$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/222fc882-68d7-4892-a04a-f0d1836061c4/36314958-41f4-3cba-8d2d-fbb3aff86638.roa File: 36314958-41f4-3cba-8d2d-fbb3aff86638.roa (raw, json) Hash identifier: fYhg7KAKrlAwy7XMZ8KXRp6mXgRWBvPwuXOkPTma02k= Subject key identifier: 24:CE:DE:05:4B:E0:33:7C:63:53:3D:78:98:38:35:58:62:EF:BA:E3 Certificate issuer: /CN=222fc882-68d7-4892-a04a-f0d1836061c4 Certificate serial: 010D0C9F4328584B95A7957584D1F76282570100 Authority key identifier: 86:5E:DB:71:43:A9:13:B8:39:3F:53:0F:3C:9C:26:E6:79:BC:D2:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/222fc882-68d7-4892-a04a-f0d1836061c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/222fc882-68d7-4892-a04a-f0d1836061c4/36314958-41f4-3cba-8d2d-fbb3aff86638.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 64241 IP address blocks: 209.251.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/222fc882-68d7-4892-a04a-f0d1836061c4/222fc882-68d7-4892-a04a-f0d1836061c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/222fc882-68d7-4892-a04a-f0d1836061c4/222fc882-68d7-4892-a04a-f0d1836061c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/222fc882-68d7-4892-a04a-f0d1836061c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:95:75:84:d1:f7:62:82:57:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=222fc882-68d7-4892-a04a-f0d1836061c4 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=f3bd55ad-ca63-40bf-8e3e-226c668a87d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:89:bb:92:96:9d:0b:71:99:12:89:97:a4:0b: f6:2d:95:b2:e2:7a:c7:6d:4b:c6:3c:92:c6:05:8f: 4f:53:b1:60:7d:a3:ae:97:a5:cb:cd:31:f8:86:8c: 9c:f9:13:d3:de:e1:90:44:d6:1b:5e:8d:a8:27:fa: b1:8d:75:ee:47:04:55:7b:04:f3:6e:e0:21:26:f1: b3:c0:38:06:ac:9e:a8:33:eb:95:b8:3c:1a:94:7d: 2b:5f:cb:b1:56:b5:b2:16:7c:29:de:79:e6:d1:f2: b2:69:1b:58:dd:b8:64:fd:00:62:f3:64:5b:b2:f1: 93:77:63:ed:55:74:57:b0:8d:8f:ec:19:7d:3a:8c: 89:cb:21:a0:16:c3:58:26:86:98:a9:20:72:70:55: fa:38:fc:cd:02:b6:98:18:64:bb:18:55:92:21:df: 82:ef:61:db:8f:38:d7:83:b7:58:0f:e0:ed:da:bf: cd:aa:f8:dd:65:57:48:a0:4b:ba:ba:14:cd:0a:b6: a7:57:6e:a7:46:dd:9c:64:17:e7:78:0b:6b:f1:b4: 8d:53:7b:bc:2a:3a:c3:d6:ce:b7:4b:4c:a9:a5:1a: 84:f2:d5:56:10:a9:3b:13:74:5f:80:35:5e:e7:4f: 99:94:44:cf:24:a6:ef:9e:3c:73:cd:04:be:94:47: 74:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CE:DE:05:4B:E0:33:7C:63:53:3D:78:98:38:35:58:62:EF:BA:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/222fc882-68d7-4892-a04a-f0d1836061c4/36314958-41f4-3cba-8d2d-fbb3aff86638.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/222fc882-68d7-4892-a04a-f0d1836061c4/222fc882-68d7-4892-a04a-f0d1836061c4.crl X509v3 Authority Key Identifier: keyid:86:5E:DB:71:43:A9:13:B8:39:3F:53:0F:3C:9C:26:E6:79:BC:D2:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/222fc882-68d7-4892-a04a-f0d1836061c4.cer sbgp-ipAddrBlock: critical IPv4: 209.251.