$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/9b95030b-a993-3973-92d4-5063b41f1b1b.roa File: 9b95030b-a993-3973-92d4-5063b41f1b1b.roa (raw, json) Hash identifier: fJXmuyBVpm588lHqGrCzkTLHZAB36W/Mv9GBYVIZSaU= Subject key identifier: 63:CF:D1:60:3F:AC:8E:6D:9B:43:DB:4A:96:82:D9:68:73:5B:62:45 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584AFC1BF0666DD36FF093D7BE40 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/9b95030b-a993-3973-92d4-5063b41f1b1b.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 207.202.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:f0:66:6d:d3:6f:f0:93:d7:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=ff4dfd14-d1b7-4ac4-be30-db709b759b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:11:98:9a:86:32:bb:d9:9b:2b:13:8d:82:62: e2:b8:82:cc:9a:c5:a8:51:ff:13:e4:23:4b:a9:22: dd:3f:e5:fa:37:4b:be:47:02:9e:fb:10:57:c6:97: d7:98:e3:87:a5:b2:be:e3:ea:55:7b:e5:2d:de:46: e0:8f:54:39:22:20:50:fb:4c:45:d7:ef:bd:43:d9: c5:4c:1b:c4:27:d3:5e:ca:9b:90:e8:51:4a:4b:00: c2:f5:b0:55:48:1a:2d:06:4a:4e:95:29:ce:32:9b: 9e:ef:fb:02:70:e7:bb:69:3b:79:d1:f6:e6:b3:a7: f2:6c:58:97:3d:a5:e8:b1:9e:a1:c0:af:95:67:96: 45:41:20:8f:07:77:f4:b4:87:9f:7e:bd:9a:f4:3f: 6e:04:e2:aa:94:c3:00:72:52:32:e5:2d:d2:b6:0c: c1:15:81:42:ec:85:c9:96:e9:ef:48:2e:15:57:09: 97:55:2d:fa:01:51:22:60:61:2b:47:93:54:c1:ac: d3:a8:5e:07:8d:fe:ce:4b:f1:5e:bc:98:2f:cf:4c: d5:08:09:da:13:fc:e3:46:18:79:1b:18:46:c6:d8: 96:d1:26:d3:36:b2:3e:0e:4c:6e:ec:86:86:b9:b8: cc:df:5e:52:ca:b9:4a:9c:a0:33:48:b5:fb:a1:e6: 3e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:CF:D1:60:3F:AC:8E:6D:9B:43:DB:4A:96:82:D9:68:73:5B:62:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/9b95030b-a993-3973-92d4-5063b41f1b1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:87:08:95:be:93:d7:91:23:85:32:66:ce:63:7e:9f:1d:4e: d6:b2:4b:ab:d3:a0:0e:50:59:ef:c1:9c:4a:79:87:1d:b9:10: 9b:de:13:57:4a:01:0a:e2:a1:15:93:1f:e9:c7:47:9a:d3:85: 1d:f9:77:08:ac:2f:70:40:e1:05:58:46:97:0f:42:80:f0:7b: ae:18:5e:51:2f:27:06:1b:a1:43:47:4e:7f:b0:24:8b:12:a8: a8:c6:78:e2:c1:04:a4:cb:f1:c3:5f:11:6a:f4:2d:13:c9:1f: 38:36:c5:b1:3e:40:0d:de:3a:4b:09:ba:ba:48:b4:c1:50:c0: d4:c2:a4:3a:0d:9c:44:c7:d4:25:aa:13:02:22:c1:f1:6e:cc: d8:aa:f9:4e:a3:4c:23:c1:9e:27:70:b5:ad:e2:5c:5e:dc:9f: 26:0b:0a:e3:ed:44:64:9a:04:32:3f:ee:89:37:ed:05:f3:8a: c0:d4:7c:24:71:8c:d8:17:29:6b:db:12:79:64:3d:a3:f0:08: 20:54:80:00:ba:56:71:17:db:dc:10:dc:46:9a:cb:23:48:0c: a0:5d:3b:f4:cb:b8:c9:ee:39:cb:e0:fa:a3:f6:e4:a9:a1:48: d6:d9:21:01:41:e2:e0:bb:98:ca:97:b8:9f:93:1a:5f:59:35: 22:63:74:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G/BmbdNv8JPXvkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZmY0ZGZkMTQtZDFiNy00YWM0LWJlMzAtZGI3MDliNzU5YjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRGYmoYyu9mbKxONgmLiuILMmsWoUf8T5CNL qSLdP+X6N0u+RwKe+xBXxpfXmOOHpbK+4+pVe+Ut3kbgj1Q5IiBQ+0xF1++9Q9nF TBvEJ9NeypuQ6FFKSwDC9bBVSBotBkpOlSnOMpue7/sCcOe7aTt50fbms6fybFiX PaXosZ6hwK+VZ5ZFQSCPB3f0tIeffr2a9D9uBOKqlMMAclIy5S3StgzBFYFC7IXJ lunvSC4VVwmXVS36AVEiYGErR5NUwazTqF4Hjf7OS/FevJgvz0zVCAnaE/zjRhh5 GxhGxtiW0SbTNrI+Dkxu7IaGubjM315SyrlKnKAzSLX7oeY+PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPP0WA/rI5tm0PbSpaC2WhzW2JFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvOWI5NTAzMGItYTk5My0z OTczLTkyZDQtNTA2M2I0MWYxYjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8oTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKHCJW+k9eRI4UyZs5jfp8dTtayS6vToA5QWe/BnEp5hx25EJveE1dK AQrioRWTH+nHR5rThR35dwisL3BA4QVYRpcPQoDwe64YXlEvJwYboUNHTn+wJIsS qKjGeOLBBKTL8cNfEWr0LRPJHzg2xbE+QA3eOksJurpItMFQwNTCpDoNnETH1CWq EwIiwfFuzNiq+U6jTCPBnidwta3iXF7cnyYLCuPtRGSaBDI/7ok37QXzisDUfCRx jNgXKWvbEnlkPaPwCCBUgAC6VnEX29wQ3EaayyNIDKBdO/TLuMnuOcvg+qP25Kmh SNbZIQFB4uC7mMqXuJ+TGl9ZNSJjdMI= -----END CERTIFICATE-----Generated at Wed Nov 5 03:05:33 2025 by rpki-client