$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d67aacee-5ae9-3c01-b315-5c0762963360.roa File: d67aacee-5ae9-3c01-b315-5c0762963360.roa (raw, json) Hash identifier: cDEHJSzyx3G2nDMn3yGPOKCN0jXbeqgkz+Yfxohp7O8= Subject key identifier: F2:1E:A9:D6:DE:7B:FC:A2:00:B9:45:0A:47:53:86:52:DA:79:9B:4F Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B6728234E7EBED4C4E781CB80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d67aacee-5ae9-3c01-b315-5c0762963360.roa Signing time: Fri 03 Oct 2025 21:16:50 +0000 ROA not before: Fri 03 Oct 2025 21:16:50 +0000 ROA not after: Thu 01 Jan 2026 22:16:50 +0000 asID: 0 IP address blocks: 206.2.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:28:23:4e:7e:be:d4:c4:e7:81:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 3 21:16:50 2025 GMT Not After : Jan 1 22:16:50 2026 GMT Subject: CN=ef45294d-0fa2-4835-8680-ca471d43131e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f5:07:9f:ad:4b:b2:1e:ab:ea:4b:cf:b2:26: 08:44:a2:54:ab:26:b1:7f:27:98:08:ed:74:9c:c0: d0:15:07:c4:92:ba:99:64:6b:2c:5f:7a:7b:c3:b7: 6e:28:56:00:c6:66:25:7d:f4:7f:83:ea:02:1f:ee: fc:2c:af:af:13:9c:4d:b4:89:da:70:1e:91:aa:3a: e3:04:3f:61:f1:e8:f2:b7:97:df:ab:a9:cf:14:9f: 58:a2:69:f1:ad:34:b0:0d:3c:06:b9:b6:8e:91:7d: 65:95:3d:93:92:53:76:71:44:c5:41:88:3c:5d:33: 02:79:71:88:ef:06:fc:25:a5:fc:df:aa:c2:f5:c3: 74:f7:20:79:0c:6e:07:82:5d:6e:06:67:02:36:83: 31:59:3b:fe:e9:53:63:73:99:0e:df:a7:ea:20:72: ca:f7:59:1b:ef:88:be:90:76:6d:8d:dc:13:b6:52: f7:ba:7c:5e:9e:df:74:64:23:d4:58:53:14:ae:b0: bb:85:e7:7d:c0:5a:ff:be:fb:61:8a:f8:1a:9e:98: ba:65:6e:16:f8:29:2e:c3:42:69:6a:fd:c6:18:ee: 2d:0e:9c:3e:6f:7f:3c:e1:3f:fd:e4:ea:b7:98:45: 1f:a4:fa:82:52:ba:02:72:f0:34:79:30:a2:a0:16: dc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:1E:A9:D6:DE:7B:FC:A2:00:B9:45:0A:47:53:86:52:DA:79:9B:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/d67aacee-5ae9-3c01-b315-5c0762963360.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 206.2.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:55:86:d5:76:ce:42:98:a4:0e:46:42:a4:8d:3d:16:8f:67: 34:5d:9f:b5:da:22:74:33:97:81:fe:89:29:15:be:a5:14:1e: 83:49:74:f5:2f:b5:fa:db:1e:6f:61:27:34:1f:e7:6e:dc:2c: bb:a6:15:4a:a9:f0:10:2a:2c:09:2b:b9:a5:70:4d:5c:6f:50: fc:ba:d6:44:54:19:3d:0d:e1:e1:0d:7e:1b:cc:51:31:24:79: cc:c7:f3:bb:65:25:a5:13:b5:f5:76:eb:9b:4a:29:af:51:6a: 9f:bd:36:e1:51:e9:06:6d:f9:0c:f8:eb:c7:a8:df:43:63:c6: ea:22:c0:5c:ec:1b:51:57:36:b0:cd:89:ba:8a:6b:df:a2:25: e9:72:60:e4:ad:61:d5:43:68:43:7c:15:6d:b2:22:fa:ea:41: 9c:01:11:8c:b0:31:61:dd:cb:e2:11:66:0a:b1:8c:dc:76:0a: 28:bc:27:d4:91:1c:36:6e:dc:11:0e:77:26:3d:46:8d:a8:ca: 66:e2:85:6c:ca:97:4d:0e:46:20:28:a6:b3:9e:34:ac:16:2b: cd:4c:37:19:c6:59:9b:88:51:cc:80:e1:94:16:3f:57:13:af: ca:1c:7a:11:cb:6b:09:31:01:f9:18:67:52:9f:34:53:08:17: 0d:74:cd:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnKCNOfr7UxOeBy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAwMzIxMTY1MFoXDTI2MDEwMTIyMTY1MFowLzEtMCsGA1UEAxMk ZWY0NTI5NGQtMGZhMi00ODM1LTg2ODAtY2E0NzFkNDMxMzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPUHn61Lsh6r6kvPsiYIRKJUqyaxfyeYCO10 nMDQFQfEkrqZZGssX3p7w7duKFYAxmYlffR/g+oCH+78LK+vE5xNtInacB6Rqjrj BD9h8ejyt5ffq6nPFJ9YomnxrTSwDTwGubaOkX1llT2TklN2cUTFQYg8XTMCeXGI 7wb8JaX836rC9cN09yB5DG4Hgl1uBmcCNoMxWTv+6VNjc5kO36fqIHLK91kb74i+ kHZtjdwTtlL3unxent90ZCPUWFMUrrC7hed9wFr/vvthivganpi6ZW4W+Ckuw0Jp av3GGO4tDpw+b3884T/95Oq3mEUfpPqCUroCcvA0eTCioBbcrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIeqdbee/yiALlFCkdThlLaeZtPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZDY3YWFjZWUtNWFlOS0z YzAxLWIzMTUtNWMwNzYyOTYzMzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzgKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdVhtV2zkKYpA5GQqSNPRaPZzRdn7XaInQzl4H+iSkVvqUUHoNJdPUv tfrbHm9hJzQf527cLLumFUqp8BAqLAkruaVwTVxvUPy61kRUGT0N4eENfhvMUTEk eczH87tlJaUTtfV265tKKa9Rap+9NuFR6QZt+Qz468eo30NjxuoiwFzsG1FXNrDN ibqKa9+iJelyYOStYdVDaEN8FW2yIvrqQZwBEYywMWHdy+IRZgqxjNx2Cii8J9SR HDZu3BEOdyY9Ro2oymbihWzKl00ORiAoprOeNKwWK81MNxnGWZuIUcyA4ZQWP1cT r8ocehHLawkxAfkYZ1KfNFMIFw10zR4= -----END CERTIFICATE-----Generated at Tue Nov 4 23:05:14 2025 by rpki-client