$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2607fd2d-bc94-323b-8ea2-39f9c40b6688.roa File: 2607fd2d-bc94-323b-8ea2-39f9c40b6688.roa (raw, json) Hash identifier: NUxNuJRHUlDenU81oAJ1WSVg6N/hDIOhB9t4U3GgRgc= Subject key identifier: C3:E5:85:76:1A:8F:7B:88:E0:3E:50:D7:16:11:3A:08:91:09:E8:3B Certificate issuer: /CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265 Certificate serial: 010D0C9F4328584B8529C3F6A0792C142BE36980 Authority key identifier: 6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2607fd2d-bc94-323b-8ea2-39f9c40b6688.roa Signing time: Tue 14 Oct 2025 15:14:22 +0000 ROA not before: Tue 14 Oct 2025 15:14:22 +0000 ROA not after: Mon 12 Jan 2026 16:14:22 +0000 asID: 834 IP address blocks: 206.174.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:85:29:c3:f6:a0:79:2c:14:2b:e3:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265 Validity Not Before: Oct 14 15:14:22 2025 GMT Not After : Jan 12 16:14:22 2026 GMT Subject: CN=e3ad9d51-ebc6-4219-92bb-7e2751105829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:60:78:30:69:e2:cd:ad:53:44:1f:09:b8:ed: b3:f5:16:69:10:c4:2f:62:67:b8:7f:26:1e:e2:d8: ec:52:46:31:58:5f:60:fa:b4:84:ea:d7:a7:b2:c8: dc:d5:a7:da:79:80:39:b6:4d:61:d1:cc:2f:cd:71: 97:03:ec:c5:6d:29:aa:90:00:e9:cc:36:92:a0:1d: de:8d:76:2c:c2:02:87:42:49:a0:32:d0:99:c2:87: e8:2a:70:c1:30:58:f5:37:ec:f8:12:ac:bc:cc:2d: 36:84:29:89:3c:b9:1f:75:79:65:f7:e7:e4:da:70: b6:d7:00:80:b0:2c:15:39:27:98:99:34:6b:29:b2: 98:5d:31:99:5f:7e:c2:a4:1a:f7:b0:90:66:74:0d: e0:c5:9b:dc:72:ca:70:a2:8d:9a:90:4b:2f:15:8d: 7c:88:96:e7:14:7e:34:8d:ab:bc:f0:16:e5:43:ec: 00:88:52:54:78:b3:49:82:78:59:0f:5f:bf:04:ed: a8:62:4e:39:27:88:c6:86:f1:20:06:19:0c:dd:bc: 83:7e:e8:ce:54:b6:01:8c:0e:22:2e:5f:25:d2:5b: 75:fa:a0:d6:c1:99:ee:55:2d:25:33:c6:a1:26:02: da:bd:a0:40:79:23:da:e1:b9:a3:75:32:cd:5e:77: aa:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E5:85:76:1A:8F:7B:88:E0:3E:50:D7:16:11:3A:08:91:09:E8:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2607fd2d-bc94-323b-8ea2-39f9c40b6688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl X509v3 Authority Key Identifier: keyid:6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer sbgp-ipAddrBlock: critical IPv4: 206.174.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:54:ed:1d:38:b9:fd:a8:93:1d:31:ba:66:a1:25:7a:ed:14: 11:4e:92:b5:97:9a:e4:ad:bd:6a:f8:0b:cd:dc:2a:2c:f1:eb: 06:fe:6c:83:b3:68:91:ef:3f:67:4f:32:82:9e:e0:54:bc:9a: a6:48:ba:e2:aa:7f:7e:a7:16:7e:1b:d8:4a:cb:c2:f7:ef:ea: 95:d2:19:46:1b:a4:be:b4:4e:c4:78:76:cc:22:66:e7:1f:d8: c3:a9:e6:3d:cf:a2:a0:8f:3e:55:64:5c:66:32:47:39:54:45: ce:6e:e2:a5:b0:4d:5d:13:e1:4b:ff:2a:6e:2e:31:7e:ef:e9: 6c:48:fd:18:fd:68:e7:89:51:d5:8e:40:91:4c:df:ac:33:5f: 04:81:54:29:f9:45:b7:36:60:9e:34:af:a6:f2:c9:4c:cf:cc: e4:f2:28:9e:f2:7a:db:d7:07:e1:f6:d9:ef:10:cf:38:dd:0e: 5f:41:3d:c7:83:81:ed:f8:8c:9e:c5:97:2f:ec:1b:65:9e:bb: 0e:04:89:76:a8:d6:fc:46:70:1a:0e:c0:8e:56:5f:bb:81:6b: a2:83:d2:2d:80:54:1e:be:14:31:10:83:8b:97:c3:53:9f:24: eb:36:de:57:cc:68:0e:d1:3f:bf:97:cf:87:c9:3a:9c:89:4d: 4f:d9:4e:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuFKcP2oHksFCvjaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZlOWVkMWMtZGQ0Zi00ZTFlLThlMjYtMjAxNDMzNGVl MjY1MB4XDTI1MTAxNDE1MTQyMloXDTI2MDExMjE2MTQyMlowLzEtMCsGA1UEAxMk ZTNhZDlkNTEtZWJjNi00MjE5LTkyYmItN2UyNzUxMTA1ODI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22B4MGniza1TRB8JuO2z9RZpEMQvYme4fyYe 4tjsUkYxWF9g+rSE6tenssjc1afaeYA5tk1h0cwvzXGXA+zFbSmqkADpzDaSoB3e jXYswgKHQkmgMtCZwofoKnDBMFj1N+z4Eqy8zC02hCmJPLkfdXll9+fk2nC21wCA sCwVOSeYmTRrKbKYXTGZX37CpBr3sJBmdA3gxZvccspwoo2akEsvFY18iJbnFH40 jau88BblQ+wAiFJUeLNJgnhZD1+/BO2oYk45J4jGhvEgBhkM3byDfujOVLYBjA4i Ll8l0lt1+qDWwZnuVS0lM8ahJgLavaBAeSPa4bmjdTLNXneqkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPlhXYaj3uI4D5Q1xYROgiRCeg7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5 ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0MzM0ZWUyNjUvMjYwN2ZkMmQtYmM5NC0z MjNiLThlYTItMzlmOWM0MGI2Njg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmZlOWVkMWMtZGQ0Zi00ZTFlLThl MjYtMjAxNDMzNGVlMjY1LzJmZTllZDFjLWRkNGYtNGUxZS04ZTI2LTIwMTQzMzRl ZTI2NS5jcmwwHwYDVR0jBBgwFoAUbcTQif/6sNYsCWoRLEBwddRje9MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0 MzM0ZWUyNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzq6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5U7R04uf2okx0xumahJXrtFBFOkrWXmuStvWr4C83cKizx6wb+bIOz aJHvP2dPMoKe4FS8mqZIuuKqf36nFn4b2ErLwvfv6pXSGUYbpL60TsR4dswiZucf 2MOp5j3PoqCPPlVkXGYyRzlURc5u4qWwTV0T4Uv/Km4uMX7v6WxI/Rj9aOeJUdWO QJFM36wzXwSBVCn5Rbc2YJ40r6byyUzPzOTyKJ7yetvXB+H22e8QzzjdDl9BPceD ge34jJ7Fly/sG2Weuw4EiXao1vxGcBoOwI5WX7uBa6KD0i2AVB6+FDEQg4uXw1Of JOs23lfMaA7RP7+Xz4fJOpyJTU/ZTvk= -----END CERTIFICATE-----Generated at Sun Oct 19 14:41:21 2025 by rpki-client