$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c10ad1c5-e340-3b8f-a523-d9122f4920fc.roa File: c10ad1c5-e340-3b8f-a523-d9122f4920fc.roa (raw, json) Hash identifier: IfJezCT3Hnd6XZ/jHZxYo8S1rF+ttrMtqIrfZ7Kvrmg= Subject key identifier: D5:B3:F3:FE:67:D1:DC:42:46:5C:AF:2A:A8:E3:4D:7C:14:B9:CE:8A Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584B1806C6D22355AD0B086CC980 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c10ad1c5-e340-3b8f-a523-d9122f4920fc.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 22781 IP address blocks: 207.204.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:c6:d2:23:55:ad:0b:08:6c:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=4a431749-0268-45cc-8b2b-d2d61375cbdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e0:f2:2b:d3:48:74:3c:af:cc:12:ba:73:3e: 51:e0:35:1d:13:3b:69:1b:2d:51:51:39:9e:69:f8: 7b:12:4f:ee:b9:9f:98:b3:06:15:b4:a7:91:76:a7: 96:24:89:b7:04:45:31:80:00:15:9c:6c:15:e7:85: 13:19:16:3c:5f:95:09:b4:91:1b:f8:b0:18:b8:4a: d0:54:ab:85:73:d6:cf:75:4c:af:f1:9d:01:fb:62: 3c:69:56:f1:23:cb:0d:02:42:64:41:cf:9c:cc:f3: d9:6f:27:f9:7c:64:a3:95:72:62:48:c7:b4:da:5c: 4f:37:02:fe:39:bd:a7:c3:e7:76:f6:01:a1:d2:0b: f9:82:0e:19:d4:c2:ff:9e:a2:05:d5:76:40:8c:d8: 83:fe:e7:f2:08:9e:a9:aa:e4:7a:e6:e8:f0:5e:4d: e5:ad:f3:fb:40:4a:f3:7f:f5:91:33:8b:e9:29:b1: 8c:84:b0:68:aa:aa:38:2b:a1:99:25:d0:55:d7:4d: 60:59:98:b1:c8:2a:4e:9e:23:be:e0:0c:d8:c3:70: ca:e9:da:fa:a7:81:ac:37:14:a1:9c:40:e9:a8:0b: 03:0f:ca:42:00:92:7c:05:2d:50:d8:2b:41:27:76: 4f:61:88:e4:37:33:ab:e2:cf:34:d5:38:34:59:44: 9f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B3:F3:FE:67:D1:DC:42:46:5C:AF:2A:A8:E3:4D:7C:14:B9:CE:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/c10ad1c5-e340-3b8f-a523-d9122f4920fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 207.204.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:89:c7:41:ea:4b:11:5e:e8:3a:0b:6e:85:d4:1e:c6:6f:bc: 11:d8:5d:a9:2f:3a:86:b4:1b:c3:04:7c:f9:c6:a1:80:81:6f: d1:2e:ea:d3:d5:2e:06:34:3e:46:ff:6c:85:2c:85:cc:95:d5: fc:68:91:9a:27:b8:3f:87:a2:8c:75:fc:eb:fa:77:9a:d7:34: ca:66:8d:5a:b3:0a:1d:0c:1f:c7:50:f5:c1:42:e8:5e:ef:8c: aa:37:f5:91:71:b2:85:c8:87:39:72:b6:fe:10:68:d4:78:2f: f8:a9:f8:99:58:c3:52:91:01:1b:83:2e:64:05:37:32:10:19: c8:76:6f:99:d4:49:58:a5:f6:4d:24:e2:9c:1d:aa:b8:71:8b: 71:de:1c:b3:10:01:13:08:e3:7f:e4:e0:21:d3:86:50:ed:9f: b7:f3:b1:41:5e:7d:64:77:b7:14:82:5b:dd:22:9a:bc:63:e4: f2:ee:3d:e5:98:ee:aa:59:5c:10:35:29:b2:61:6f:a6:16:c6: db:46:4e:69:ee:18:bf:92:8e:14:ed:7c:1d:e8:64:95:48:6f: cb:1b:43:75:eb:36:be:0b:e3:1e:ac:e1:e5:3d:2f:cc:a6:55: ff:a1:2d:28:a8:ab:27:7e:ef:3e:0c:b0:bd:c8:9b:14:4f:de: 92:c4:ad:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBsbSI1WtCwhsyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NGE0MzE3NDktMDI2OC00NWNjLThiMmItZDJkNjEzNzVjYmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeDyK9NIdDyvzBK6cz5R4DUdEztpGy1RUTme afh7Ek/uuZ+YswYVtKeRdqeWJIm3BEUxgAAVnGwV54UTGRY8X5UJtJEb+LAYuErQ VKuFc9bPdUyv8Z0B+2I8aVbxI8sNAkJkQc+czPPZbyf5fGSjlXJiSMe02lxPNwL+ Ob2nw+d29gGh0gv5gg4Z1ML/nqIF1XZAjNiD/ufyCJ6pquR65ujwXk3lrfP7QErz f/WRM4vpKbGMhLBoqqo4K6GZJdBV101gWZixyCpOniO+4AzYw3DK6dr6p4GsNxSh nEDpqAsDD8pCAJJ8BS1Q2CtBJ3ZPYYjkNzOr4s801Tg0WUSfsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWz8/5n0dxCRlyvKqjjTXwUuc6KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvYzEwYWQxYzUtZTM0MC0z YjhmLWE1MjMtZDkxMjJmNDkyMGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz8zoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGJx0HqSxFe6DoLboXUHsZvvBHYXakvOoa0G8MEfPnGoYCBb9Eu6tPV LgY0Pkb/bIUshcyV1fxokZonuD+Hoox1/Ov6d5rXNMpmjVqzCh0MH8dQ9cFC6F7v jKo39ZFxsoXIhzlytv4QaNR4L/ip+JlYw1KRARuDLmQFNzIQGch2b5nUSVil9k0k 4pwdqrhxi3HeHLMQARMI43/k4CHThlDtn7fzsUFefWR3txSCW90imrxj5PLuPeWY 7qpZXBA1KbJhb6YWxttGTmnuGL+SjhTtfB3oZJVIb8sbQ3XrNr4L4x6s4eU9L8ym Vf+hLSioqyd+7z4MsL3ImxRP3pLErQw= -----END CERTIFICATE-----Generated at Mon Oct 20 00:45:18 2025 by rpki-client