$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710/c51b086f-87b8-314b-a8e9-bb4db249b1c4.roa File: c51b086f-87b8-314b-a8e9-bb4db249b1c4.roa (raw, json) Hash identifier: dEWD5H1SddyPNxi8Wdf0tekxyIHdzg4ir3XMRZT9Er0= Subject key identifier: A8:7C:2C:A4:49:A3:26:D4:2F:D0:96:03:E4:90:99:64:6C:0E:E7:4C Certificate issuer: /CN=7470f73a-61d0-4b9c-80ff-a407cc438710 Certificate serial: 010D0C9F4328584B84E77D8B3E837197F02CEAC0 Authority key identifier: 1D:52:3F:BE:0B:2A:AE:E8:90:D7:B1:5A:EA:9B:77:79:8D:E7:2F:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710/c51b086f-87b8-314b-a8e9-bb4db249b1c4.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 10821 IP address blocks: 24.224.0.0/19 maxlen: 24 206.253.32.0/19 maxlen: 24 209.42.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710/7470f73a-61d0-4b9c-80ff-a407cc438710.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710/7470f73a-61d0-4b9c-80ff-a407cc438710.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:7d:8b:3e:83:71:97:f0:2c:ea:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7470f73a-61d0-4b9c-80ff-a407cc438710 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=206d85bc-b38d-4658-86b9-1f3487fa0c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f3:1c:da:91:bc:01:2b:a6:9b:14:98:8d:96: f8:c6:0b:e4:29:90:f4:ea:d1:da:b0:69:81:d8:21: 3f:48:bc:d8:ff:69:33:44:1b:02:9a:b1:28:4f:dc: fb:a7:8a:8e:fd:93:9e:c7:64:c7:41:5c:cd:d6:f1: 4d:5a:6b:b3:c0:b8:6f:0b:6b:67:5d:5e:5f:7d:46: e8:88:76:36:1f:34:d6:d8:3a:ea:57:a8:f5:43:c7: b5:45:f7:df:fc:8b:71:6f:ff:e2:c7:2e:fe:5f:1a: 7b:d6:dd:67:be:c3:85:8e:24:34:f5:c4:02:78:59: ee:32:10:04:2f:4c:b1:a4:c2:ee:3a:d3:14:8d:4d: a3:c7:88:74:f6:46:fa:39:44:17:4d:81:44:b8:8b: c7:64:0d:12:e2:93:15:fb:0d:0a:a3:af:16:b3:bc: 2c:36:f7:46:48:c2:7e:65:47:9e:e2:48:57:c2:08: fd:8c:02:8f:25:c9:2c:2f:de:5d:e5:e9:be:87:03: b0:43:84:da:e8:40:5c:be:04:3d:4e:60:ab:78:b2: 74:0d:4f:d5:c6:3e:12:c7:bd:5f:ba:08:05:6e:56: f1:cd:64:94:26:a0:25:0b:f6:8a:6f:3a:66:71:fd: d8:d7:8f:5c:e6:75:3f:c4:a2:04:62:a0:40:b5:d6: ad:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:7C:2C:A4:49:A3:26:D4:2F:D0:96:03:E4:90:99:64:6C:0E:E7:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710/c51b086f-87b8-314b-a8e9-bb4db249b1c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710/7470f73a-61d0-4b9c-80ff-a407cc438710.crl X509v3 Authority Key Identifier: keyid:1D:52:3F:BE:0B:2A:AE:E8:90:D7:B1:5A:EA:9B:77:79:8D:E7:2F:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710.cer sbgp-ipAddrBlock: critical IPv4: 24.224.0.0/19 206.253.32.0/19 209.42.