$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/abfd22fc-71d6-3554-8616-e76f2c05b55a.roa File: abfd22fc-71d6-3554-8616-e76f2c05b55a.roa (raw, json) Hash identifier: lFM9Q5mSsAh9bXEEiIqNOfD4xZgLKVBIZ0czG66e8gg= Subject key identifier: 4A:D7:F9:A4:FC:D6:87:66:0B:EE:BC:02:75:5C:C0:C0:46:2D:A9:97 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584B7B2200F24A6EBF1A66014700 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/abfd22fc-71d6-3554-8616-e76f2c05b55a.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 203724 IP address blocks: 208.65.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:22:00:f2:4a:6e:bf:1a:66:01:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=dfe6076c-1ec9-4df1-8bb0-702d346df287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d6:10:0f:b6:60:3a:57:78:3e:33:29:65:c8: b9:41:da:1a:c0:29:1a:1c:86:5e:99:90:a6:91:1d: 2b:e6:f5:49:6a:37:e2:85:ac:ce:f7:58:33:f3:b3: 90:55:a0:08:84:71:b3:0b:e3:8f:3c:f9:61:ef:9b: 7d:6e:a4:5d:63:c1:b3:67:02:22:6f:01:7f:8c:f4: 62:c2:8e:a1:98:d1:44:9c:d8:5d:88:16:f4:73:8e: b4:c7:bc:9d:76:c1:b2:49:7f:3a:b3:03:92:22:62: 7d:33:60:d3:f1:84:0d:b7:e2:8f:10:32:6c:4a:6b: bf:e5:6a:43:52:03:3d:e0:41:07:2d:f0:2e:5c:e4: 2d:5a:d3:66:ae:93:05:11:07:24:f6:15:de:dd:b6: 6a:28:cc:41:85:98:72:bf:54:3f:2c:f6:f5:cc:c2: 98:aa:b8:23:b7:6e:cf:a4:23:33:75:2d:0f:a7:d4: f9:de:77:50:52:8e:d3:33:6a:e3:73:0d:9e:d4:3e: 8f:0f:60:e1:09:01:e4:60:f7:fe:91:d3:af:a1:1e: f4:79:9f:31:51:4c:b8:03:5f:39:15:ab:9a:b7:c0: d4:2a:76:94:a2:32:72:22:6d:6b:f3:9d:43:db:91: 5d:98:af:f7:d7:ee:d4:d5:3f:65:62:89:78:e6:df: 66:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D7:F9:A4:FC:D6:87:66:0B:EE:BC:02:75:5C:C0:C0:46:2D:A9:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/abfd22fc-71d6-3554-8616-e76f2c05b55a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 208.65.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:05:83:0e:e7:2f:cf:32:2f:84:9f:7b:96:4c:55:2d:d4:60: 3b:ec:77:3b:60:7b:33:e5:86:35:12:90:01:85:9a:bc:7d:29: 19:4f:91:73:94:66:5b:56:38:53:6b:1b:74:93:46:56:87:9f: cf:28:63:58:8a:7d:52:03:d7:4d:b3:5a:0e:b4:14:77:28:20: f6:17:ab:9f:62:95:c9:05:06:f0:23:17:84:3f:0c:d5:e7:4b: 2b:30:a7:04:fa:3f:30:b7:f8:c4:76:f9:7f:68:a1:28:84:a9: 56:24:74:a1:e2:1a:0f:52:ee:d2:f4:46:58:c4:9f:84:4b:fd: 17:21:30:2d:c7:cf:ae:bc:4a:2c:f2:b0:77:28:f2:48:b1:fc: f9:0f:8e:b9:38:31:7c:0f:77:8e:e8:b4:11:80:f7:ee:13:1d: 98:ba:60:3b:69:2d:55:b7:51:84:0c:9e:19:11:f8:56:5c:d0: f6:ab:51:07:f3:36:d4:97:6a:2c:c1:cb:5b:0b:28:7d:8d:b1: 80:f4:1e:a4:f8:84:a9:18:1f:ca:8f:56:46:79:e6:b3:8f:38: b6:8d:d7:bf:73:2a:de:e1:ba:bd:92:c7:a3:fd:eb:f9:20:b4: 3a:58:89:6b:bf:a9:f3:64:91:fb:8c:73:1e:89:cb:58:5a:ab: 4f:5d:3b:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7IgDySm6/GmYBRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk ZGZlNjA3NmMtMWVjOS00ZGYxLThiYjAtNzAyZDM0NmRmMjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NYQD7ZgOld4PjMpZci5QdoawCkaHIZemZCm kR0r5vVJajfihazO91gz87OQVaAIhHGzC+OPPPlh75t9bqRdY8GzZwIibwF/jPRi wo6hmNFEnNhdiBb0c460x7yddsGySX86swOSImJ9M2DT8YQNt+KPEDJsSmu/5WpD UgM94EEHLfAuXOQtWtNmrpMFEQck9hXe3bZqKMxBhZhyv1Q/LPb1zMKYqrgjt27P pCMzdS0Pp9T53ndQUo7TM2rjcw2e1D6PD2DhCQHkYPf+kdOvoR70eZ8xUUy4A185 Fauat8DUKnaUojJyIm1r851D25FdmK/31+7U1T9lYol45t9mfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErX+aT81odmC+68AnVcwMBGLamXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvYWJmZDIyZmMtNzFkNi0z NTU0LTg2MTYtZTc2ZjJjMDViNTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EGUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4Fgw7nL88yL4Sfe5ZMVS3UYDvsdztgezPlhjUSkAGFmrx9KRlPkXOU ZltWOFNrG3STRlaHn88oY1iKfVID102zWg60FHcoIPYXq59ilckFBvAjF4Q/DNXn SyswpwT6PzC3+MR2+X9ooSiEqVYkdKHiGg9S7tL0RljEn4RL/RchMC3Hz668Sizy sHco8kix/PkPjrk4MXwPd47otBGA9+4THZi6YDtpLVW3UYQMnhkR+FZc0ParUQfz NtSXaizBy1sLKH2NsYD0HqT4hKkYH8qPVkZ55rOPOLaN179zKt7hur2Sx6P96/kg tDpYiWu/qfNkkfuMcx6Jy1haq09dOyI= -----END CERTIFICATE-----Generated at Mon Oct 20 05:04:24 2025 by rpki-client