$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/2cf60c37-0943-33c0-9db7-7f8c37bd0c92.roa File: 2cf60c37-0943-33c0-9db7-7f8c37bd0c92.roa (raw, json) Hash identifier: ybp4a6jBqOFqFJZ0CCbHfPQKr87RcjDvDJrO2jwqdTg= Subject key identifier: 10:BE:14:58:1F:5C:6B:03:DE:4A:0A:69:A2:3D:25:2E:21:EC:F9:B9 Certificate issuer: /CN=53f3af06-68ea-4591-9526-0c1fce331651 Certificate serial: 010D0C9F4328584B8EACD1873BE3E4F6AF5F37F8 Authority key identifier: 8A:FE:A7:10:44:F5:A9:14:8D:C7:0F:AC:74:09:68:60:5F:0D:7F:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/2cf60c37-0943-33c0-9db7-7f8c37bd0c92.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 0 IP address blocks: 206.72.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/53f3af06-68ea-4591-9526-0c1fce331651.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/53f3af06-68ea-4591-9526-0c1fce331651.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:d1:87:3b:e3:e4:f6:af:5f:37:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53f3af06-68ea-4591-9526-0c1fce331651 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=97515a2e-d09e-49eb-8821-c67dbe33ab9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:06:a7:13:cb:f9:39:a1:1b:e5:18:11:1a:41: 86:56:ca:0b:6a:36:76:a6:d8:57:81:ab:7f:2e:ef: 31:d8:06:31:be:f2:ac:a0:52:02:85:e6:73:64:6a: 43:27:a2:10:46:39:bf:d7:f4:37:bf:03:bd:f3:14: 6c:da:1c:e0:30:2f:f9:43:e6:ed:82:14:6d:8d:da: 6b:c2:81:ad:28:ce:84:b7:5a:96:af:4c:97:2d:79: 76:5c:cf:43:45:9e:c8:b1:18:c3:1d:f5:e2:13:ae: 11:e2:17:61:e9:17:f7:33:3e:6f:f4:1b:34:02:91: b8:72:8b:9f:21:cd:47:01:af:2b:51:ed:7b:66:c2: 3d:e5:b9:61:a2:c4:d7:83:4e:67:22:a0:3f:4d:fe: 94:9c:a4:f3:5f:ca:1f:60:12:a1:64:fe:93:66:a9: 4a:8c:4f:1f:fa:60:55:12:93:8d:52:85:e4:53:aa: 52:85:84:10:b8:47:77:02:06:b7:4e:37:db:d1:78: 49:eb:e7:58:ca:fe:44:8e:dd:4c:2c:f2:ee:75:ec: dc:d2:d0:5a:11:9d:44:ba:d2:db:f3:b4:4d:e4:b8: 23:da:a9:01:58:b3:57:f0:c6:00:df:0f:f1:81:33: a8:cd:66:53:14:93:2c:a2:6b:ef:d5:8d:a4:51:e0: 13:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:BE:14:58:1F:5C:6B:03:DE:4A:0A:69:A2:3D:25:2E:21:EC:F9:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/2cf60c37-0943-33c0-9db7-7f8c37bd0c92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/53f3af06-68ea-4591-9526-0c1fce331651.crl X509v3 Authority Key Identifier: keyid:8A:FE:A7:10:44:F5:A9:14:8D:C7:0F:AC:74:09:68:60:5F:0D:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651.cer sbgp-ipAddrBlock: critical IPv4: 206.72.