb3a1.roa (raw, json) Hash identifier: zQhKNITy7LX3/2UjpMvIs+n+jpbgblpwk48aCSAn7+k= Subject key identifier: 07:BE:6A:04:38:7F:4E:0C:82:A2:45:F2:01:19:6E:98:F6:0D:99:89 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584BB45D3B53D268F61E1826E580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a09f29d9-8f3a-3838-8ace-3ee93d7eb3a1.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 7342 IP address blocks: 216.87.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:3b:53:d2:68:f6:1e:18:26:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=8d1b3b86-bb00-4c3c-9ef2-3f2accfea4f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7f:68:6a:eb:5b:f7:99:1f:e5:f8:ec:48:2a: 13:1b:f9:d5:5a:0e:29:28:d3:26:1a:8a:f8:82:d8: ef:53:29:2e:b4:d5:bf:41:c8:b2:77:4c:4d:48:0f: da:41:b1:5d:39:3c:d8:6b:d3:88:75:f1:07:ff:46: c9:b1:5f:d1:61:2a:b9:8a:e1:05:f7:70:cd:8e:fe: cc:20:1a:62:33:47:62:e5:ff:2d:c6:f9:44:63:e3: f1:83:e5:f2:45:9a:e3:94:b0:df:e6:db:17:b7:08: ef:92:7d:f3:76:05:01:63:b6:a9:60:0d:a1:9d:3a: fe:17:d6:9f:51:1a:9d:8e:03:e5:9b:d7:12:df:20: e9:ca:db:9b:e9:47:6a:e2:3d:21:86:ba:1c:b3:eb: 5d:c4:fa:e8:5e:15:4a:90:c9:e6:2f:3f:a6:d7:c1: 8e:d3:2f:39:55:89:53:d2:bd:03:e2:34:04:95:bb: cb:e7:06:21:61:c2:32:f8:51:27:93:ac:be:29:55: 9b:9b:c1:46:95:bc:d0:f7:38:c3:e8:77:cd:ff:ec: 2c:40:b9:af:fd:36:15:8d:18:6d:74:61:68:9f:05: b6:0e:40:f0:65:4c:48:14:54:93:42:a5:80:63:62: 7c:cc:f7:f7:8c:a3:82:a4:b0:6f:57:11:8a:db:93: 3e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BE:6A:04:38:7F:4E:0C:82:A2:45:F2:01:19:6E:98:F6:0D:99:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a09f29d9-8f3a-3838-8ace-3ee93d7eb3a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:c8:09:ec:eb:14:50:ce:c0:7b:60:78:d0:1e:d3:fe:1d:81: 9f:46:a4:66:37:c6:54:5f:f3:63:cc:3f:1d:86:b2:08:b3:ef: 14:34:71:3f:0e:64:25:57:69:70:b3:2b:58:72:a4:cc:67:08: bb:07:57:75:5c:8b:05:ea:00:ec:54:df:6a:c7:e2:b6:c2:64: 11:47:3e:65:17:bc:b9:65:78:a1:67:5f:b9:78:39:54:d6:81: f2:e5:62:15:f5:23:a1:52:22:87:93:39:de:91:2b:8e:1d:b2: b8:73:26:cd:76:0d:af:57:66:20:e8:89:9f:e2:cb:1b:53:2e: 9f:b6:30:10:b1:76:8b:d0:ce:27:63:22:82:8d:01:5a:10:14: 3a:36:f1:ed:94:fe:b6:4d:19:af:3e:59:31:31:b6:fe:31:93: 24:8a:16:f7:5f:22:3d:cd:43:b5:4c:f7:88:31:6b:a2:ce:6c: 12:68:eb:90:ac:43:4a:40:df:8c:46:84:85:d7:8c:0b:6c:bf: aa:04:c4:55:89:73:dd:d2:a0:0a:f3:c4:d0:4d:1a:0d:f6:80: 28:db:7d:60:18:29:ac:c1:af:56:f3:93:9e:b8:5a:f9:ef:a3: d1:81:8c:c6:f9:c4:ad:80:0f:3d:5b:c4:9e:9b:d2:3c:97:47: 23:b6:19:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XTtT0mj2Hhgm5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk OGQxYjNiODYtYmIwMC00YzNjLTllZjItM2YyYWNjZmVhNGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA239oautb95kf5fjsSCoTG/nVWg4pKNMmGor4 gtjvUykutNW/Qciyd0xNSA/aQbFdOTzYa9OIdfEH/0bJsV/RYSq5iuEF93DNjv7M IBpiM0di5f8txvlEY+Pxg+XyRZrjlLDf5tsXtwjvkn3zdgUBY7apYA2hnTr+F9af URqdjgPlm9cS3yDpytub6Udq4j0hhrocs+tdxProXhVKkMnmLz+m18GO0y85VYlT 0r0D4jQElbvL5wYhYcIy+FEnk6y+KVWbm8FGlbzQ9zjD6HfN/+wsQLmv/TYVjRht dGFonwW2DkDwZUxIFFSTQqWAY2J8zPf3jKOCpLBvVxGK25M+vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAe+agQ4f04MgqJF8gEZbpj2DZmJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTA5ZjI5ZDktOGYzYS0z ODM4LThhY2UtM2VlOTNkN2ViM2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FeMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHICezrFFDOwHtgeNAe0/4dgZ9GpGY3xlRf82PMPx2Gsgiz7xQ0cT8O ZCVXaXCzK1hypMxnCLsHV3VciwXqAOxU32rH4rbCZBFHPmUXvLlleKFnX7l4OVTW gfLlYhX1I6FSIoeTOd6RK44dsrhzJs12Da9XZiDoiZ/iyxtTLp+2MBCxdovQzidj IoKNAVoQFDo28e2U/rZNGa8+WTExtv4xkySKFvdfIj3NQ7VM94gxa6LObBJo65Cs Q0pA34xGhIXXjAtsv6oExFWJc93SoArzxNBNGg32gCjbfWAYKazBr1bzk564Wvnv o9GBjMb5xK2ADz1bxJ6b0jyXRyO2Gfk= -----END CERTIFICATE-----Generated at Wed Nov 5 00:59:17 2025 by rpki-client