$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/0209baa9-389a-393c-b685-be2cd86201f7.roa File: 0209baa9-389a-393c-b685-be2cd86201f7.roa (raw, json) Hash identifier: x7Jvn6ubN9bPGVAQfjBNAsRYla5fqVJyla2XZuSXaoA= Subject key identifier: F3:FD:2D:B9:F5:7D:1A:7B:63:94:33:00:AF:F6:32:E7:C0:8B:71:CE Certificate issuer: /CN=5c5260f5-8262-4a34-b49c-e993dbadd1b1 Certificate serial: 010D0C9F4328584B84E77BE464A4BA3192945AA0 Authority key identifier: 68:61:4A:21:BB:FB:DF:5B:84:00:F2:A0:40:DE:24:06:E3:EA:DF:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/0209baa9-389a-393c-b685-be2cd86201f7.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 398310 IP address blocks: 23.157.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/5c5260f5-8262-4a34-b49c-e993dbadd1b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/5c5260f5-8262-4a34-b49c-e993dbadd1b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:7b:e4:64:a4:ba:31:92:94:5a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5260f5-8262-4a34-b49c-e993dbadd1b1 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=52f36e6b-589b-4746-8d06-3fee8fb33c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:59:1f:2b:52:8e:e4:73:c3:b1:11:fd:f1:85: d8:b6:2f:80:2a:23:f2:ed:a5:f1:fa:93:aa:d4:a2: e3:4f:2e:1d:23:b9:79:6b:7c:5b:47:37:a3:f0:f2: 53:5e:a4:70:92:04:be:1e:23:e4:c3:4d:c6:7b:4d: 83:1e:1f:73:19:f4:72:8c:37:cf:4b:1a:1b:fb:f6: 8e:2c:31:59:30:1b:56:b1:07:24:17:0e:29:7b:15: e4:4b:61:fa:6b:a8:b9:f5:89:96:1a:8c:4e:46:07: a8:e9:c7:2c:e8:28:7e:c4:c3:d4:90:37:a0:d1:f7: 72:26:11:d9:ee:5d:7b:04:b6:4c:b4:ac:f2:3f:2e: 2e:94:98:9e:40:a5:4a:a0:67:aa:d8:29:d5:3b:6b: 5a:4b:ce:6c:91:84:e9:dc:0e:50:b3:8e:eb:b5:52: 17:7c:bf:63:34:53:ae:35:2a:63:b4:01:dd:1e:1e: a1:00:3b:42:05:05:02:e4:9b:f0:46:3e:01:5c:5c: e5:62:9c:31:e3:b1:8d:9e:a3:5f:17:af:ba:32:1c: c6:0b:17:6f:e8:07:4a:44:fa:ae:c4:26:06:89:66: fe:7e:54:ff:ac:9f:c0:6a:8e:37:6f:5d:c1:ea:3f: 92:f9:3d:4c:ce:70:f1:f4:e1:ee:c3:8a:f7:35:96: 0f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:FD:2D:B9:F5:7D:1A:7B:63:94:33:00:AF:F6:32:E7:C0:8B:71:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/0209baa9-389a-393c-b685-be2cd86201f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/5c5260f5-8262-4a34-b49c-e993dbadd1b1.crl X509v3 Authority Key Identifier: keyid:68:61:4A:21:BB:FB:DF:5B:84:00:F2:A0:40:DE:24:06:E3:EA:DF:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1.cer sbgp-ipAddrBlock: critical IPv4: 23.157.