$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/5397cde6-c4ba-30a1-b7b8-bbd1d76ead96.roa File: 5397cde6-c4ba-30a1-b7b8-bbd1d76ead96.roa (raw, json) Hash identifier: FIeJZUuJKJDZgMMfZqVlMYXzc6L6W0P6vdAOeXcuSKU= Subject key identifier: 62:73:33:25:96:A3:74:F7:9A:02:AF:98:D0:CB:A3:77:0D:DC:8C:FC Certificate issuer: /CN=1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07 Certificate serial: 010D0C9F4328584B84E786428C000940CC661E00 Authority key identifier: 7D:8E:A4:82:0C:DC:9A:6F:4F:C9:31:C7:23:75:90:14:E4:AE:3A:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/5397cde6-c4ba-30a1-b7b8-bbd1d76ead96.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 399989 IP address blocks: 207.90.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:86:42:8c:00:09:40:cc:66:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=16b18187-27dc-49e8-b0cd-7cdba0b63b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:91:35:5f:af:cd:c0:eb:99:49:85:55:d6:a2: 8b:c0:3b:b9:d9:f2:3e:a5:f1:61:cb:66:63:e5:e8: 49:41:c6:91:2b:5b:e5:b1:93:1e:2c:2c:76:15:2e: 8f:42:15:49:66:24:6b:ab:e2:c1:be:33:d5:6c:bc: a6:44:02:18:ac:1e:47:45:8c:e6:25:62:dc:09:c9: 0a:09:a8:45:5e:09:6d:de:2e:ae:63:3f:24:17:54: 86:a5:a6:ca:dc:b8:5c:6d:c7:10:1a:2c:09:89:8c: 34:69:ff:f6:b4:a4:27:b6:3d:7d:3f:c1:44:85:f5: f8:8a:43:ce:b3:fe:b9:a9:38:87:39:82:ad:83:60: 63:64:6a:ae:ba:ec:e4:58:b2:e1:61:88:45:9b:95: 82:b7:8d:00:40:0f:57:ea:7a:f5:c3:71:39:9c:ac: 6b:ab:75:12:9c:79:0c:34:e5:4e:bd:21:94:36:e5: b2:a6:95:1c:b6:6e:8a:bb:aa:bd:c5:1e:43:b9:63: eb:96:00:1b:1c:99:ec:4a:89:fa:a3:a4:63:c7:49: ef:9b:b5:ec:ff:4d:45:8e:bb:18:59:db:e3:a2:6e: 4b:59:02:73:f5:13:95:3e:73:c3:04:39:7f:b7:6d: 3c:17:d0:6d:6e:87:25:78:66:40:e9:f2:7b:88:7f: e6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:73:33:25:96:A3:74:F7:9A:02:AF:98:D0:CB:A3:77:0D:DC:8C:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/5397cde6-c4ba-30a1-b7b8-bbd1d76ead96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.crl X509v3 Authority Key Identifier: keyid:7D:8E:A4:82:0C:DC:9A:6F:4F:C9:31:C7:23:75:90:14:E4:AE:3A:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d2c1377-4f26-4ae4-bb6c-3ca7fe25be07.cer sbgp-ipAddrBlock: critical IPv4: 207.90.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:ec:be:b6:29:e9:a9:f9:89:7a:13:b0:48:2b:30:2f:1c:52: ea:de:19:03:d7:f4:c7:5d:7b:57:79:cb:7e:e7:bf:89:5b:94: d4:b3:ea:39:fe:48:e8:dc:e7:55:69:d4:87:9e:f7:ef:cf:36: 7b:ca:aa:c8:a3:d4:4e:68:ea:7d:3e:0d:90:26:55:e8:b8:58: 91:52:c0:71:c0:9b:0c:11:10:13:7b:6f:c3:f4:d4:29:f9:4b: 29:d1:3b:00:ed:0f:75:aa:a0:47:bf:6d:eb:92:43:b4:8a:b6: c9:8d:ed:65:7b:c0:dd:3d:57:38:09:5a:0d:df:0d:9c:ae:a5: 19:31:75:99:b2:42:59:ca:64:38:05:5f:0a:3c:fd:b2:23:f6: 59:34:b4:04:ac:bc:1b:1c:78:7d:83:1e:df:ce:02:e2:09:20: 47:83:94:ad:18:37:97:3c:69:8b:64:1b:fb:23:47:fe:56:b7: 70:33:e0:29:77:69:9a:cf:b5:0d:27:c9:58:2d:26:b6:61:33: 02:9c:0d:32:76:21:32:28:01:7e:88:4f:b5:db:16:00:61:e2: 5a:87:87:9c:84:5e:82:8c:4a:10:25:05:32:39:16:a6:f4:d7: 2e:de:47:8a:d4:28:2f:dc:9a:af:0c:e7:f4:06:eb:92:8a:3b: 37:90:6f:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE54ZCjAAJQMxmHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyYzEzNzctNGYyNi00YWU0LWJiNmMtM2NhN2ZlMjVi ZTA3MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MTZiMTgxODctMjdkYy00OWU4LWIwY2QtN2NkYmEwYjYzYjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpE1X6/NwOuZSYVV1qKLwDu52fI+pfFhy2Zj 5ehJQcaRK1vlsZMeLCx2FS6PQhVJZiRrq+LBvjPVbLymRAIYrB5HRYzmJWLcCckK CahFXglt3i6uYz8kF1SGpabK3LhcbccQGiwJiYw0af/2tKQntj19P8FEhfX4ikPO s/65qTiHOYKtg2BjZGquuuzkWLLhYYhFm5WCt40AQA9X6nr1w3E5nKxrq3USnHkM NOVOvSGUNuWyppUctm6Ku6q9xR5DuWPrlgAbHJnsSon6o6Rjx0nvm7Xs/01FjrsY Wdvjom5LWQJz9ROVPnPDBDl/t208F9BtbocleGZA6fJ7iH/mdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJzMyWWo3T3mgKvmNDLo3cN3Iz8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xZDJj MTM3Ny00ZjI2LTRhZTQtYmI2Yy0zY2E3ZmUyNWJlMDcvNTM5N2NkZTYtYzRiYS0z MGExLWI3YjgtYmJkMWQ3NmVhZDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWQyYzEzNzctNGYyNi00YWU0LWJi NmMtM2NhN2ZlMjViZTA3LzFkMmMxMzc3LTRmMjYtNGFlNC1iYjZjLTNjYTdmZTI1 YmUwNy5jcmwwHwYDVR0jBBgwFoAUfY6kggzcmm9PyTHHI3WQFOSuOv0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xZDJjMTM3Ny00ZjI2LTRhZTQtYmI2Yy0zY2E3 ZmUyNWJlMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz1rUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7svrYp6an5iXoTsEgrMC8cUureGQPX9Mdde1d5y37nv4lblNSz6jn+ SOjc51Vp1Iee9+/PNnvKqsij1E5o6n0+DZAmVei4WJFSwHHAmwwREBN7b8P01Cn5 SynROwDtD3WqoEe/beuSQ7SKtsmN7WV7wN09VzgJWg3fDZyupRkxdZmyQlnKZDgF Xwo8/bIj9lk0tASsvBsceH2DHt/OAuIJIEeDlK0YN5c8aYtkG/sjR/5Wt3Az4Cl3 aZrPtQ0nyVgtJrZhMwKcDTJ2ITIoAX6IT7XbFgBh4lqHh5yEXoKMShAlBTI5Fqb0 1y7eR4rUKC/cmq8M5/QG65KKOzeQb7o= -----END CERTIFICATE-----Generated at Mon Oct 20 14:36:45 2025 by rpki-client