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:32:a3:2f:4e:18:55:91:98:ac:e1:9c:a1:1a:c0:db:ff:53: b1:00:ef:b9:3d:83:9e:ef:36:02:d2:f6:22:99:b7:45:ed:bc: 31:5f:62:c3:00:bc:9e:b8:0f:4c:6e:d7:a7:78:2d:9f:20:28: 76:76:ad:89:b2:4f:4f:3b:90:12:39:c3:67:0e:69:72:55:4d: 1a:b7:4e:ec:90:8e:ac:4e:91:7d:63:1f:3a:ea:d3:dc:7f:57: 71:be:ba:35:c7:4f:32:1c:fb:64:1f:8b:e3:d0:1f:74:9b:ff: 4b:82:35:f1:21:53:60:ae:9d:81:b0:46:d2:e9:76:21:a7:63: 69:ee:6b:85:2e:ac:75:eb:b6:ce:6f:66:b9:c4:a7:55:05:dd: 65:81:a5:e8:b6:41:8e:d9:ef:fc:ef:01:da:ee:b1:43:19:87: 2e:7b:f6:0d:55:1a:03:0c:55:76:08:7a:09:6f:ad:1b:b5:c2: 8a:27:c3:84:e7:4f:7f:6f:9e:6e:5f:a9:e2:7f:d8:7e:ee:f6: 1b:36:7b:62:c1:25:f2:13:27:22:d5:78:ce:46:7f:09:14:90: af:93:ab:34:16:79:42:a4:12:53:95:60:f7:f4:b6:39:17:f1: c4:16:e5:76:ce:34:74:e0:6e:e4:34:7a:54:8d:28:63:05:ce: 83:68:bb:b4 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEuE532LPoNxl/As6sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ3MGY3M2EtNjFkMC00YjljLTgwZmYtYTQwN2NjNDM4 NzEwMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MjA2ZDg1YmMtYjM4ZC00NjU4LTg2YjktMWYzNDg3ZmEwYzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPMc2pG8ASummxSYjZb4xgvkKZD06tHasGmB 2CE/SLzY/2kzRBsCmrEoT9z7p4qO/ZOex2THQVzN1vFNWmuzwLhvC2tnXV5ffUbo iHY2HzTW2DrqV6j1Q8e1Rfff/Itxb//ixy7+Xxp71t1nvsOFjiQ09cQCeFnuMhAE L0yxpMLuOtMUjU2jx4h09kb6OUQXTYFEuIvHZA0S4pMV+w0Ko68Ws7wsNvdGSMJ+ ZUee4khXwgj9jAKPJcksL95d5em+hwOwQ4Ta6EBcvgQ9TmCreLJ0DU/Vxj4Sx71f uggFblbxzWSUJqAlC/aKbzpmcf3Y149c5nU/xKIEYqBAtdatHwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFKh8LKRJoybUL9CWA+SQmWRsDudMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83NDcw ZjczYS02MWQwLTRiOWMtODBmZi1hNDA3Y2M0Mzg3MTAvYzUxYjA4NmYtODdiOC0z MTRiLWE4ZTktYmI0ZGIyNDliMWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzQ3MGY3M2EtNjFkMC00YjljLTgw ZmYtYTQwN2NjNDM4NzEwLzc0NzBmNzNhLTYxZDAtNGI5Yy04MGZmLWE0MDdjYzQz ODcxMC5jcmwwHwYDVR0jBBgwFoAUHVI/vgsqruiQ17Fa6pt3eY3nL7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83NDcwZjczYS02MWQwLTRiOWMtODBmZi1hNDA3 Y2M0Mzg3MTAuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFGOAAAwQF zv0gAwQF0SpAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAFQyoy9OGFWRmKzhnKEawNv/U7EA77k9g57vNgLS 9iKZt0XtvDFfYsMAvJ64D0xu16d4LZ8gKHZ2rYmyT087kBI5w2cOaXJVTRq3TuyQ jqxOkX1jHzrq09x/V3G+ujXHTzIc+2Qfi+PQH3Sb/0uCNfEhU2CunYGwRtLpdiGn Y2nua4UurHXrts5vZrnEp1UF3WWBpei2QY7Z7/zvAdrusUMZhy579g1VGgMMVXYI eglvrRu1woonw4TnT39vnm5fqeJ/2H7u9hs2e2LBJfITJyLVeM5GfwkUkK+TqzQW eUKkElOVYPf0tjkX8cQW5XbONHTgbuQ0elSNKGMFzoNou7Q= -----END CERTIFICATE-----Generated at Wed Oct 22 00:51:43 2025 by rpki-client