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:1d:32:b7:13:57:c7:01:f8:ad:a8:8e:4c:48:06:2a:05:af: a6:46:4d:91:28:d9:81:7d:9a:d5:fa:d4:60:5a:5b:b7:c2:3d: a8:9d:33:b2:1e:ff:83:b5:a1:22:7b:bc:79:74:0d:0d:80:b7: ba:06:f2:24:05:0b:8d:b1:02:c1:f1:22:d8:29:98:a1:9a:9f: ca:84:1d:45:45:f1:97:d2:3d:06:c7:2c:2d:f4:05:9c:ed:7b: b4:a0:29:1e:41:0e:a0:ef:6c:6e:fb:7d:f2:62:7d:e2:ae:21: 41:5d:81:e4:e9:27:f0:af:ae:7a:44:92:66:63:28:ff:e8:55: 1f:64:c5:47:0f:bb:ce:d2:eb:9d:53:3b:15:7e:01:41:ad:27: 45:fa:49:5b:89:07:29:56:e7:af:33:b3:0f:ba:15:b2:17:03: 25:17:ad:30:3e:30:cd:6f:e7:c2:2d:0d:6f:f3:34:cf:40:0f: ac:64:3d:40:eb:6b:24:2b:ad:e1:37:cb:b8:cb:b9:57:d5:be: e4:8e:20:68:10:fa:79:df:7c:39:c6:fd:ba:d9:6f:6a:0a:3f: 43:f3:01:81:16:c4:2a:ab:06:07:1f:96:f9:c3:ba:bb:d6:fd: f2:d1:a0:83:81:0f:f6:ce:7f:ad:83:14:47:de:db:94:2e:71: df:97:3b:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrNGHO+Pk9q9fN/gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNmM2FmMDYtNjhlYS00NTkxLTk1MjYtMGMxZmNlMzMx NjUxMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk OTc1MTVhMmUtZDA5ZS00OWViLTg4MjEtYzY3ZGJlMzNhYjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAanE8v5OaEb5RgRGkGGVsoLajZ2pthXgat/ Lu8x2AYxvvKsoFICheZzZGpDJ6IQRjm/1/Q3vwO98xRs2hzgMC/5Q+btghRtjdpr woGtKM6Et1qWr0yXLXl2XM9DRZ7IsRjDHfXiE64R4hdh6Rf3Mz5v9Bs0ApG4couf Ic1HAa8rUe17ZsI95blhosTXg05nIqA/Tf6UnKTzX8ofYBKhZP6TZqlKjE8f+mBV EpONUoXkU6pShYQQuEd3Aga3Tjfb0XhJ6+dYyv5Ejt1MLPLudezc0tBaEZ1EutLb 87RN5Lgj2qkBWLNX8MYA3w/xgTOozWZTFJMsomvv1Y2kUeATLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBC+FFgfXGsD3koKaaI9JS4h7Pm5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81M2Yz YWYwNi02OGVhLTQ1OTEtOTUyNi0wYzFmY2UzMzE2NTEvMmNmNjBjMzctMDk0My0z M2MwLTlkYjctN2Y4YzM3YmQwYzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTNmM2FmMDYtNjhlYS00NTkxLTk1 MjYtMGMxZmNlMzMxNjUxLzUzZjNhZjA2LTY4ZWEtNDU5MS05NTI2LTBjMWZjZTMz MTY1MS5jcmwwHwYDVR0jBBgwFoAUiv6nEET1qRSNxw+sdAloYF8Nf9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81M2YzYWYwNi02OGVhLTQ1OTEtOTUyNi0wYzFm Y2UzMzE2NTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzkjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8dMrcTV8cB+K2ojkxIBioFr6ZGTZEo2YF9mtX61GBaW7fCPaidM7Ie /4O1oSJ7vHl0DQ2At7oG8iQFC42xAsHxItgpmKGan8qEHUVF8ZfSPQbHLC30BZzt e7SgKR5BDqDvbG77ffJifeKuIUFdgeTpJ/CvrnpEkmZjKP/oVR9kxUcPu87S651T OxV+AUGtJ0X6SVuJBylW568zsw+6FbIXAyUXrTA+MM1v58ItDW/zNM9AD6xkPUDr ayQrreE3y7jLuVfVvuSOIGgQ+nnffDnG/brZb2oKP0PzAYEWxCqrBgcflvnDurvW /fLRoIOBD/bOf62DFEfe25Qucd+XO6E= -----END CERTIFICATE-----Generated at Sun Oct 19 21:12:58 2025 by rpki-client