$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/f3bf4f5b-37ab-3d87-a530-83792d7e8c35.roa File: f3bf4f5b-37ab-3d87-a530-83792d7e8c35.roa (raw, json) Hash identifier: C86E9Qe36qAyvFSw33hTyipH67Lnw+xQHzB8BK4D6rs= Subject key identifier: 51:46:43:24:B5:84:E2:5E:E8:C3:06:AD:D8:D5:6C:5E:0B:F9:49:EA Certificate issuer: /CN=2de5d746-3402-4263-b880-ea4d7ecfc168 Certificate serial: 010D0C9F4328584AF256A32307AD8280EF00E7D0 Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/f3bf4f5b-37ab-3d87-a530-83792d7e8c35.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 22359 IP address blocks: 207.22.32.2/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:a3:23:07:ad:82:80:ef:00:e7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=b89e4060-099e-436c-9b61-2e3500c42a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fc:46:86:28:ba:13:15:04:41:7a:08:1a:68: d7:d0:33:20:9a:f7:3c:6d:c0:c7:15:8a:77:86:ce: 21:59:49:22:64:30:76:1a:66:f2:60:82:da:96:be: ee:3c:b8:4f:3c:8a:e4:b7:57:06:2d:87:4c:ea:39: 66:aa:56:fa:5e:45:ed:e6:51:4f:91:8c:ba:8c:d7: 96:89:36:05:72:01:31:9e:13:d9:c5:26:52:b2:2e: 34:fa:06:48:ce:34:81:fa:57:87:dd:02:e8:aa:f4: a4:d7:47:b0:e5:88:01:26:cd:97:44:4a:01:a1:78: ef:48:84:b2:a2:39:e5:81:d8:9d:cb:d5:1f:6d:10: 04:25:16:a1:1e:c6:67:28:61:6b:6f:e8:47:ec:45: a9:03:63:db:39:98:f0:9d:ad:49:4b:54:86:e6:82: 06:ea:59:b4:16:a3:d9:66:ff:e9:52:7d:6a:c6:37: f5:61:66:82:1e:86:a3:64:bc:59:44:fb:e8:89:8a: 2c:47:06:a6:5a:46:35:b5:e2:d8:62:43:4a:df:b2: 36:8a:e4:88:a9:60:8e:9a:11:a0:ad:eb:db:92:26: 67:74:86:16:b4:57:67:1c:9b:67:5d:36:75:69:10: 63:7b:30:1a:1e:a0:2a:ef:61:07:9d:ee:5a:13:f2: 96:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:46:43:24:B5:84:E2:5E:E8:C3:06:AD:D8:D5:6C:5E:0B:F9:49:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/f3bf4f5b-37ab-3d87-a530-83792d7e8c35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl X509v3 Authority Key Identifier: keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer sbgp-ipAddrBlock: critical IPv4: 207.22.32.2/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:e3:e3:20:b7:74:57:5e:5f:56:d5:ce:10:47:d4:83:de:6d: f2:31:cb:34:ba:76:d2:71:21:c3:49:39:08:74:4e:71:0f:ca: 0f:af:86:27:2a:0f:05:e7:a9:ff:3c:87:9a:45:dd:82:14:98: dd:a7:1b:b7:af:7c:12:16:41:40:b6:7f:47:eb:ce:f8:a3:07: a3:76:96:ce:fe:d5:c2:a6:bd:e1:6b:22:8d:19:7b:24:9c:33: bf:90:e0:0e:46:b6:45:5b:13:e8:17:92:63:d7:a9:19:e3:a2: 67:18:11:d7:d6:38:9d:2e:34:3f:f2:fe:b3:16:10:a8:47:3a: c4:dd:be:f9:d6:3c:5f:ed:df:db:e7:bc:01:00:9d:53:1f:11: f5:2a:96:08:b9:88:2b:9f:69:aa:94:04:f6:2b:27:b9:0b:1e: f3:d4:24:ce:78:57:d7:41:ff:38:1e:77:9a:d2:6f:a5:dc:22: 47:5d:0a:e5:60:be:eb:ed:a6:b2:ec:dd:2c:72:df:a1:53:41: 72:9f:cb:50:f6:80:34:d4:77:4e:8f:22:5e:3d:f5:7e:d8:da: 1c:4f:b3:10:76:d6:19:36:81:51:22:45:31:2c:e8:c4:cb:7f: 86:de:eb:a5:1e:42:70:85:bd:3f:c3:18:17:2f:e3:1a:a7:18: 85:ca:59:01 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEryVqMjB62CgO8A59AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRlNWQ3NDYtMzQwMi00MjYzLWI4ODAtZWE0ZDdlY2Zj MTY4MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk Yjg5ZTQwNjAtMDk5ZS00MzZjLTliNjEtMmUzNTAwYzQyYTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofxGhii6ExUEQXoIGmjX0DMgmvc8bcDHFYp3 hs4hWUkiZDB2GmbyYILalr7uPLhPPIrkt1cGLYdM6jlmqlb6XkXt5lFPkYy6jNeW iTYFcgExnhPZxSZSsi40+gZIzjSB+leH3QLoqvSk10ew5YgBJs2XREoBoXjvSISy ojnlgdidy9UfbRAEJRahHsZnKGFrb+hH7EWpA2PbOZjwna1JS1SG5oIG6lm0FqPZ Zv/pUn1qxjf1YWaCHoajZLxZRPvoiYosRwamWkY1teLYYkNK37I2iuSIqWCOmhGg revbkiZndIYWtFdnHJtnXTZ1aRBjezAaHqAq72EHne5aE/KWrwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFFGQyS1hOJe6MMGrdjVbF4L+UnqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1 ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRkN2VjZmMxNjgvZjNiZjRmNWItMzdhYi0z ZDg3LWE1MzAtODM3OTJkN2U4YzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmRlNWQ3NDYtMzQwMi00MjYzLWI4 ODAtZWE0ZDdlY2ZjMTY4LzJkZTVkNzQ2LTM0MDItNDI2My1iODgwLWVhNGQ3ZWNm YzE2OC5jcmwwHwYDVR0jBBgwFoAUa7vQBHnN1sRmwfvAalg6KhVtSHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRk N2VjZmMxNjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAzxYgAjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA64+Mgt3RXXl9W1c4QR9SD3m3yMcs0unbScSHDSTkIdE5xD8oPr4Yn Kg8F56n/PIeaRd2CFJjdpxu3r3wSFkFAtn9H6874owejdpbO/tXCpr3hayKNGXsk nDO/kOAORrZFWxPoF5Jj16kZ46JnGBHX1jidLjQ/8v6zFhCoRzrE3b751jxf7d/b 57wBAJ1THxH1KpYIuYgrn2mqlAT2Kye5Cx7z1CTOeFfXQf84Hnea0m+l3CJHXQrl YL7r7aay7N0sct+hU0Fyn8tQ9oA01HdOjyJePfV+2NocT7MQdtYZNoFRIkUxLOjE y3+G3uulHkJwhb0/wxgXL+MapxiFylkB -----END CERTIFICATE-----Generated at Tue Nov 4 23:59:06 2025 by rpki-client