$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/f559045e-4405-39ab-8824-3e21d81e1ce2.roa File: f559045e-4405-39ab-8824-3e21d81e1ce2.roa (raw, json) Hash identifier: Tdsw61vY32vSu9HGjJObV7m+znpty0ednt0MgvvgaAM= Subject key identifier: 35:C8:0C:0D:61:9E:97:A6:45:90:FC:F9:D0:8A:78:09:81:8D:D3:0F Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584B76F25C7FF6EAD99823045080 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/f559045e-4405-39ab-8824-3e21d81e1ce2.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 207.202.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:5c:7f:f6:ea:d9:98:23:04:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=ffa37715-2068-4ce2-b61d-74ebb64223da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a2:4a:77:b2:f5:95:c3:8c:b8:cf:61:b3:54: 38:ba:7e:8c:3e:56:5f:4e:3f:08:f4:4c:83:15:cb: e3:5f:e4:84:d8:34:37:e3:37:75:ad:5f:44:c0:df: 93:66:95:9d:c8:e3:a4:5c:a1:86:83:dc:40:65:ad: 1f:c0:73:80:dc:0b:e5:14:47:34:46:2a:ca:9e:5a: 4d:57:10:c6:da:aa:87:ca:67:61:3f:81:df:76:ca: 01:62:2b:ae:48:68:9d:36:6a:c1:6d:49:58:9d:43: 04:be:36:13:5a:52:7e:82:bf:b7:e1:2b:ac:fd:ff: 2e:d3:8f:82:82:80:13:52:87:fd:cc:8c:06:92:90: 3a:1e:26:0f:6c:e3:80:f2:56:20:51:b5:05:f8:6d: 82:d2:e7:68:64:03:b5:d8:5a:ec:8d:b5:19:31:0d: 9c:4a:e0:15:18:fc:f9:e9:72:74:89:ac:88:c3:d3: 5c:d4:f3:7a:d7:bd:ae:08:54:be:1a:80:a5:3b:44: 8a:c2:78:32:e6:1c:df:91:85:cd:9d:e5:a3:9a:42: be:a1:9d:23:1b:e7:37:7c:9a:f2:22:20:ee:8e:61: 63:bb:68:83:a6:07:5b:d2:e7:f2:12:7f:78:b5:7e: ac:43:83:67:c3:03:7b:e6:2c:ee:42:6a:e1:bd:4e: 50:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C8:0C:0D:61:9E:97:A6:45:90:FC:F9:D0:8A:78:09:81:8D:D3:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/f559045e-4405-39ab-8824-3e21d81e1ce2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:a8:f2:33:3d:d0:31:74:a2:6d:2d:a5:85:02:14:cc:03:3b: c5:04:a4:84:61:9e:1c:85:9f:9c:a8:43:31:d7:37:cc:9f:47: 80:f8:2e:20:54:69:41:d6:06:21:e1:b9:8c:08:76:d1:dc:c5: ce:4c:69:21:fa:a9:d9:76:84:aa:a0:79:7f:31:c2:a8:d5:5c: e8:25:15:6d:09:4e:24:a0:e5:16:6f:82:bc:9d:5b:37:bd:89: ad:87:fe:7b:dc:ad:cf:c0:6b:2b:2e:b9:7b:61:aa:2f:62:5d: ce:3a:45:c0:d1:58:70:90:0c:64:8c:30:8e:83:f9:8b:07:13: 55:ab:66:34:5f:95:4e:0f:4f:38:76:e2:42:6d:6b:28:6c:10: 02:47:49:9a:3a:56:04:d6:08:0c:c9:93:ab:a0:b0:34:15:58: b7:57:b4:0a:37:0f:07:f4:0d:9f:85:6d:55:16:66:e9:8e:f6: b0:b0:59:22:d3:25:fa:d4:46:7b:91:68:93:88:83:00:4a:7d: 1f:eb:ce:22:46:43:c0:19:23:4d:ee:79:22:a3:d1:76:99:71: d1:3f:79:03:eb:2a:89:8e:c2:34:7d:94:b6:18:45:37:b0:ae: 77:63:f5:6a:cb:1e:02:14:c8:94:b4:13:e6:06:3c:49:a4:54: 2b:0c:be:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28lx/9urZmCMEUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZmZhMzc3MTUtMjA2OC00Y2UyLWI2MWQtNzRlYmI2NDIyM2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qJKd7L1lcOMuM9hs1Q4un6MPlZfTj8I9EyD FcvjX+SE2DQ34zd1rV9EwN+TZpWdyOOkXKGGg9xAZa0fwHOA3AvlFEc0RirKnlpN VxDG2qqHymdhP4HfdsoBYiuuSGidNmrBbUlYnUMEvjYTWlJ+gr+34Sus/f8u04+C goATUof9zIwGkpA6HiYPbOOA8lYgUbUF+G2C0udoZAO12FrsjbUZMQ2cSuAVGPz5 6XJ0iayIw9Nc1PN6172uCFS+GoClO0SKwngy5hzfkYXNneWjmkK+oZ0jG+c3fJry IiDujmFju2iDpgdb0ufyEn94tX6sQ4NnwwN75izuQmrhvU5QOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXIDA1hnpemRZD8+dCKeAmBjdMPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvZjU1OTA0NWUtNDQwNS0z OWFiLTg4MjQtM2UyMWQ4MWUxY2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8oZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmo8jM90DF0om0tpYUCFMwDO8UEpIRhnhyFn5yoQzHXN8yfR4D4LiBU aUHWBiHhuYwIdtHcxc5MaSH6qdl2hKqgeX8xwqjVXOglFW0JTiSg5RZvgrydWze9 ia2H/nvcrc/AaysuuXthqi9iXc46RcDRWHCQDGSMMI6D+YsHE1WrZjRflU4PTzh2 4kJtayhsEAJHSZo6VgTWCAzJk6ugsDQVWLdXtAo3Dwf0DZ+FbVUWZumO9rCwWSLT JfrURnuRaJOIgwBKfR/rziJGQ8AZI03ueSKj0XaZcdE/eQPrKomOwjR9lLYYRTew rndj9WrLHgIUyJS0E+YGPEmkVCsMvns= -----END CERTIFICATE-----Generated at Mon Oct 20 04:07:45 2025 by rpki-client