$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0670fa0c-1c69-3756-85a2-81fa79b0198b.roa File: 0670fa0c-1c69-3756-85a2-81fa79b0198b.roa (raw, json) Hash identifier: zBWNmSW51enDyorjcNtYJV/n8P8yZwoLWbQEKnqJ/wM= Subject key identifier: A4:C5:DE:49:64:B6:A6:AD:39:C5:6A:8D:5F:00:B1:A3:AC:71:05:98 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584B1806C6919E8C692346E43480 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0670fa0c-1c69-3756-85a2-81fa79b0198b.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 22781 IP address blocks: 207.204.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:c6:91:9e:8c:69:23:46:e4:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=55783a3f-735d-444e-aa78-66b715b220fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9a:08:99:19:ee:61:f6:6e:ee:b1:4b:36:ca: 21:46:d6:d0:24:8d:62:9b:2b:ec:62:01:49:26:59: a7:28:23:25:83:5b:48:e9:16:f3:02:8b:c6:03:0e: af:93:55:93:80:c0:26:12:a5:8c:8c:7a:bf:4c:f9: 7b:65:c1:b4:79:ee:fe:63:15:3e:a0:9e:e9:a1:63: 08:64:65:61:de:9a:ac:d3:07:47:b5:5e:b5:2d:c9: 55:e8:df:91:87:a5:04:1c:9f:86:52:85:bf:49:75: c7:8d:34:7a:59:19:cf:c0:e9:de:49:02:bd:6f:e0: 77:e6:57:2a:1f:ea:fb:07:dc:48:b4:19:c9:1a:54: 2f:ee:18:86:ca:8d:b8:28:f8:ab:6f:01:48:8e:b1: e7:64:72:7d:86:e4:4a:2d:3e:a0:62:ae:9c:3a:5b: 1d:55:2e:1b:6c:52:1f:e7:04:ea:b2:ba:14:a5:2c: a5:d6:79:c9:b8:b9:0a:11:d8:18:f2:d6:da:38:91: d5:7f:d4:f4:95:a6:d8:d0:bf:84:d1:62:9d:91:85: f2:51:dc:29:76:c6:8b:bd:eb:75:79:0a:cb:e3:19: 57:ce:33:a7:dd:71:31:cd:6a:35:b8:03:8a:fc:ee: b0:6d:f3:9f:a3:dc:42:29:c3:86:60:f4:51:19:cb: fb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C5:DE:49:64:B6:A6:AD:39:C5:6A:8D:5F:00:B1:A3:AC:71:05:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0670fa0c-1c69-3756-85a2-81fa79b0198b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 207.204.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:0a:1f:4b:e8:0e:33:29:f2:ba:6d:82:95:16:f2:09:36:59: f5:d7:98:bb:2e:98:f4:66:ac:9f:61:d0:c9:86:a5:28:96:2b: d8:fa:e4:2d:7a:f6:c3:11:22:43:b8:eb:4e:d4:a1:bc:a8:9c: 38:24:fb:a7:7d:f9:01:97:42:72:63:d0:2d:59:e2:a6:5f:53: bb:c6:d8:b1:30:7a:f1:dd:10:b3:8e:74:4d:8f:b2:e2:cf:b4: 6b:e5:c4:83:23:1c:66:2b:c8:69:ec:59:73:d1:e2:a4:d7:ca: 44:82:d6:b1:d1:b1:cb:46:ed:6a:48:12:21:78:82:2d:d9:1c: fc:04:a2:50:58:57:66:de:23:1c:eb:a6:52:3c:37:7d:23:fa: c2:15:fa:c9:cb:72:ab:c0:3b:ff:e9:bf:55:bc:b8:3e:b0:1e: f5:95:53:13:65:3e:b2:16:7c:43:b6:73:35:c7:b4:7f:60:4a: b9:e2:e1:99:71:dc:ba:32:e6:e0:6e:6d:2f:ae:81:89:50:75: 7d:07:f9:51:b3:83:1d:76:72:06:44:1e:93:87:dd:8f:8a:df: 87:5a:8d:f8:50:16:a7:e2:4d:14:08:5f:4d:58:84:5d:47:42: de:16:55:ae:af:5e:2a:39:30:e0:43:e4:b7:43:88:7e:fb:a0: 78:ac:6d:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBsaRnoxpI0bkNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NTU3ODNhM2YtNzM1ZC00NDRlLWFhNzgtNjZiNzE1YjIyMGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJoImRnuYfZu7rFLNsohRtbQJI1imyvsYgFJ JlmnKCMlg1tI6RbzAovGAw6vk1WTgMAmEqWMjHq/TPl7ZcG0ee7+YxU+oJ7poWMI ZGVh3pqs0wdHtV61LclV6N+Rh6UEHJ+GUoW/SXXHjTR6WRnPwOneSQK9b+B35lcq H+r7B9xItBnJGlQv7hiGyo24KPirbwFIjrHnZHJ9huRKLT6gYq6cOlsdVS4bbFIf 5wTqsroUpSyl1nnJuLkKEdgY8tbaOJHVf9T0labY0L+E0WKdkYXyUdwpdsaLvet1 eQrL4xlXzjOn3XExzWo1uAOK/O6wbfOfo9xCKcOGYPRRGcv79wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTF3klktqatOcVqjV8AsaOscQWYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMDY3MGZhMGMtMWM2OS0z NzU2LTg1YTItODFmYTc5YjAxOThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz8zgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8KH0voDjMp8rptgpUW8gk2WfXXmLsumPRmrJ9h0MmGpSiWK9j65C16 9sMRIkO4607UobyonDgk+6d9+QGXQnJj0C1Z4qZfU7vG2LEwevHdELOOdE2PsuLP tGvlxIMjHGYryGnsWXPR4qTXykSC1rHRsctG7WpIEiF4gi3ZHPwEolBYV2beIxzr plI8N30j+sIV+snLcqvAO//pv1W8uD6wHvWVUxNlPrIWfEO2czXHtH9gSrni4Zlx 3Loy5uBubS+ugYlQdX0H+VGzgx12cgZEHpOH3Y+K34dajfhQFqfiTRQIX01YhF1H Qt4WVa6vXio5MOBD5LdDiH77oHisbeA= -----END CERTIFICATE-----Generated at Mon Oct 20 00:52:53 2025 by rpki-client