$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d1257739-bf6e-3070-9da4-3f33df2e0607.roa File: d1257739-bf6e-3070-9da4-3f33df2e0607.roa (raw, json) Hash identifier: 2xYwhyUDvx0ocDn348yz0bYZIXQQ2fre4JUvorsdN8E= Subject key identifier: 64:70:20:B8:9C:4E:8B:BC:14:6A:53:91:61:AF:11:D9:77:23:C4:79 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584B821DBCCB086967CE0E41A200 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d1257739-bf6e-3070-9da4-3f33df2e0607.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 32891 IP address blocks: 208.125.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:bc:cb:08:69:67:ce:0e:41:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=f97b9d88-de3d-421f-977c-6d60723456d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0c:89:d2:24:9d:7b:f4:64:c5:93:72:74:e8: 71:bb:d1:69:e3:92:67:a5:69:42:77:96:58:14:63: d7:3d:38:9b:c2:04:42:09:c4:05:8b:90:4b:8d:3a: 50:97:cc:81:d7:ce:84:49:86:d4:84:78:09:b0:69: d0:10:ce:7a:4c:0f:f3:a7:cf:29:5b:77:be:6e:cd: c4:cc:72:45:ea:62:8b:bf:20:89:c1:97:ac:a5:83: 61:df:ca:03:e2:77:80:d7:a8:5a:88:14:bb:f6:87: f4:15:68:ba:2d:f2:02:5a:c8:d7:20:5f:94:eb:05: 76:09:83:ef:9d:95:f2:b1:42:26:cc:37:1f:8c:44: b6:33:29:64:5d:96:4e:6a:ac:14:7c:d0:6d:09:ca: e3:2f:80:5f:db:78:10:7e:11:64:23:25:38:79:ef: 25:92:4c:5f:e6:41:5c:39:c7:d7:7f:62:9f:31:ac: 79:c5:a7:20:2e:33:6d:cd:69:7f:dd:62:e1:d6:7f: 79:dd:5f:44:bb:b2:4f:81:cf:3b:d6:ca:c1:fb:94: a9:4c:9e:82:cf:32:9d:62:0a:a1:94:4e:ef:7a:92: aa:a3:32:21:bd:3d:0f:81:16:81:73:e1:83:bd:1b: 26:5e:22:3a:8b:42:4b:b9:47:9e:c8:a2:71:15:e4: b5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:70:20:B8:9C:4E:8B:BC:14:6A:53:91:61:AF:11:D9:77:23:C4:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d1257739-bf6e-3070-9da4-3f33df2e0607.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 208.125.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:66:58:d1:02:4b:26:68:c4:df:6e:f1:39:b9:f5:73:cd:17: ca:22:f2:37:ef:72:cc:91:22:e0:dc:03:cf:eb:78:ee:4e:b4: d2:dd:cb:d2:9b:f4:bf:44:fe:e3:1e:aa:2a:f6:cf:2f:02:33: 15:dc:7a:a5:cb:4b:2d:8f:4f:b6:25:d9:01:e9:bf:e0:31:b0: c2:29:f4:1e:36:f2:39:2b:de:1f:bf:cc:fe:db:24:b4:40:d3: b7:46:41:c4:5e:db:86:d5:ad:9e:19:50:d5:83:f0:10:5c:b0: 28:f7:f0:86:0d:8d:c7:9d:71:10:71:e1:b0:62:da:f4:47:52: 4f:26:8c:80:69:82:1b:af:2c:7e:2a:ed:50:ba:e7:bf:00:5f: d7:1d:b5:01:77:ee:48:01:10:74:43:93:43:32:79:24:8f:fb: 0d:df:24:9a:fa:07:62:10:c2:33:83:e5:38:f1:be:51:ea:62: 2d:7b:2a:3a:c8:2e:c0:52:17:9e:e6:b8:3b:5e:35:f5:65:fc: 78:1a:27:18:fb:40:82:a4:03:8b:fc:ee:95:9c:bd:7a:10:bb: 0e:88:0d:cb:63:9a:34:4b:e2:0f:b9:c2:08:b3:27:0d:8e:97: 67:a3:b4:94:fc:f8:ba:3b:5d:7a:4e:b3:60:7f:48:62:60:1e: f8:b3:6c:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHbzLCGlnzg5BogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk Zjk3YjlkODgtZGUzZC00MjFmLTk3N2MtNmQ2MDcyMzQ1NmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgyJ0iSde/RkxZNydOhxu9Fp45JnpWlCd5ZY FGPXPTibwgRCCcQFi5BLjTpQl8yB186ESYbUhHgJsGnQEM56TA/zp88pW3e+bs3E zHJF6mKLvyCJwZespYNh38oD4neA16haiBS79of0FWi6LfICWsjXIF+U6wV2CYPv nZXysUImzDcfjES2MylkXZZOaqwUfNBtCcrjL4Bf23gQfhFkIyU4ee8lkkxf5kFc OcfXf2KfMax5xacgLjNtzWl/3WLh1n953V9Eu7JPgc871srB+5SpTJ6CzzKdYgqh lE7vepKqozIhvT0PgRaBc+GDvRsmXiI6i0JLuUeeyKJxFeS1IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRwILicTou8FGpTkWGvEdl3I8R5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZDEyNTc3MzktYmY2ZS0z MDcwLTlkYTQtM2YzM2RmMmUwNjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0H3mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1mWNECSyZoxN9u8Tm59XPNF8oi8jfvcsyRIuDcA8/reO5OtNLdy9Kb 9L9E/uMeqir2zy8CMxXceqXLSy2PT7Yl2QHpv+AxsMIp9B428jkr3h+/zP7bJLRA 07dGQcRe24bVrZ4ZUNWD8BBcsCj38IYNjcedcRBx4bBi2vRHUk8mjIBpghuvLH4q 7VC6578AX9cdtQF37kgBEHRDk0MyeSSP+w3fJJr6B2IQwjOD5TjxvlHqYi17KjrI LsBSF57muDteNfVl/HgaJxj7QIKkA4v87pWcvXoQuw6IDctjmjRL4g+5wgizJw2O l2ejtJT8+Lo7XXpOs2B/SGJgHvizbAA= -----END CERTIFICATE-----Generated at Mon Oct 20 07:15:38 2025 by rpki-client