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:a0:65:a4:34:28:94:c5:a5:dc:b5:15:fe:6c:ed:6b:3b:b1: 18:d1:91:fb:95:70:c1:5b:14:c1:19:21:10:d1:aa:a5:10:8e: 30:c4:da:0f:85:a6:99:cb:f1:62:cb:a0:20:fd:66:a4:f1:58: 22:ab:31:9b:04:1c:82:11:69:5e:31:38:50:d2:97:74:af:15: ba:b6:9e:b1:1f:f5:48:9a:4f:62:be:5d:51:c2:54:d1:6d:ea: ea:13:19:62:98:5e:15:d9:59:9e:fb:b8:bb:2f:33:7f:da:15: a4:0a:99:b9:eb:f8:80:77:36:30:8d:c3:bb:df:ea:1f:f0:66: 4d:99:55:49:f3:16:90:a6:07:a5:42:f5:74:ef:be:68:6b:73: e7:f9:e7:47:c0:90:f1:80:f1:f8:2a:36:49:dc:95:4a:50:fc: c0:c9:85:fa:d0:a6:cd:e4:d8:d3:a8:c2:13:3e:25:4b:ee:62: ca:75:a8:9a:ef:57:75:54:96:19:b9:6e:11:06:b1:2d:43:19: 04:89:a6:70:ee:0a:34:bd:2a:b7:a7:26:4f:63:33:cc:d5:9a: 2b:78:8f:cd:cb:09:ee:b0:df:bc:f6:10:35:90:10:2f:1c:61: 3e:4b:fa:c1:64:9f:27:3b:e9:8b:ee:59:bf:ab:3d:e2:fb:eb: 0a:5e:e6:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5V1hNH3YoJXAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjIyZmM4ODItNjhkNy00ODkyLWEwNGEtZjBkMTgzNjA2 MWM0MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZjNiZDU1YWQtY2E2My00MGJmLThlM2UtMjI2YzY2OGE4N2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIm7kpadC3GZEomXpAv2LZWy4nrHbUvGPJLG BY9PU7FgfaOul6XLzTH4hoyc+RPT3uGQRNYbXo2oJ/qxjXXuRwRVewTzbuAhJvGz wDgGrJ6oM+uVuDwalH0rX8uxVrWyFnwp3nnm0fKyaRtY3bhk/QBi82RbsvGTd2Pt VXRXsI2P7Bl9OoyJyyGgFsNYJoaYqSBycFX6OPzNAraYGGS7GFWSId+C72HbjzjX g7dYD+Dt2r/NqvjdZVdIoEu6uhTNCranV26nRt2cZBfneAtr8bSNU3u8KjrD1s63 S0yppRqE8tVWEKk7E3RfgDVe50+ZlETPJKbvnjxzzQS+lEd0fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTO3gVL4DN8Y1M9eJg4NVhi77rjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMjJm Yzg4Mi02OGQ3LTQ4OTItYTA0YS1mMGQxODM2MDYxYzQvMzYzMTQ5NTgtNDFmNC0z Y2JhLThkMmQtZmJiM2FmZjg2NjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjIyZmM4ODItNjhkNy00ODkyLWEw NGEtZjBkMTgzNjA2MWM0LzIyMmZjODgyLTY4ZDctNDg5Mi1hMDRhLWYwZDE4MzYw NjFjNC5jcmwwHwYDVR0jBBgwFoAUhl7bcUOpE7g5P1MPPJwm5nm80p0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMjJmYzg4Mi02OGQ3LTQ4OTItYTA0YS1mMGQx ODM2MDYxYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0fv1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECgZaQ0KJTFpdy1Ff5s7Ws7sRjRkfuVcMFbFMEZIRDRqqUQjjDE2g+F ppnL8WLLoCD9ZqTxWCKrMZsEHIIRaV4xOFDSl3SvFbq2nrEf9UiaT2K+XVHCVNFt 6uoTGWKYXhXZWZ77uLsvM3/aFaQKmbnr+IB3NjCNw7vf6h/wZk2ZVUnzFpCmB6VC 9XTvvmhrc+f550fAkPGA8fgqNknclUpQ/MDJhfrQps3k2NOowhM+JUvuYsp1qJrv V3VUlhm5bhEGsS1DGQSJpnDuCjS9KrenJk9jM8zVmit4j83LCe6w37z2EDWQEC8c YT5L+sFknyc76YvuWb+rPeL76wpe5kA= -----END CERTIFICATE-----Generated at Wed Nov 5 23:04:21 2025 by rpki-client