$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/40466fe5-eaeb-37b1-9356-b1362b1dd8ae.roa File: 40466fe5-eaeb-37b1-9356-b1362b1dd8ae.roa (raw, json) Hash identifier: YVm3Dk6m4NsfNkf+wTFSLRYZe0Bv5VQzqIKDAGcOLxo= Subject key identifier: F4:66:9E:44:E9:17:C9:04:DD:32:7F:04:1D:3C:D8:FB:43:D7:C4:94 Certificate issuer: /CN=214de91d-b5db-4aa3-aab9-2a7f2c0075b6 Certificate serial: 010D0C9F4328584BAA979BC5509DBD8C6EE03B40 Authority key identifier: F7:B7:99:5C:7B:1A:30:18:CC:99:0A:04:2D:53:DC:80:BE:02:B0:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/40466fe5-eaeb-37b1-9356-b1362b1dd8ae.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 396982 IP address blocks: 207.154.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:9b:c5:50:9d:bd:8c:6e:e0:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=214de91d-b5db-4aa3-aab9-2a7f2c0075b6 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=7defca73-dc7c-42c5-be7d-c69c55ca5daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:04:9c:73:d1:7a:e3:5c:85:55:c6:2c:73:9b: 7e:f4:bc:84:6d:fd:7e:66:48:a0:99:6d:76:cc:e1: f3:3d:f1:81:e6:b7:07:d7:15:ed:94:0f:30:dd:b2: cf:67:f5:c4:7c:39:64:51:c7:43:06:a0:9c:b8:9c: 12:cd:0e:94:07:5e:c4:39:01:41:06:26:b6:22:03: aa:76:0f:7b:c1:02:4d:90:31:64:e6:71:ca:30:f1: e5:40:c2:9b:ed:99:40:47:6f:fc:b7:4e:1b:39:ba: d7:06:a9:2e:67:40:04:c7:c3:ea:3f:4f:c1:25:02: 5a:1c:25:69:e2:73:aa:4c:bc:09:80:f2:f8:fd:f1: 6d:39:17:7f:f8:19:b0:fc:a2:6b:38:27:bf:bf:ac: b1:65:90:76:2d:f1:51:cd:ee:ca:dc:f6:e6:21:fc: 19:49:77:a5:75:01:32:4f:65:4f:7f:d7:41:f9:b8: ca:b9:2c:e8:59:5e:be:c7:d2:6b:d6:7c:4f:da:89: b1:11:fd:7c:b0:1c:0a:6c:8f:e0:78:5b:22:1a:ff: 5e:0b:5a:70:8e:37:51:d6:b3:f5:b0:8b:73:9a:79: b0:7d:f9:97:68:41:fe:2b:a8:31:10:2d:d3:b3:51: 17:3d:0a:5b:57:d8:23:de:fa:50:82:c8:86:aa:29: c1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:66:9E:44:E9:17:C9:04:DD:32:7F:04:1D:3C:D8:FB:43:D7:C4:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/40466fe5-eaeb-37b1-9356-b1362b1dd8ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.crl X509v3 Authority Key Identifier: keyid:F7:B7:99:5C:7B:1A:30:18:CC:99:0A:04:2D:53:DC:80:BE:02:B0:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.cer sbgp-ipAddrBlock: critical IPv4: 207.154.