$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/79d8abae-3316-3d89-a2d0-f12238f8acbe.roa File: 79d8abae-3316-3d89-a2d0-f12238f8acbe.roa (raw, json) Hash identifier: Mt5cnkCeyKcESMsBGzFmlvpbsIYi8C7TBbFTfIUcQJM= Subject key identifier: BB:5B:BF:35:A2:64:CE:6A:54:1F:5E:8C:4A:D2:6F:37:7B:09:D1:F5 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584B0B76A6BC8371F86DF1DB0700 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/79d8abae-3316-3d89-a2d0-f12238f8acbe.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 25934 IP address blocks: 207.42.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:a6:bc:83:71:f8:6d:f1:db:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=0d97feb0-049d-4674-a3cb-358985faeeab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9d:98:ce:9a:c8:75:c7:b2:37:e3:d0:9f:54: 1d:92:60:00:ac:5b:72:84:ed:96:68:d3:01:51:ae: 25:96:59:f8:24:3a:67:f9:23:35:93:d1:56:77:80: 91:5e:09:ec:11:9a:1b:27:4a:7a:45:0f:63:33:6c: d1:54:ff:14:6a:16:b0:23:84:21:5c:eb:1d:fe:a7: ad:80:27:46:b2:aa:0a:f0:bc:ca:81:4e:62:8a:ee: 6c:a0:a0:79:91:b4:9e:f4:fa:0b:87:7d:0e:91:29: ba:b5:2c:1c:01:c5:37:80:d5:8c:ed:24:00:32:c2: f5:f2:6e:3f:16:93:a8:b4:2d:81:7b:0b:40:9d:1e: 21:c9:5c:0d:2d:bf:1a:59:30:fe:86:e1:9b:3d:80: c7:04:f5:d1:71:59:a6:5e:6d:72:ba:34:fd:3e:66: 40:d0:4a:f6:7e:1c:b6:ce:bf:28:2c:44:21:54:68: d4:3f:e5:8d:d6:22:e5:26:e6:7f:d9:f8:1e:25:e4: aa:d1:6a:3d:3f:e1:ee:1c:f7:4f:56:4a:11:d7:87: c4:70:5d:4d:6b:ed:23:24:58:3f:30:d9:74:e1:49: a5:19:2d:18:c5:32:81:46:7e:d2:da:95:1f:c9:22: d7:96:9b:38:a1:54:a5:01:95:5d:6b:e0:4a:83:69: 84:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:5B:BF:35:A2:64:CE:6A:54:1F:5E:8C:4A:D2:6F:37:7B:09:D1:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/79d8abae-3316-3d89-a2d0-f12238f8acbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 207.42.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:c0:e3:5f:a4:03:f4:7f:b1:72:c0:e7:21:0b:25:f2:52:53: 65:59:ef:c6:fd:b0:02:a9:eb:50:3d:3c:e4:0a:0a:58:96:e0: 6b:fa:e2:4f:0d:83:83:03:5e:56:ec:4c:2d:08:fa:36:15:ce: 8e:66:1d:a8:ec:c0:d9:04:97:26:86:7f:8e:90:c6:2f:9c:2e: 00:2b:b6:e7:22:89:3f:b5:8d:ac:5e:e3:5f:61:86:1a:a4:0f: 9e:48:56:bb:5a:1b:50:80:7c:5a:0c:b5:cc:38:5f:0e:06:b0: 1e:2e:fd:d8:95:05:a8:9f:8f:3d:bb:41:19:7a:05:49:64:fa: 05:03:23:4f:22:b4:b4:ea:78:c1:b1:e9:05:ce:5a:c4:79:1b: a1:ff:df:58:16:02:b7:33:20:d7:b1:a9:aa:05:49:c5:db:a1: 99:7a:26:c6:3e:bd:84:f3:f7:4f:6c:97:6f:c1:17:38:ee:7f: bd:52:23:93:01:c2:dd:b4:2b:6c:d9:29:a6:c0:3f:29:6c:5c: 37:07:e1:d7:a4:ea:b1:6f:0b:20:ac:20:ae:64:6e:22:36:ed: ac:1c:c7:b8:13:b5:fb:db:b6:9d:6b:38:72:09:7a:e2:fa:66: b4:7f:b3:75:4d:82:6a:c6:78:9c:44:6f:9c:25:0f:66:c6:e1: b0:18:9a:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdqa8g3H4bfHbBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk MGQ5N2ZlYjAtMDQ5ZC00Njc0LWEzY2ItMzU4OTg1ZmFlZWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu52YzprIdceyN+PQn1QdkmAArFtyhO2WaNMB Ua4llln4JDpn+SM1k9FWd4CRXgnsEZobJ0p6RQ9jM2zRVP8UahawI4QhXOsd/qet gCdGsqoK8LzKgU5iiu5soKB5kbSe9PoLh30OkSm6tSwcAcU3gNWM7SQAMsL18m4/ FpOotC2BewtAnR4hyVwNLb8aWTD+huGbPYDHBPXRcVmmXm1yujT9PmZA0Er2fhy2 zr8oLEQhVGjUP+WN1iLlJuZ/2fgeJeSq0Wo9P+HuHPdPVkoR14fEcF1Na+0jJFg/ MNl04UmlGS0YxTKBRn7S2pUfySLXlps4oVSlAZVda+BKg2mEJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLtbvzWiZM5qVB9ejErSbzd7CdH1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvNzlkOGFiYWUtMzMxNi0z ZDg5LWEyZDAtZjEyMjM4ZjhhY2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzyooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTA41+kA/R/sXLA5yELJfJSU2VZ78b9sAKp61A9POQKCliW4Gv64k8N g4MDXlbsTC0I+jYVzo5mHajswNkElyaGf46Qxi+cLgArtuciiT+1jaxe419hhhqk D55IVrtaG1CAfFoMtcw4Xw4GsB4u/diVBaifjz27QRl6BUlk+gUDI08itLTqeMGx 6QXOWsR5G6H/31gWArczINexqaoFScXboZl6JsY+vYTz909sl2/BFzjuf71SI5MB wt20K2zZKabAPylsXDcH4dek6rFvCyCsIK5kbiI27awcx7gTtfvbtp1rOHIJeuL6 ZrR/s3VNgmrGeJxEb5wlD2bG4bAYmrU= -----END CERTIFICATE-----Generated at Wed Nov 5 08:37:23 2025 by rpki-client