$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/590a9f21-3caa-37d0-825b-d6b64a6b9982.roa File: 590a9f21-3caa-37d0-825b-d6b64a6b9982.roa (raw, json) Hash identifier: 7OLSgesxav+1nXLgsPtgYyOY7wVcKW2x0ZKrVXLk7UQ= Subject key identifier: E0:71:DA:C6:CF:5D:24:5B:57:B9:A9:11:F8:70:79:C9:2A:44:87:67 Certificate issuer: /CN=09440a93-986f-41da-8723-7b67f81bdbce Certificate serial: 010D0C9F4328584B989FF11015E42D72D8434280 Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/590a9f21-3caa-37d0-825b-d6b64a6b9982.roa Signing time: Tue 21 Oct 2025 14:32:50 +0000 ROA not before: Tue 21 Oct 2025 14:32:50 +0000 ROA not after: Mon 19 Jan 2026 15:32:50 +0000 asID: 19901 IP address blocks: 207.48.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:9f:f1:10:15:e4:2d:72:d8:43:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce Validity Not Before: Oct 21 14:32:50 2025 GMT Not After : Jan 19 15:32:50 2026 GMT Subject: CN=a58900ae-0ee1-41df-bb31-c5b4775e4532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:91:ff:25:31:5c:35:de:a1:f9:c7:b8:a2:ae: 22:88:b2:fc:5b:2a:e7:9b:5f:be:dd:10:31:5a:64: 71:90:2b:5d:8c:29:ea:c2:99:42:81:d2:f6:4d:d7: 0f:55:3f:51:49:2c:20:46:5a:1d:cc:06:4f:07:b4: f1:80:b6:f2:08:03:6a:59:15:ba:54:84:02:df:63: 1b:68:c7:c9:24:8c:6b:4c:2c:2a:89:7b:72:ca:c4: cd:ec:2a:11:74:10:67:e0:0b:40:fb:72:46:37:9a: 96:3b:72:3a:78:d7:13:dc:8b:40:e5:94:3b:97:89: 3d:bf:d2:ad:ac:94:fa:29:5d:54:d5:38:37:3a:17: 72:47:b3:1d:16:5d:5b:c8:e8:23:46:8e:b0:6d:3b: 96:79:18:94:ef:42:95:f6:52:cc:a5:9d:95:1d:3e: ca:35:28:08:c4:21:54:29:30:7d:d4:f6:8b:79:1a: 29:f1:c5:21:65:ab:09:70:15:b7:1c:22:89:8c:bd: 02:28:ad:15:01:5b:f0:be:7b:1c:f0:5b:6e:b0:e9: 2e:0f:0e:4b:2f:ed:9c:81:4b:e8:7e:a4:21:87:9c: 79:63:e6:cf:3f:f7:aa:79:4b:72:27:dc:7c:43:ad: b6:d5:cc:02:6e:d8:13:7b:0f:87:cf:4c:21:1d:96: a6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:71:DA:C6:CF:5D:24:5B:57:B9:A9:11:F8:70:79:C9:2A:44:87:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/590a9f21-3caa-37d0-825b-d6b64a6b9982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl X509v3 Authority Key Identifier: keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer sbgp-ipAddrBlock: critical IPv4: 207.48.