$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/3a0d5249-2512-3cf1-a96c-fe7a58ee9b8e.roa File: 3a0d5249-2512-3cf1-a96c-fe7a58ee9b8e.roa (raw, json) Hash identifier: 3oDTXZn660DKB0daDOX6pTVQ2QfiXeaUeOf7vT/908I= Subject key identifier: 60:B6:50:80:27:5A:D2:DE:22:2F:4E:AF:AF:C4:06:03:5E:8F:1F:07 Certificate issuer: /CN=1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07 Certificate serial: 010D0C9F4328584B8EACED2DFF9685049C2D3580 Authority key identifier: 7D:8E:A4:82:0C:DC:9A:6F:4F:C9:31:C7:23:75:90:14:E4:AE:3A:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/3a0d5249-2512-3cf1-a96c-fe7a58ee9b8e.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 22773 IP address blocks: 207.90.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:ed:2d:ff:96:85:04:9c:2d:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=da5fceef-14f7-484d-b4a3-ad7aefd10466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d4:b0:31:5f:ee:47:d2:9d:be:e5:3b:cc:de: f2:e4:2d:ef:c4:c5:8c:7f:95:18:10:75:ca:ba:0a: e7:6a:46:d7:6a:83:26:9d:69:af:d9:ac:d9:7c:01: 6a:ed:1a:5c:56:e1:e8:60:23:dc:16:f6:5d:06:2c: d9:a5:dc:33:0f:78:f7:1e:aa:fe:69:59:a7:04:d6: 65:88:00:b9:63:a6:f0:d3:8d:52:f5:bf:93:da:b1: 96:34:29:ab:b7:36:4e:50:f8:90:61:99:79:a1:ba: 4d:51:c6:21:0f:f2:47:e8:6e:68:1c:51:2b:bf:e2: 0d:fd:df:5f:99:29:4d:e1:1d:c5:1b:b6:d6:e1:57: 3f:07:7d:24:a3:ad:f8:08:7e:bc:10:67:e3:e5:6b: 12:4f:42:1d:1f:50:34:fd:30:b0:d3:53:4a:82:e6: 52:18:48:cd:98:c7:64:20:90:4a:d6:79:2a:27:b8: 27:8e:b3:19:00:00:12:92:68:0a:7c:82:b7:5a:a8: 1d:75:b1:45:59:65:b2:9d:55:fa:25:1e:3e:27:66: 7d:4b:fc:75:f4:de:8c:73:5d:81:6a:75:b0:9e:f0: 20:d9:fe:70:51:f6:99:25:a6:5c:bd:51:b1:e7:85: 5c:6d:0e:7d:59:c1:0e:72:41:c1:fc:be:99:9b:a1: 0e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B6:50:80:27:5A:D2:DE:22:2F:4E:AF:AF:C4:06:03:5E:8F:1F:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/3a0d5249-2512-3cf1-a96c-fe7a58ee9b8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.crl X509v3 Authority Key Identifier: keyid:7D:8E:A4:82:0C:DC:9A:6F:4F:C9:31:C7:23:75:90:14:E4:AE:3A:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.cer sbgp-ipAddrBlock: critical IPv4: 207.90.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:b5:d2:83:71:d3:41:91:13:6d:f1:d1:53:c6:6f:9d:e3:41: 01:40:7f:5d:01:14:48:0d:4c:80:ff:0f:70:47:c3:7b:4a:2e: 15:0f:db:f1:71:e5:02:d9:0a:04:c7:0e:18:ca:7f:f0:c1:75: 34:6c:01:ae:d3:1d:c0:77:c3:11:38:fa:28:80:c7:b4:2b:b2: a7:3a:72:cc:28:7f:c8:26:bb:82:2d:55:85:43:fd:8a:0e:7a: e0:a6:91:af:23:34:ae:ab:c9:54:3a:53:89:80:68:bd:c7:77: af:b2:d2:c4:5a:92:65:fb:c3:e0:71:1e:05:2b:e9:a1:e2:62: 17:0f:b6:85:26:4d:ae:6b:55:3c:41:d5:96:93:9c:97:7d:08: 5a:ee:25:8b:6e:20:54:24:3e:6d:ef:9e:c5:4d:34:23:b5:01: b6:45:07:5b:b2:f6:3f:35:ed:69:41:a1:9f:60:0f:2b:16:7b: fa:a6:b9:90:07:30:86:5a:f9:ac:a8:77:b1:39:16:6c:5a:9f: fe:bb:88:4a:bd:d5:32:a4:77:3b:55:1c:ca:fa:35:ec:48:21: 56:06:dc:ab:6f:4a:20:98:00:b7:a0:31:f3:22:b8:dc:ea:8c: f5:e0:b3:2a:5d:b6:de:28:6a:2a:69:75:a0:5c:19:83:b8:59: fe:f3:da:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrO0t/5aFBJwtNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyYzEzNzctNGYyNi00YWU0LWJiNmMtM2NhN2ZlMjVi ZTA3MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ZGE1ZmNlZWYtMTRmNy00ODRkLWI0YTMtYWQ3YWVmZDEwNDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9SwMV/uR9KdvuU7zN7y5C3vxMWMf5UYEHXK ugrnakbXaoMmnWmv2azZfAFq7RpcVuHoYCPcFvZdBizZpdwzD3j3Hqr+aVmnBNZl iAC5Y6bw041S9b+T2rGWNCmrtzZOUPiQYZl5obpNUcYhD/JH6G5oHFErv+IN/d9f mSlN4R3FG7bW4Vc/B30ko634CH68EGfj5WsST0IdH1A0/TCw01NKguZSGEjNmMdk IJBK1nkqJ7gnjrMZAAASkmgKfIK3WqgddbFFWWWynVX6JR4+J2Z9S/x19N6Mc12B anWwnvAg2f5wUfaZJaZcvVGx54VcbQ59WcEOckHB/L6Zm6EOqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGC2UIAnWtLeIi9Or6/EBgNejx8HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xZDJj MTM3Ny00ZjI2LTRhZTQtYmI2Yy0zY2E3ZmUyNWJlMDcvM2EwZDUyNDktMjUxMi0z Y2YxLWE5NmMtZmU3YTU4ZWU5YjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWQyYzEzNzctNGYyNi00YWU0LWJi NmMtM2NhN2ZlMjViZTA3LzFkMmMxMzc3LTRmMjYtNGFlNC1iYjZjLTNjYTdmZTI1 YmUwNy5jcmwwHwYDVR0jBBgwFoAUfY6kggzcmm9PyTHHI3WQFOSuOv0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xZDJjMTM3Ny00ZjI2LTRhZTQtYmI2Yy0zY2E3 ZmUyNWJlMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz1rUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAq10oNx00GRE23x0VPGb53jQQFAf10BFEgNTID/D3BHw3tKLhUP2/Fx 5QLZCgTHDhjKf/DBdTRsAa7THcB3wxE4+iiAx7Qrsqc6cswof8gmu4ItVYVD/YoO euCmka8jNK6ryVQ6U4mAaL3Hd6+y0sRakmX7w+BxHgUr6aHiYhcPtoUmTa5rVTxB 1ZaTnJd9CFruJYtuIFQkPm3vnsVNNCO1AbZFB1uy9j817WlBoZ9gDysWe/qmuZAH MIZa+ayod7E5Fmxan/67iEq91TKkdztVHMr6NexIIVYG3KtvSiCYALegMfMiuNzq jPXgsypdtt4oaippdaBcGYO4Wf7z2qU= -----END CERTIFICATE-----Generated at Mon Oct 20 09:57:51 2025 by rpki-client