$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/890db329-2478-3442-b6b3-ec84331a6a0a.roa File: 890db329-2478-3442-b6b3-ec84331a6a0a.roa (raw, json) Hash identifier: +yuYGohFQoZcRWmJJ1cva4cpZSyt2YvmOS84cv6HVPs= Subject key identifier: 8E:F5:61:B1:D1:2C:AA:F5:9F:8C:98:44:B4:03:0D:65:4E:43:76:80 Certificate issuer: /CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333 Certificate serial: 010D0C9F4328584BABFD0AF6A85EBFB9BB66E980 Authority key identifier: E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/890db329-2478-3442-b6b3-ec84331a6a0a.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 198949 IP address blocks: 205.208.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:0a:f6:a8:5e:bf:b9:bb:66:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=f7361bfe-134a-4d86-8123-9127a26a80ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c2:0e:0b:b8:a2:15:7d:6a:8b:34:a6:3e:c6: 1e:d9:26:a7:af:c1:4d:47:c8:4e:62:19:4e:6c:42: d4:78:2e:11:b1:12:7b:2a:9b:c7:c4:0e:18:27:2c: e4:05:b4:49:5b:00:de:ed:c9:02:e1:d0:ec:5d:11: ce:8c:06:bf:d3:fb:67:1a:c7:4c:df:fc:74:d0:65: 1f:23:bb:c8:ef:37:09:80:e1:87:80:69:2d:c1:a4: 09:4f:c3:ff:aa:16:5f:33:85:69:17:c6:de:42:54: d1:b3:7c:91:e6:a8:34:99:0c:10:27:c6:92:30:7c: 29:bb:f8:83:e5:30:d0:38:11:15:35:a0:1d:b5:06: 42:e3:1f:a5:9d:c4:0c:fb:e1:ab:26:d9:89:16:44: f0:a3:e4:f9:e8:e6:be:0f:0f:d7:6d:99:d9:c2:35: 67:53:d0:3d:10:f9:d6:d6:28:d6:42:e6:ce:01:28: be:d5:b6:26:86:36:9b:94:60:92:80:50:17:ee:76: 2b:9a:f9:59:dd:6a:a1:eb:66:e2:36:a4:af:70:62: 4d:09:b7:f1:42:5f:cc:0f:28:06:f3:41:2f:68:67: ab:6e:fe:17:12:02:74:d1:b8:92:16:a7:d9:b1:86: bc:3b:47:a2:58:f7:35:37:4b:0e:d6:2d:9c:68:4f: f4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F5:61:B1:D1:2C:AA:F5:9F:8C:98:44:B4:03:0D:65:4E:43:76:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/890db329-2478-3442-b6b3-ec84331a6a0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl X509v3 Authority Key Identifier: keyid:E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer sbgp-ipAddrBlock: critical IPv4: 205.208.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:54:42:b3:db:d0:39:2b:80:70:09:4c:f4:16:ba:6f:93:af: 19:12:57:7b:c7:7f:d6:2a:ed:94:aa:48:1d:0c:ee:ea:29:1e: 0e:fa:a8:b8:a4:5e:51:b5:39:da:d8:2a:c7:c3:02:6b:53:5b: 03:5f:bc:74:36:e8:a4:42:da:ae:95:4e:f0:32:ec:17:8c:c6: 12:7f:28:e8:e1:f4:2c:6b:3f:53:e7:fb:6f:8a:e7:35:bc:c4: ce:b1:c0:20:bd:06:8e:cf:b7:e6:f1:b3:0e:49:fa:1a:10:60: 63:06:45:a0:ac:4c:65:79:4e:48:26:ac:dd:e4:77:2c:bd:14: 12:2c:03:23:82:3e:b0:d4:ef:0e:6e:e9:8d:86:b1:13:09:57: d5:9a:3f:8d:84:1e:e2:df:7f:bc:69:3e:4f:92:f7:ec:b9:23: b4:d5:60:dc:d2:97:c6:23:a0:fd:c5:95:d5:8c:f1:d5:46:88: cf:94:7e:28:1e:31:00:51:4d:26:e4:72:59:77:4a:63:57:28: 35:54:c1:bd:8d:77:9b:15:d4:66:4b:0a:4e:65:2e:a1:58:8b: c7:a9:68:b4:b1:cf:85:61:c1:c8:72:bb:3d:a6:8d:8f:51:75: f3:0b:5b:fd:61:8a:5c:cd:e0:83:fa:cf:42:b9:6c:f4:0c:1a: a3:4e:76:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/Qr2qF6/ubtm6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgyMjE1MGYtMmU2Zi00ZmM5LWIwZDMtNWE4ZTA5MDNi MzMzMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk ZjczNjFiZmUtMTM0YS00ZDg2LTgxMjMtOTEyN2EyNmE4MGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsIOC7iiFX1qizSmPsYe2Sanr8FNR8hOYhlO bELUeC4RsRJ7KpvHxA4YJyzkBbRJWwDe7ckC4dDsXRHOjAa/0/tnGsdM3/x00GUf I7vI7zcJgOGHgGktwaQJT8P/qhZfM4VpF8beQlTRs3yR5qg0mQwQJ8aSMHwpu/iD 5TDQOBEVNaAdtQZC4x+lncQM++GrJtmJFkTwo+T56Oa+Dw/XbZnZwjVnU9A9EPnW 1ijWQubOASi+1bYmhjablGCSgFAX7nYrmvlZ3Wqh62biNqSvcGJNCbfxQl/MDygG 80EvaGerbv4XEgJ00biSFqfZsYa8O0eiWPc1N0sO1i2caE/0YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI71YbHRLKr1n4yYRLQDDWVOQ3aAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ODIy MTUwZi0yZTZmLTRmYzktYjBkMy01YThlMDkwM2IzMzMvODkwZGIzMjktMjQ3OC0z NDQyLWI2YjMtZWM4NDMzMWE2YTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTgyMjE1MGYtMmU2Zi00ZmM5LWIw ZDMtNWE4ZTA5MDNiMzMzLzk4MjIxNTBmLTJlNmYtNGZjOS1iMGQzLTVhOGUwOTAz YjMzMy5jcmwwHwYDVR0jBBgwFoAU6PtTQ2MJkFBb6KTESgm8RptQc+MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85ODIyMTUwZi0yZTZmLTRmYzktYjBkMy01YThl MDkwM2IzMzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzdAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhUQrPb0DkrgHAJTPQWum+TrxkSV3vHf9Yq7ZSqSB0M7uopHg76qLik XlG1OdrYKsfDAmtTWwNfvHQ26KRC2q6VTvAy7BeMxhJ/KOjh9CxrP1Pn+2+K5zW8 xM6xwCC9Bo7Pt+bxsw5J+hoQYGMGRaCsTGV5TkgmrN3kdyy9FBIsAyOCPrDU7w5u 6Y2GsRMJV9WaP42EHuLff7xpPk+S9+y5I7TVYNzSl8YjoP3FldWM8dVGiM+Ufige MQBRTSbkcll3SmNXKDVUwb2Nd5sV1GZLCk5lLqFYi8epaLSxz4Vhwchyuz2mjY9R dfMLW/1hilzN4IP6z0K5bPQMGqNOdmI= -----END CERTIFICATE-----Generated at Wed Nov 5 08:54:09 2025 by rpki-client