$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/02a7113f-414f-366e-ba5e-590e520c170c.roa File: 02a7113f-414f-366e-ba5e-590e520c170c.roa (raw, json) Hash identifier: KzjKVe5Odl6mVsVQ1unBdK4MG8vTH5FJhr6t7icJoDs= Subject key identifier: DC:37:C4:B4:8E:D2:F8:5D:58:C8:5F:05:6F:B0:77:FA:FB:E0:3C:96 Certificate issuer: /CN=829d195a-d541-4371-970d-5be56cd489a8 Certificate serial: 010D0C9F4328584B2FC18BABF43776560A0DCD80 Authority key identifier: C7:71:2A:18:24:84:EF:6E:8E:F0:83:87:1C:48:6E:34:B1:E9:98:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/02a7113f-414f-366e-ba5e-590e520c170c.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 46892 IP address blocks: 209.127.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:8b:ab:f4:37:76:56:0a:0d:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=829d195a-d541-4371-970d-5be56cd489a8 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=266b4266-1e7c-477d-a56f-dc145ff22922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1c:00:8f:d3:41:a0:db:7c:d6:c5:81:9a:15: 27:30:ec:47:ff:c6:0a:1a:b8:27:30:c8:75:d7:bf: 78:b8:1e:9f:0f:fc:d7:bc:16:e0:39:bd:75:a9:bb: 94:46:f3:0c:b3:ee:0a:38:34:c3:13:8d:88:bb:ae: d2:ff:fb:04:12:92:41:f5:bc:3f:e4:c8:1e:e5:2b: a8:98:d0:49:36:2c:d5:9a:75:c8:9f:e1:d1:7a:41: 6d:4f:79:d8:38:d1:5b:7b:1b:a8:b4:3a:05:76:74: 6a:9e:de:25:25:00:a1:c5:08:94:41:3a:c4:6f:6c: 09:a5:b4:f5:d2:1d:2f:0d:fa:d8:1e:32:06:98:f8: 10:c2:83:ed:1b:2a:f2:6b:d5:33:f6:34:3e:a1:2a: e8:5d:76:de:12:02:13:42:92:69:43:c8:8f:58:c8: 72:c6:97:6c:6c:da:51:62:c3:21:18:c2:52:20:75: e2:50:b4:f2:60:2e:38:f3:a5:af:1f:48:3e:50:2e: b9:b7:ee:f0:3b:94:fd:42:e4:14:e1:a9:61:0a:10: 70:b6:8f:58:84:60:51:8e:a8:ed:3d:72:08:b9:62: b1:5b:64:0f:6a:c9:ad:4f:d3:b3:22:35:b6:3f:5d: c8:25:16:95:0a:a6:72:2c:ff:1f:ad:3f:76:40:c2: c6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:37:C4:B4:8E:D2:F8:5D:58:C8:5F:05:6F:B0:77:FA:FB:E0:3C:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/02a7113f-414f-366e-ba5e-590e520c170c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.crl X509v3 Authority Key Identifier: keyid:C7:71:2A:18:24:84:EF:6E:8E:F0:83:87:1C:48:6E:34:B1:E9:98:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer sbgp-ipAddrBlock: critical IPv4: 209.127.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:2a:10:de:1f:28:af:08:ad:6c:c4:00:06:bd:85:5b:4f:6b: db:6e:bc:4e:ec:89:16:54:ab:1a:a9:29:ac:d8:7a:ae:ef:54: 2f:f6:77:2a:52:43:c5:51:7e:00:50:f2:d3:ba:02:6e:30:8c: f1:c9:f8:99:b1:a4:9a:96:22:e5:8e:28:c0:a5:3a:9a:74:3e: 0a:d2:56:58:51:e2:ab:75:e3:44:8e:95:65:f4:95:ae:dc:a1: 21:c3:04:03:49:2f:0a:27:b7:5f:09:e7:fa:b6:d3:ba:71:95: f3:fd:da:99:07:12:ad:07:60:10:a0:d3:6e:52:b4:1e:1e:88: 8f:bd:3c:05:d0:ce:82:86:f4:5b:ef:7f:8e:05:df:74:7c:c6: bd:89:fc:20:b6:9f:37:fb:ca:fa:52:b9:96:70:a4:4d:61:ea: 6f:e1:9b:c5:e1:bf:c5:7d:f8:16:cf:ac:80:4b:db:0f:a4:2b: ad:84:1e:2a:28:f6:45:af:10:54:76:a8:a5:f8:8a:6f:2c:f7: fb:6e:b2:36:f3:53:85:9e:f9:75:f5:67:9e:59:91:56:f3:c4: fb:c2:88:a3:da:12:67:8b:f2:b0:a4:ed:0b:fb:07:fc:c0:5a: 52:db:b4:99:39:6d:45:32:31:18:7b:d4:19:8b:a5:1b:c7:c0: 76:9d:53:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwYur9Dd2VgoNzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI5ZDE5NWEtZDU0MS00MzcxLTk3MGQtNWJlNTZjZDQ4 OWE4MB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk MjY2YjQyNjYtMWU3Yy00NzdkLWE1NmYtZGMxNDVmZjIyOTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxwAj9NBoNt81sWBmhUnMOxH/8YKGrgnMMh1 1794uB6fD/zXvBbgOb11qbuURvMMs+4KODTDE42Iu67S//sEEpJB9bw/5Mge5Suo mNBJNizVmnXIn+HRekFtT3nYONFbexuotDoFdnRqnt4lJQChxQiUQTrEb2wJpbT1 0h0vDfrYHjIGmPgQwoPtGyrya9Uz9jQ+oSroXXbeEgITQpJpQ8iPWMhyxpdsbNpR YsMhGMJSIHXiULTyYC4486WvH0g+UC65t+7wO5T9QuQU4alhChBwto9YhGBRjqjt PXIIuWKxW2QPasmtT9OzIjW2P13IJRaVCqZyLP8frT92QMLGawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNw3xLSO0vhdWMhfBW+wd/r74DyWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84Mjlk MTk1YS1kNTQxLTQzNzEtOTcwZC01YmU1NmNkNDg5YTgvMDJhNzExM2YtNDE0Zi0z NjZlLWJhNWUtNTkwZTUyMGMxNzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODI5ZDE5NWEtZDU0MS00MzcxLTk3 MGQtNWJlNTZjZDQ4OWE4LzgyOWQxOTVhLWQ1NDEtNDM3MS05NzBkLTViZTU2Y2Q0 ODlhOC5jcmwwHwYDVR0jBBgwFoAUx3EqGCSE726O8IOHHEhuNLHpmBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MjlkMTk1YS1kNTQxLTQzNzEtOTcwZC01YmU1 NmNkNDg5YTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0X/4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgqEN4fKK8IrWzEAAa9hVtPa9tuvE7siRZUqxqpKazYeq7vVC/2dypS Q8VRfgBQ8tO6Am4wjPHJ+JmxpJqWIuWOKMClOpp0PgrSVlhR4qt140SOlWX0la7c oSHDBANJLwont18J5/q207pxlfP92pkHEq0HYBCg025StB4eiI+9PAXQzoKG9Fvv f44F33R8xr2J/CC2nzf7yvpSuZZwpE1h6m/hm8Xhv8V9+BbPrIBL2w+kK62EHioo 9kWvEFR2qKX4im8s9/tusjbzU4We+XX1Z55ZkVbzxPvCiKPaEmeL8rCk7Qv7B/zA WlLbtJk5bUUyMRh71BmLpRvHwHadUxc= -----END CERTIFICATE-----Generated at Wed Oct 22 00:42:12 2025 by rpki-client