$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ace5b6d1-1f39-3668-a7eb-184f6b71beac.roa File: ace5b6d1-1f39-3668-a7eb-184f6b71beac.roa (raw, json) Hash identifier: QKnjOnPcuoiueQx7W0aejsfRNb42vnQSfeP4wAJKBw0= Subject key identifier: F8:43:FF:41:E6:E2:EB:F0:E5:E1:14:89:EA:FB:54:7D:D0:DA:2D:B4 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B744DEE9A315F316325981BC0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ace5b6d1-1f39-3668-a7eb-184f6b71beac.roa Signing time: Wed 08 Oct 2025 14:18:30 +0000 ROA not before: Wed 08 Oct 2025 14:18:30 +0000 ROA not after: Tue 06 Jan 2026 15:18:30 +0000 asID: 10099 IP address blocks: 206.52.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:4d:ee:9a:31:5f:31:63:25:98:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 8 14:18:30 2025 GMT Not After : Jan 6 15:18:30 2026 GMT Subject: CN=3a99114c-a886-4254-9e53-194d09f290fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:81:89:a0:c4:8d:2a:b8:51:4c:95:21:44:7c: f2:bf:82:7b:d8:c0:ca:70:c5:fa:6a:09:b8:53:af: 8e:39:67:53:8b:f4:f9:20:c3:5b:e0:ee:11:f2:3f: bd:d9:3c:6b:3c:a3:43:d3:17:bd:99:be:b9:da:51: 15:39:d2:7d:53:c6:7a:08:ab:dd:8e:b5:95:fc:d4: e4:c6:6e:34:89:03:18:35:a3:e9:56:7f:ce:84:4b: 46:9a:cb:0b:4c:86:e3:33:fa:e5:ce:f8:ea:ba:c9: 79:5d:1e:1f:ed:69:c2:c1:f1:75:4a:ec:58:76:c5: 91:37:0d:a0:c6:03:cb:b3:37:ae:4f:bc:2f:cf:d2: c1:d9:4a:0b:4b:ad:fd:96:ad:3b:7a:42:c6:c4:00: 2a:fb:2d:1a:82:35:eb:4e:31:77:4c:8e:68:31:18: 87:30:44:1f:15:3b:ba:93:59:40:6b:02:c2:75:cc: 0e:bf:f9:09:a6:f8:c3:90:04:11:a4:04:86:55:35: be:40:2c:04:32:a3:f9:f4:56:a3:c1:c1:e3:05:21: 84:eb:d0:12:aa:28:ab:ab:0a:2c:f9:29:71:91:a7: d8:f2:d6:71:32:57:6c:28:5e:2f:36:d7:50:79:6c: 7f:b1:0a:59:6c:51:8b:ea:5f:b8:4b:de:92:4a:54: cb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:43:FF:41:E6:E2:EB:F0:E5:E1:14:89:EA:FB:54:7D:D0:DA:2D:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ace5b6d1-1f39-3668-a7eb-184f6b71beac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 206.52.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:72:b4:97:4b:fa:06:b8:5a:15:75:e1:d0:36:71:5f:a8:1c: 1c:07:d6:a1:c6:1b:8f:62:a1:f9:09:91:6f:bb:23:ca:18:02: 59:e0:44:fe:9e:58:ab:c2:7c:54:c7:b7:9a:3e:fb:f9:aa:3c: 77:23:69:3c:ef:10:92:ee:5f:29:63:4f:50:b4:b0:07:54:59: db:eb:e0:15:07:61:1b:ef:51:d3:53:7e:f1:ad:5e:56:e1:f7: 68:1d:64:34:4f:7b:3d:4e:cd:c8:c6:ed:dd:5c:de:4e:69:de: 91:b5:35:f3:4c:13:bb:e5:6d:11:42:58:82:45:55:c0:c5:28: d6:c3:46:75:1a:7d:b1:6b:6f:59:95:56:e6:7a:40:37:57:b7: e3:62:bd:05:24:d9:5f:54:33:ed:12:ef:0e:0f:79:5a:64:79: 27:b9:94:88:9f:68:52:8a:aa:49:0a:cf:e1:67:f4:02:c7:57: da:25:ed:14:40:8b:49:cb:06:9c:b1:d3:85:fd:35:57:b1:01: f7:c0:aa:44:70:f4:58:4b:d2:94:f9:b3:bc:b0:e4:5b:82:23: 1d:e9:7c:9e:87:b0:bf:b2:90:4e:7f:ab:50:52:2f:50:31:53: ec:86:98:ef:28:63:b2:b3:f0:9c:4a:0d:b6:d5:cd:51:99:6d: b7:91:26:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt0Te6aMV8xYyWYG8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTAwODE0MTgzMFoXDTI2MDEwNjE1MTgzMFowLzEtMCsGA1UEAxMk M2E5OTExNGMtYTg4Ni00MjU0LTllNTMtMTk0ZDA5ZjI5MGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4GJoMSNKrhRTJUhRHzyv4J72MDKcMX6agm4 U6+OOWdTi/T5IMNb4O4R8j+92TxrPKND0xe9mb652lEVOdJ9U8Z6CKvdjrWV/NTk xm40iQMYNaPpVn/OhEtGmssLTIbjM/rlzvjqusl5XR4f7WnCwfF1SuxYdsWRNw2g xgPLszeuT7wvz9LB2UoLS639lq07ekLGxAAq+y0agjXrTjF3TI5oMRiHMEQfFTu6 k1lAawLCdcwOv/kJpvjDkAQRpASGVTW+QCwEMqP59FajwcHjBSGE69ASqiirqwos +SlxkafY8tZxMldsKF4vNtdQeWx/sQpZbFGL6l+4S96SSlTLGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhD/0Hm4uvw5eEUier7VH3Q2i20MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYWNlNWI2ZDEtMWYzOS0z NjY4LWE3ZWItMTg0ZjZiNzFiZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzjQHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhytJdL+ga4WhV14dA2cV+oHBwH1qHGG49iofkJkW+7I8oYAlngRP6e WKvCfFTHt5o++/mqPHcjaTzvEJLuXyljT1C0sAdUWdvr4BUHYRvvUdNTfvGtXlbh 92gdZDRPez1OzcjG7d1c3k5p3pG1NfNME7vlbRFCWIJFVcDFKNbDRnUafbFrb1mV VuZ6QDdXt+NivQUk2V9UM+0S7w4PeVpkeSe5lIifaFKKqkkKz+Fn9ALHV9ol7RRA i0nLBpyx04X9NVexAffAqkRw9FhL0pT5s7yw5FuCIx3pfJ6HsL+ykE5/q1BSL1Ax U+yGmO8oY7Kz8JxKDbbVzVGZbbeRJso= -----END CERTIFICATE-----Generated at Mon Oct 20 10:22:08 2025 by rpki-client