$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e/954d8ba0-c25b-3641-a5d0-f5ccb2fd072a.roa File: 954d8ba0-c25b-3641-a5d0-f5ccb2fd072a.roa (raw, json) Hash identifier: xTXH/c8PnkQ9/2DfHrxatK6jRYQwweT0iLJtPgtYRzo= Subject key identifier: D0:A7:1A:EC:23:92:34:6F:1C:8D:A0:A2:17:84:63:47:D5:5B:4E:12 Certificate issuer: /CN=4eea0cbf-ec94-4919-b99f-6365e69ae52e Certificate serial: 010D0C9F4328584B540C671E2D41B4666BE8E580 Authority key identifier: 91:B8:BA:92:6C:F7:F5:0A:07:79:D1:F9:8E:FC:DC:8D:3E:AC:0E:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e/954d8ba0-c25b-3641-a5d0-f5ccb2fd072a.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 13765 IP address blocks: 207.68.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e/4eea0cbf-ec94-4919-b99f-6365e69ae52e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e/4eea0cbf-ec94-4919-b99f-6365e69ae52e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:67:1e:2d:41:b4:66:6b:e8:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eea0cbf-ec94-4919-b99f-6365e69ae52e Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=14fd0b48-8769-49af-8918-38ccaa080b6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b3:8c:8c:62:17:90:2b:8b:86:2a:3c:00:39: 31:91:82:1b:8a:1b:d8:b3:96:ea:eb:66:42:ec:02: 62:e0:3f:9a:d9:9a:56:35:11:5f:9a:0e:bb:aa:f4: ca:13:41:c1:2d:82:75:aa:ae:41:b3:08:ae:b6:b2: 44:28:d8:e0:72:01:d9:a4:63:ea:3e:ea:f0:92:f1: 05:97:18:77:80:58:f5:3f:b9:22:5a:b5:92:4c:4c: e0:17:67:b5:39:6c:3a:0f:4c:31:1c:ce:45:95:55: 68:7e:a5:c1:bf:ce:cb:65:b7:87:ec:ec:5d:db:6f: 25:50:40:27:68:7b:bf:f3:7e:74:f1:a5:89:2f:b5: df:51:cc:97:e4:8c:1a:e9:c3:be:50:48:db:8f:b2: da:c2:73:28:22:ed:b9:01:df:ee:e5:44:fa:86:47: e5:22:ce:97:80:87:48:85:55:ad:25:df:e2:a1:2e: 94:ea:54:29:08:07:e9:78:fd:54:5b:94:2b:5d:23: bf:25:e8:c9:30:be:8f:34:64:14:c3:3a:23:b0:ed: f1:6d:77:8a:71:cc:3f:64:8e:8a:c1:9b:c0:3c:98: 82:3a:bf:15:19:34:53:0b:32:3d:86:6d:c7:a0:a1: 15:d3:aa:1b:4f:88:ee:2a:dc:d7:d4:e8:20:59:df: ab:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A7:1A:EC:23:92:34:6F:1C:8D:A0:A2:17:84:63:47:D5:5B:4E:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e/954d8ba0-c25b-3641-a5d0-f5ccb2fd072a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e/4eea0cbf-ec94-4919-b99f-6365e69ae52e.crl X509v3 Authority Key Identifier: keyid:91:B8:BA:92:6C:F7:F5:0A:07:79:D1:F9:8E:FC:DC:8D:3E:AC:0E:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4eea0cbf-ec94-4919-b99f-6365e69ae52e.cer sbgp-ipAddrBlock: critical IPv4: 207.68.