$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/3c3f1331-082e-3016-8d90-383739e6a21b.roa File: 3c3f1331-082e-3016-8d90-383739e6a21b.roa (raw, json) Hash identifier: aXw62PlDX4lJg33bxKILO0CztuycjaqzPQ+G/qscjrU= Subject key identifier: 89:9C:9C:3B:52:3E:D8:42:A7:5E:EE:AD:BF:8F:91:B1:86:A4:37:F1 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584BA0D26442F4599C60A904CB40 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/3c3f1331-082e-3016-8d90-383739e6a21b.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 207.202.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:64:42:f4:59:9c:60:a9:04:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=37b08f82-88d4-46ad-b944-c8bce298314a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b9:b4:b7:da:b2:91:fa:94:15:af:da:ff:d0: 1c:3f:e5:82:c7:70:a9:10:1e:71:2f:5d:4c:a6:9d: 80:5e:94:9e:d6:a9:22:35:5e:90:bd:83:7a:cf:47: 73:4b:0f:a6:87:dc:4e:86:fc:f1:bd:ce:5a:63:91: 89:ff:f9:8a:08:6b:12:f9:c3:74:42:d3:8a:d0:26: 67:c6:64:11:37:e5:f1:0b:3b:f8:cc:64:8e:a4:e0: 76:7a:58:3a:78:8b:da:bb:ee:b8:c6:3b:69:a3:86: db:9d:cf:01:45:ee:b4:1f:7c:95:05:35:1a:61:5d: 50:33:4b:cd:5c:7c:16:d0:57:5e:7d:d9:0e:98:8d: da:03:34:a9:86:f7:9e:c2:f4:e5:61:98:05:4d:79: 8c:56:1e:76:cd:fb:65:73:84:3c:34:8e:35:a3:40: 28:37:e9:de:2e:2d:55:83:1c:38:44:c6:2b:c9:8d: 1b:bd:8e:f5:40:f4:2d:72:b7:28:36:bf:c0:ca:b7: c0:c6:0c:0d:36:73:61:5c:72:31:8c:c9:5c:93:d4: 22:9f:49:11:66:f8:9d:55:ad:ef:0d:b4:85:1f:1f: 07:e1:98:32:d6:b7:5b:6c:6d:ac:4f:e3:2c:5f:64: c7:7a:d2:0b:7a:b7:65:82:12:23:05:a7:7b:f0:81: 74:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9C:9C:3B:52:3E:D8:42:A7:5E:EE:AD:BF:8F:91:B1:86:A4:37:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/3c3f1331-082e-3016-8d90-383739e6a21b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:53:78:b1:e9:ef:ff:77:d5:87:2c:01:a8:6c:71:4f:a2:6c: ba:a3:51:74:c4:a1:06:df:82:8b:85:3b:be:a4:e4:5d:f2:62: 9d:2f:63:f2:56:78:42:41:3e:c3:fa:f3:98:45:ff:8e:a0:25: 3e:d9:5a:99:d0:9c:16:20:80:b8:24:85:64:3e:b5:29:d1:d5: aa:a6:7b:08:16:e9:98:d1:ca:dc:c8:87:1c:75:f8:f2:65:af: 0e:6f:9b:b0:13:d8:9f:88:ab:0b:c8:b4:34:bf:9e:56:63:89: b1:bf:fb:ca:e6:f4:5c:a0:5f:13:30:4c:9d:d7:91:64:7e:43: f2:e4:4e:86:84:ce:98:6f:59:45:0c:d6:f9:fe:bb:45:aa:c2: 77:32:af:ea:db:65:2a:50:d6:ff:23:8a:7c:00:f2:5e:af:ed: 9c:a6:20:24:47:3a:2d:ed:fa:cd:a9:5b:e0:2d:c5:b1:52:0b: 6b:cf:f1:6d:61:2a:14:fd:ea:5b:f5:c7:48:b6:be:b7:ea:ca: 6e:61:76:9d:f6:7e:9b:09:fd:4f:41:61:d3:ba:ab:3c:32:f4: fa:37:1e:1c:69:86:b6:4f:ac:d7:83:aa:9b:f1:63:2b:4f:8a: 4f:6b:ac:35:d7:30:f8:d1:7b:00:81:cd:cf:62:b2:0f:8d:a5: 56:e8:64:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0mRC9FmcYKkEy0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MzdiMDhmODItODhkNC00NmFkLWI5NDQtYzhiY2UyOTgzMTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrm0t9qykfqUFa/a/9AcP+WCx3CpEB5xL11M pp2AXpSe1qkiNV6QvYN6z0dzSw+mh9xOhvzxvc5aY5GJ//mKCGsS+cN0QtOK0CZn xmQRN+XxCzv4zGSOpOB2elg6eIvau+64xjtpo4bbnc8BRe60H3yVBTUaYV1QM0vN XHwW0FdefdkOmI3aAzSphveewvTlYZgFTXmMVh52zftlc4Q8NI41o0AoN+neLi1V gxw4RMYryY0bvY71QPQtcrcoNr/AyrfAxgwNNnNhXHIxjMlck9Qin0kRZvidVa3v DbSFHx8H4Zgy1rdbbG2sT+MsX2THetILerdlghIjBad78IF0rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImcnDtSPthCp17urb+PkbGGpDfxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvM2MzZjEzMzEtMDgyZS0z MDE2LThkOTAtMzgzNzM5ZTZhMjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8oYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtTeLHp7/931YcsAahscU+ibLqjUXTEoQbfgouFO76k5F3yYp0vY/JW eEJBPsP685hF/46gJT7ZWpnQnBYggLgkhWQ+tSnR1aqmewgW6ZjRytzIhxx1+PJl rw5vm7AT2J+IqwvItDS/nlZjibG/+8rm9FygXxMwTJ3XkWR+Q/LkToaEzphvWUUM 1vn+u0Wqwncyr+rbZSpQ1v8jinwA8l6v7ZymICRHOi3t+s2pW+AtxbFSC2vP8W1h KhT96lv1x0i2vrfqym5hdp32fpsJ/U9BYdO6qzwy9Po3HhxphrZPrNeDqpvxYytP ik9rrDXXMPjRewCBzc9isg+NpVboZK8= -----END CERTIFICATE-----Generated at Wed Nov 5 05:44:38 2025 by rpki-client