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d1:c8:a2:5e:d9:1a:9d:ce:08:6c:66:a0:da:4a:69:c5:a0: 20:85:a6:44:e5:16:94:30:85:1c:7a:fa:a0:90:29:2b:d8:12: 91:d1:c1:70:29:0b:ca:67:ae:f0:03:dd:45:fa:70:79:af:26: 99:b4:96:19:58:b1:7a:cb:e4:c2:3e:39:c9:f6:92:22:44:ab: fa:ec:33:73:34:a1:c4:2c:bd:b9:ce:df:24:85:31:ec:15:18: e9:b4:cc:69:71:67:ac:4d:e2:c5:f7:5d:23:6a:9e:5d:2f:d9: 19:86:55:ef:8e:36:c4:e2:06:52:b0:75:55:18:5d:07:0e:43: 95:be:d9:09:bc:1a:d0:51:8b:c1:7b:61:73:2b:d9:71:01:48: 0c:0d:92:42:ca:4d:31:e3:b1:c3:5d:51:c0:8c:be:e0:3f:f0: 10:2a:bd:9c:47:45:0e:39:6f:94:56:c2:70:6f:83:76:b0:d4: b8:ae:59:fc:54:6b:03:69:15:8d:83:ff:7d:fa:dc:fa:d5:27: 5a:2e:4a:77:1e:08:2b:af:3d:e2:af:ef:af:18:fe:47:d2:bc: 61:96:60:c8:69:36:b5:9b:88:07:e6:bf:61:de:fb:f3:ab:b2: 3b:46:e6:fc:8b:56:e0:f4:de:ab:78:ab:85:10:4b:3e:27:49: af:fc:0e:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53vkZKS6MZKUWqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1MjYwZjUtODI2Mi00YTM0LWI0OWMtZTk5M2RiYWRk MWIxMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NTJmMzZlNmItNTg5Yi00NzQ2LThkMDYtM2ZlZThmYjMzYzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVkfK1KO5HPDsRH98YXYti+AKiPy7aXx+pOq 1KLjTy4dI7l5a3xbRzej8PJTXqRwkgS+HiPkw03Ge02DHh9zGfRyjDfPSxob+/aO LDFZMBtWsQckFw4pexXkS2H6a6i59YmWGoxORgeo6ccs6Ch+xMPUkDeg0fdyJhHZ 7l17BLZMtKzyPy4ulJieQKVKoGeq2CnVO2taS85skYTp3A5Qs47rtVIXfL9jNFOu NSpjtAHdHh6hADtCBQUC5JvwRj4BXFzlYpwx47GNnqNfF6+6MhzGCxdv6AdKRPqu xCYGiWb+flT/rJ/Aao43b13B6j+S+T1MznDx9OHuw4r3NZYPkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPP9Lbn1fRp7Y5QzAK/2MufAi3HOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YzUy NjBmNS04MjYyLTRhMzQtYjQ5Yy1lOTkzZGJhZGQxYjEvMDIwOWJhYTktMzg5YS0z OTNjLWI2ODUtYmUyY2Q4NjIwMWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWM1MjYwZjUtODI2Mi00YTM0LWI0 OWMtZTk5M2RiYWRkMWIxLzVjNTI2MGY1LTgyNjItNGEzNC1iNDljLWU5OTNkYmFk ZDFiMS5jcmwwHwYDVR0jBBgwFoAUaGFKIbv731uEAPKgQN4kBuPq31MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YzUyNjBmNS04MjYyLTRhMzQtYjQ5Yy1lOTkz ZGJhZGQxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF53QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrRyKJe2RqdzghsZqDaSmnFoCCFpkTlFpQwhRx6+qCQKSvYEpHRwXAp C8pnrvAD3UX6cHmvJpm0lhlYsXrL5MI+Ocn2kiJEq/rsM3M0ocQsvbnO3ySFMewV GOm0zGlxZ6xN4sX3XSNqnl0v2RmGVe+ONsTiBlKwdVUYXQcOQ5W+2Qm8GtBRi8F7 YXMr2XEBSAwNkkLKTTHjscNdUcCMvuA/8BAqvZxHRQ45b5RWwnBvg3aw1LiuWfxU awNpFY2D/3363PrVJ1ouSnceCCuvPeKv768Y/kfSvGGWYMhpNrWbiAfmv2He+/Or sjtG5vyLVuD03qt4q4UQSz4nSa/8Dm0= -----END CERTIFICATE-----Generated at Tue Oct 21 16:08:17 2025 by rpki-client