$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/f5bbe177-db20-3981-a339-c4f34d572e28.roa File: f5bbe177-db20-3981-a339-c4f34d572e28.roa (raw, json) Hash identifier: i5HsdsJFhguyRuCMK8aUF0DK5oHpD/MnbuQ0gvywCU0= Subject key identifier: B6:D3:9D:9C:C0:5F:69:0D:AC:4E:0A:76:54:F4:7E:A6:23:A0:8B:68 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584B1806C6E4903DA7660A051F80 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/f5bbe177-db20-3981-a339-c4f34d572e28.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 22781 IP address blocks: 207.204.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:c6:e4:90:3d:a7:66:0a:05:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=a48ea49e-87d1-43e7-ae40-d4f402e703e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:09:a3:35:a8:a9:79:d7:39:ce:d6:cd:9f:0b: dd:1c:12:f3:b8:86:c5:1d:02:fe:f4:b3:a4:a0:cc: ae:7f:7b:4b:05:8e:22:d6:cf:15:e8:ec:d7:e7:53: 3a:07:32:48:84:ad:ce:14:14:c8:35:25:c9:d6:3e: f6:8d:60:74:c7:65:98:5e:05:6f:79:35:a0:b9:a9: 60:d7:36:2a:9f:48:07:a4:39:33:a3:72:1b:ba:3a: bd:da:a2:d8:2a:14:94:6a:05:4e:26:cd:3a:ee:95: 15:23:4f:59:f2:ad:4c:81:d9:0f:54:a7:36:f4:5a: 67:f8:d2:e1:b8:ee:3f:a1:7a:e1:f5:e2:30:0e:b0: 94:e4:6a:e1:cf:7e:d8:ec:a9:95:a7:50:74:7b:e0: f8:77:07:49:8b:2b:89:db:21:34:17:77:aa:e6:88: 25:6c:67:52:a6:b4:dc:5f:00:f1:32:14:4f:14:fd: 3c:3f:95:ae:52:78:6c:53:45:48:82:50:44:36:c1: d6:06:61:1f:16:78:9f:d2:04:f8:e2:a0:47:13:82: dc:7b:f5:86:ae:f5:a3:ff:5c:01:28:17:39:ab:80: e7:5a:be:62:08:60:2c:7a:6c:2f:5a:fb:c5:f1:59: 65:a2:8d:8f:56:7e:e7:39:ba:fe:f9:3e:3d:49:f1: 38:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D3:9D:9C:C0:5F:69:0D:AC:4E:0A:76:54:F4:7E:A6:23:A0:8B:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/f5bbe177-db20-3981-a339-c4f34d572e28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 207.204.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:dc:c6:5c:8a:97:1c:86:0e:97:82:d1:0a:fc:68:0e:44:de: 2e:87:16:2b:88:7b:1b:c6:33:47:13:12:88:a3:1b:0b:5e:50: a3:bb:3c:fd:d5:32:c0:4e:cd:e0:b2:91:b1:e8:bd:58:10:60: dc:68:94:4b:1f:5d:0e:e3:a3:3e:28:f3:f5:e5:2a:ae:5e:f9: e8:6b:98:79:7c:04:f3:b8:35:42:b0:35:94:ff:73:00:97:8d: 72:5d:13:e4:92:7a:3a:78:29:a8:a4:2e:d2:5d:f6:50:3a:39: a4:dd:55:0e:69:f0:e8:af:3f:3a:5d:86:08:d5:8e:0d:70:ef: 7e:65:f7:1e:bb:14:89:0f:64:69:ec:72:fa:09:77:89:f0:99: be:f2:0c:87:ad:4d:a9:e7:7e:2f:f8:a2:77:f7:64:5e:e6:db: ad:7d:05:68:9d:26:b2:66:d3:9c:bb:50:8d:cc:eb:f6:b3:db: 83:2b:a1:ed:86:29:d0:c9:aa:68:91:8a:cb:8f:92:c2:ed:58: 50:ff:ea:67:c9:19:15:7f:48:1f:12:92:0a:37:28:53:48:6c: ce:c1:e3:6e:4e:97:4b:e7:50:c2:a5:a5:31:15:03:22:f6:c3: 7c:58:6f:33:be:2e:d9:8f:ec:c9:64:4e:60:63:61:41:73:8b: 93:52:b7:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBsbkkD2nZgoFH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk YTQ4ZWE0OWUtODdkMS00M2U3LWFlNDAtZDRmNDAyZTcwM2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQmjNaipedc5ztbNnwvdHBLzuIbFHQL+9LOk oMyuf3tLBY4i1s8V6OzX51M6BzJIhK3OFBTINSXJ1j72jWB0x2WYXgVveTWgualg 1zYqn0gHpDkzo3Ibujq92qLYKhSUagVOJs067pUVI09Z8q1MgdkPVKc29Fpn+NLh uO4/oXrh9eIwDrCU5Grhz37Y7KmVp1B0e+D4dwdJiyuJ2yE0F3eq5oglbGdSprTc XwDxMhRPFP08P5WuUnhsU0VIglBENsHWBmEfFnif0gT44qBHE4Lce/WGrvWj/1wB KBc5q4DnWr5iCGAsemwvWvvF8Vlloo2PVn7nObr++T49SfE45QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbTnZzAX2kNrE4KdlT0fqYjoItoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZjViYmUxNzctZGIyMC0z OTgxLWEzMzktYzRmMzRkNTcyZTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz8zwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfcxlyKlxyGDpeC0Qr8aA5E3i6HFiuIexvGM0cTEoijGwteUKO7PP3V MsBOzeCykbHovVgQYNxolEsfXQ7joz4o8/XlKq5e+ehrmHl8BPO4NUKwNZT/cwCX jXJdE+SSejp4KaikLtJd9lA6OaTdVQ5p8OivPzpdhgjVjg1w735l9x67FIkPZGns cvoJd4nwmb7yDIetTannfi/4onf3ZF7m2619BWidJrJm05y7UI3M6/az24Mroe2G KdDJqmiRisuPksLtWFD/6mfJGRV/SB8Skgo3KFNIbM7B425Ol0vnUMKlpTEVAyL2 w3xYbzO+LtmP7MlkTmBjYUFzi5NStzo= -----END CERTIFICATE-----Generated at Mon Oct 20 00:45:17 2025 by rpki-client