$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/675d4af7-5725-33fa-bfda-fff3218e3d37.roa File: 675d4af7-5725-33fa-bfda-fff3218e3d37.roa (raw, json) Hash identifier: pxwD0Y9RSd5XPJl0+SkapnGKG0XcV6bQ9fwjsi0ViPw= Subject key identifier: 61:04:D1:62:23:8C:06:3B:9A:8A:88:49:AB:90:65:5D:26:00:AD:60 Certificate issuer: /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Certificate serial: 010D0C9F4328584B8BE21CF24237ADA095CAF180 Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/675d4af7-5725-33fa-bfda-fff3218e3d37.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 3807 IP address blocks: 207.196.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:1c:f2:42:37:ad:a0:95:ca:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=06a8a1f6-2a91-49a4-a186-277868c43147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f6:ca:19:00:bd:fd:d1:2d:91:5c:31:09:35: b7:24:31:b1:b0:68:6b:e7:c7:05:0d:e2:89:94:d7: c1:d9:91:bc:38:ff:cf:55:26:5a:79:2d:a2:b1:37: af:5a:27:22:66:46:66:3e:65:b6:be:e0:d5:54:dc: d0:f0:dd:d0:fb:5d:74:fb:1a:e5:a3:4e:49:23:c9: d2:2f:69:1a:23:fa:4c:88:14:e6:14:3b:a7:0b:ab: 77:0e:19:1c:dc:6a:58:64:97:b3:be:35:57:99:bd: 70:16:27:b2:23:66:97:15:45:96:0f:93:a2:43:45: b0:4d:81:2d:3c:24:79:21:7b:a5:c6:2b:f6:64:19: b8:37:f2:14:44:4c:ba:b7:ea:94:26:38:fd:e4:e4: 9d:25:a1:9d:43:60:db:d7:ad:2d:90:87:23:cc:b5: 31:9a:00:46:ce:e4:2e:75:0e:a9:c9:b5:41:17:78: 7b:e0:fe:74:e7:71:ac:75:2c:a1:fd:48:ae:0b:97: f7:3d:cc:17:51:fc:cd:7b:d8:e2:11:03:3c:5b:d4: 9f:27:84:17:bf:8d:47:10:6a:1c:4b:2f:e0:99:75: 86:1e:8e:8a:3b:95:2c:fa:d4:5f:25:25:31:1e:ec: a1:67:2c:71:79:8b:40:65:2b:86:25:e7:8f:d2:8f: 2c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:04:D1:62:23:8C:06:3B:9A:8A:88:49:AB:90:65:5D:26:00:AD:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/675d4af7-5725-33fa-bfda-fff3218e3d37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl X509v3 Authority Key Identifier: keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer sbgp-ipAddrBlock: critical IPv4: 207.196.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:08:6d:43:ab:f1:d2:2d:8a:c4:70:9b:0b:6a:3d:06:4b:9b: 1d:45:20:c8:e8:64:01:cb:63:2a:af:e7:14:f2:3e:77:ca:34: 4d:74:c5:96:6a:7e:2e:36:f6:b9:6f:45:2f:57:3c:43:25:00: cb:0a:3b:11:ed:98:37:a9:83:5f:92:3a:f8:fb:ce:9c:48:1a: ef:d9:56:63:22:f7:b4:08:1f:36:71:78:10:9c:4f:c4:ee:a6: ee:fd:a1:84:33:7c:da:8a:1e:93:10:c7:a8:f7:96:12:7a:63: 48:e5:b3:3f:65:3f:c4:6c:eb:f2:c7:77:06:8c:64:ba:99:f4: ac:a4:a7:be:13:30:98:78:63:ea:3e:11:6f:97:3d:3c:e5:d1: 54:7c:0d:e9:da:f6:7a:db:74:28:fe:d1:f5:86:8d:2c:c5:56: 6c:d2:8a:d7:f6:bb:58:68:11:b9:b1:99:34:47:bb:6a:d1:69: f0:77:2e:f2:ff:45:1d:19:e5:b3:6f:19:b3:25:ef:eb:92:ca: 62:c5:2d:8a:c6:c8:08:72:c4:71:87:c9:0c:a8:52:a7:92:e5: fb:56:1c:64:57:74:3e:87:44:e8:37:5c:fe:3e:e7:3c:23:fb: a1:98:ba:e2:2f:9c:9b:93:89:1c:b0:62:3c:df:3a:8a:cc:46: e0:9f:91:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4hzyQjetoJXK8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQ1YzdjM2QtNzJhNC00MjFkLWI0MWEtZDVlN2UyNTM0 MTA3MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk MDZhOGExZjYtMmE5MS00OWE0LWExODYtMjc3ODY4YzQzMTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPbKGQC9/dEtkVwxCTW3JDGxsGhr58cFDeKJ lNfB2ZG8OP/PVSZaeS2isTevWiciZkZmPmW2vuDVVNzQ8N3Q+110+xrlo05JI8nS L2kaI/pMiBTmFDunC6t3Dhkc3GpYZJezvjVXmb1wFieyI2aXFUWWD5OiQ0WwTYEt PCR5IXulxiv2ZBm4N/IUREy6t+qUJjj95OSdJaGdQ2Db160tkIcjzLUxmgBGzuQu dQ6pybVBF3h74P5053GsdSyh/UiuC5f3PcwXUfzNe9jiEQM8W9SfJ4QXv41HEGoc Sy/gmXWGHo6KO5Us+tRfJSUxHuyhZyxxeYtAZSuGJeeP0o8sxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEE0WIjjAY7moqISauQZV0mAK1gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVj N2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3ZTI1MzQxMDcvNjc1ZDRhZjctNTcyNS0z M2ZhLWJmZGEtZmZmMzIxOGUzZDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDQ1YzdjM2QtNzJhNC00MjFkLWI0 MWEtZDVlN2UyNTM0MTA3LzA0NWM3YzNkLTcyYTQtNDIxZC1iNDFhLWQ1ZTdlMjUz NDEwNy5jcmwwHwYDVR0jBBgwFoAUmFPVU8y7sPSmO9Q3aLg6B77bPXcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVjN2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3 ZTI1MzQxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz8SwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgIbUOr8dItisRwmwtqPQZLmx1FIMjoZAHLYyqv5xTyPnfKNE10xZZq fi429rlvRS9XPEMlAMsKOxHtmDepg1+SOvj7zpxIGu/ZVmMi97QIHzZxeBCcT8Tu pu79oYQzfNqKHpMQx6j3lhJ6Y0jlsz9lP8Rs6/LHdwaMZLqZ9Kykp74TMJh4Y+o+ EW+XPTzl0VR8Dena9nrbdCj+0fWGjSzFVmzSitf2u1hoEbmxmTRHu2rRafB3LvL/ RR0Z5bNvGbMl7+uSymLFLYrGyAhyxHGHyQyoUqeS5ftWHGRXdD6HROg3XP4+5zwj +6GYuuIvnJuTiRywYjzfOorMRuCfkcU= -----END CERTIFICATE-----Generated at Wed Nov 5 18:03:46 2025 by rpki-client