$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/caef0813-709f-3639-aad7-06f54ab67b07.roa File: caef0813-709f-3639-aad7-06f54ab67b07.roa (raw, json) Hash identifier: bhyHWK/tC9NwG/HWivpu0ldW21uf1XjDMTaQPevyv8k= Subject key identifier: 39:5A:94:23:15:40:CC:5C:8A:45:DB:1D:CE:CE:7B:3A:24:61:1C:46 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584B758C985C419357E456A55500 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/caef0813-709f-3639-aad7-06f54ab67b07.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 55246 IP address blocks: 209.237.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:98:5c:41:93:57:e4:56:a5:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=612020d0-8068-426b-b8e6-9f0b3fbe5bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ec:a9:da:eb:82:66:15:f7:02:72:3f:d7:3f: 49:a8:a3:f9:eb:0e:58:39:d8:9d:45:25:fa:a0:78: 11:35:ca:9a:3b:4f:40:39:c8:66:7b:83:1d:98:cf: 5f:88:65:a3:58:ef:dd:a1:73:98:0c:4b:f8:ec:5b: 8f:11:de:a3:1f:0b:3e:74:8c:c2:f0:4d:e8:de:82: 7b:bb:b8:ed:38:dc:7d:72:3e:7f:fe:98:38:82:d7: 1c:f6:5c:77:87:74:1b:f0:c6:df:d8:49:4e:79:60: 1d:bc:29:bb:26:de:36:cb:1b:be:77:0a:e3:2c:da: c7:a9:0d:93:2f:e9:9b:3f:58:c8:70:97:1c:cd:81: 50:34:3b:43:f5:be:db:92:d0:54:a9:fa:50:2e:4b: 24:e7:a6:09:42:46:e0:97:f2:bd:3a:88:4a:11:66: 74:01:04:d9:af:a7:7c:3a:2d:b7:3a:2d:7f:33:a8: 01:98:e3:ae:d0:b5:26:f6:26:8e:4b:06:65:81:08: 2e:90:39:7a:aa:77:7a:f6:d9:ff:f4:ec:a2:58:24: 28:4a:ba:aa:8b:1f:9a:e2:27:9d:76:53:ef:d4:97: fc:de:00:31:c0:01:be:d5:0c:07:8c:88:6a:e2:e2: ef:af:ce:81:eb:df:59:ba:12:e6:e5:15:ab:62:ff: 0c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5A:94:23:15:40:CC:5C:8A:45:DB:1D:CE:CE:7B:3A:24:61:1C:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/caef0813-709f-3639-aad7-06f54ab67b07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:79:c2:5b:8c:fa:7d:26:eb:6f:25:2a:14:dc:44:cf:a0:8f: 1e:04:18:99:e8:4b:57:d7:11:03:b0:ed:ab:b9:2d:22:6f:ed: 00:6c:ad:52:fd:a5:69:f1:81:e8:c5:73:08:85:de:4d:96:87: b1:0b:bc:ca:6a:22:6b:f2:0d:bf:91:28:74:cf:1a:1d:c6:22: 8b:0c:9c:a3:00:2b:77:72:7f:25:c6:d1:0a:6b:1c:27:9d:cc: f3:88:9c:9f:37:7f:03:3f:0c:53:2e:45:58:d1:98:24:db:1a: 0f:22:5a:bd:69:db:64:45:4e:e8:1d:57:83:c3:60:b7:48:8b: 1d:26:dd:f2:30:e7:f3:14:68:95:8a:26:b7:4d:35:65:f1:b2: c8:4f:43:45:43:2d:ae:a5:4c:a9:0f:e6:25:0a:2c:8a:a5:9f: 01:23:af:b4:cd:6f:bb:d6:bf:3a:d8:a5:8e:15:b2:f7:bb:25: 85:1b:00:c9:27:05:4f:78:6d:a9:17:9b:0c:92:48:67:8c:72: a4:7a:21:cb:66:6f:e4:73:75:a0:cd:72:3b:b6:b9:3a:33:1b: 49:32:73:e2:af:e6:32:cc:9e:40:0f:6b:a9:8a:16:73:c0:1e: ce:52:4a:65:ab:b4:f0:2e:a4:57:e8:a0:df:57:5d:d1:55:53: af:f8:14:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jJhcQZNX5FalVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk NjEyMDIwZDAtODA2OC00MjZiLWI4ZTYtOWYwYjNmYmU1YmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+yp2uuCZhX3AnI/1z9JqKP56w5YOdidRSX6 oHgRNcqaO09AOchme4MdmM9fiGWjWO/doXOYDEv47FuPEd6jHws+dIzC8E3o3oJ7 u7jtONx9cj5//pg4gtcc9lx3h3Qb8Mbf2ElOeWAdvCm7Jt42yxu+dwrjLNrHqQ2T L+mbP1jIcJcczYFQNDtD9b7bktBUqfpQLksk56YJQkbgl/K9OohKEWZ0AQTZr6d8 Oi23Oi1/M6gBmOOu0LUm9iaOSwZlgQgukDl6qnd69tn/9OyiWCQoSrqqix+a4ied dlPv1Jf83gAxwAG+1QwHjIhq4uLvr86B699ZuhLm5RWrYv8MRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlalCMVQMxcikXbHc7OezokYRxGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvY2FlZjA4MTMtNzA5Zi0z NjM5LWFhZDctMDZmNTRhYjY3YjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGt5wluM+n0m628lKhTcRM+gjx4EGJnoS1fXEQOw7au5LSJv7QBsrVL9 pWnxgejFcwiF3k2Wh7ELvMpqImvyDb+RKHTPGh3GIosMnKMAK3dyfyXG0QprHCed zPOInJ83fwM/DFMuRVjRmCTbGg8iWr1p22RFTugdV4PDYLdIix0m3fIw5/MUaJWK JrdNNWXxsshPQ0VDLa6lTKkP5iUKLIqlnwEjr7TNb7vWvzrYpY4Vsve7JYUbAMkn BU94bakXmwySSGeMcqR6Ictmb+RzdaDNcju2uTozG0kyc+Kv5jLMnkAPa6mKFnPA Hs5SSmWrtPAupFfooN9XXdFVU6/4FPE= -----END CERTIFICATE-----Generated at Tue Oct 21 07:28:58 2025 by rpki-client