$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/e844c0b8-a684-329d-81ac-fc6b2622d28b.roa File: e844c0b8-a684-329d-81ac-fc6b2622d28b.roa (raw, json) Hash identifier: r82/W9+IzywSF960rwnaXRICOy/0Cn0lSeBH7ne6fqg= Subject key identifier: 0A:53:BA:A0:E2:B6:2E:2A:6C:F6:8D:49:84:FB:54:78:99:FA:39:DD Certificate issuer: /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61 Certificate serial: 010D0C9F4328584B64CE1E5294FB7C625DA92980 Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/e844c0b8-a684-329d-81ac-fc6b2622d28b.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 32381 IP address blocks: 207.126.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:1e:52:94:fb:7c:62:5d:a9:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=9eabc745-601b-40e2-9c51-de2c10fb437a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0f:78:17:a9:c9:72:c0:2b:e8:40:e9:b8:a7: d1:47:ef:e0:fb:91:87:0b:c5:25:bf:dc:4e:b0:b9: 33:15:47:65:20:c7:cb:ae:c4:5a:1b:07:6d:ea:d2: 8c:b4:7c:73:82:9a:4e:ae:09:9c:41:60:50:f2:60: 01:cf:a0:90:ce:25:71:a5:a4:58:03:81:15:5a:c8: bb:4a:69:a7:90:13:f7:7e:2e:76:c3:06:f4:e7:e0: e0:22:6c:d8:aa:ea:e8:65:04:82:0c:86:7a:e5:81: 8a:d8:3d:72:be:bf:82:8e:c3:76:ce:70:97:cc:6e: 1c:4f:e7:bc:bc:35:4c:77:da:a3:b0:e6:b5:81:eb: 9e:29:9a:a0:90:4d:1a:01:5f:96:57:e1:7f:08:f3: 13:48:88:0a:23:97:50:24:06:cd:75:c8:39:71:88: 12:53:67:17:f1:d0:d2:90:a2:2a:39:ba:d7:3e:49: 85:c0:d6:79:16:e2:ec:de:db:21:1e:aa:6f:70:66: 0e:3e:f2:f5:4d:f5:5d:62:15:cd:e3:84:49:3e:be: 2c:ca:bb:3c:7d:eb:28:10:c0:3c:3b:10:f2:df:aa: f6:47:fe:95:77:66:47:7b:9d:05:8b:9d:3b:98:c4: 26:fa:89:29:a8:7a:33:d3:ce:f0:5b:d7:ea:09:44: 31:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:53:BA:A0:E2:B6:2E:2A:6C:F6:8D:49:84:FB:54:78:99:FA:39:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/e844c0b8-a684-329d-81ac-fc6b2622d28b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl X509v3 Authority Key Identifier: keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer sbgp-ipAddrBlock: critical IPv4: 207.126.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:fe:84:cd:0f:3a:c7:2a:66:f2:c2:f8:57:14:6a:47:e5:8c: b3:bf:fa:4b:be:85:0b:c6:45:88:49:6c:5a:db:4e:e8:31:2a: b5:69:97:a5:0d:0c:d8:fd:67:90:11:de:96:3a:ed:65:50:e8: 43:51:b8:73:5a:47:67:6e:72:25:f9:b1:d9:fb:a6:3c:e1:ec: 0d:56:6c:d8:0c:ed:50:db:0e:73:71:78:c9:0c:d8:20:1c:72: ec:44:6f:6f:00:2e:a4:c6:98:d2:38:0d:bb:ea:91:85:b2:30: c0:01:b6:90:3d:91:93:f7:81:ae:3a:51:b8:5e:7d:c2:2e:ee: 7c:46:f3:75:b1:db:f7:a5:15:60:b1:5a:58:ef:5a:3a:c6:45: 06:06:8e:fc:30:48:84:c3:80:d3:d9:de:67:03:25:9a:f4:f4: c7:f8:de:2a:ad:8a:9e:99:51:4c:54:12:66:b6:ee:73:2e:6f: 02:ed:ea:28:eb:63:b5:d4:63:08:20:01:39:88:34:c8:c8:e7: 9d:19:0d:5d:cb:c0:e0:ec:68:ba:12:6b:85:02:43:70:50:9d: 1c:fd:93:c5:cc:b1:2c:5a:b9:ab:82:29:f0:75:67:b8:30:a3: f5:5b:6d:b9:79:44:0d:75:b1:e2:93:33:b9:71:26:1e:f9:fe: 0e:34:7c:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzh5SlPt8Yl2pKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmUyN2M0YzAtNTI5ZS00YzlkLWJiNjktZGVkYjA3YmJm ZjYxMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OWVhYmM3NDUtNjAxYi00MGUyLTljNTEtZGUyYzEwZmI0MzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg94F6nJcsAr6EDpuKfRR+/g+5GHC8Ulv9xO sLkzFUdlIMfLrsRaGwdt6tKMtHxzgppOrgmcQWBQ8mABz6CQziVxpaRYA4EVWsi7 SmmnkBP3fi52wwb05+DgImzYquroZQSCDIZ65YGK2D1yvr+CjsN2znCXzG4cT+e8 vDVMd9qjsOa1geueKZqgkE0aAV+WV+F/CPMTSIgKI5dQJAbNdcg5cYgSU2cX8dDS kKIqObrXPkmFwNZ5FuLs3tshHqpvcGYOPvL1TfVdYhXN44RJPr4syrs8fesoEMA8 OxDy36r2R/6Vd2ZHe50Fi507mMQm+okpqHoz087wW9fqCUQxvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApTuqDiti4qbPaNSYT7VHiZ+jndMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3 YzRjMC01MjllLTRjOWQtYmI2OS1kZWRiMDdiYmZmNjEvZTg0NGMwYjgtYTY4NC0z MjlkLTgxYWMtZmM2YjI2MjJkMjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmUyN2M0YzAtNTI5ZS00YzlkLWJi NjktZGVkYjA3YmJmZjYxL2JlMjdjNGMwLTUyOWUtNGM5ZC1iYjY5LWRlZGIwN2Ji ZmY2MS5jcmwwHwYDVR0jBBgwFoAUU5KbZMgjMWU/oBu15jJ72IhWwpcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3YzRjMC01MjllLTRjOWQtYmI2OS1kZWRi MDdiYmZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz36eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKX+hM0POscqZvLC+FcUakfljLO/+ku+hQvGRYhJbFrbTugxKrVpl6UN DNj9Z5AR3pY67WVQ6ENRuHNaR2duciX5sdn7pjzh7A1WbNgM7VDbDnNxeMkM2CAc cuxEb28ALqTGmNI4DbvqkYWyMMABtpA9kZP3ga46UbhefcIu7nxG83Wx2/elFWCx WljvWjrGRQYGjvwwSITDgNPZ3mcDJZr09Mf43iqtip6ZUUxUEma27nMubwLt6ijr Y7XUYwggATmINMjI550ZDV3LwODsaLoSa4UCQ3BQnRz9k8XMsSxauauCKfB1Z7gw o/Vbbbl5RA11seKTM7lxJh75/g40fKs= -----END CERTIFICATE-----Generated at Mon Oct 20 07:15:13 2025 by rpki-client