$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/190da15e-c06a-3eb9-87c5-9d8fd604a77d.roa File: 190da15e-c06a-3eb9-87c5-9d8fd604a77d.roa (raw, json) Hash identifier: RnuzvefYu6tasN/PKTM+mhErujQkx+AeLxHBETX2ZFA= Subject key identifier: 41:45:C5:33:D2:06:0A:D8:C7:1C:CE:B8:B2:B0:50:BE:1D:EA:AD:CB Certificate issuer: /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Certificate serial: 010D0C9F4328584B8BE21C795EC9C396F3435580 Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/190da15e-c06a-3eb9-87c5-9d8fd604a77d.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 3807 IP address blocks: 207.196.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:1c:79:5e:c9:c3:96:f3:43:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=0560f654-dd0f-4710-bf24-930524bde98f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cf:0f:40:99:35:fa:dd:7a:ca:10:b2:5c:e0: a1:b2:7a:a6:dc:76:70:91:1c:2a:6a:ca:30:0d:98: c4:57:b4:e1:5d:56:17:a9:dc:b3:80:92:c7:03:ab: 31:0d:0d:81:cb:d9:ee:b4:bd:9f:72:fd:66:e2:bb: 00:64:86:ee:4a:1b:48:44:66:d8:8e:fa:aa:9b:dd: b9:ba:77:6d:a1:59:41:f8:a3:dc:c0:28:74:a0:27: 09:18:9e:78:d6:42:ce:ae:13:57:ed:94:75:20:33: 1f:44:42:9c:3f:77:cd:bc:4f:36:e7:55:05:30:4f: bc:1d:58:09:9c:90:de:e4:82:7a:e4:00:b1:d8:14: b8:c4:d0:a7:2f:f1:a3:bf:46:86:97:e8:78:cf:a3: 7b:f2:d0:35:d9:da:4e:7d:a7:93:ef:b7:af:a4:10: 68:82:62:07:b6:9f:99:ac:33:7d:90:9a:23:f6:00: ed:87:fd:c1:43:7f:55:2f:7b:53:33:1e:ed:eb:38: f8:8a:50:8b:c4:82:89:be:a6:73:a6:6f:b6:99:6f: 60:07:c5:e7:76:bd:61:f5:85:91:e7:8d:99:7d:39: d4:cb:e9:9e:c2:31:89:0c:9e:d6:28:98:78:d4:62: 8d:2e:fa:9c:11:6c:5f:81:59:7e:ab:fd:83:44:f5: e5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:45:C5:33:D2:06:0A:D8:C7:1C:CE:B8:B2:B0:50:BE:1D:EA:AD:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/190da15e-c06a-3eb9-87c5-9d8fd604a77d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl X509v3 Authority Key Identifier: keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer sbgp-ipAddrBlock: critical IPv4: 207.196.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:e5:63:84:eb:f6:79:a0:e1:79:5c:94:24:ce:1f:1d:10:72: 80:75:33:82:7a:1e:3e:b3:67:5b:e1:fe:37:20:8c:ed:25:56: a5:03:ff:37:a2:80:61:da:f3:d7:8c:1c:1c:b4:e7:99:22:87: 03:ae:74:08:54:04:66:81:55:7c:3b:7a:53:86:c1:a4:58:9a: 8f:c7:02:4a:4a:b6:fa:8b:51:0a:c0:4e:42:24:a0:39:82:7d: 9f:91:59:e6:99:c3:8f:e1:39:70:da:b2:38:8d:33:ba:00:39: 26:47:e5:bb:39:9f:89:47:51:a3:67:29:b8:14:6a:0d:0f:2b: d3:78:2f:80:f9:9f:c7:0c:1c:af:b2:ef:5c:ae:78:ab:b2:95: b6:cc:96:55:4c:37:f2:19:8a:0a:71:2d:65:ce:e2:fc:bd:5c: 79:0f:d1:d6:6c:b4:ab:6a:72:64:b9:08:09:c8:b2:f3:ce:e5: de:ea:01:db:5d:e0:e4:90:81:0e:7b:73:b4:97:5a:01:51:d7: 3f:e9:36:ea:c9:65:29:9f:6c:5e:6e:4e:12:cb:2d:e4:4d:38: 7c:e9:40:21:d9:66:c7:83:ab:c7:ef:27:60:3b:ed:82:f5:b1: 0d:9c:db:ca:3c:a7:77:f5:82:91:c2:62:f7:40:ad:f4:e9:22: b0:fa:73:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4hx5XsnDlvNDVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQ1YzdjM2QtNzJhNC00MjFkLWI0MWEtZDVlN2UyNTM0 MTA3MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk MDU2MGY2NTQtZGQwZi00NzEwLWJmMjQtOTMwNTI0YmRlOThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns8PQJk1+t16yhCyXOChsnqm3HZwkRwqasow DZjEV7ThXVYXqdyzgJLHA6sxDQ2By9nutL2fcv1m4rsAZIbuShtIRGbYjvqqm925 undtoVlB+KPcwCh0oCcJGJ541kLOrhNX7ZR1IDMfREKcP3fNvE8251UFME+8HVgJ nJDe5IJ65ACx2BS4xNCnL/Gjv0aGl+h4z6N78tA12dpOfaeT77evpBBogmIHtp+Z rDN9kJoj9gDth/3BQ39VL3tTMx7t6zj4ilCLxIKJvqZzpm+2mW9gB8Xndr1h9YWR 542ZfTnUy+mewjGJDJ7WKJh41GKNLvqcEWxfgVl+q/2DRPXlkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFFxTPSBgrYxxzOuLKwUL4d6q3LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVj N2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3ZTI1MzQxMDcvMTkwZGExNWUtYzA2YS0z ZWI5LTg3YzUtOWQ4ZmQ2MDRhNzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDQ1YzdjM2QtNzJhNC00MjFkLWI0 MWEtZDVlN2UyNTM0MTA3LzA0NWM3YzNkLTcyYTQtNDIxZC1iNDFhLWQ1ZTdlMjUz NDEwNy5jcmwwHwYDVR0jBBgwFoAUmFPVU8y7sPSmO9Q3aLg6B77bPXcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNDVjN2MzZC03MmE0LTQyMWQtYjQxYS1kNWU3 ZTI1MzQxMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz8SeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTlY4Tr9nmg4XlclCTOHx0QcoB1M4J6Hj6zZ1vh/jcgjO0lVqUD/zei gGHa89eMHBy055kihwOudAhUBGaBVXw7elOGwaRYmo/HAkpKtvqLUQrATkIkoDmC fZ+RWeaZw4/hOXDasjiNM7oAOSZH5bs5n4lHUaNnKbgUag0PK9N4L4D5n8cMHK+y 71yueKuylbbMllVMN/IZigpxLWXO4vy9XHkP0dZstKtqcmS5CAnIsvPO5d7qAdtd 4OSQgQ57c7SXWgFR1z/pNurJZSmfbF5uThLLLeRNOHzpQCHZZseDq8fvJ2A77YL1 sQ2c28o8p3f1gpHCYvdArfTpIrD6cxg= -----END CERTIFICATE-----Generated at Mon Oct 20 22:21:57 2025 by rpki-client