$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/f8375e10-8d1d-3484-aaeb-e58fd215889e.roa File: f8375e10-8d1d-3484-aaeb-e58fd215889e.roa (raw, json) Hash identifier: P8uJOnZtlQDqZ+gpuMty2A+9UcRUscTSQIVOXFJubI4= Subject key identifier: 7B:F4:51:7E:6B:A2:65:D8:6E:BF:95:4C:EA:55:33:7F:97:AE:CC:1B Certificate issuer: /CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49 Certificate serial: 010D0C9F4328584BA0D247566BE98AEC48018E80 Authority key identifier: 5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/f8375e10-8d1d-3484-aaeb-e58fd215889e.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 30698 IP address blocks: 209.221.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:47:56:6b:e9:8a:ec:48:01:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=ddd2c9dd-e16a-4f60-a8f0-cce4804e3ddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2f:9f:21:ab:b6:d2:f6:ad:53:58:3e:90:12: eb:c0:8f:a5:43:11:30:3b:11:54:9d:dd:4f:71:c4: 70:04:ee:0b:8a:e7:3d:60:d9:d2:5d:9a:63:9d:80: 1a:94:68:0b:a5:84:7c:e7:67:d8:2f:66:b9:74:4f: 20:a8:79:50:46:7c:e0:32:7e:68:00:62:34:c8:df: 4d:15:01:1d:23:ce:7b:d0:fc:74:a6:c3:ee:51:f9: de:1d:ae:40:6f:a0:ed:e7:e4:8a:25:f4:4b:98:8f: 62:17:3f:4e:67:f5:10:6e:c3:9a:5b:9f:32:a2:5f: 25:e6:1e:82:c7:c6:8d:77:4c:40:9c:54:f2:4c:6e: bf:eb:ef:12:df:bf:f6:22:72:0a:54:76:2d:59:2c: 65:d2:19:e6:8e:10:c9:08:61:fb:a2:38:50:b4:06: a1:92:8a:f5:9e:31:04:73:10:f4:f6:b4:48:a8:de: e6:1e:46:14:d1:40:fe:2c:00:8d:d6:2d:3c:dd:f2: b2:3f:76:5a:b7:f6:37:26:a8:a5:60:93:a2:5b:21: 4c:79:86:40:f3:12:59:16:0b:49:74:c2:30:5c:96: e0:49:97:1b:a4:ed:62:6d:eb:47:5a:28:31:f7:cf: c0:d5:7d:d2:de:d2:59:0e:18:af:c6:b2:58:31:0a: be:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:F4:51:7E:6B:A2:65:D8:6E:BF:95:4C:EA:55:33:7F:97:AE:CC:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/f8375e10-8d1d-3484-aaeb-e58fd215889e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl X509v3 Authority Key Identifier: keyid:5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer sbgp-ipAddrBlock: critical IPv4: 209.221.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:fe:8b:63:04:ce:b2:e3:85:5a:ec:76:c2:27:49:43:b3:6d: 55:41:f4:8e:71:4f:05:2a:79:66:a0:4e:6d:13:ba:d4:d0:7b: 15:c1:ef:68:31:71:4a:fc:86:2a:be:7b:9d:da:80:59:fb:7b: 85:c0:78:fe:93:91:f8:0e:d6:fb:bf:d4:a0:d1:d5:d7:9b:87: 8c:10:c8:54:b6:0f:38:43:1b:20:08:6b:45:96:02:ad:75:45: 6e:42:b2:8a:c9:be:03:32:27:9a:8a:33:5a:d4:cf:3e:2e:a8: 67:4e:37:c2:65:42:af:c6:5b:81:5a:8a:a9:3a:87:00:57:44: e2:8d:94:4a:83:64:f8:ae:99:7b:79:ba:8c:15:4f:14:2c:3c: 53:37:1c:98:69:3a:c4:be:4e:44:4b:18:4b:da:fd:8a:57:a5: 7d:22:2c:06:2d:a6:91:a2:38:e4:17:54:d6:29:98:86:ca:50: 61:0e:16:5b:ca:d6:d7:82:90:b6:d3:ff:08:9b:d4:d0:8e:67: 90:c5:06:09:07:fe:ed:bf:e4:f5:dc:e9:01:77:73:c5:82:4b: cd:5d:e9:16:e5:f5:1a:6e:05:36:6c:88:66:fd:81:ba:0b:e0: 34:54:f3:6c:d8:61:a0:d4:31:af:1a:d6:5f:c7:d6:ef:6b:77: 4b:e5:bb:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0kdWa+mK7EgBjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ1NDkxZmUtM2MxMS00ZWEzLThlYTgtN2U0MDNhNmVl YjQ5MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ZGRkMmM5ZGQtZTE2YS00ZjYwLWE4ZjAtY2NlNDgwNGUzZGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS+fIau20vatU1g+kBLrwI+lQxEwOxFUnd1P ccRwBO4Liuc9YNnSXZpjnYAalGgLpYR852fYL2a5dE8gqHlQRnzgMn5oAGI0yN9N FQEdI8570Px0psPuUfneHa5Ab6Dt5+SKJfRLmI9iFz9OZ/UQbsOaW58yol8l5h6C x8aNd0xAnFTyTG6/6+8S37/2InIKVHYtWSxl0hnmjhDJCGH7ojhQtAahkor1njEE cxD09rRIqN7mHkYU0UD+LACN1i083fKyP3Zat/Y3JqilYJOiWyFMeYZA8xJZFgtJ dMIwXJbgSZcbpO1ibetHWigx98/A1X3S3tJZDhivxrJYMQq+cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHv0UX5romXYbr+VTOpVM3+XrswbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDU0 OTFmZS0zYzExLTRlYTMtOGVhOC03ZTQwM2E2ZWViNDkvZjgzNzVlMTAtOGQxZC0z NDg0LWFhZWItZTU4ZmQyMTU4ODllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmQ1NDkxZmUtM2MxMS00ZWEzLThl YTgtN2U0MDNhNmVlYjQ5L2ZkNTQ5MWZlLTNjMTEtNGVhMy04ZWE4LTdlNDAzYTZl ZWI0OS5jcmwwHwYDVR0jBBgwFoAUW/p9bVG8ca1+tu35CIL3rF9SK3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDU0OTFmZS0zYzExLTRlYTMtOGVhOC03ZTQw M2E2ZWViNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0d3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACP+i2MEzrLjhVrsdsInSUOzbVVB9I5xTwUqeWagTm0TutTQexXB72gx cUr8hiq+e53agFn7e4XAeP6TkfgO1vu/1KDR1debh4wQyFS2DzhDGyAIa0WWAq11 RW5CsorJvgMyJ5qKM1rUzz4uqGdON8JlQq/GW4Faiqk6hwBXROKNlEqDZPiumXt5 uowVTxQsPFM3HJhpOsS+TkRLGEva/YpXpX0iLAYtppGiOOQXVNYpmIbKUGEOFlvK 1teCkLbT/wib1NCOZ5DFBgkH/u2/5PXc6QF3c8WCS81d6Rbl9RpuBTZsiGb9gboL 4DRU82zYYaDUMa8a1l/H1u9rd0vlu/Y= -----END CERTIFICATE-----Generated at Fri Nov 7 11:30:18 2025 by rpki-client