$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/5fa6e3d9-d618-3d95-9a11-af6760164377.roa File: 5fa6e3d9-d618-3d95-9a11-af6760164377.roa (raw, json) Hash identifier: 2MQWScoQ6jwFGVR9Zt5HBd1oJ3Yv2q2AhDHgDUZdbqA= Subject key identifier: D3:95:0B:44:5D:44:FD:AE:2A:07:96:13:1C:17:3B:58:22:A0:96:0A Certificate issuer: /CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9 Certificate serial: 010D0C9F4328584B8EACE65CFFB2C92FFFE94A00 Authority key identifier: B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/5fa6e3d9-d618-3d95-9a11-af6760164377.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 400790 IP address blocks: 207.228.219.0/24 maxlen: 24 2606:f6c0:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:e6:5c:ff:b2:c9:2f:ff:e9:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=21b44859-2713-4079-92e8-b8b1dc980833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8c:1c:d6:6b:1e:b6:a4:d4:9e:8a:a8:59:3c: 6c:58:cd:7a:1a:b9:a0:95:b1:53:3f:52:d6:8b:31: bd:c0:6d:0e:6c:dc:b6:cb:44:5c:c3:ed:23:b3:21: 9d:25:32:03:d0:25:97:00:d9:d8:27:d0:cc:56:99: 0f:22:62:f2:51:5d:76:41:69:cc:14:3c:20:4e:25: 75:85:de:60:5f:67:ea:0a:4a:ef:04:82:e2:75:b7: 0b:db:39:9b:a1:a2:e4:74:ab:64:bf:25:bb:c7:dc: a6:89:25:8b:33:2d:a5:03:d5:2e:1c:65:30:43:7c: b6:75:3a:a8:b5:ff:4d:7e:d3:c5:63:c5:41:31:4b: 78:20:42:49:84:e9:5c:a1:b1:38:f4:2d:09:9c:0c: a1:c6:28:ec:69:56:96:6e:5b:bd:36:4b:2e:e1:3f: 70:2a:96:a1:2b:a2:12:14:da:8c:f0:06:d4:2d:83: 05:90:9a:7d:52:d3:f7:43:c5:07:63:6b:30:18:d2: 36:55:50:76:69:29:85:e3:50:3d:13:ab:ba:70:48: 91:7f:60:41:4c:9a:7c:29:41:11:3a:66:3a:7d:df: 98:e1:cf:6a:3b:f6:da:aa:83:dc:ee:9e:27:a0:80: 5d:29:5e:14:c8:b9:39:f1:e2:c0:ed:19:d5:5c:10: 8f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:95:0B:44:5D:44:FD:AE:2A:07:96:13:1C:17:3B:58:22:A0:96:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/5fa6e3d9-d618-3d95-9a11-af6760164377.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl X509v3 Authority Key Identifier: keyid:B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer sbgp-ipAddrBlock: critical IPv4: 207.228.219.0/24 IPv6: 2606:f6c0:100::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:46:84:77:51:d3:b5:27:cc:3a:79:33:ce:65:42:d0:7f:f0: 7a:b2:6e:20:cf:af:17:bb:ca:7b:31:b5:b7:3e:cb:cd:e8:4e: 27:20:31:9d:68:d4:56:ad:01:b2:14:38:3d:7f:14:6a:24:72: 00:dd:92:0c:69:68:bf:47:49:d9:db:58:c7:15:81:42:df:76: 5f:df:96:3d:d3:98:2a:d5:c4:70:5e:2f:99:52:94:f6:4c:64: 96:bb:42:9b:b6:c4:34:c3:b4:c0:b7:40:4c:da:e3:36:ea:fe: 9d:36:e8:df:1c:40:e9:65:e1:32:53:c7:0d:b3:a7:82:4d:ce: 6f:44:3d:d2:43:08:92:90:75:f5:a2:c3:fa:25:ca:aa:1e:05: 02:9d:e9:44:37:b4:b8:ce:48:46:20:60:84:44:06:b9:89:1c: 13:aa:92:d5:48:ee:83:b3:de:05:b4:88:39:7b:35:7c:69:e1: eb:34:4b:6b:8d:4c:c3:a0:d3:fa:a0:ca:90:a2:e8:69:44:74: 80:77:8b:7f:b4:70:fc:8b:2f:5e:23:9f:73:14:1c:67:18:9a: 65:ac:a8:a3:56:d0:d0:69:9c:dd:52:63:f6:a5:48:19:30:97: db:e7:29:20:e5:c2:6a:a8:3a:3c:f3:df:08:d7:f2:df:04:3b: 38:37:06:de -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEuOrOZc/7LJL//pSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU2OWU1NWQtM2JhZi00MWU2LTllNjctYmJlNWVkODg4 YmU5MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MjFiNDQ4NTktMjcxMy00MDc5LTkyZTgtYjhiMWRjOTgwODMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIwc1msetqTUnoqoWTxsWM16GrmglbFTP1LW izG9wG0ObNy2y0Rcw+0jsyGdJTID0CWXANnYJ9DMVpkPImLyUV12QWnMFDwgTiV1 hd5gX2fqCkrvBILidbcL2zmboaLkdKtkvyW7x9ymiSWLMy2lA9UuHGUwQ3y2dTqo tf9NftPFY8VBMUt4IEJJhOlcobE49C0JnAyhxijsaVaWblu9Nksu4T9wKpahK6IS FNqM8AbULYMFkJp9UtP3Q8UHY2swGNI2VVB2aSmF41A9E6u6cEiRf2BBTJp8KUER OmY6fd+Y4c9qO/baqoPc7p4noIBdKV4UyLk58eLA7RnVXBCPDwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFNOVC0RdRP2uKgeWExwXO1gioJYKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yZTY5 ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1ZWQ4ODhiZTkvNWZhNmUzZDktZDYxOC0z ZDk1LTlhMTEtYWY2NzYwMTY0Mzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmU2OWU1NWQtM2JhZi00MWU2LTll NjctYmJlNWVkODg4YmU5LzJlNjllNTVkLTNiYWYtNDFlNi05ZTY3LWJiZTVlZDg4 OGJlOS5jcmwwHwYDVR0jBBgwFoAUuOVt8qT8p5onhZVWGclu3DiFdDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yZTY5ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1 ZWQ4ODhiZTkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAz+TbMA8E AgACMAkDBwAmBvbAAQAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAdkaEd1HTtSfMOnkzzmVC0H/werJuIM+v F7vKezG1tz7LzehOJyAxnWjUVq0BshQ4PX8UaiRyAN2SDGlov0dJ2dtYxxWBQt92 X9+WPdOYKtXEcF4vmVKU9kxklrtCm7bENMO0wLdATNrjNur+nTbo3xxA6WXhMlPH DbOngk3Ob0Q90kMIkpB19aLD+iXKqh4FAp3pRDe0uM5IRiBghEQGuYkcE6qS1Uju g7PeBbSIOXs1fGnh6zRLa41Mw6DT+qDKkKLoaUR0gHeLf7Rw/IsvXiOfcxQcZxia Zayoo1bQ0Gmc3VJj9qVIGTCX2+cpIOXCaqg6PPPfCNfy3wQ7ODcG3g== -----END CERTIFICATE-----Generated at Mon Oct 20 15:32:56 2025 by rpki-client