$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/5d5c344a-e189-3864-9d26-6e969f78a1f1.roa File: 5d5c344a-e189-3864-9d26-6e969f78a1f1.roa (raw, json) Hash identifier: fNMR2gNxDccp3CZrhrszsm9MMJGky+ZpkD0C+sQlf1Y= Subject key identifier: 73:03:91:DF:61:48:97:CC:95:99:1D:4B:0C:05:AE:8A:55:27:D8:05 Certificate issuer: /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a Certificate serial: 010D0C9F4328584B95A79863C04E804224C10DC0 Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/5d5c344a-e189-3864-9d26-6e969f78a1f1.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 18914 IP address blocks: 204.8.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:98:63:c0:4e:80:42:24:c1:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=b5753cc3-1a56-41c4-aa4b-031d54243718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:39:f6:e7:1d:69:d9:ee:87:c6:98:42:60:80: ba:be:07:0a:00:27:40:04:9c:47:dd:9b:0a:20:63: d2:13:d0:60:a8:01:f5:32:0d:d7:c7:a8:73:9a:1a: eb:79:a7:ec:cf:22:fc:a2:86:9d:fa:ee:62:4e:0e: 09:0c:f3:11:80:c2:c0:d7:0b:84:90:62:9e:0f:f6: f4:b8:08:ed:0e:78:42:3b:68:71:d0:85:b5:f3:cd: d4:ac:02:13:84:88:29:7e:f9:af:7b:d5:90:a5:4f: ce:31:34:66:7f:25:d3:7a:2a:78:76:90:42:a1:04: eb:5f:54:76:05:dd:80:5f:6f:50:2d:a2:1c:1a:5b: 01:90:83:a9:81:8c:be:21:2c:40:27:8e:a4:0b:61: c6:fe:9c:22:24:48:f3:79:06:ee:71:fe:a6:ed:26: ef:9f:93:ad:48:9f:9f:62:dd:d7:db:12:c4:22:2c: 1b:1c:02:70:94:af:b5:fa:bf:8a:c8:f5:98:c0:54: 80:89:55:42:e7:fd:ba:73:4a:58:01:2f:66:9f:20: b5:db:cc:ef:ad:c3:a2:22:59:92:b5:d0:86:41:8f: 82:60:65:06:16:b0:07:f1:26:9c:31:3f:0b:0c:8e: fd:eb:fa:ec:fc:5e:eb:47:e3:e2:18:7f:0b:25:3b: 37:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:03:91:DF:61:48:97:CC:95:99:1D:4B:0C:05:AE:8A:55:27:D8:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/5d5c344a-e189-3864-9d26-6e969f78a1f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl X509v3 Authority Key Identifier: keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer sbgp-ipAddrBlock: critical IPv4: 204.8.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:21:44:b4:5e:90:a5:1c:b4:3c:a8:c6:13:59:ff:b3:12:7a: 69:03:3e:ea:42:4a:f8:11:8f:9a:3b:70:49:40:16:39:33:81: 04:af:22:42:ca:27:44:02:a9:11:a6:c0:16:e0:cc:d0:69:08: 08:ba:a1:2e:24:15:d7:3d:60:0e:a2:ad:1e:c4:3c:fb:32:66: c9:15:f1:10:38:3d:0f:c0:65:be:80:84:ae:6d:f5:00:bc:08: 18:ea:d1:57:e1:bb:65:2e:d3:03:8f:a4:b5:b4:47:02:53:fa: 38:3a:8e:61:99:69:74:3b:6d:1d:16:71:02:65:60:ee:c6:8b: 6a:5a:05:0c:be:c1:66:9d:43:de:d3:c5:22:6c:0a:18:21:f3: 49:ac:b4:ea:d5:5f:03:a3:12:1d:85:1f:dd:f9:95:78:25:0b: 33:a7:1a:26:14:36:05:54:e7:e4:7e:99:c5:47:e6:a3:a5:b9: b8:9a:3f:9e:7a:1d:67:93:f3:ce:d2:d9:bb:9a:1f:47:ac:d4: d2:90:cb:f9:1c:e7:d5:5f:1d:5f:2c:69:79:7f:22:1f:ee:36: 01:50:ba:c2:95:60:15:57:f2:48:60:99:e7:dd:64:09:6c:46: 25:c7:3f:cf:2f:60:aa:a3:28:6e:05:65:96:9b:7c:b5:99:ef: 35:d6:43:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5hjwE6AQiTBDcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM5Y2I5NjAtMjM5NC00YjIyLWI5ZjEtM2FjNTU2NmJj NzJhMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YjU3NTNjYzMtMWE1Ni00MWM0LWFhNGItMDMxZDU0MjQzNzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjn25x1p2e6HxphCYIC6vgcKACdABJxH3ZsK IGPSE9BgqAH1Mg3Xx6hzmhrreafszyL8ooad+u5iTg4JDPMRgMLA1wuEkGKeD/b0 uAjtDnhCO2hx0IW1883UrAIThIgpfvmve9WQpU/OMTRmfyXTeip4dpBCoQTrX1R2 Bd2AX29QLaIcGlsBkIOpgYy+ISxAJ46kC2HG/pwiJEjzeQbucf6m7Sbvn5OtSJ+f Yt3X2xLEIiwbHAJwlK+1+r+KyPWYwFSAiVVC5/26c0pYAS9mnyC128zvrcOiIlmS tdCGQY+CYGUGFrAH8SacMT8LDI796/rs/F7rR+PiGH8LJTs3kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMDkd9hSJfMlZkdSwwFropVJ9gFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzlj Yjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1NTY2YmM3MmEvNWQ1YzM0NGEtZTE4OS0z ODY0LTlkMjYtNmU5NjlmNzhhMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTM5Y2I5NjAtMjM5NC00YjIyLWI5 ZjEtM2FjNTU2NmJjNzJhL2UzOWNiOTYwLTIzOTQtNGIyMi1iOWYxLTNhYzU1NjZi YzcyYS5jcmwwHwYDVR0jBBgwFoAUx5iuk+5ta+2iXZtwBvHdRTnXH4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMzljYjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1 NTY2YmM3MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAhkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAhRLRekKUctDyoxhNZ/7MSemkDPupCSvgRj5o7cElAFjkzgQSvIkLK J0QCqRGmwBbgzNBpCAi6oS4kFdc9YA6irR7EPPsyZskV8RA4PQ/AZb6AhK5t9QC8 CBjq0Vfhu2Uu0wOPpLW0RwJT+jg6jmGZaXQ7bR0WcQJlYO7Gi2paBQy+wWadQ97T xSJsChgh80mstOrVXwOjEh2FH935lXglCzOnGiYUNgVU5+R+mcVH5qOlubiaP556 HWeT887S2buaH0es1NKQy/kc59VfHV8saXl/Ih/uNgFQusKVYBVX8khgmefdZAls RiXHP88vYKqjKG4FZZabfLWZ7zXWQ1I= -----END CERTIFICATE-----Generated at Wed Nov 5 14:56:44 2025 by rpki-client