$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/25b4a9d1-c107-33ab-b108-789fa7d2c23a.roa File: 25b4a9d1-c107-33ab-b108-789fa7d2c23a.roa (raw, json) Hash identifier: D22Mer/P2stEMYmBetTOsqRicqF5WA8DoqDmJiUrPBg= Subject key identifier: 75:AA:29:CC:D4:58:B7:C8:A5:D6:6D:E8:62:A7:AA:05:9B:3D:D2:98 Certificate issuer: /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Certificate serial: 010D0C9F4328584B4D11DA29689974D1F25ECE40 Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/25b4a9d1-c107-33ab-b108-789fa7d2c23a.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 399575 IP address blocks: 206.204.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:da:29:68:99:74:d1:f2:5e:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=1f88383c-4a5b-45a8-b073-a106a358308c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:67:95:f8:9b:76:a6:56:3a:63:51:d4:36:67: 07:0d:26:94:d3:e2:1f:2a:be:50:4b:7c:ed:7d:c5: 77:46:e2:37:3a:f2:b0:c1:84:a1:2f:14:bc:16:0b: ee:e0:42:a2:b6:e2:87:8f:0d:c7:62:99:14:9e:d9: a0:9f:a2:3a:eb:fd:68:27:fd:fc:f7:ef:0f:38:f3: aa:b0:c2:0a:4f:72:5f:84:43:59:62:be:11:93:70: 1a:4f:b3:fa:24:c9:63:4c:1a:3d:a2:b1:86:58:f8: e1:87:8f:ac:48:c4:bf:ee:99:c0:1c:30:b1:93:5f: a3:de:87:b7:d3:7b:5b:62:5b:a8:a7:f4:a9:c5:8a: 99:06:ac:02:36:71:29:63:cc:aa:fa:02:71:31:a7: 04:a7:a3:be:6b:26:d5:bc:bd:82:c2:ff:a0:e7:91: e0:07:2d:e3:da:04:25:31:55:20:f6:d3:1b:a0:b3: 00:71:61:59:84:49:5b:7e:39:cd:01:68:a1:f6:ae: fe:1d:69:e7:ec:86:bf:a9:e6:ab:13:62:01:52:89: 1c:95:a3:dc:ce:43:c3:6b:38:de:56:9c:ac:44:f7: d2:1b:e0:c7:85:16:50:03:2e:21:39:94:a8:f0:c8: d4:7b:10:b0:07:93:7f:db:8b:c7:5f:d8:53:44:00: 6d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AA:29:CC:D4:58:B7:C8:A5:D6:6D:E8:62:A7:AA:05:9B:3D:D2:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/25b4a9d1-c107-33ab-b108-789fa7d2c23a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl X509v3 Authority Key Identifier: keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer sbgp-ipAddrBlock: critical IPv4: 206.204.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:a9:d2:0f:85:c4:20:43:4d:51:11:d3:d2:c3:2a:40:ef:15: 76:15:e3:ac:df:40:9f:2d:d5:70:94:9d:34:ca:bf:fc:93:dc: bd:09:7f:be:cf:d3:41:7c:74:47:94:30:89:8b:a7:e6:b0:78: 51:29:af:00:f6:c2:67:ed:3b:4b:fa:ce:d2:0f:3a:00:72:27: 46:26:77:33:7d:a9:04:03:ab:64:be:28:41:cc:22:9d:4d:d6: af:93:df:da:a4:53:27:cb:c3:b9:c9:65:df:b4:a0:54:bf:bb: 73:12:4c:ed:c3:58:e7:b0:e5:bc:23:ce:18:6d:ce:90:1c:b8: 32:f7:c3:3c:31:0a:2e:95:4a:81:46:1e:c9:02:e5:cb:d4:c0: cd:24:e6:f1:9c:a0:52:37:d4:cb:66:00:20:c7:ea:bc:4e:91: 0c:86:0f:ca:44:ae:60:f2:15:e7:cb:b0:8f:75:a3:fe:fc:b8: b8:10:e1:16:46:4b:69:93:16:ae:0c:b0:a9:b3:05:88:4a:f2: da:fe:52:01:6b:5b:0f:0e:2b:2f:77:c2:82:4b:07:82:64:77: 88:db:89:89:16:17:da:1c:84:93:32:4a:01:ba:c7:a0:eb:9e: 51:d5:c9:4e:c9:42:5e:07:9e:39:3e:97:51:a1:9d:3c:f5:a8: ae:90:e4:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEdopaJl00fJezkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODdmYzMtZmM3OS00ZGI5LTk1YmMtYjJkODRjNGNm OGNhMB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk MWY4ODM4M2MtNGE1Yi00NWE4LWIwNzMtYTEwNmEzNTgzMDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGeV+Jt2plY6Y1HUNmcHDSaU0+IfKr5QS3zt fcV3RuI3OvKwwYShLxS8Fgvu4EKituKHjw3HYpkUntmgn6I66/1oJ/389+8POPOq sMIKT3JfhENZYr4Rk3AaT7P6JMljTBo9orGGWPjhh4+sSMS/7pnAHDCxk1+j3oe3 03tbYluop/SpxYqZBqwCNnEpY8yq+gJxMacEp6O+aybVvL2Cwv+g55HgBy3j2gQl MVUg9tMboLMAcWFZhElbfjnNAWih9q7+HWnn7Ia/qearE2IBUokclaPczkPDazje VpysRPfSG+DHhRZQAy4hOZSo8MjUexCwB5N/24vHX9hTRABtJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWqKczUWLfIpdZt6GKnqgWbPdKYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82NWY4 N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4NGM0Y2Y4Y2EvMjViNGE5ZDEtYzEwNy0z M2FiLWIxMDgtNzg5ZmE3ZDJjMjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjVmODdmYzMtZmM3OS00ZGI5LTk1 YmMtYjJkODRjNGNmOGNhLzY1Zjg3ZmMzLWZjNzktNGRiOS05NWJjLWIyZDg0YzRj ZjhjYS5jcmwwHwYDVR0jBBgwFoAUu9W7tLEyrQwY0eYBEwMMwU00uMIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82NWY4N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4 NGM0Y2Y4Y2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzszuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACp0g+FxCBDTVER09LDKkDvFXYV46zfQJ8t1XCUnTTKv/yT3L0Jf77P 00F8dEeUMImLp+aweFEprwD2wmftO0v6ztIPOgByJ0YmdzN9qQQDq2S+KEHMIp1N 1q+T39qkUyfLw7nJZd+0oFS/u3MSTO3DWOew5bwjzhhtzpAcuDL3wzwxCi6VSoFG HskC5cvUwM0k5vGcoFI31MtmACDH6rxOkQyGD8pErmDyFefLsI91o/78uLgQ4RZG S2mTFq4MsKmzBYhK8tr+UgFrWw8OKy93woJLB4Jkd4jbiYkWF9ochJMySgG6x6Dr nlHVyU7JQl4Hnjk+l1GhnTz1qK6Q5Ek= -----END CERTIFICATE-----Generated at Wed Nov 5 15:58:18 2025 by rpki-client