$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/e972a60c-651a-3535-bbe5-35e3bcf6c3a6.roa File: e972a60c-651a-3535-bbe5-35e3bcf6c3a6.roa (raw, json) Hash identifier: kNcyTY9r2xhiTdf8KkrJ/wzWRCxBCYFNxVspzD8Zn64= Subject key identifier: 93:25:74:3C:21:12:7A:D9:04:B5:EB:D5:54:8B:3A:93:8B:86:09:00 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584B84E79C85A0C30AADC43C7280 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/e972a60c-651a-3535-bbe5-35e3bcf6c3a6.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 13767 IP address blocks: 204.251.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:9c:85:a0:c3:0a:ad:c4:3c:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=d16bb620-3e7f-4f4e-b539-951cdc2a0b4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b4:a1:21:1e:e1:7c:70:c1:f9:e8:c8:51:57: bb:9f:fe:18:56:04:14:4c:dd:d9:7c:9d:13:4a:96: 02:24:ab:96:aa:15:1e:43:b2:f4:38:86:bb:c0:ff: c6:f9:02:f2:dd:66:9d:05:2b:76:59:ad:82:15:4e: dc:e8:50:3e:3c:56:5d:8c:c5:a3:23:d1:c1:a3:69: 81:eb:bc:88:e9:9b:c8:06:82:f7:3f:86:0b:ac:43: 34:55:30:c3:7f:63:b6:ad:e9:6b:7a:7f:18:91:71: 9d:1e:25:66:6a:e2:9f:cc:d9:e5:3f:c5:d2:f2:37: 52:d6:36:f5:cd:90:0c:1d:06:15:df:6d:eb:5f:64: 31:c0:89:17:a1:da:6e:d2:5f:aa:23:aa:09:d2:d2: 58:2b:cf:c0:b1:b0:b0:55:d0:3b:f5:f9:b6:d5:44: 7d:5e:dd:62:35:1a:6f:00:9e:74:7e:01:d4:52:61: 23:19:5d:49:f4:88:20:8f:ca:22:45:e9:ab:38:e8: eb:3b:d5:7b:82:c9:36:4c:ed:a4:01:19:e2:ef:65: 19:68:4f:cb:0b:a1:a4:e4:e0:4a:a3:f6:94:bf:0d: 13:10:b6:13:d4:91:0e:e0:de:c2:26:4e:e6:b0:f3: cd:c2:d2:0e:34:92:c5:fe:cd:d3:28:97:80:29:45: 85:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:25:74:3C:21:12:7A:D9:04:B5:EB:D5:54:8B:3A:93:8B:86:09:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/e972a60c-651a-3535-bbe5-35e3bcf6c3a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 204.251.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:a5:2b:ff:70:0f:e8:f8:2e:a5:62:bb:8e:9f:6b:e4:70:4e: 59:9f:be:6b:ae:47:78:c9:81:f9:f7:9e:2d:87:7c:83:dc:91: 38:37:05:a9:6c:50:e2:0a:b4:80:82:5e:d9:40:2b:82:3f:d2: 6a:ec:68:c2:bc:13:6c:22:6d:7f:29:80:97:74:4e:9d:93:26: 13:1c:38:7b:4f:cc:3a:c1:ef:e3:76:9e:1f:f8:4d:83:93:1d: 9d:90:bb:2e:fd:98:14:4c:d0:16:3d:04:6a:98:97:55:f7:ad: 8a:cd:42:75:0b:8b:ee:19:42:2b:6d:17:c0:0d:74:97:b6:6c: d1:be:0c:99:8b:87:89:27:6a:71:d7:3c:e5:2c:7a:6f:f2:57: 58:26:ee:1f:72:25:b8:6e:e9:aa:b7:00:93:bd:17:13:aa:bc: bc:64:4c:68:72:1f:5d:88:91:79:08:5a:e0:9d:c6:30:d1:78: 8c:23:e0:dd:b3:32:e7:ff:5f:98:8d:01:16:37:eb:da:22:a8: d7:d0:3c:a7:57:75:f0:9d:b4:01:7c:a5:0a:ac:7f:c8:21:97: c9:1a:fc:ff:3f:d0:bd:ba:b0:bf:2f:70:b7:32:eb:21:f0:8c: c9:11:1d:ee:f4:15:67:d1:89:6c:3a:0c:f8:d5:bb:33:86:aa: aa:2e:16:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE55yFoMMKrcQ8coAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ZDE2YmI2MjAtM2U3Zi00ZjRlLWI1MzktOTUxY2RjMmEwYjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbShIR7hfHDB+ejIUVe7n/4YVgQUTN3ZfJ0T SpYCJKuWqhUeQ7L0OIa7wP/G+QLy3WadBSt2Wa2CFU7c6FA+PFZdjMWjI9HBo2mB 67yI6ZvIBoL3P4YLrEM0VTDDf2O2relren8YkXGdHiVmauKfzNnlP8XS8jdS1jb1 zZAMHQYV323rX2QxwIkXodpu0l+qI6oJ0tJYK8/AsbCwVdA79fm21UR9Xt1iNRpv AJ50fgHUUmEjGV1J9Iggj8oiRemrOOjrO9V7gsk2TO2kARni72UZaE/LC6Gk5OBK o/aUvw0TELYT1JEO4N7CJk7msPPNwtIONJLF/s3TKJeAKUWFJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJMldDwhEnrZBLXr1VSLOpOLhgkAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvZTk3MmE2MGMtNjUxYS0z NTM1LWJiZTUtMzVlM2JjZjZjM2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzPuvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKmlK/9wD+j4LqViu46fa+RwTlmfvmuuR3jJgfn3ni2HfIPckTg3Bals UOIKtICCXtlAK4I/0mrsaMK8E2wibX8pgJd0Tp2TJhMcOHtPzDrB7+N2nh/4TYOT HZ2Quy79mBRM0BY9BGqYl1X3rYrNQnULi+4ZQittF8ANdJe2bNG+DJmLh4knanHX POUsem/yV1gm7h9yJbhu6aq3AJO9FxOqvLxkTGhyH12IkXkIWuCdxjDReIwj4N2z Muf/X5iNARY369oiqNfQPKdXdfCdtAF8pQqsf8ghl8ka/P8/0L26sL8vcLcy6yHw jMkRHe70FWfRiWw6DPjVuzOGqqouFjY= -----END CERTIFICATE-----Generated at Mon Oct 20 09:01:14 2025 by rpki-client