$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/ebd77ce6-0355-3c1a-b8a9-334d9a25341a.roa File: ebd77ce6-0355-3c1a-b8a9-334d9a25341a.roa (raw, json) Hash identifier: 5lvUQF+kHonAG3EFQJ1zyjupNnD8Sfc3VA9bv2HhoFw= Subject key identifier: 44:DF:33:CC:1F:C4:C2:68:71:38:2A:0C:E4:5B:2E:95:3F:07:56:9B Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584B87B23DA6645A44F98CA0A380 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/ebd77ce6-0355-3c1a-b8a9-334d9a25341a.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 22903 IP address blocks: 204.251.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:3d:a6:64:5a:44:f9:8c:a0:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=907fc3af-affe-496b-9659-f500fb981477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:51:f8:89:58:9e:ef:ab:e9:51:88:9c:e0:36: c0:21:fd:5c:ea:c3:32:d0:aa:09:b9:ef:53:e5:4d: 9c:1c:df:47:54:24:28:3b:53:24:4a:3c:f1:2e:06: 23:b4:d7:f7:9a:85:77:35:0f:d8:53:83:02:23:47: 04:49:25:d3:de:e5:bc:32:01:c9:a3:b2:06:0e:64: d6:2e:f3:bf:20:8e:ea:04:4f:16:f4:f0:69:17:17: 70:b5:da:59:cf:2f:73:cb:d7:7e:d1:30:32:b2:87: 0c:2a:35:7b:64:72:85:48:87:86:d1:52:2c:bf:67: 43:40:c5:78:64:6c:76:7d:63:e0:e3:76:38:15:41: ec:20:22:d1:f3:05:db:fc:1a:5f:a9:f7:85:91:b0: f0:25:c1:7b:c6:9d:fc:dc:83:cc:e1:8a:6f:3a:29: 85:d2:5a:3c:73:92:4e:42:f7:61:77:cd:f8:3d:88: 8a:46:62:67:44:55:3f:f3:09:6e:7d:69:fb:49:67: 7d:f7:75:9c:3d:5c:b9:63:fe:51:d9:c4:28:2e:d8: 74:14:f8:90:e3:08:0e:25:86:a4:3d:66:c6:98:c8: 0e:78:40:45:90:b1:59:96:16:30:9d:f2:d4:1f:f6: f3:38:0d:5e:c8:9e:96:f6:7e:f1:d0:fc:54:53:a6: f9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:DF:33:CC:1F:C4:C2:68:71:38:2A:0C:E4:5B:2E:95:3F:07:56:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/ebd77ce6-0355-3c1a-b8a9-334d9a25341a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 204.251.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:9f:cc:37:a0:d6:a7:24:af:42:49:d2:63:08:10:8d:2b:54: 20:91:2e:52:c8:64:29:63:f9:7b:9f:0a:62:ee:88:6a:d2:6e: cd:7e:6f:a4:d3:47:14:1d:30:a7:78:c8:b8:9a:0c:ce:ec:64: fa:c1:2f:00:a6:09:cb:4c:dc:38:07:b9:65:b6:f2:56:2b:bf: 0c:3f:77:75:ec:9f:21:72:11:d6:a0:af:1f:92:08:0e:b6:87: 6b:f3:1b:ad:de:74:93:b8:d1:3a:79:88:ef:60:36:6f:86:79: 2c:2c:6e:79:c2:49:33:1c:9e:3b:63:06:e7:8b:90:20:3b:59: c4:b7:17:94:c9:10:cc:7e:ca:65:7d:ed:4e:2e:e9:c3:34:dd: fc:f8:77:22:ac:18:1c:3f:54:a8:fb:67:44:ba:c2:46:27:4e: 81:17:d5:4e:26:b3:20:7a:4f:49:75:7f:64:0a:36:77:b7:bc: 3e:7d:50:83:f1:e4:17:e0:00:e8:5e:45:ea:e4:ea:0c:fe:46: 08:b4:85:51:5c:40:a7:4d:54:84:11:e7:a6:a0:1f:fc:b0:80: 08:15:eb:f6:71:7c:b8:09:2a:99:d4:33:eb:d8:02:4a:f7:e8: 4d:1c:9d:73:ce:27:84:08:8c:ad:52:59:9d:4f:ef:58:fc:ea: 07:e4:1f:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsj2mZFpE+Yygo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk OTA3ZmMzYWYtYWZmZS00OTZiLTk2NTktZjUwMGZiOTgxNDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVH4iVie76vpUYic4DbAIf1c6sMy0KoJue9T 5U2cHN9HVCQoO1MkSjzxLgYjtNf3moV3NQ/YU4MCI0cESSXT3uW8MgHJo7IGDmTW LvO/II7qBE8W9PBpFxdwtdpZzy9zy9d+0TAysocMKjV7ZHKFSIeG0VIsv2dDQMV4 ZGx2fWPg43Y4FUHsICLR8wXb/BpfqfeFkbDwJcF7xp383IPM4YpvOimF0lo8c5JO Qvdhd834PYiKRmJnRFU/8wlufWn7SWd993WcPVy5Y/5R2cQoLth0FPiQ4wgOJYak PWbGmMgOeEBFkLFZlhYwnfLUH/bzOA1eyJ6W9n7x0PxUU6b5CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETfM8wfxMJocTgqDORbLpU/B1abMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvZWJkNzdjZTYtMDM1NS0z YzFhLWI4YTktMzM0ZDlhMjUzNDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzPuvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSfzDeg1qckr0JJ0mMIEI0rVCCRLlLIZClj+XufCmLuiGrSbs1+b6TT RxQdMKd4yLiaDM7sZPrBLwCmCctM3DgHuWW28lYrvww/d3XsnyFyEdagrx+SCA62 h2vzG63edJO40Tp5iO9gNm+GeSwsbnnCSTMcnjtjBueLkCA7WcS3F5TJEMx+ymV9 7U4u6cM03fz4dyKsGBw/VKj7Z0S6wkYnToEX1U4msyB6T0l1f2QKNne3vD59UIPx 5BfgAOheRerk6gz+Rgi0hVFcQKdNVIQR56agH/ywgAgV6/ZxfLgJKpnUM+vYAkr3 6E0cnXPOJ4QIjK1SWZ1P71j86gfkH7E= -----END CERTIFICATE-----Generated at Mon Oct 20 09:00:59 2025 by rpki-client