$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297/952ae293-ad8a-35ef-b49d-2484ef6fe1a1.roa File: 952ae293-ad8a-35ef-b49d-2484ef6fe1a1.roa (raw, json) Hash identifier: Q0zhvblTmMbFI85xhJeI9Zhut8DzSJFPz9yOHCJJx08= Subject key identifier: 20:F1:09:AB:A1:A3:E7:B6:33:3D:02:82:FC:1E:29:65:FE:91:48:0F Certificate issuer: /CN=77a1f652-62bb-4b22-ac07-0b2b88868297 Certificate serial: 010D0C9F4328584B9012327DAA1250ECCA8ED080 Authority key identifier: B0:40:EA:26:82:DB:B6:69:CA:9C:85:09:9B:7A:1F:47:6D:C6:58:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297/952ae293-ad8a-35ef-b49d-2484ef6fe1a1.roa Signing time: Sat 18 Oct 2025 13:00:39 +0000 ROA not before: Sat 18 Oct 2025 13:00:39 +0000 ROA not after: Fri 16 Jan 2026 14:00:39 +0000 asID: 20115 IP address blocks: 207.167.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297/77a1f652-62bb-4b22-ac07-0b2b88868297.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297/77a1f652-62bb-4b22-ac07-0b2b88868297.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:90:12:32:7d:aa:12:50:ec:ca:8e:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77a1f652-62bb-4b22-ac07-0b2b88868297 Validity Not Before: Oct 18 13:00:39 2025 GMT Not After : Jan 16 14:00:39 2026 GMT Subject: CN=3280f589-ccf3-4523-8e1c-92730a517939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5b:b0:65:da:c8:1b:c6:60:93:f7:70:73:d9: 05:b4:f0:a7:ed:68:63:b0:0a:27:ad:a2:0b:75:b6: d3:ff:d1:e2:5d:ed:1a:04:ed:75:3e:5e:42:0f:01: 1e:d7:4f:89:02:4f:ee:7a:12:b1:da:0a:c1:22:ad: 0e:a0:10:34:e1:d7:5a:50:e4:24:ed:88:c3:84:25: 45:1a:25:af:c0:6a:06:60:10:02:b8:3c:e1:c7:62: 3b:b4:58:14:0b:1d:db:d6:fe:3c:14:e3:37:de:90: bc:1e:d8:cf:ab:4e:d7:ef:88:82:bc:f5:c9:9f:33: eb:0e:55:19:b3:0d:e9:f0:f0:fc:2e:79:41:b6:01: 5d:7c:5c:8b:3a:6f:ab:6d:a6:80:b9:1d:b5:0e:c0: 84:65:3b:e0:c9:2a:77:69:de:24:e3:cf:22:6b:b8: 81:0b:b3:d2:f7:19:49:5e:35:37:cb:c3:de:c9:4c: 43:e5:69:02:33:83:bf:dc:d8:6c:25:d2:1b:83:33: f2:26:63:e7:28:7f:49:4e:c6:d4:a0:8a:61:1d:8f: 42:ae:04:67:93:3a:be:69:e5:6d:8d:5a:1a:c9:8a: ec:97:83:05:93:3b:20:90:7c:2d:03:40:1d:ad:3c: 12:7e:c5:5e:dc:f5:25:03:e3:62:29:e6:f8:db:95: e4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F1:09:AB:A1:A3:E7:B6:33:3D:02:82:FC:1E:29:65:FE:91:48:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297/952ae293-ad8a-35ef-b49d-2484ef6fe1a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297/77a1f652-62bb-4b22-ac07-0b2b88868297.crl X509v3 Authority Key Identifier: keyid:B0:40:EA:26:82:DB:B6:69:CA:9C:85:09:9B:7A:1F:47:6D:C6:58:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77a1f652-62bb-4b22-ac07-0b2b88868297.cer sbgp-ipAddrBlock: critical IPv4: 207.167.