$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/7c4e3722-8ad8-3690-a702-11ba400d1f5f.roa File: 7c4e3722-8ad8-3690-a702-11ba400d1f5f.roa (raw, json) Hash identifier: 5jnR5IL7qprr1HyM+ft+1Intqlp2T7SAbEe1tdKyOFc= Subject key identifier: 4C:4A:71:62:0B:A6:77:8D:A8:A9:11:E3:CA:8E:31:13:7C:F9:8E:8E Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584B79BCB6DCB9846B7FF2148998 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/7c4e3722-8ad8-3690-a702-11ba400d1f5f.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 397422 IP address blocks: 209.237.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b6:dc:b9:84:6b:7f:f2:14:89:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=dfbe6c9e-e8c4-41a7-9405-64236ecf152d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:75:c4:e8:41:c8:b9:57:a6:84:fb:68:56:16: 43:ad:78:61:4f:07:f9:fd:7f:a0:0c:3f:f2:de:95: 00:14:d4:27:fe:a8:c1:6b:8f:d4:ee:4e:11:35:a5: 90:83:8d:52:4a:06:56:7a:8b:5c:42:79:ed:6a:32: ce:0c:bf:17:dd:28:08:05:62:df:70:85:15:73:58: 63:2d:f8:43:6b:dd:f2:46:75:e6:42:e7:c1:c1:70: f2:e8:ca:0a:ce:d8:dc:23:62:14:14:40:09:e7:57: e8:82:27:c0:55:5e:84:e9:16:14:7a:27:76:de:f0: ba:c8:a7:6c:38:b1:3b:ac:22:56:5c:16:53:e8:e3: cc:15:27:94:2c:6e:d7:dc:d5:80:de:f9:89:4e:52: 61:5e:c0:0d:17:56:74:71:f2:b4:e4:0a:1b:0e:98: 52:2f:4a:d9:ba:a7:84:52:b0:e6:c9:2f:8b:eb:10: 74:b5:e6:9e:0f:1e:be:56:25:a1:be:b1:a2:23:13: 54:c5:7f:23:71:b3:d7:55:d5:49:6c:73:0e:a0:89: e0:bd:a1:f8:b9:b8:c6:f4:38:a4:72:c9:63:bf:6e: 9c:8b:4f:80:64:e2:5c:a8:7c:33:f0:cb:a9:55:aa: 43:ea:77:9e:78:dd:b7:69:79:73:80:66:9e:6a:75: a9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:4A:71:62:0B:A6:77:8D:A8:A9:11:E3:CA:8E:31:13:7C:F9:8E:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/7c4e3722-8ad8-3690-a702-11ba400d1f5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:7d:23:37:76:b9:60:b4:90:41:b6:0c:95:4c:ca:40:21:c1: 91:a1:5a:b9:d2:e2:c3:6c:74:12:a9:d0:60:c3:dd:87:27:30: 0b:cf:06:39:ee:3b:d1:9e:55:47:91:f3:54:bd:ef:90:7f:d5: 04:66:e2:d1:3b:6b:3d:b2:28:1b:af:d0:ec:09:05:1e:b7:b5: 59:7d:96:c4:d0:ee:84:3b:d8:f1:af:32:02:ee:8e:55:73:f2: 4b:4b:94:20:fd:ac:d0:57:8f:90:f2:61:ce:50:cf:35:5d:77: fe:63:97:e2:ab:dd:64:bc:63:5e:2d:ac:57:e2:07:b3:6f:d4: 56:86:ac:b0:b9:b8:db:61:2a:bf:b2:31:8a:88:a7:0b:da:ae: 95:3b:a1:91:cb:c4:e2:d4:82:68:00:fa:6f:e7:42:1a:33:77: 1d:b8:d3:ea:c0:b7:fa:be:18:cd:99:f7:bb:c0:42:1a:05:d6: ae:44:84:cf:1e:a4:ae:5c:9e:b6:67:40:75:4a:47:ea:68:c8: 3d:91:98:ee:00:97:22:16:1d:3c:79:29:ed:62:d8:6b:5d:90: 71:c1:16:2f:5e:13:1b:20:80:fb:f1:90:ad:da:63:aa:da:5c: ba:0d:41:69:8a:d4:a6:e7:ed:be:2f:0b:51:d3:b7:0c:ec:13: 92:71:f6:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLbcuYRrf/IUiZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk ZGZiZTZjOWUtZThjNC00MWE3LTk0MDUtNjQyMzZlY2YxNTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnXE6EHIuVemhPtoVhZDrXhhTwf5/X+gDD/y 3pUAFNQn/qjBa4/U7k4RNaWQg41SSgZWeotcQnntajLODL8X3SgIBWLfcIUVc1hj LfhDa93yRnXmQufBwXDy6MoKztjcI2IUFEAJ51fogifAVV6E6RYUeid23vC6yKds OLE7rCJWXBZT6OPMFSeULG7X3NWA3vmJTlJhXsANF1Z0cfK05AobDphSL0rZuqeE UrDmyS+L6xB0teaeDx6+ViWhvrGiIxNUxX8jcbPXVdVJbHMOoIngvaH4ubjG9Dik csljv26ci0+AZOJcqHwz8MupVapD6neeeN23aXlzgGaeanWp8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExKcWILpneNqKkR48qOMRN8+Y6OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvN2M0ZTM3MjItOGFkOC0z NjkwLWE3MDItMTFiYTQwMGQxZjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0e1cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABF9Izd2uWC0kEG2DJVMykAhwZGhWrnS4sNsdBKp0GDD3YcnMAvPBjnu O9GeVUeR81S975B/1QRm4tE7az2yKBuv0OwJBR63tVl9lsTQ7oQ72PGvMgLujlVz 8ktLlCD9rNBXj5DyYc5QzzVdd/5jl+Kr3WS8Y14trFfiB7Nv1FaGrLC5uNthKr+y MYqIpwvarpU7oZHLxOLUgmgA+m/nQhozdx240+rAt/q+GM2Z97vAQhoF1q5EhM8e pK5cnrZnQHVKR+poyD2RmO4AlyIWHTx5Ke1i2GtdkHHBFi9eExsggPvxkK3aY6ra XLoNQWmK1Kbn7b4vC1HTtwzsE5Jx9pA= -----END CERTIFICATE-----Generated at Mon Oct 20 17:48:38 2025 by rpki-client