$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/3f24577b-f6c7-3949-a592-fd0d53610973.roa File: 3f24577b-f6c7-3949-a592-fd0d53610973.roa (raw, json) Hash identifier: l42BvCCpq/zOEe5+b2wzj0Jpoth1dQ8u1QMiS/BYQtE= Subject key identifier: 3F:53:1F:92:BF:49:CD:11:3B:24:9F:F8:4B:24:4E:2E:CD:A0:A3:D2 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584B6FF74B785D805911CB69C680 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/3f24577b-f6c7-3949-a592-fd0d53610973.roa Signing time: Tue 07 Oct 2025 01:00:29 +0000 ROA not before: Tue 07 Oct 2025 01:00:29 +0000 ROA not after: Mon 05 Jan 2026 02:00:29 +0000 asID: 16509 IP address blocks: 207.202.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:f7:4b:78:5d:80:59:11:cb:69:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Oct 7 01:00:29 2025 GMT Not After : Jan 5 02:00:29 2026 GMT Subject: CN=0115db9f-216c-4508-b21e-804c79f4b58b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3e:7c:d5:23:5c:1e:63:f1:02:ee:2a:0b:40: f2:dd:62:02:1a:97:f4:c4:cd:60:fc:1e:aa:78:bd: 67:b4:d1:b7:35:95:f3:4a:40:7d:60:83:3b:e1:29: 70:70:fa:35:c3:1e:51:97:c6:17:fc:38:89:77:15: 80:2a:13:6c:07:e1:3b:1b:71:4d:53:26:a8:93:cb: 98:19:64:e4:6b:6b:9e:10:64:47:e6:cd:ba:e6:cc: fd:9d:5a:22:2a:b9:ff:7f:18:b2:28:3e:da:da:7f: 31:ea:5a:3e:69:2d:da:a0:9a:d9:e0:de:0e:25:bf: 0e:7d:85:d0:d3:4a:59:19:3b:20:f9:48:51:80:ff: d9:ee:b9:92:d0:95:26:d4:88:2e:f5:97:9d:e2:ee: 99:fa:cd:3d:c2:42:9b:13:02:dd:d0:b0:7d:09:aa: eb:2e:30:1f:d8:a9:5c:9f:79:41:08:04:d2:fc:74: a0:b2:ef:35:d7:2e:7a:6a:7f:62:e7:eb:06:e5:2c: 82:63:ff:e6:40:c4:e4:5a:97:9a:27:fd:f6:58:8f: 9c:31:03:87:26:cd:22:da:93:25:b6:83:cf:9b:92: 0a:61:58:49:da:fc:5c:89:19:cc:84:d2:e2:af:cf: d7:aa:69:bc:04:92:e5:30:57:d3:93:61:48:c5:7b: c9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:53:1F:92:BF:49:CD:11:3B:24:9F:F8:4B:24:4E:2E:CD:A0:A3:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/3f24577b-f6c7-3949-a592-fd0d53610973.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:be:99:46:d6:e3:e2:82:b8:0b:24:05:0b:2d:4f:8d:34:b0: ee:fa:3d:5e:5f:8b:ee:6e:1c:48:bb:9c:bb:6b:f5:e9:1f:32: e3:5c:32:0c:ac:61:bf:7d:f3:dd:3b:6f:55:9c:31:2f:52:90: 6e:ce:6b:8e:3f:1e:aa:08:7c:d8:d2:99:69:d6:dd:f8:aa:f3: 3b:ca:53:5a:64:3d:61:9b:74:b2:e2:7e:40:90:3d:27:9c:e1: 1f:02:99:f0:7b:2e:2f:51:0c:27:66:e0:34:1c:46:a0:07:25: 62:41:4f:a9:b6:c5:e8:d5:4e:75:a4:e1:ad:31:e1:71:5f:9b: 00:ea:07:1d:b7:3b:d1:5f:bf:5f:90:25:4b:fb:4d:b2:9e:20: fb:37:91:44:1b:d5:d7:9b:24:30:9c:f9:6a:bd:8d:e2:98:f6: fe:ec:2a:7b:a3:59:cb:0a:9e:b0:53:aa:f9:04:a5:f6:d9:46: 47:67:22:7a:07:e2:22:1e:8e:49:49:ab:4c:26:ca:b4:8e:65: 96:39:7f:6a:f3:fb:e7:3b:9c:23:38:83:f8:bd:fd:8f:a7:8f: ef:65:2f:2b:d2:02:01:71:19:7a:f0:54:d9:45:a5:f3:26:bc: f3:60:41:56:73:2e:3f:38:ce:5b:26:3d:3e:7b:4d:d4:ea:69: cc:5b:cb:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtv90t4XYBZEctpxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MTAwNzAxMDAyOVoXDTI2MDEwNTAyMDAyOVowLzEtMCsGA1UEAxMk MDExNWRiOWYtMjE2Yy00NTA4LWIyMWUtODA0Yzc5ZjRiNThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvz581SNcHmPxAu4qC0Dy3WICGpf0xM1g/B6q eL1ntNG3NZXzSkB9YIM74SlwcPo1wx5Rl8YX/DiJdxWAKhNsB+E7G3FNUyaok8uY GWTka2ueEGRH5s265sz9nVoiKrn/fxiyKD7a2n8x6lo+aS3aoJrZ4N4OJb8OfYXQ 00pZGTsg+UhRgP/Z7rmS0JUm1Igu9Zed4u6Z+s09wkKbEwLd0LB9CarrLjAf2Klc n3lBCATS/HSgsu811y56an9i5+sG5SyCY//mQMTkWpeaJ/32WI+cMQOHJs0i2pMl toPPm5IKYVhJ2vxciRnMhNLir8/Xqmm8BJLlMFfTk2FIxXvJNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9TH5K/Sc0ROySf+EskTi7NoKPSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvM2YyNDU3N2ItZjZjNy0z OTQ5LWE1OTItZmQwZDUzNjEwOTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8oWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADq+mUbW4+KCuAskBQstT400sO76PV5fi+5uHEi7nLtr9ekfMuNcMgys Yb998907b1WcMS9SkG7Oa44/HqoIfNjSmWnW3fiq8zvKU1pkPWGbdLLifkCQPSec 4R8CmfB7Li9RDCdm4DQcRqAHJWJBT6m2xejVTnWk4a0x4XFfmwDqBx23O9Ffv1+Q JUv7TbKeIPs3kUQb1debJDCc+Wq9jeKY9v7sKnujWcsKnrBTqvkEpfbZRkdnInoH 4iIejklJq0wmyrSOZZY5f2rz++c7nCM4g/i9/Y+nj+9lLyvSAgFxGXrwVNlFpfMm vPNgQVZzLj84zlsmPT57TdTqacxby5U= -----END CERTIFICATE-----Generated at Mon Oct 20 13:11:06 2025 by rpki-client