$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/b67e258b-12d7-30b6-ba30-2b61891a6642.roa File: b67e258b-12d7-30b6-ba30-2b61891a6642.roa (raw, json) Hash identifier: 9rMn0BLqJR7Ic3EG1bEbGzJ2OzdouNZYdEMQhC3bg+E= Subject key identifier: 52:7A:57:2E:81:D4:9D:79:64:BD:A7:30:4F:DD:9F:EA:E2:9B:6A:A7 Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F4328584BB2F7A964485D5F7B9393C300 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/b67e258b-12d7-30b6-ba30-2b61891a6642.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 394111 IP address blocks: 207.174.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:a9:64:48:5d:5f:7b:93:93:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=abe54572-84da-4734-b2be-300262401e6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e6:5b:0f:0f:7a:26:90:c2:74:7a:59:cd:55: 1e:24:7e:7f:1d:b4:46:e8:06:2b:c7:e6:a0:29:73: d8:be:33:57:68:02:fc:45:8e:b7:68:00:b6:2a:c3: 30:f5:b0:01:c6:18:1e:61:1d:17:6f:ce:cb:8d:73: 0d:f5:4c:f9:de:52:d0:6e:21:00:2c:66:13:e6:b7: b7:ba:98:1d:a5:6f:3d:24:a6:c5:cf:ec:4a:fa:ed: e8:67:1c:5e:54:ce:b8:c0:da:e9:8e:d0:a7:38:a1: 16:77:fd:cc:26:9c:02:3a:17:f3:d0:29:b0:67:a7: d8:9f:00:57:e9:4b:e5:8c:80:85:37:08:31:c1:d8: 7b:7f:3e:e7:b2:e9:88:0d:2a:f7:63:db:62:78:8c: 00:c6:9a:c7:6f:84:70:d5:6c:be:59:81:a7:e9:5f: e8:f5:f2:7d:67:44:32:34:f9:5a:07:4a:4f:78:50: e5:8e:a2:3b:6d:0e:03:21:c2:8c:66:33:98:4d:4e: 51:b5:d3:51:a9:5e:7b:2b:56:a9:66:78:ea:01:37: 69:8f:22:f2:dd:4f:01:44:c0:2d:14:a8:dd:a5:9a: 45:a9:ae:6b:e1:8d:dd:af:4b:4d:e0:aa:ec:21:70: 14:e3:98:6c:28:a1:de:74:19:57:68:fc:0e:e4:a3: 06:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7A:57:2E:81:D4:9D:79:64:BD:A7:30:4F:DD:9F:EA:E2:9B:6A:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/b67e258b-12d7-30b6-ba30-2b61891a6642.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv4: 207.174.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:18:85:82:01:08:bf:d3:c7:99:de:81:0b:d5:e0:1f:93:68: d6:9a:a3:64:46:dc:49:95:50:96:40:c1:01:bf:87:b4:fe:6b: c0:14:b4:98:25:1e:c5:61:b0:36:ff:83:ce:ef:18:16:b5:de: 51:62:9b:b3:8e:8c:c0:d8:86:c3:53:56:68:22:2e:13:7c:5c: 82:d9:67:37:4e:67:c0:ad:ec:53:0a:ec:ef:36:38:55:9c:b1: 18:6a:c0:c1:4f:02:77:70:2a:47:8a:01:ea:d4:a9:4c:1d:63: 79:3a:fc:1e:48:67:d1:59:b3:b0:15:03:90:42:11:67:bd:d4: bd:7e:5e:f8:38:f3:d5:c3:eb:99:7b:c4:57:c5:b1:d3:0e:d9: 65:41:ba:b5:cd:65:7f:1f:fb:97:56:67:db:93:ed:29:e0:94: af:7f:66:a2:4c:00:a3:fa:7e:a7:88:7a:f8:b8:da:a4:c6:be: 0b:f2:e6:50:b2:c8:49:d7:90:65:d7:8b:e8:5b:28:8d:3d:52: 79:d5:74:fd:b4:ec:08:c3:7c:85:5f:80:d0:22:ff:34:57:b4: 54:50:ab:2d:db:cb:d9:a0:bd:27:d0:e6:34:66:4f:a0:8b:6c: 8f:38:ea:4d:97:ad:36:38:9f:6a:c4:e7:91:e8:15:e9:6a:1b: c2:0f:f2:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy96lkSF1fe5OTwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk YWJlNTQ1NzItODRkYS00NzM0LWIyYmUtMzAwMjYyNDAxZTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuZbDw96JpDCdHpZzVUeJH5/HbRG6AYrx+ag KXPYvjNXaAL8RY63aAC2KsMw9bABxhgeYR0Xb87LjXMN9Uz53lLQbiEALGYT5re3 upgdpW89JKbFz+xK+u3oZxxeVM64wNrpjtCnOKEWd/3MJpwCOhfz0CmwZ6fYnwBX 6UvljICFNwgxwdh7fz7nsumIDSr3Y9tieIwAxprHb4Rw1Wy+WYGn6V/o9fJ9Z0Qy NPlaB0pPeFDljqI7bQ4DIcKMZjOYTU5RtdNRqV57K1apZnjqATdpjyLy3U8BRMAt FKjdpZpFqa5r4Y3dr0tN4KrsIXAU45hsKKHedBlXaPwO5KMGRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJ6Vy6B1J15ZL2nME/dn+rim2qnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvYjY3ZTI1OGItMTJkNy0z MGI2LWJhMzAtMmI2MTg5MWE2NjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz66QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIYhYIBCL/Tx5negQvV4B+TaNaao2RG3EmVUJZAwQG/h7T+a8AUtJgl HsVhsDb/g87vGBa13lFim7OOjMDYhsNTVmgiLhN8XILZZzdOZ8Ct7FMK7O82OFWc sRhqwMFPAndwKkeKAerUqUwdY3k6/B5IZ9FZs7AVA5BCEWe91L1+Xvg489XD65l7 xFfFsdMO2WVBurXNZX8f+5dWZ9uT7SnglK9/ZqJMAKP6fqeIevi42qTGvgvy5lCy yEnXkGXXi+hbKI09UnnVdP207AjDfIVfgNAi/zRXtFRQqy3by9mgvSfQ5jRmT6CL bI846k2XrTY4n2rE55HoFelqG8IP8ls= -----END CERTIFICATE-----Generated at Wed Nov 5 17:49:40 2025 by rpki-client