$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/d9c1367f-f1e9-3d43-a516-2144e1e70720.roa File: d9c1367f-f1e9-3d43-a516-2144e1e70720.roa (raw, json) Hash identifier: x6JE0S5A7kuhWpXb2uOVJ/8B3dmAJYjeCwqf1arf9pM= Subject key identifier: 53:53:A2:21:AE:F5:79:F4:32:A2:AF:B6:9C:A7:3E:E5:AA:54:E6:AA Certificate issuer: /CN=2de5d746-3402-4263-b880-ea4d7ecfc168 Certificate serial: 010D0C9F4328584B84E76AA72523C86008D48EB0 Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/d9c1367f-f1e9-3d43-a516-2144e1e70720.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 400196 IP address blocks: 207.22.32.2/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:6a:a7:25:23:c8:60:08:d4:8e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=236cfd3b-3583-4bc7-958e-8a24b9dc3724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ce:30:fd:04:de:40:51:2e:da:1d:95:44:33: 04:06:70:5f:66:85:9b:ef:bf:ac:99:cc:3e:d9:5a: 25:28:e8:b3:df:9d:6b:ce:58:a9:09:bd:57:c9:32: 95:11:21:71:48:07:d6:2d:e6:97:0f:1c:80:a2:0f: ea:65:02:77:45:0d:26:75:05:59:bf:fc:ef:e3:6c: 96:ae:93:67:6d:74:e2:df:7d:fb:06:33:8a:d3:74: 03:c4:f0:64:a2:d9:e4:23:68:f3:f5:be:63:ac:d5: 96:ea:c6:0b:fa:e6:02:c3:b3:73:28:c3:6f:08:d6: 8c:9c:c9:4b:b0:aa:10:f1:ce:95:10:61:34:aa:56: 8b:aa:f1:5d:b2:44:71:16:a1:d2:a6:c7:b2:37:01: a9:a3:69:46:04:30:80:39:a1:c2:8e:c2:89:c1:55: 98:1f:15:fb:c9:17:97:8d:41:d1:dd:bb:71:06:ce: 47:cd:d7:35:db:1c:36:0c:1c:e2:ad:94:2b:0c:df: a6:fc:60:f0:d4:73:ad:51:fd:e6:b9:f0:8d:6a:8d: 54:d2:1d:a5:76:18:4a:a6:8d:b2:b6:8e:25:61:48: f8:4b:3b:cf:8a:6c:87:8d:0f:d3:d3:d1:7d:07:39: f3:91:8d:66:ed:cf:9e:58:87:ca:f6:b1:65:7c:c2: af:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:53:A2:21:AE:F5:79:F4:32:A2:AF:B6:9C:A7:3E:E5:AA:54:E6:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/d9c1367f-f1e9-3d43-a516-2144e1e70720.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl X509v3 Authority Key Identifier: keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer sbgp-ipAddrBlock: critical IPv4: 207.22.32.2/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:c6:24:d8:11:45:d5:97:ad:c8:f4:54:7c:08:28:40:6b:4d: b5:5d:33:85:8c:1d:4c:9c:83:da:f7:e8:3b:45:61:d3:63:bd: 9b:00:41:15:b2:d1:ef:56:83:67:3f:69:3e:a5:27:88:3a:ec: c3:95:93:57:81:41:b8:05:12:3b:f8:0a:0d:71:2c:19:6e:f5: 29:71:e4:c3:a2:7e:80:ad:2e:92:8b:05:3d:ff:90:6d:38:02: 8c:11:73:71:32:f4:f1:c8:73:6a:96:35:b5:4f:a4:97:d7:de: 35:2f:ac:5a:93:ab:32:c2:1e:bf:29:28:75:f6:b1:8b:14:1f: 60:30:07:89:4d:22:49:2a:c3:b3:25:1e:8f:28:36:5b:7e:86: 2b:9c:3a:dd:00:1f:e8:9e:03:e7:5f:84:a9:b2:f1:68:8f:d2: 88:bc:fc:dc:e3:8a:99:96:ba:18:ff:f2:56:ff:bf:68:29:e2: 4e:a0:d7:ec:fa:6d:1d:dd:4e:12:c7:7e:da:5f:dd:89:dd:92: be:ee:01:9d:e6:e0:d3:6f:7c:bd:4a:01:ee:ae:e7:20:c4:ee: fd:43:19:b5:ee:71:ae:e0:e1:65:6f:a9:fd:bc:cf:9e:0d:4d: e9:99:15:29:9e:47:11:a4:57:09:9f:ff:eb:a1:45:3a:e3:76: bc:be:e2:98 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEuE52qnJSPIYAjUjrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRlNWQ3NDYtMzQwMi00MjYzLWI4ODAtZWE0ZDdlY2Zj MTY4MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MjM2Y2ZkM2ItMzU4My00YmM3LTk1OGUtOGEyNGI5ZGMzNzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM4w/QTeQFEu2h2VRDMEBnBfZoWb77+smcw+ 2VolKOiz351rzlipCb1XyTKVESFxSAfWLeaXDxyAog/qZQJ3RQ0mdQVZv/zv42yW rpNnbXTi3337BjOK03QDxPBkotnkI2jz9b5jrNWW6sYL+uYCw7NzKMNvCNaMnMlL sKoQ8c6VEGE0qlaLqvFdskRxFqHSpseyNwGpo2lGBDCAOaHCjsKJwVWYHxX7yReX jUHR3btxBs5Hzdc12xw2DBzirZQrDN+m/GDw1HOtUf3mufCNao1U0h2ldhhKpo2y to4lYUj4SzvPimyHjQ/T09F9BznzkY1m7c+eWIfK9rFlfMKvxwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFNToiGu9Xn0MqKvtpynPuWqVOaqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1 ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRkN2VjZmMxNjgvZDljMTM2N2YtZjFlOS0z ZDQzLWE1MTYtMjE0NGUxZTcwNzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmRlNWQ3NDYtMzQwMi00MjYzLWI4 ODAtZWE0ZDdlY2ZjMTY4LzJkZTVkNzQ2LTM0MDItNDI2My1iODgwLWVhNGQ3ZWNm YzE2OC5jcmwwHwYDVR0jBBgwFoAUa7vQBHnN1sRmwfvAalg6KhVtSHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRk N2VjZmMxNjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAzxYgAjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBbxiTYEUXVl63I9FR8CChAa021XTOFjB1MnIPa9+g7RWHTY72bAEEV stHvVoNnP2k+pSeIOuzDlZNXgUG4BRI7+AoNcSwZbvUpceTDon6ArS6SiwU9/5Bt OAKMEXNxMvTxyHNqljW1T6SX1941L6xak6sywh6/KSh19rGLFB9gMAeJTSJJKsOz JR6PKDZbfoYrnDrdAB/ongPnX4SpsvFoj9KIvPzc44qZlroY//JW/79oKeJOoNfs +m0d3U4Sx37aX92J3ZK+7gGd5uDTb3y9SgHurucgxO79Qxm17nGu4OFlb6n9vM+e DU3pmRUpnkcRpFcJn//roUU643a8vuKY -----END CERTIFICATE-----Generated at Mon Oct 20 11:14:31 2025 by rpki-client