$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/d5fe870a-1fd2-3fbb-8dec-9246ffc8bcbf.roa File: d5fe870a-1fd2-3fbb-8dec-9246ffc8bcbf.roa (raw, json) Hash identifier: i+525ZB2q0qoozKa/ExOqvbC1Sn6QY8l6CPD0wCougs= Subject key identifier: 2A:53:EF:32:81:F3:27:56:75:18:80:BD:FA:98:A2:11:37:C5:F8:44 Certificate issuer: /CN=e5c2b906-947b-452e-a546-6011e1a0e535 Certificate serial: 010D0C9F4328584BA0D254073963E9E796576B00 Authority key identifier: 07:4F:E3:D0:AA:F0:11:BF:7A:CB:C8:51:6B:21:E5:BC:9E:5E:9F:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/d5fe870a-1fd2-3fbb-8dec-9246ffc8bcbf.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 101 IP address blocks: 207.231.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/e5c2b906-947b-452e-a546-6011e1a0e535.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/e5c2b906-947b-452e-a546-6011e1a0e535.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:54:07:39:63:e9:e7:96:57:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5c2b906-947b-452e-a546-6011e1a0e535 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=5e62755b-73dc-4ea6-8c91-91d5ee99e8fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7f:ee:be:c4:5f:1d:f5:07:91:22:f9:62:84: 79:7f:a9:78:b4:dc:8f:d1:bd:8c:00:05:84:1e:c0: 99:97:29:3a:f8:72:82:65:fb:b2:dd:06:ff:fc:7c: 39:ee:01:02:6b:74:1e:e6:1b:03:34:93:f2:60:2e: 2b:c0:62:a4:2a:a7:e0:d2:dd:44:ff:e0:8e:77:e8: bb:93:c6:46:8a:5d:a4:b5:7f:04:a3:27:04:ae:36: b3:8f:a6:0f:41:4e:f2:58:d8:6e:a9:b6:b7:9b:e2: eb:c8:f1:7c:92:7b:8f:9f:88:26:9d:3f:14:6a:de: ad:0d:5b:dc:40:5a:a1:1d:a1:78:4c:e9:ca:28:ee: 47:27:7f:7a:bf:ec:5a:c6:1a:4f:ea:0b:d2:f7:3d: df:ac:4a:6c:33:85:84:93:79:00:0f:03:63:b0:b3: 18:77:9c:18:d8:2a:47:bb:d1:53:fb:cf:c1:71:91: 0f:96:ea:4f:7e:f8:c0:94:aa:a2:45:d3:f9:82:e6: 89:cd:fe:64:3b:97:36:eb:80:89:29:0d:ae:b8:f4: 50:ce:02:c6:a1:12:2e:9b:b1:eb:3e:60:5b:33:8b: 39:83:7f:f3:4f:a0:83:2d:17:0c:46:b4:f6:d3:a7: 04:cb:27:92:aa:71:7e:33:23:22:9b:00:56:44:86: 31:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:53:EF:32:81:F3:27:56:75:18:80:BD:FA:98:A2:11:37:C5:F8:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/d5fe870a-1fd2-3fbb-8dec-9246ffc8bcbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/e5c2b906-947b-452e-a546-6011e1a0e535.crl X509v3 Authority Key Identifier: keyid:07:4F:E3:D0:AA:F0:11:BF:7A:CB:C8:51:6B:21:E5:BC:9E:5E:9F:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535.cer sbgp-ipAddrBlock: critical IPv4: 207.231.