$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/cf7b1268-ef8f-34ed-9a98-703dd560e2ee.roa File: cf7b1268-ef8f-34ed-9a98-703dd560e2ee.roa (raw, json) Hash identifier: RGu/++9zAhLRvvzntMxm8hPyGNqNmArSXtgqeU1hPVE= Subject key identifier: BD:6C:0E:B3:5B:26:7F:3A:DC:D9:7E:95:BD:71:4E:62:6D:DC:E9:D9 Certificate issuer: /CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9 Certificate serial: 010D0C9F4328584B5B074A249E1CDE1087A05940 Authority key identifier: B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/cf7b1268-ef8f-34ed-9a98-703dd560e2ee.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 400790 IP address blocks: 207.228.218.0/24 maxlen: 24 2606:f6c0:c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:4a:24:9e:1c:de:10:87:a0:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=e25ee972-a35c-4272-ba43-e534f08ce3f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0c:f0:5f:0d:0c:17:a2:62:3e:a5:70:50:c5: ef:b9:7f:b1:8e:2b:c9:0c:bc:89:7c:b5:01:4f:95: 05:e0:97:79:16:84:fa:fa:f7:16:09:45:c2:0f:0e: 3f:52:c7:41:90:01:bf:47:8c:1f:f5:e0:ec:7f:14: bd:a9:fe:df:f9:3b:77:48:8b:ad:18:a1:71:03:77: 47:b1:b3:02:50:b7:d5:05:36:ad:b6:db:82:db:5d: 06:f4:96:3c:f5:b3:f6:10:8d:d8:ef:e6:43:05:0d: 7a:f3:28:da:dd:8a:fa:8b:8f:0f:d1:0f:0b:0e:c8: 0f:40:87:84:0f:84:94:f5:a3:e1:21:1c:ab:1a:94: 2a:e6:f8:39:7e:28:22:87:0e:53:b8:de:07:75:47: c0:2f:47:60:e1:ca:47:18:d0:d2:84:d8:c1:5b:cd: 75:7b:79:74:31:30:e3:cb:4d:8d:c6:81:16:8c:64: 99:bf:e3:1c:49:4a:9d:ed:57:be:d0:a8:44:8f:30: d7:08:92:0c:6b:c5:9b:d6:72:a8:db:1f:e8:41:06: a5:ca:7e:be:27:6c:e0:bc:22:09:58:10:e1:30:9e: 69:81:ac:73:8a:70:28:90:78:00:5e:5e:71:23:86: 46:3b:50:1d:06:15:0f:04:8d:5c:9b:6b:9b:d8:58: 50:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:6C:0E:B3:5B:26:7F:3A:DC:D9:7E:95:BD:71:4E:62:6D:DC:E9:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/cf7b1268-ef8f-34ed-9a98-703dd560e2ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl X509v3 Authority Key Identifier: keyid:B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer sbgp-ipAddrBlock: critical IPv4: 207.228.218.0/24 IPv6: 2606:f6c0:c0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:42:42:6a:0d:76:15:24:49:47:76:27:26:0b:14:b5:0d:b7: 61:f2:fd:b9:af:5c:0b:93:37:fe:d4:56:78:07:17:f0:69:26: 47:a1:75:38:0a:aa:14:ed:4a:c7:fe:65:30:09:ad:45:8e:02: 4e:c0:63:63:23:f2:dd:bc:e3:be:ab:37:4c:97:19:5a:ae:ac: c5:8a:57:8d:a4:29:68:a1:a4:4e:49:2f:c3:66:d0:fe:6e:0e: 4f:17:1b:5b:5f:35:58:4d:f9:81:e3:0f:36:07:12:e0:fc:4b: 86:81:7d:c9:ad:39:9a:b0:e1:ab:ca:e8:cb:be:bb:4d:f3:53: 15:5e:6e:a5:d5:80:0b:37:35:e8:08:cc:c7:33:e1:dc:7b:4f: 85:35:bc:70:1f:b5:21:64:85:fc:eb:c8:01:6a:6a:a1:27:8d: 4f:ab:e8:08:a1:51:2a:2a:85:8e:fc:ae:d3:8d:b8:10:88:20: 3a:24:39:3b:70:8c:14:f8:99:ca:07:fe:3a:ca:98:05:39:b2: 2f:be:de:30:78:3c:67:19:18:2f:ea:08:a6:b8:86:27:67:5b: 96:0e:31:37:97:4f:c3:1e:37:c4:d1:a0:f2:34:1e:56:66:35: 17:f1:79:30:63:22:54:79:8a:62:3e:85:aa:74:34:4a:b3:03: bb:7e:26:a8 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEtbB0oknhzeEIegWUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU2OWU1NWQtM2JhZi00MWU2LTllNjctYmJlNWVkODg4 YmU5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ZTI1ZWU5NzItYTM1Yy00MjcyLWJhNDMtZTUzNGYwOGNlM2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAzwXw0MF6JiPqVwUMXvuX+xjivJDLyJfLUB T5UF4Jd5FoT6+vcWCUXCDw4/UsdBkAG/R4wf9eDsfxS9qf7f+Tt3SIutGKFxA3dH sbMCULfVBTatttuC210G9JY89bP2EI3Y7+ZDBQ168yja3Yr6i48P0Q8LDsgPQIeE D4SU9aPhIRyrGpQq5vg5figihw5TuN4HdUfAL0dg4cpHGNDShNjBW811e3l0MTDj y02NxoEWjGSZv+McSUqd7Ve+0KhEjzDXCJIMa8Wb1nKo2x/oQQalyn6+J2zgvCIJ WBDhMJ5pgaxzinAokHgAXl5xI4ZGO1AdBhUPBI1cm2ub2FhQaQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFL1sDrNbJn863Nl+lb1xTmJt3OnZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yZTY5 ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1ZWQ4ODhiZTkvY2Y3YjEyNjgtZWY4Zi0z NGVkLTlhOTgtNzAzZGQ1NjBlMmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmU2OWU1NWQtM2JhZi00MWU2LTll NjctYmJlNWVkODg4YmU5LzJlNjllNTVkLTNiYWYtNDFlNi05ZTY3LWJiZTVlZDg4 OGJlOS5jcmwwHwYDVR0jBBgwFoAUuOVt8qT8p5onhZVWGclu3DiFdDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yZTY5ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1 ZWQ4ODhiZTkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAz+TaMA8E AgACMAkDBwAmBvbAAMAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcUJCag12FSRJR3YnJgsUtQ23YfL9ua9c C5M3/tRWeAcX8GkmR6F1OAqqFO1Kx/5lMAmtRY4CTsBjYyPy3bzjvqs3TJcZWq6s xYpXjaQpaKGkTkkvw2bQ/m4OTxcbW181WE35geMPNgcS4PxLhoF9ya05mrDhq8ro y767TfNTFV5updWACzc16AjMxzPh3HtPhTW8cB+1IWSF/OvIAWpqoSeNT6voCKFR KiqFjvyu0424EIggOiQ5O3CMFPiZygf+OsqYBTmyL77eMHg8ZxkYL+oIpriGJ2db lg4xN5dPwx43xNGg8jQeVmY1F/F5MGMiVHmKYj6FqnQ0SrMDu34mqA== -----END CERTIFICATE-----Generated at Mon Oct 20 09:41:24 2025 by rpki-client