$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/9f52762d-473c-34c8-82f2-31897bcaf3d6.roa File: 9f52762d-473c-34c8-82f2-31897bcaf3d6.roa (raw, json) Hash identifier: NrDPfMYrDyIYlYzYA47qnHs1HUrbGJKx1qJCE8T8Qug= Subject key identifier: FF:9B:54:4E:61:49:F9:99:B6:F8:8B:96:57:FC:6B:09:76:04:AC:0D Certificate issuer: /CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265 Certificate serial: 010D0C9F4328584B852A0F0BDB1C8ABCA8AB1E80 Authority key identifier: 6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/9f52762d-473c-34c8-82f2-31897bcaf3d6.roa Signing time: Tue 14 Oct 2025 15:14:57 +0000 ROA not before: Tue 14 Oct 2025 15:14:57 +0000 ROA not after: Mon 12 Jan 2026 16:14:57 +0000 asID: 834 IP address blocks: 206.174.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:2a:0f:0b:db:1c:8a:bc:a8:ab:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265 Validity Not Before: Oct 14 15:14:57 2025 GMT Not After : Jan 12 16:14:57 2026 GMT Subject: CN=07af5190-4da1-40d1-8577-d559aaeb5407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3d:a7:72:2f:63:b7:54:6b:1a:ac:aa:43:e8: 89:d6:db:03:e1:87:e8:a7:26:64:c4:a4:07:e5:85: 1f:85:15:0e:25:0d:c0:0f:da:c4:42:8c:31:6c:75: 83:b2:1f:de:80:49:ed:b3:3a:70:b4:23:93:5a:11: 85:a1:2d:e3:ca:4f:8f:31:ce:88:b1:e6:aa:ff:32: 10:dd:36:e5:24:89:11:d2:61:39:74:0b:26:58:dd: 42:cd:59:50:e2:3f:73:4d:29:a5:26:b5:e0:1a:2e: 78:24:b9:64:b0:87:13:b5:43:01:17:cb:49:e7:25: 9b:64:f0:9b:c0:a0:08:e6:34:ca:31:b9:61:3a:c5: f2:31:98:11:91:dc:cc:85:42:06:40:af:b5:7b:8f: 2f:15:09:3b:82:97:d6:99:1a:82:4b:f7:2c:cf:a5: 61:e8:8e:63:cf:7e:a2:16:d0:3f:ed:7d:73:72:0b: 5e:f1:27:1d:1c:ce:d3:0c:f1:e4:f0:1f:96:f4:c3: aa:aa:56:ae:27:c2:3f:78:bd:d6:a3:ce:a9:02:ea: 46:df:89:75:65:fb:14:1f:a3:4a:5a:50:a2:ed:7d: 50:03:04:75:ec:b1:16:11:03:12:fa:b6:68:dc:35: a3:6d:79:43:96:1d:ee:34:c4:eb:df:a4:8f:6e:9d: 08:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9B:54:4E:61:49:F9:99:B6:F8:8B:96:57:FC:6B:09:76:04:AC:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/9f52762d-473c-34c8-82f2-31897bcaf3d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl X509v3 Authority Key Identifier: keyid:6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer sbgp-ipAddrBlock: critical IPv4: 206.174.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:ff:75:34:b5:f6:c3:dd:ff:8b:9b:57:39:c6:12:8c:64:a5: 03:3f:8d:c7:ff:f5:ab:3f:6a:55:f7:6e:34:54:53:b0:7a:92: e3:1e:1a:96:0c:55:2e:9f:33:be:2d:dc:d1:2c:4a:3d:c6:ce: a3:15:df:03:69:73:2b:63:d2:92:f5:7c:a9:98:f1:14:30:29: e5:7c:f0:46:35:ed:b6:c8:f9:e8:a2:9d:18:e0:59:ac:fd:42: 1c:64:f8:3c:c2:00:16:ba:c6:79:a6:1d:4e:28:73:db:2d:4b: ab:cb:38:f9:ee:6e:16:35:7d:ec:97:d3:77:1a:9a:25:94:7e: 10:9e:ef:e0:79:c2:d9:f3:91:c3:6e:48:d1:55:d2:2f:e3:fe: 08:ce:90:04:53:f4:a7:6d:0a:89:cc:51:c2:6b:bf:93:29:fd: ba:f8:c3:67:89:cb:0e:10:0b:92:55:b0:2c:e1:d6:42:2b:f3: 4c:f5:ae:fd:78:21:fb:72:b1:67:46:27:ea:34:0b:4e:0d:68: c6:bf:80:42:44:d5:7b:58:b0:56:b0:35:8d:ad:49:23:68:dc: c2:10:c4:83:12:59:8f:4e:71:c2:f8:37:7d:57:b5:a1:76:56: 2f:42:e8:79:c2:5d:d8:52:3e:f0:d3:e1:ef:5c:3f:17:62:e0: 6c:7e:e7:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuFKg8L2xyKvKirHoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZlOWVkMWMtZGQ0Zi00ZTFlLThlMjYtMjAxNDMzNGVl MjY1MB4XDTI1MTAxNDE1MTQ1N1oXDTI2MDExMjE2MTQ1N1owLzEtMCsGA1UEAxMk MDdhZjUxOTAtNGRhMS00MGQxLTg1NzctZDU1OWFhZWI1NDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxT2nci9jt1RrGqyqQ+iJ1tsD4YfopyZkxKQH 5YUfhRUOJQ3AD9rEQowxbHWDsh/egEntszpwtCOTWhGFoS3jyk+PMc6Iseaq/zIQ 3TblJIkR0mE5dAsmWN1CzVlQ4j9zTSmlJrXgGi54JLlksIcTtUMBF8tJ5yWbZPCb wKAI5jTKMblhOsXyMZgRkdzMhUIGQK+1e48vFQk7gpfWmRqCS/csz6Vh6I5jz36i FtA/7X1zcgte8ScdHM7TDPHk8B+W9MOqqlauJ8I/eL3Wo86pAupG34l1ZfsUH6NK WlCi7X1QAwR17LEWEQMS+rZo3DWjbXlDlh3uNMTr36SPbp0IjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+bVE5hSfmZtviLllf8awl2BKwNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5 ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0MzM0ZWUyNjUvOWY1Mjc2MmQtNDczYy0z NGM4LTgyZjItMzE4OTdiY2FmM2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmZlOWVkMWMtZGQ0Zi00ZTFlLThl MjYtMjAxNDMzNGVlMjY1LzJmZTllZDFjLWRkNGYtNGUxZS04ZTI2LTIwMTQzMzRl ZTI2NS5jcmwwHwYDVR0jBBgwFoAUbcTQif/6sNYsCWoRLEBwddRje9MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0 MzM0ZWUyNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzq6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGj/dTS19sPd/4ubVznGEoxkpQM/jcf/9as/alX3bjRUU7B6kuMeGpYM VS6fM74t3NEsSj3GzqMV3wNpcytj0pL1fKmY8RQwKeV88EY17bbI+eiinRjgWaz9 Qhxk+DzCABa6xnmmHU4oc9stS6vLOPnubhY1feyX03camiWUfhCe7+B5wtnzkcNu SNFV0i/j/gjOkART9KdtConMUcJrv5Mp/br4w2eJyw4QC5JVsCzh1kIr80z1rv14 IftysWdGJ+o0C04NaMa/gEJE1XtYsFawNY2tSSNo3MIQxIMSWY9OccL4N31XtaF2 Vi9C6HnCXdhSPvDT4e9cPxdi4Gx+54I= -----END CERTIFICATE-----Generated at Wed Nov 5 01:45:38 2025 by rpki-client