$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f907d1cc-b7bc-3a0d-8bd9-674985992bc7.roa File: f907d1cc-b7bc-3a0d-8bd9-674985992bc7.roa (raw, json) Hash identifier: MXTo/BgyP/dF0TNle7LXxvDsnVXQnWgdBXim/P/ikPQ= Subject key identifier: 88:2F:97:36:63:77:16:CA:FB:31:EB:C3:7C:93:EB:2B:BD:F6:CB:47 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584B9E07B082FA31FFEBB62844C0 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f907d1cc-b7bc-3a0d-8bd9-674985992bc7.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 25899 IP address blocks: 209.237.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b0:82:fa:31:ff:eb:b6:28:44:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=489442d0-e4d5-4e35-87b2-a5253bf0f074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4b:11:4c:05:d7:96:48:3d:62:de:43:52:3a: 6c:2e:07:66:94:91:c1:20:aa:d6:6a:fe:7f:ab:a7: 35:58:1b:c0:b7:d4:a3:11:49:4b:eb:3c:87:3f:35: 70:fc:ea:57:01:db:ff:88:13:00:c2:30:44:b3:73: cf:80:f4:f3:38:ee:d9:b0:2d:0c:5a:cb:f3:63:b4: b6:9b:e5:cf:98:28:37:49:7a:9d:c8:c1:c6:85:e0: b1:7e:0a:f1:35:f6:a4:3a:32:e1:95:e7:ea:46:bd: d6:cc:bb:c4:76:50:75:7f:47:91:0b:6e:d6:8e:19: ca:9c:31:6d:0d:47:d4:51:f1:c0:92:40:84:db:6a: 50:7e:dc:c1:91:6e:c9:03:02:eb:50:a4:6e:12:3f: f1:bd:95:e2:cd:9b:e4:80:51:de:11:1d:ce:b2:0c: 77:f4:be:27:53:31:ec:45:81:54:a1:d2:a2:85:ed: 9f:bf:6e:b0:aa:1f:1c:a5:84:3f:63:65:10:4c:07: 19:10:54:64:7c:c6:e6:b5:0e:fe:3f:a3:84:29:10: b7:ec:88:27:9b:84:38:fc:84:18:82:8d:56:66:08: f0:b2:a8:91:6d:d1:cc:c8:ba:8c:99:f9:2e:3c:40: ff:06:06:ae:e2:97:dc:d1:f0:37:ed:d3:19:d9:38: b2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2F:97:36:63:77:16:CA:FB:31:EB:C3:7C:93:EB:2B:BD:F6:CB:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f907d1cc-b7bc-3a0d-8bd9-674985992bc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:87:c5:ef:c3:43:c8:14:7e:09:17:51:4d:d4:aa:9e:ac:f6: 71:46:49:b8:c7:05:ae:22:cd:19:0c:2f:37:6d:80:bb:ae:bb: 4e:db:f5:a4:9d:7f:58:ed:bb:af:a0:fc:aa:25:2f:66:fb:7b: 33:4e:1a:dc:ca:18:69:0e:02:3b:4c:47:4b:ed:7b:41:78:5b: e2:ed:d9:8f:22:42:56:33:a8:13:4b:75:5e:22:25:b5:de:96: 22:48:37:79:4b:6f:b0:bf:a4:b0:d4:05:c6:48:ff:dd:c4:e6: 85:b2:15:25:35:f0:c9:e3:4c:4c:43:6e:4c:e7:6a:0e:ae:2c: 28:09:a2:96:cc:97:99:80:54:16:b7:80:f6:0c:e0:52:c6:de: d7:19:9d:2d:5a:e4:c2:77:c4:a1:67:0d:0d:db:0a:fa:9a:ff: 96:03:10:de:b3:d7:0f:b5:76:4d:89:04:b2:5f:4d:a3:0b:a9: c5:8f:18:0b:10:bd:a2:4f:9b:9d:ef:96:8a:0f:6b:fd:84:63: 51:c4:7a:4a:27:b6:c2:80:95:a8:c5:4c:fa:dc:5b:f4:39:a1: 37:f9:99:41:ce:43:28:3f:52:d8:ec:84:da:26:e0:36:f1:de: 5f:03:25:b0:02:c7:30:7d:0c:b6:a9:8d:db:6c:27:5d:ad:34: 2a:17:8f:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7CC+jH/67YoRMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NDg5NDQyZDAtZTRkNS00ZTM1LTg3YjItYTUyNTNiZjBmMDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEsRTAXXlkg9Yt5DUjpsLgdmlJHBIKrWav5/ q6c1WBvAt9SjEUlL6zyHPzVw/OpXAdv/iBMAwjBEs3PPgPTzOO7ZsC0MWsvzY7S2 m+XPmCg3SXqdyMHGheCxfgrxNfakOjLhlefqRr3WzLvEdlB1f0eRC27WjhnKnDFt DUfUUfHAkkCE22pQftzBkW7JAwLrUKRuEj/xvZXizZvkgFHeER3Osgx39L4nUzHs RYFUodKihe2fv26wqh8cpYQ/Y2UQTAcZEFRkfMbmtQ7+P6OEKRC37Ignm4Q4/IQY go1WZgjwsqiRbdHMyLqMmfkuPED/Bgau4pfc0fA37dMZ2Tiy6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgvlzZjdxbK+zHrw3yT6yu99stHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvZjkwN2QxY2MtYjdiYy0z YTBkLThiZDktNjc0OTg1OTkyYmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0e1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyHxe/DQ8gUfgkXUU3Uqp6s9nFGSbjHBa4izRkMLzdtgLuuu07b9aSd f1jtu6+g/KolL2b7ezNOGtzKGGkOAjtMR0vte0F4W+Lt2Y8iQlYzqBNLdV4iJbXe liJIN3lLb7C/pLDUBcZI/93E5oWyFSU18MnjTExDbkznag6uLCgJopbMl5mAVBa3 gPYM4FLG3tcZnS1a5MJ3xKFnDQ3bCvqa/5YDEN6z1w+1dk2JBLJfTaMLqcWPGAsQ vaJPm53vlooPa/2EY1HEekontsKAlajFTPrcW/Q5oTf5mUHOQyg/UtjshNom4Dbx 3l8DJbACxzB9DLapjdtsJ12tNCoXj8U= -----END CERTIFICATE-----Generated at Wed Nov 5 11:09:53 2025 by rpki-client