$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/40385235-f792-3e3f-8a68-b1affa65f084.roa File: 40385235-f792-3e3f-8a68-b1affa65f084.roa (raw, json) Hash identifier: KzyYtd6Feln6LMB3RSxMr+okLlu1bf9Olg15Ocsfcl8= Subject key identifier: E8:D0:4C:F1:03:03:8A:15:05:D4:7A:58:23:F4:FD:DD:28:0F:7F:35 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584B79BCB67CC822C280C09DA020 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/40385235-f792-3e3f-8a68-b1affa65f084.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 397422 IP address blocks: 209.237.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b6:7c:c8:22:c2:80:c0:9d:a0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=a256e905-d90e-421d-8516-65d69a34151f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:16:cd:7f:2c:64:b0:a9:5a:b5:52:30:93:a7: f6:74:a2:ed:42:37:ec:34:c3:36:7d:df:e3:7a:ce: de:fa:32:53:cb:0e:5e:df:44:73:0c:16:b1:6d:7d: c2:a8:9b:77:d1:6e:ae:cf:63:82:72:8f:93:4a:7a: b7:2f:d3:d2:1d:78:50:b1:a1:4c:97:f8:40:0d:26: 30:ba:3d:78:6f:7c:38:39:49:05:4c:7c:85:0d:b3: c2:38:d2:fa:01:cd:8c:42:e8:f1:9f:41:0c:31:08: cc:39:46:8f:63:0a:57:c6:f8:23:80:fc:e2:58:7c: 13:d3:fb:97:4f:b9:40:05:14:67:7a:71:05:0e:91: 3e:f7:56:8b:b6:ca:4e:9e:5e:7f:6f:3f:44:73:9f: b7:fd:c9:18:f0:33:00:ed:12:d9:37:5a:29:4a:13: 56:d8:13:dd:c7:c1:9e:92:70:ea:a9:98:06:3b:1a: 09:50:b9:0e:d6:1f:82:a8:ad:06:80:00:21:d5:4f: d5:95:81:0b:9e:aa:ca:bb:cb:db:2f:f5:02:05:3e: 6f:1b:b1:21:1c:2f:59:69:0c:ff:f1:06:b4:32:fa: dc:69:42:1e:f9:49:ad:b8:8a:e5:bc:25:6a:47:9a: 93:7f:1b:be:92:f2:88:1c:b7:4a:99:2c:6c:f2:ac: 01:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D0:4C:F1:03:03:8A:15:05:D4:7A:58:23:F4:FD:DD:28:0F:7F:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/40385235-f792-3e3f-8a68-b1affa65f084.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:f3:df:07:c1:89:13:ad:eb:43:3a:32:73:70:90:12:f1:f3: de:37:84:2d:9b:5c:dc:d3:45:86:9b:95:7f:a2:b4:23:4d:96: 2f:3e:72:aa:96:b5:d6:1e:52:5c:00:83:7b:0d:9b:30:0f:15: a2:a0:74:99:17:f1:9c:92:e0:ff:fb:f4:a3:12:c1:78:7a:c0: 8b:f5:a1:7b:30:19:6a:cd:6d:60:d6:8b:60:0c:bc:33:42:40: 96:1f:02:a8:8f:81:80:34:38:57:4c:00:20:aa:5a:c6:25:c1: c9:e7:16:fd:e0:24:5b:d2:d2:08:49:26:2d:3a:55:82:30:ab: 41:a4:4c:c1:b9:43:2e:4b:35:5a:cf:64:2d:fc:f9:78:20:24: bb:53:ac:2c:35:4f:33:2e:5c:29:aa:dd:f0:70:58:d9:70:13: 44:9f:5f:d3:67:03:5e:d4:49:8e:ca:5e:b9:5d:45:08:fc:36: a5:30:3d:1b:da:ef:46:1e:d1:5b:27:8b:b8:9d:25:09:58:f4: 2a:bb:ce:fa:1f:9e:9b:fc:48:89:0c:12:ea:c6:23:f9:62:aa: 85:91:05:66:2c:7f:e0:ae:2e:78:b8:64:21:42:68:12:6b:61: 67:cd:ee:d8:03:7b:90:28:9c:b2:a9:84:3e:8f:ac:7b:6b:95: b8:48:3b:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLZ8yCLCgMCdoCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk YTI1NmU5MDUtZDkwZS00MjFkLTg1MTYtNjVkNjlhMzQxNTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxbNfyxksKlatVIwk6f2dKLtQjfsNMM2fd/j es7e+jJTyw5e30RzDBaxbX3CqJt30W6uz2OCco+TSnq3L9PSHXhQsaFMl/hADSYw uj14b3w4OUkFTHyFDbPCONL6Ac2MQujxn0EMMQjMOUaPYwpXxvgjgPziWHwT0/uX T7lABRRnenEFDpE+91aLtspOnl5/bz9Ec5+3/ckY8DMA7RLZN1opShNW2BPdx8Ge knDqqZgGOxoJULkO1h+CqK0GgAAh1U/VlYELnqrKu8vbL/UCBT5vG7EhHC9ZaQz/ 8Qa0MvrcaUIe+UmtuIrlvCVqR5qTfxu+kvKIHLdKmSxs8qwB9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjQTPEDA4oVBdR6WCP0/d0oD381MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvNDAzODUyMzUtZjc5Mi0z ZTNmLThhNjgtYjFhZmZhNjVmMDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbz3wfBiROt60M6MnNwkBLx8943hC2bXNzTRYablX+itCNNli8+cqqW tdYeUlwAg3sNmzAPFaKgdJkX8ZyS4P/79KMSwXh6wIv1oXswGWrNbWDWi2AMvDNC QJYfAqiPgYA0OFdMACCqWsYlwcnnFv3gJFvS0ghJJi06VYIwq0GkTMG5Qy5LNVrP ZC38+XggJLtTrCw1TzMuXCmq3fBwWNlwE0SfX9NnA17USY7KXrldRQj8NqUwPRva 70Ye0Vsni7idJQlY9Cq7zvofnpv8SIkMEurGI/liqoWRBWYsf+CuLni4ZCFCaBJr YWfN7tgDe5AonLKphD6PrHtrlbhIOzY= -----END CERTIFICATE-----Generated at Mon Oct 20 17:48:33 2025 by rpki-client