$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/8c2234ec-b3d4-38eb-b0f2-c2755e774182.roa File: 8c2234ec-b3d4-38eb-b0f2-c2755e774182.roa (raw, json) Hash identifier: mVQk0GtesZbLlehDOImoE2rw6Xs1+qyHvLxjlpuXUI0= Subject key identifier: 5C:2E:41:51:E5:AA:FC:14:1D:1F:19:1A:62:89:93:45:77:07:AD:C5 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584BA0D2643112852BDFA6EAA580 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/8c2234ec-b3d4-38eb-b0f2-c2755e774182.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 207.202.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:64:31:12:85:2b:df:a6:ea:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=ae142238-e46c-483e-8fd1-e61076d62ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4f:71:ab:ab:a2:b4:ae:73:01:77:45:38:d2: d7:87:47:ba:c3:d6:5c:13:a3:6a:f8:7a:68:5e:fc: a3:1c:3f:43:e3:4e:c7:db:80:8b:5d:13:16:ea:fb: 32:9a:9c:52:48:79:f5:fd:92:9d:69:1b:24:20:6c: fd:06:1b:35:2b:12:c4:fc:b5:7e:28:6f:05:b2:6d: e5:b7:33:f9:91:38:ab:04:2d:a8:bf:ad:54:d1:0e: dd:2f:3c:b2:99:3c:a0:ea:3c:a9:55:5f:42:e5:bf: e8:33:81:0e:3b:ef:c6:91:82:c1:3b:c8:97:22:be: bb:41:8b:fe:96:0e:c4:63:86:17:ee:68:2d:82:7a: 94:73:96:4d:f1:53:01:31:e3:c6:cb:6b:c2:fc:f5: ae:28:8d:6b:8d:40:45:76:68:27:10:5b:6c:a4:1b: 3f:b0:8a:5e:60:ac:91:0d:e5:a8:a6:11:1d:ba:62: 9d:7f:89:4f:8d:86:32:d6:f7:e0:93:65:35:6d:78: 25:4c:69:fb:ef:3a:f5:b3:5b:42:e8:7e:0d:43:1a: ec:0d:6c:3e:b1:ea:37:9c:7d:f6:c3:84:17:5b:bb: fc:b1:7e:5d:60:3d:4a:c3:ef:d5:db:c5:9a:7a:a8: 25:8e:fa:f5:44:b7:b9:e3:17:4f:55:1d:3f:cc:0b: f3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:2E:41:51:E5:AA:FC:14:1D:1F:19:1A:62:89:93:45:77:07:AD:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/8c2234ec-b3d4-38eb-b0f2-c2755e774182.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:29:9a:7c:41:bf:2e:22:b1:0b:02:a6:82:ec:3d:82:4b:59: 4a:04:ad:b1:c9:28:0a:c4:63:88:dc:75:ad:d4:4a:d6:bd:2d: 15:f5:bf:c8:41:4c:74:cb:a3:c7:e8:9b:e4:8a:44:a9:da:f2: 24:a4:bc:ed:9c:17:06:d4:ef:82:2a:7b:8d:87:32:1c:ff:de: 78:5e:38:cc:0c:7e:c9:e5:1e:ef:2b:a5:62:ea:25:5c:89:23: 56:4d:c8:7d:09:ed:0a:4a:68:67:2b:15:ba:d8:e0:84:65:c4: 84:69:d2:f9:46:96:89:dc:e1:94:31:20:fe:80:2d:0a:7d:a7: 51:86:8c:aa:df:f8:39:c5:67:1e:3f:15:36:48:99:63:52:c3: e5:39:b4:46:7b:72:ce:af:68:39:87:51:46:c3:a8:67:b9:1d: 0a:00:74:63:28:8b:2a:bb:63:0b:8b:67:a9:fa:15:37:71:34: 82:99:89:e6:a3:f5:88:c7:c9:cc:0b:a9:50:d6:7b:43:a8:12: a3:1e:3e:47:7f:b1:6d:30:d3:53:2d:38:e4:7e:cd:73:38:7c: c2:59:07:0a:b0:8b:df:24:61:98:aa:96:97:a4:b0:2b:6d:47: 5a:92:e0:68:ea:d8:1c:bf:20:24:23:e7:33:e3:f2:4b:c2:ca: dd:55:aa:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0mQxEoUr36bqpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk YWUxNDIyMzgtZTQ2Yy00ODNlLThmZDEtZTYxMDc2ZDYyY2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk9xq6uitK5zAXdFONLXh0e6w9ZcE6Nq+Hpo XvyjHD9D407H24CLXRMW6vsympxSSHn1/ZKdaRskIGz9Bhs1KxLE/LV+KG8Fsm3l tzP5kTirBC2ov61U0Q7dLzyymTyg6jypVV9C5b/oM4EOO+/GkYLBO8iXIr67QYv+ lg7EY4YX7mgtgnqUc5ZN8VMBMePGy2vC/PWuKI1rjUBFdmgnEFtspBs/sIpeYKyR DeWophEdumKdf4lPjYYy1vfgk2U1bXglTGn77zr1s1tC6H4NQxrsDWw+seo3nH32 w4QXW7v8sX5dYD1Kw+/V28Waeqgljvr1RLe54xdPVR0/zAvzDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwuQVHlqvwUHR8ZGmKJk0V3B63FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvOGMyMjM0ZWMtYjNkNC0z OGViLWIwZjItYzI3NTVlNzc0MTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8oYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGApmnxBvy4isQsCpoLsPYJLWUoErbHJKArEY4jcda3USta9LRX1v8hB THTLo8fom+SKRKna8iSkvO2cFwbU74Iqe42HMhz/3nheOMwMfsnlHu8rpWLqJVyJ I1ZNyH0J7QpKaGcrFbrY4IRlxIRp0vlGlonc4ZQxIP6ALQp9p1GGjKrf+DnFZx4/ FTZImWNSw+U5tEZ7cs6vaDmHUUbDqGe5HQoAdGMoiyq7YwuLZ6n6FTdxNIKZieaj 9YjHycwLqVDWe0OoEqMePkd/sW0w01MtOOR+zXM4fMJZBwqwi98kYZiqlpeksCtt R1qS4Gjq2By/ICQj5zPj8kvCyt1Vqgs= -----END CERTIFICATE-----Generated at Wed Nov 5 01:35:00 2025 by rpki-client