$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/b7f49026-ae81-329a-8ec0-a16f2a074f88.roa File: b7f49026-ae81-329a-8ec0-a16f2a074f88.roa (raw, json) Hash identifier: eUwB/EVM5inSRUcd+gVLPwifCbTyIR8V7JGhGiLp6Rs= Subject key identifier: 80:DA:49:E7:FB:84:BF:9C:A1:E6:87:5C:47:61:A3:A7:69:61:DE:E3 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584B047C1234A9969242B6910360 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/b7f49026-ae81-329a-8ec0-a16f2a074f88.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 14618 IP address blocks: 207.202.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:12:34:a9:96:92:42:b6:91:03:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=a34102b3-cdd5-42c2-9dbc-c7b2d34f4363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d8:ed:21:0d:72:a7:1e:5c:99:cf:72:e1:ad: 51:04:71:17:77:36:7f:d0:c9:a4:dd:39:bc:e7:53: c1:d7:6f:28:af:96:4a:28:15:c4:b0:7d:84:be:d0: 97:fb:8d:26:0e:ee:ae:b5:34:5e:5e:27:0f:cd:5e: dc:43:30:c1:64:61:5a:49:93:fa:38:c5:7d:28:64: 44:c9:49:2d:ed:da:57:11:21:4e:44:56:27:5a:81: 30:f6:70:87:70:8b:6f:a8:32:e6:f9:71:f0:ef:80: 5b:82:c6:25:8f:f3:96:88:3c:5f:0e:4d:ca:a8:7c: c6:72:ea:70:c8:b7:39:91:08:56:69:2e:b3:93:9e: 9a:e8:33:72:09:d8:1e:ec:d1:26:f7:cc:f4:87:fb: 1d:f0:8b:20:3e:3d:b0:a0:2f:6d:fe:d9:41:2e:11: ac:3b:bf:f9:0d:65:d1:c7:13:e5:c4:57:5c:51:4f: 1c:7d:83:bb:32:84:3a:f5:61:44:76:f4:fb:02:e0: 9e:76:34:ff:4f:62:5e:26:e5:3b:43:83:ff:b2:a5: 05:ce:54:db:41:93:c9:6c:cd:8c:80:b7:0a:5c:1d: a0:08:19:c0:17:fd:57:ef:27:25:45:00:7b:14:88: 93:a0:d2:1e:84:a1:fb:09:55:41:a5:af:5a:aa:6b: 7f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:DA:49:E7:FB:84:BF:9C:A1:E6:87:5C:47:61:A3:A7:69:61:DE:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/b7f49026-ae81-329a-8ec0-a16f2a074f88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:3b:81:a0:03:8e:4c:dd:70:3d:68:bd:ad:bd:52:f9:65:ed: fb:69:fa:6a:cb:ac:98:30:ff:bb:23:f9:e9:30:dc:47:00:46: c8:b7:2c:d1:bf:5c:a8:20:e7:c1:c5:22:d7:04:31:28:4a:09: f6:3a:6a:67:8a:e8:9f:05:ce:ff:1f:23:ed:99:b7:4d:02:e9: 1a:66:e6:41:f9:44:1b:23:df:d0:d6:3a:9a:06:9c:24:21:ef: fb:0b:d9:dc:5e:05:6e:98:62:2d:e6:a0:20:be:57:bf:26:b4: fb:28:2d:6b:da:a7:86:a9:c6:a0:2a:9f:f6:f8:e9:a9:53:fe: 0e:58:d2:31:df:3c:41:71:66:cc:ee:84:16:9a:61:37:11:ed: ab:b7:00:6b:3e:e3:4b:07:c4:73:89:d6:9b:04:25:0a:8c:c2: c0:35:90:db:dc:63:c9:d9:3d:7d:30:56:90:ab:11:b5:22:da: e6:f6:3d:bf:c8:76:ce:6a:16:69:d6:18:ce:16:6e:98:21:05: 1d:32:f9:90:6f:f2:c5:dd:a8:fd:31:81:21:90:c2:e4:39:73: 65:0d:11:3b:d8:af:2e:4f:79:72:55:62:c8:3b:06:7a:38:1e: 40:48:d1:01:ff:e2:e7:d1:ac:9b:8a:0e:13:2a:43:5f:6f:12: b1:be:15:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfBI0qZaSQraRA2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk YTM0MTAyYjMtY2RkNS00MmMyLTlkYmMtYzdiMmQzNGY0MzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNjtIQ1ypx5cmc9y4a1RBHEXdzZ/0Mmk3Tm8 51PB128or5ZKKBXEsH2EvtCX+40mDu6utTReXicPzV7cQzDBZGFaSZP6OMV9KGRE yUkt7dpXESFORFYnWoEw9nCHcItvqDLm+XHw74BbgsYlj/OWiDxfDk3KqHzGcupw yLc5kQhWaS6zk56a6DNyCdge7NEm98z0h/sd8IsgPj2woC9t/tlBLhGsO7/5DWXR xxPlxFdcUU8cfYO7MoQ69WFEdvT7AuCedjT/T2JeJuU7Q4P/sqUFzlTbQZPJbM2M gLcKXB2gCBnAF/1X7yclRQB7FIiToNIehKH7CVVBpa9aqmt/sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDaSef7hL+coeaHXEdho6dpYd7jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvYjdmNDkwMjYtYWU4MS0z MjlhLThlYzAtYTE2ZjJhMDc0Zjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8oUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADs7gaADjkzdcD1ova29Uvll7ftp+mrLrJgw/7sj+ekw3EcARsi3LNG/ XKgg58HFItcEMShKCfY6ameK6J8Fzv8fI+2Zt00C6Rpm5kH5RBsj39DWOpoGnCQh 7/sL2dxeBW6YYi3moCC+V78mtPsoLWvap4apxqAqn/b46alT/g5Y0jHfPEFxZszu hBaaYTcR7au3AGs+40sHxHOJ1psEJQqMwsA1kNvcY8nZPX0wVpCrEbUi2ub2Pb/I ds5qFmnWGM4WbpghBR0y+ZBv8sXdqP0xgSGQwuQ5c2UNETvYry5PeXJVYsg7Bno4 HkBI0QH/4ufRrJuKDhMqQ19vErG+Fd8= -----END CERTIFICATE-----Generated at Mon Oct 20 07:31:14 2025 by rpki-client