$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/f820e75f-4e7f-352a-a67a-a71ff8ba5559.roa File: f820e75f-4e7f-352a-a67a-a71ff8ba5559.roa (raw, json) Hash identifier: ezrrraQTHunj8UxnQsnHO1lkw8tckB+Rbc/PEIJdu/0= Subject key identifier: DA:3A:23:8C:54:AD:04:C1:A0:30:3D:3F:36:C7:36:FF:58:34:B5:35 Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F4328584B8EACC9D909B5FB982BCBD8D0 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/f820e75f-4e7f-352a-a67a-a71ff8ba5559.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 7782 IP address blocks: 107.152.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:c9:d9:09:b5:fb:98:2b:cb:d8:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=3e364967-c995-4ea5-b88b-c14b319bf5da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c5:32:0c:43:af:88:3a:c3:13:b5:8a:bc:51: 47:87:a4:4f:ba:f1:25:c5:5b:2c:f1:36:88:d8:0a: 6c:01:8b:9e:71:58:ea:7d:f8:ac:22:24:cd:64:7a: a7:61:da:01:69:46:1a:3e:49:d0:4f:8a:31:b3:b7: b0:a9:d6:0f:cb:61:1d:c4:36:81:70:09:c4:d0:d7: e2:8f:62:5b:ee:77:92:8a:ce:b9:f4:7d:a9:54:2c: d6:9e:80:df:9b:09:67:ce:95:cb:9e:aa:d1:46:31: 7c:d8:43:be:90:2f:fc:50:f3:d0:e1:b0:d3:a6:fe: 64:85:fd:9c:22:fb:3a:f5:10:66:ed:eb:88:10:a6: 65:e9:b4:52:2c:d7:97:61:ed:d0:cf:e2:b3:2f:e1: eb:e2:43:46:81:79:4d:eb:aa:ad:61:c7:63:19:85: 23:6a:59:e8:48:ef:9a:d5:66:25:61:6f:be:78:ce: d7:25:b6:48:25:5b:b2:59:c5:5b:1f:b5:c6:f8:5a: 16:81:c5:1c:e6:22:aa:71:2c:40:f5:1a:e8:33:21: 91:08:7c:c4:d0:6e:42:42:56:f7:ed:2f:d2:e7:bb: 95:dd:4a:69:3a:ed:00:89:84:87:4c:6b:e6:4b:9b: db:01:4a:d6:47:3b:0a:fc:f9:f1:0f:00:b2:42:97: d6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:3A:23:8C:54:AD:04:C1:A0:30:3D:3F:36:C7:36:FF:58:34:B5:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/f820e75f-4e7f-352a-a67a-a71ff8ba5559.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 107.152.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:c8:7b:4b:ca:4b:04:fd:20:80:ed:92:b7:65:a3:44:46:4c: 17:59:3c:f9:cf:b8:a3:c2:ab:14:79:7e:54:6d:5f:60:2d:bf: a9:e2:52:9e:71:cd:0d:db:b0:9d:10:c4:e8:46:d3:b7:53:90: 50:a4:bf:65:f0:9a:2d:67:a2:5b:14:65:12:9e:38:11:e1:05: 4c:7a:2c:e9:5a:89:ae:3d:21:d2:62:58:39:eb:b4:86:f3:35: a2:a5:64:71:3b:38:a4:55:17:a5:3f:70:4c:db:b9:e1:75:32: 94:ee:cd:1d:35:df:a7:48:e7:a5:90:0f:ec:da:95:4b:28:32: ac:c3:44:45:a2:a3:34:b4:c4:d7:d3:ab:ab:c8:1b:e5:a7:cc: d5:7f:d5:97:8b:23:3b:60:08:34:94:ee:e1:b3:d4:e4:be:94: da:f3:ad:59:d9:d4:13:1b:56:53:b3:ca:ec:82:3b:e2:cc:ef: 9d:46:a5:3f:f4:bc:49:48:c4:4a:c7:e3:33:9b:21:be:1a:30: e7:66:5c:f8:db:12:d0:88:b8:dc:99:c9:aa:b7:f9:fd:f2:7a: fb:ed:78:1e:b2:31:9c:6f:c7:6e:1c:7c:da:2b:42:13:b2:69: 52:f9:78:32:eb:46:5c:5b:f8:a8:7a:a1:49:d9:82:65:75:1b: 4a:37:92:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrMnZCbX7mCvL2NAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk M2UzNjQ5NjctYzk5NS00ZWE1LWI4OGItYzE0YjMxOWJmNWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMUyDEOviDrDE7WKvFFHh6RPuvElxVss8TaI 2ApsAYuecVjqffisIiTNZHqnYdoBaUYaPknQT4oxs7ewqdYPy2EdxDaBcAnE0Nfi j2Jb7neSis659H2pVCzWnoDfmwlnzpXLnqrRRjF82EO+kC/8UPPQ4bDTpv5khf2c Ivs69RBm7euIEKZl6bRSLNeXYe3Qz+KzL+Hr4kNGgXlN66qtYcdjGYUjalnoSO+a 1WYlYW++eM7XJbZIJVuyWcVbH7XG+FoWgcUc5iKqcSxA9RroMyGRCHzE0G5CQlb3 7S/S57uV3UppOu0AiYSHTGvmS5vbAUrWRzsK/PnxDwCyQpfW2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNo6I4xUrQTBoDA9PzbHNv9YNLU1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvZjgyMGU3NWYtNGU3Zi0z NTJhLWE2N2EtYTcxZmY4YmE1NTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEa5hwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3Ie0vKSwT9IIDtkrdlo0RGTBdZPPnPuKPCqxR5flRtX2Atv6niUp5x zQ3bsJ0QxOhG07dTkFCkv2Xwmi1nolsUZRKeOBHhBUx6LOlaia49IdJiWDnrtIbz NaKlZHE7OKRVF6U/cEzbueF1MpTuzR0136dI56WQD+zalUsoMqzDREWiozS0xNfT q6vIG+WnzNV/1ZeLIztgCDSU7uGz1OS+lNrzrVnZ1BMbVlOzyuyCO+LM751GpT/0 vElIxErH4zObIb4aMOdmXPjbEtCIuNyZyaq3+f3yevvteB6yMZxvx24cfNorQhOy aVL5eDLrRlxb+Kh6oUnZgmV1G0o3kmI= -----END CERTIFICATE-----Generated at Wed Nov 5 02:33:57 2025 by rpki-client