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:fe:ca:7a:09:df:b6:73:3e:63:29:bf:a0:49:62:64:0d:f4: 84:f0:86:e5:a9:18:99:0d:6a:84:77:9a:91:7d:7f:b8:f4:bf: 4a:d3:d6:eb:84:80:56:0d:c2:55:8e:f4:76:db:96:ce:d1:f7: 02:f6:60:bd:90:af:cd:df:b7:b5:4a:8e:0c:8f:c9:f4:62:b1: f1:9e:d6:58:7a:b7:92:a2:8d:f7:bc:13:04:b7:ba:6e:c3:ea: 38:69:1f:1e:05:a5:ac:78:45:90:05:72:b6:9c:2a:b6:7a:88: 86:16:ff:4f:95:9d:ca:ca:15:0f:1a:b9:e9:6e:47:f8:67:19: ad:87:47:96:16:a6:d7:94:4e:0b:89:4c:f2:0e:79:06:f4:b8: c6:0a:cf:9f:df:28:c6:7c:88:d2:88:e6:61:b6:7b:93:70:90: dc:d7:be:c0:6b:cd:57:cd:bf:9c:ad:5b:2e:df:a6:47:77:98: 06:1c:6b:da:da:a6:89:90:65:b5:03:1b:5c:57:b1:6d:a7:aa: a3:fa:4d:a4:00:06:62:51:38:6a:e1:26:40:dd:b8:93:78:22: cf:dd:6e:38:3d:f3:f3:36:26:6a:79:0d:9b:c4:3c:0d:6d:67: 02:d2:0e:8a:10:ab:90:fd:d4:12:91:61:5c:36:8e:31:5a:22: 07:75:1a:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYn/EQFeQtcthDQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDk0NDBhOTMtOTg2Zi00MWRhLTg3MjMtN2I2N2Y4MWJk YmNlMB4XDTI1MTAyMTE0MzI1MFoXDTI2MDExOTE1MzI1MFowLzEtMCsGA1UEAxMk YTU4OTAwYWUtMGVlMS00MWRmLWJiMzEtYzViNDc3NWU0NTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupH/JTFcNd6h+ce4oq4iiLL8Wyrnm1++3RAx WmRxkCtdjCnqwplCgdL2TdcPVT9RSSwgRlodzAZPB7TxgLbyCANqWRW6VIQC32Mb aMfJJIxrTCwqiXtyysTN7CoRdBBn4AtA+3JGN5qWO3I6eNcT3ItA5ZQ7l4k9v9Kt rJT6KV1U1Tg3OhdyR7MdFl1byOgjRo6wbTuWeRiU70KV9lLMpZ2VHT7KNSgIxCFU KTB91PaLeRop8cUhZasJcBW3HCKJjL0CKK0VAVvwvnsc8FtusOkuDw5LL+2cgUvo fqQhh5x5Y+bPP/eqeUtyJ9x8Q6221cwCbtgTew+Hz0whHZamAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBx2sbPXSRbV7mpEfhweckqRIdnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0 MGE5My05ODZmLTQxZGEtODcyMy03YjY3ZjgxYmRiY2UvNTkwYTlmMjEtM2NhYS0z N2QwLTgyNWItZDZiNjRhNmI5OTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDk0NDBhOTMtOTg2Zi00MWRhLTg3 MjMtN2I2N2Y4MWJkYmNlLzA5NDQwYTkzLTk4NmYtNDFkYS04NzIzLTdiNjdmODFi ZGJjZS5jcmwwHwYDVR0jBBgwFoAUSEuB66mWlz+y3uneit7pXEIwQ4MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0MGE5My05ODZmLTQxZGEtODcyMy03YjY3 ZjgxYmRiY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzzBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAf+ynoJ37ZzPmMpv6BJYmQN9ITwhuWpGJkNaoR3mpF9f7j0v0rT1uuE gFYNwlWO9Hbbls7R9wL2YL2Qr83ft7VKjgyPyfRisfGe1lh6t5Kijfe8EwS3um7D 6jhpHx4Fpax4RZAFcracKrZ6iIYW/0+VncrKFQ8aueluR/hnGa2HR5YWpteUTguJ TPIOeQb0uMYKz5/fKMZ8iNKI5mG2e5NwkNzXvsBrzVfNv5ytWy7fpkd3mAYca9ra pomQZbUDG1xXsW2nqqP6TaQABmJROGrhJkDduJN4Is/dbjg98/M2Jmp5DZvEPA1t ZwLSDooQq5D91BKRYVw2jjFaIgd1GrY= -----END CERTIFICATE-----Generated at Wed Nov 5 12:31:07 2025 by rpki-client