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:6e:e1:27:0f:0a:09:42:f2:e4:89:d0:42:b5:b2:40:b2:b8: b4:4c:e6:b9:49:1a:19:47:cb:f0:29:0d:0d:3b:5e:53:f4:e6: 4d:9a:c3:44:05:d0:10:78:2a:d2:67:5e:72:c5:ec:69:05:c4: c1:04:7e:e6:9d:34:19:6a:9e:0b:fb:f6:54:a4:1c:ff:81:c1: 6d:60:60:cb:d0:ef:09:d1:97:90:e9:21:25:31:43:ba:3e:e6: 80:9e:f5:c8:4f:0d:7e:9a:c0:40:cc:e2:8f:5d:42:86:7c:59: dd:45:5f:a2:74:17:35:ef:91:1e:b7:b2:f8:cf:8a:ad:63:58: df:48:11:f2:20:17:47:04:0a:b0:05:4c:a0:c1:1e:51:45:6b: 83:7f:fa:e8:c7:a5:2e:03:e6:19:ab:06:ae:d0:42:c5:6d:23: 92:c4:dc:d8:21:2f:eb:ab:a3:1a:7e:38:14:ee:84:36:29:fe: 01:2c:b5:ed:aa:13:d3:bc:3a:2a:e0:e5:c7:3c:53:c8:1b:5d: 1e:14:a5:82:1c:bb:e3:8b:d8:78:fd:7b:b9:e1:e9:1e:81:2c: 02:09:03:70:7c:84:41:c7:20:f5:d0:07:74:38:13:57:61:f5: b0:e1:b3:e9:ce:94:3c:04:a5:a0:e8:50:1d:0c:91:a6:dc:a4: 42:8f:4f:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0lQHOWPp55ZXawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTVjMmI5MDYtOTQ3Yi00NTJlLWE1NDYtNjAxMWUxYTBl NTM1MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk NWU2Mjc1NWItNzNkYy00ZWE2LThjOTEtOTFkNWVlOTllOGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiH/uvsRfHfUHkSL5YoR5f6l4tNyP0b2MAAWE HsCZlyk6+HKCZfuy3Qb//Hw57gECa3Qe5hsDNJPyYC4rwGKkKqfg0t1E/+COd+i7 k8ZGil2ktX8EoycErjazj6YPQU7yWNhuqba3m+LryPF8knuPn4gmnT8Uat6tDVvc QFqhHaF4TOnKKO5HJ396v+xaxhpP6gvS9z3frEpsM4WEk3kADwNjsLMYd5wY2CpH u9FT+8/BcZEPlupPfvjAlKqiRdP5guaJzf5kO5c264CJKQ2uuPRQzgLGoRIum7Hr PmBbM4s5g3/zT6CDLRcMRrT206cEyyeSqnF+MyMimwBWRIYxyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpT7zKB8ydWdRiAvfqYohE3xfhEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lNWMy YjkwNi05NDdiLTQ1MmUtYTU0Ni02MDExZTFhMGU1MzUvZDVmZTg3MGEtMWZkMi0z ZmJiLThkZWMtOTI0NmZmYzhiY2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZTVjMmI5MDYtOTQ3Yi00NTJlLWE1 NDYtNjAxMWUxYTBlNTM1L2U1YzJiOTA2LTk0N2ItNDUyZS1hNTQ2LTYwMTFlMWEw ZTUzNS5jcmwwHwYDVR0jBBgwFoAUB0/j0KrwEb96y8hRayHlvJ5en8wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lNWMyYjkwNi05NDdiLTQ1MmUtYTU0Ni02MDEx ZTFhMGU1MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz+fwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtu4ScPCglC8uSJ0EK1skCyuLRM5rlJGhlHy/ApDQ07XlP05k2aw0QF 0BB4KtJnXnLF7GkFxMEEfuadNBlqngv79lSkHP+BwW1gYMvQ7wnRl5DpISUxQ7o+ 5oCe9chPDX6awEDM4o9dQoZ8Wd1FX6J0FzXvkR63svjPiq1jWN9IEfIgF0cECrAF TKDBHlFFa4N/+ujHpS4D5hmrBq7QQsVtI5LE3NghL+uroxp+OBTuhDYp/gEste2q E9O8Oirg5cc8U8gbXR4UpYIcu+OL2Hj9e7nh6R6BLAIJA3B8hEHHIPXQB3Q4E1dh 9bDhs+nOlDwEpaDoUB0MkabcpEKPTzo= -----END CERTIFICATE-----Generated at Wed Nov 5 14:24:11 2025 by rpki-client