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:70:07:92:5d:56:69:b9:f1:aa:de:22:5e:3d:6e:d7:b3:fe: 8c:ce:76:87:0a:e5:a2:08:56:35:39:58:28:56:d5:3b:97:99: 2a:67:3b:f9:6c:7b:ea:75:8b:a3:c8:e6:2f:d3:b7:85:71:0f: 93:c8:d4:4e:64:93:68:b8:22:74:d8:51:42:c1:74:b4:14:c1: 62:64:e1:ef:0a:84:b3:5b:38:40:37:ab:23:b4:d6:21:3f:40: 5e:e4:74:c3:52:59:0c:03:96:9d:f9:bc:ed:c9:27:45:f4:4e: 80:a5:5b:5c:26:39:b9:df:05:87:47:48:b8:80:09:09:2d:0c: 36:39:9a:96:cf:b0:48:98:17:4f:28:00:71:16:98:09:0a:ad: 6a:57:2a:b3:4a:75:72:5f:77:e2:63:d4:87:fc:03:44:31:d7: c2:59:8e:01:c6:8b:61:ab:a3:f8:7c:fd:66:ff:f3:f9:7c:2d: bf:e2:87:e2:29:c0:ab:c6:68:2d:b3:19:ff:84:f3:df:43:7f: 51:1b:b2:78:30:be:9a:ce:e3:d2:57:87:8b:97:0e:10:79:b1: b7:62:b2:26:8a:51:78:bd:0c:87:0c:40:df:2a:64:a4:f1:a2: 97:70:ec:4e:68:c9:e5:db:0e:69:e5:15:37:fe:f9:6a:d1:c7: ce:3a:0e:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql5vFUJ29jG7gO0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE0ZGU5MWQtYjVkYi00YWEzLWFhYjktMmE3ZjJjMDA3 NWI2MB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk N2RlZmNhNzMtZGM3Yy00MmM1LWJlN2QtYzY5YzU1Y2E1ZGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAScc9F641yFVcYsc5t+9LyEbf1+ZkigmW12 zOHzPfGB5rcH1xXtlA8w3bLPZ/XEfDlkUcdDBqCcuJwSzQ6UB17EOQFBBia2IgOq dg97wQJNkDFk5nHKMPHlQMKb7ZlAR2/8t04bObrXBqkuZ0AEx8PqP0/BJQJaHCVp 4nOqTLwJgPL4/fFtORd/+Bmw/KJrOCe/v6yxZZB2LfFRze7K3PbmIfwZSXeldQEy T2VPf9dB+bjKuSzoWV6+x9Jr1nxP2omxEf18sBwKbI/geFsiGv9eC1pwjjdR1rP1 sItzmnmwffmXaEH+K6gxEC3Ts1EXPQpbV9gj3vpQgsiGqinBuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRmnkTpF8kE3TJ/BB082PtD18SUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMTRk ZTkxZC1iNWRiLTRhYTMtYWFiOS0yYTdmMmMwMDc1YjYvNDA0NjZmZTUtZWFlYi0z N2IxLTkzNTYtYjEzNjJiMWRkOGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjE0ZGU5MWQtYjVkYi00YWEzLWFh YjktMmE3ZjJjMDA3NWI2LzIxNGRlOTFkLWI1ZGItNGFhMy1hYWI5LTJhN2YyYzAw NzViNi5jcmwwHwYDVR0jBBgwFoAU97eZXHsaMBjMmQoELVPcgL4CsB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMTRkZTkxZC1iNWRiLTRhYTMtYWFiOS0yYTdm MmMwMDc1YjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz5qQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMtwB5JdVmm58areIl49btez/ozOdocK5aIIVjU5WChW1TuXmSpnO/ls e+p1i6PI5i/Tt4VxD5PI1E5kk2i4InTYUULBdLQUwWJk4e8KhLNbOEA3qyO01iE/ QF7kdMNSWQwDlp35vO3JJ0X0ToClW1wmObnfBYdHSLiACQktDDY5mpbPsEiYF08o AHEWmAkKrWpXKrNKdXJfd+Jj1If8A0Qx18JZjgHGi2Gro/h8/Wb/8/l8Lb/ih+Ip wKvGaC2zGf+E899Df1EbsngwvprO49JXh4uXDhB5sbdisiaKUXi9DIcMQN8qZKTx opdw7E5oyeXbDmnlFTf++WrRx846Dgc= -----END CERTIFICATE-----Generated at Tue Nov 4 12:55:17 2025 by rpki-client