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:2b:29:bd:28:8f:58:5a:3d:05:64:6b:07:c5:b8:17:ac:71: 97:9c:2a:f2:60:c0:bb:d1:d4:98:03:c0:5e:73:18:c1:28:5d: 60:d0:53:5b:77:e9:59:9b:89:53:b9:ab:48:75:17:29:d3:c5: 1d:63:b0:8a:79:14:66:e8:c7:28:23:77:d2:e4:71:54:e4:a0: 35:c3:46:c1:45:b6:4b:03:67:93:13:36:2f:e0:c0:db:0d:88: aa:2f:14:60:e6:53:2c:38:a1:f6:73:a7:4c:44:71:1a:32:6f: 33:74:12:59:ad:2f:3a:77:58:f6:7a:ae:1b:3a:2e:a3:95:9b: 67:60:b4:19:fa:7c:f3:99:95:ec:8b:ad:d7:bf:38:75:2c:04: eb:f3:01:8a:26:aa:33:0d:ef:ec:f5:b4:63:52:0c:9c:13:d0: 42:eb:f2:a8:df:23:25:1d:c6:31:44:7d:c7:d3:c5:7c:3f:6d: cd:cc:46:06:a1:d9:d0:df:f6:e6:c7:f9:78:dc:9b:9b:61:6b: 71:da:73:a1:c2:08:49:de:cc:6f:fb:99:50:6e:79:bb:a0:03: 23:3a:85:99:3e:b0:bf:b8:16:9b:a1:63:30:10:25:53:e5:4e: 91:4c:f6:c7:df:ac:fa:8c:68:69:60:b5:b7:b4:af:46:6c:cf: 56:7f:99:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDGceLUG0Zmvo5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVlYTBjYmYtZWM5NC00OTE5LWI5OWYtNjM2NWU2OWFl NTJlMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk MTRmZDBiNDgtODc2OS00OWFmLTg5MTgtMzhjY2FhMDgwYjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7OMjGIXkCuLhio8ADkxkYIbihvYs5bq62ZC 7AJi4D+a2ZpWNRFfmg67qvTKE0HBLYJ1qq5BswiutrJEKNjgcgHZpGPqPurwkvEF lxh3gFj1P7kiWrWSTEzgF2e1OWw6D0wxHM5FlVVofqXBv87LZbeH7Oxd228lUEAn aHu/83508aWJL7XfUcyX5Iwa6cO+UEjbj7LawnMoIu25Ad/u5UT6hkflIs6XgIdI hVWtJd/ioS6U6lQpCAfpeP1UW5QrXSO/JejJML6PNGQUwzojsO3xbXeKccw/ZI6K wZvAPJiCOr8VGTRTCzI9hm3HoKEV06obT4juKtzX1OggWd+rRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCnGuwjkjRvHI2goheEY0fVW04SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80ZWVh MGNiZi1lYzk0LTQ5MTktYjk5Zi02MzY1ZTY5YWU1MmUvOTU0ZDhiYTAtYzI1Yi0z NjQxLWE1ZDAtZjVjY2IyZmQwNzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGVlYTBjYmYtZWM5NC00OTE5LWI5 OWYtNjM2NWU2OWFlNTJlLzRlZWEwY2JmLWVjOTQtNDkxOS1iOTlmLTYzNjVlNjlh ZTUyZS5jcmwwHwYDVR0jBBgwFoAUkbi6kmz39QoHedH5jvzcjT6sDjcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80ZWVhMGNiZi1lYzk0LTQ5MTktYjk5Zi02MzY1 ZTY5YWU1MmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz0TQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYrKb0oj1haPQVkawfFuBescZecKvJgwLvR1JgDwF5zGMEoXWDQU1t3 6VmbiVO5q0h1FynTxR1jsIp5FGboxygjd9LkcVTkoDXDRsFFtksDZ5MTNi/gwNsN iKovFGDmUyw4ofZzp0xEcRoybzN0ElmtLzp3WPZ6rhs6LqOVm2dgtBn6fPOZleyL rde/OHUsBOvzAYomqjMN7+z1tGNSDJwT0ELr8qjfIyUdxjFEfcfTxXw/bc3MRgah 2dDf9ubH+Xjcm5tha3Hac6HCCEnezG/7mVBuebugAyM6hZk+sL+4FpuhYzAQJVPl TpFM9sffrPqMaGlgtbe0r0Zsz1Z/mQQ= -----END CERTIFICATE-----Generated at Wed Oct 22 00:42:14 2025 by rpki-client