$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/900974d7-8989-307f-a8dd-f27fbe573f09.roa File: 900974d7-8989-307f-a8dd-f27fbe573f09.roa (raw, json) Hash identifier: sJdcjOfE2Hd5Rus0m0OskpoEIhtux7oByvkQl9N1mqI= Subject key identifier: 7D:A0:DC:8F:E3:A5:31:6E:07:1A:B3:98:75:79:F1:0F:8F:D2:3C:8D Certificate issuer: /CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Certificate serial: 010D0C9F4328584B047BFFCE5AAC0F6B0E77CAC0 Authority key identifier: F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/900974d7-8989-307f-a8dd-f27fbe573f09.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 198949 IP address blocks: 206.209.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7b:ff:ce:5a:ac:0f:6b:0e:77:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=8ac670bd-0c2d-42ab-b580-c94390e5b1a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ff:47:dd:ab:d2:c4:30:4f:99:0d:a7:29:05: bd:69:25:76:cf:ff:95:63:25:95:f5:8c:5c:0f:da: 85:db:8b:1f:e0:94:36:20:2c:f1:d3:67:0b:a0:1e: ac:5d:08:9e:bd:e0:29:99:d2:e1:dd:a1:b7:57:cc: 5b:6c:c8:84:d7:c1:41:3b:76:28:9d:a7:10:cc:6a: 02:47:e3:70:16:04:a1:b0:18:41:1f:37:43:85:76: 14:cb:24:c9:85:0e:2a:ec:9c:ed:06:ea:04:19:1b: 1b:55:15:8d:70:40:57:6e:2b:d2:fd:9b:16:38:10: a7:d1:5e:4a:18:4f:84:74:23:c6:c1:7b:8b:c6:7a: d6:5c:93:cc:61:85:0c:a1:f3:89:63:e1:7d:2d:bd: b4:16:ed:99:6d:c5:ea:a8:36:90:ab:e2:62:c3:e7: 41:e1:aa:09:ba:7d:28:b1:a7:42:e1:2d:32:65:82: 3e:98:67:ed:3d:0f:70:08:7c:19:24:a5:b0:a6:66: 1f:b6:6d:a9:fd:ff:15:0d:86:1c:4c:d9:f1:c7:d5: 2a:f6:27:c6:bc:ae:22:34:9d:7e:ff:81:fb:9e:ea: fe:ac:22:bd:23:d9:89:5c:93:4d:48:d8:ca:f3:22: 7a:a4:27:07:7c:d5:45:2b:d8:30:84:f0:f0:e4:eb: ce:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A0:DC:8F:E3:A5:31:6E:07:1A:B3:98:75:79:F1:0F:8F:D2:3C:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/900974d7-8989-307f-a8dd-f27fbe573f09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl X509v3 Authority Key Identifier: keyid:F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer sbgp-ipAddrBlock: critical IPv4: 206.209.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:da:3b:c3:65:cd:46:31:d9:c1:0c:b4:93:c3:92:6b:9d:83: 4e:c9:13:03:b9:58:34:54:5c:d7:2f:26:e8:2c:dd:a8:d4:92: c9:ac:12:fc:4f:68:e3:f0:d8:10:da:98:f9:e7:21:98:f3:92: a9:d6:9f:3b:b4:4f:da:ad:83:76:af:a9:8e:42:6e:40:98:98: 0d:8a:7b:0d:0e:98:52:be:68:91:c6:84:ca:6e:fe:7c:90:4a: f6:95:cd:23:e8:65:8a:19:e1:61:d6:e2:81:75:68:85:05:51: b7:b1:1c:bd:ff:f5:37:94:9b:63:75:bf:b7:bb:d0:28:0a:00: 06:25:8c:39:e5:a7:c4:78:65:72:c1:07:5e:7d:cc:78:eb:99: 62:fd:a3:19:15:91:44:29:dc:93:ff:97:83:8c:21:7c:83:ac: a4:4c:ad:43:82:fe:75:d7:32:18:05:fd:19:42:ee:bc:de:67: c9:ac:8c:51:9a:98:a6:fa:8a:1e:7e:df:fc:fd:a5:33:59:55: 92:9a:c5:c1:b9:0d:55:ae:04:9d:3b:71:42:20:3b:7a:c1:66: 01:39:e9:73:99:b9:50:be:5b:b5:b5:f0:a6:c6:83:f5:a4:b5: 68:2c:0a:1d:e6:2c:6f:1e:c8:d3:d1:80:c2:6c:04:80:ae:5b: fc:e6:cd:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEe//OWqwPaw53ysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y5MDBlNGUtNWYwYS00YjE0LTk4YzAtNjY0N2JmZjVl NjRlMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk OGFjNjcwYmQtMGMyZC00MmFiLWI1ODAtYzk0MzkwZTViMWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/9H3avSxDBPmQ2nKQW9aSV2z/+VYyWV9Yxc D9qF24sf4JQ2ICzx02cLoB6sXQieveApmdLh3aG3V8xbbMiE18FBO3YonacQzGoC R+NwFgShsBhBHzdDhXYUyyTJhQ4q7JztBuoEGRsbVRWNcEBXbivS/ZsWOBCn0V5K GE+EdCPGwXuLxnrWXJPMYYUMofOJY+F9Lb20Fu2ZbcXqqDaQq+Jiw+dB4aoJun0o sadC4S0yZYI+mGftPQ9wCHwZJKWwpmYftm2p/f8VDYYcTNnxx9Uq9ifGvK4iNJ1+ /4H7nur+rCK9I9mJXJNNSNjK8yJ6pCcHfNVFK9gwhPDw5OvOkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2g3I/jpTFuBxqzmHV58Q+P0jyNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83Zjkw MGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3YmZmNWU2NGUvOTAwOTc0ZDctODk4OS0z MDdmLWE4ZGQtZjI3ZmJlNTczZjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2Y5MDBlNGUtNWYwYS00YjE0LTk4 YzAtNjY0N2JmZjVlNjRlLzdmOTAwZTRlLTVmMGEtNGIxNC05OGMwLTY2NDdiZmY1 ZTY0ZS5jcmwwHwYDVR0jBBgwFoAU8+WK0rjvh9c+gIgy/nujowv1xKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZjkwMGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3 YmZmNWU2NGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEztEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHaO8NlzUYx2cEMtJPDkmudg07JEwO5WDRUXNcvJugs3ajUksmsEvxP aOPw2BDamPnnIZjzkqnWnzu0T9qtg3avqY5CbkCYmA2Kew0OmFK+aJHGhMpu/nyQ SvaVzSPoZYoZ4WHW4oF1aIUFUbexHL3/9TeUm2N1v7e70CgKAAYljDnlp8R4ZXLB B159zHjrmWL9oxkVkUQp3JP/l4OMIXyDrKRMrUOC/nXXMhgF/RlC7rzeZ8msjFGa mKb6ih5+3/z9pTNZVZKaxcG5DVWuBJ07cUIgO3rBZgE56XOZuVC+W7W18KbGg/Wk tWgsCh3mLG8eyNPRgMJsBICuW/zmzaE= -----END CERTIFICATE-----Generated at Mon Oct 20 05:22:18 2025 by rpki-client