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:b7:ce:f4:73:f1:ca:24:54:9a:12:7c:54:f9:63:12:77:13: 28:d6:4d:57:c2:f0:1a:96:da:8d:d6:7f:2e:51:11:7d:3c:13: a2:e6:73:45:3b:41:0c:9c:4e:61:93:2c:9e:ab:62:73:34:5f: 44:f6:68:e8:2f:f6:b9:63:7b:8c:8f:bf:51:4a:82:c8:96:83: 9a:af:e2:b5:2a:24:a1:01:6a:01:b4:e4:ef:c8:d1:95:0d:1d: b8:a9:ec:d5:29:cd:cb:b9:d5:a8:25:5e:b9:c7:21:b9:52:14: 4c:ec:24:ab:b2:ed:a1:3d:3f:2c:33:71:6b:dd:3d:e8:d6:86: 10:e0:38:95:05:0f:d6:a6:02:2d:50:0b:c3:cf:85:21:a6:4d: 3a:1a:66:a4:94:27:cd:f5:19:d5:23:35:72:dc:8f:2b:0e:40: 05:c7:ec:4e:02:ec:ed:ad:4d:4f:4a:55:c6:e0:15:ac:aa:8d: 7b:61:ec:89:44:18:b0:c7:e0:ef:73:5a:b9:07:58:1e:67:22: 42:c4:ac:75:a5:e7:30:77:17:a9:27:ca:ec:58:1d:b8:7c:3d: 17:b3:9c:a8:d8:51:4b:44:b9:6e:5e:40:73:4e:48:e0:d1:b1: 79:5d:79:97:09:63:7a:ca:9b:ef:77:a7:da:85:fd:66:05:ca: 59:96:4f:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuQEjJ9qhJQ7MqO0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzdhMWY2NTItNjJiYi00YjIyLWFjMDctMGIyYjg4ODY4 Mjk3MB4XDTI1MTAxODEzMDAzOVoXDTI2MDExNjE0MDAzOVowLzEtMCsGA1UEAxMk MzI4MGY1ODktY2NmMy00NTIzLThlMWMtOTI3MzBhNTE3OTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVuwZdrIG8Zgk/dwc9kFtPCn7WhjsAonraIL dbbT/9HiXe0aBO11Pl5CDwEe10+JAk/uehKx2grBIq0OoBA04ddaUOQk7YjDhCVF GiWvwGoGYBACuDzhx2I7tFgUCx3b1v48FOM33pC8HtjPq07X74iCvPXJnzPrDlUZ sw3p8PD8LnlBtgFdfFyLOm+rbaaAuR21DsCEZTvgySp3ad4k488ia7iBC7PS9xlJ XjU3y8PeyUxD5WkCM4O/3NhsJdIbgzPyJmPnKH9JTsbUoIphHY9CrgRnkzq+aeVt jVoayYrsl4MFkzsgkHwtA0AdrTwSfsVe3PUlA+NiKeb425XkvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDxCauho+e2Mz0CgvweKWX+kUgPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83N2Ex ZjY1Mi02MmJiLTRiMjItYWMwNy0wYjJiODg4NjgyOTcvOTUyYWUyOTMtYWQ4YS0z NWVmLWI0OWQtMjQ4NGVmNmZlMWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzdhMWY2NTItNjJiYi00YjIyLWFj MDctMGIyYjg4ODY4Mjk3Lzc3YTFmNjUyLTYyYmItNGIyMi1hYzA3LTBiMmI4ODg2 ODI5Ny5jcmwwHwYDVR0jBBgwFoAUsEDqJoLbtmnKnIUJm3ofR23GWLswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83N2ExZjY1Mi02MmJiLTRiMjItYWMwNy0wYjJi ODg4NjgyOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz6diMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF23zvRz8cokVJoSfFT5YxJ3EyjWTVfC8BqW2o3Wfy5REX08E6Lmc0U7 QQycTmGTLJ6rYnM0X0T2aOgv9rlje4yPv1FKgsiWg5qv4rUqJKEBagG05O/I0ZUN Hbip7NUpzcu51aglXrnHIblSFEzsJKuy7aE9PywzcWvdPejWhhDgOJUFD9amAi1Q C8PPhSGmTToaZqSUJ831GdUjNXLcjysOQAXH7E4C7O2tTU9KVcbgFayqjXth7IlE GLDH4O9zWrkHWB5nIkLErHWl5zB3F6knyuxYHbh8PReznKjYUUtEuW5eQHNOSODR sXldeZcJY3rKm+93p9qF/WYFylmWT/Q= -----END CERTIFICATE-----Generated at Mon Oct 20 04:41:31 2025 by rpki-client