$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/48d069ba-5ef8-3f64-a653-d806fe8fd001.roa File: 48d069ba-5ef8-3f64-a653-d806fe8fd001.roa (raw, json) Hash identifier: wryGfEQyMYnTEfShOEFhFfduC4DKiLG3heE0DuBuGYQ= Subject key identifier: 2E:97:30:06:5E:12:75:A3:74:7D:43:42:7E:70:12:70:3F:C7:6B:3A Certificate issuer: /CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2 Certificate serial: 010D0C9F4328584B8BE223A4636243A48D1C6080 Authority key identifier: DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/48d069ba-5ef8-3f64-a653-d806fe8fd001.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 32329 IP address blocks: 207.53.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:23:a4:63:62:43:a4:8d:1c:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=966830a4-0e6f-49a1-9823-af2ae92ac7f2 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=82daf8b9-b8e8-4209-98fd-5fcbeb5239ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b1:8b:60:0d:a8:30:84:9f:5a:95:6a:42:fc: a2:ad:25:4c:40:a9:36:ad:bd:6d:b8:a5:83:73:f8: 94:32:77:9f:0a:53:65:ef:4e:c9:7f:73:3e:3d:13: 72:ab:80:4e:04:9b:79:ec:de:0c:bc:5a:53:3e:ef: a5:7d:f3:be:df:59:42:4c:57:3d:e8:5f:95:67:37: df:6d:f5:81:04:e4:af:c9:ae:dc:ed:4c:c1:a6:41: ad:41:17:5d:ee:1e:87:15:de:2a:dc:21:9a:94:8a: d0:32:0d:41:6d:a3:fe:e0:2d:47:d5:f8:9f:de:8a: b9:e9:b8:ab:f7:7d:ac:ce:66:e7:bf:8f:d1:a1:d2: 90:d4:a2:db:b3:1d:ad:77:8c:ac:ee:0a:10:94:36: d0:5d:08:e1:40:3a:5a:06:06:0a:a3:44:d1:f6:c2: ef:d0:9c:76:83:b3:8c:dd:b1:d7:ff:d3:51:2c:74: b4:70:1d:60:8c:86:dc:1d:97:18:96:2c:82:aa:6a: fa:66:fe:e0:d2:f5:9b:ab:f7:e3:96:04:25:e3:c7: 8a:ca:8e:10:35:99:52:8a:f7:1a:82:65:eb:ec:04: 6e:62:84:c7:54:68:ab:86:bb:82:f7:7a:08:f1:23: b3:db:a0:ef:78:c9:c2:64:e1:ac:0f:95:02:ba:8b: 4d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:97:30:06:5E:12:75:A3:74:7D:43:42:7E:70:12:70:3F:C7:6B:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/48d069ba-5ef8-3f64-a653-d806fe8fd001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2/966830a4-0e6f-49a1-9823-af2ae92ac7f2.crl X509v3 Authority Key Identifier: keyid:DC:5F:4D:B6:AA:A1:18:41:1D:62:8B:AC:74:A8:80:61:BF:05:14:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/966830a4-0e6f-49a1-9823-af2ae92ac7f2.cer sbgp-ipAddrBlock: critical IPv4: 207.53.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:bd:d1:a9:05:00:6d:03:67:c6:bb:48:50:c7:5a:fd:ac:78: 61:d7:e2:b6:53:b0:e4:3b:38:a4:ab:bf:b8:6f:00:1a:c9:3d: 72:6e:45:91:f2:cb:79:93:f9:29:68:5e:93:5f:89:da:47:af: 19:e2:9d:f0:0c:0f:3f:0d:87:d2:12:d3:56:7b:3c:8a:59:a0: d8:86:b8:b8:e3:39:50:96:83:e0:45:aa:aa:fe:95:b3:8e:46: 8f:c1:df:b8:69:b4:1e:0a:1a:f1:c7:5a:c1:49:d1:a5:8f:02: 59:d3:3c:d6:bb:b1:b9:36:92:e2:2e:da:58:e5:3c:2b:c1:70: b4:09:ff:64:fb:ee:00:c8:7e:4b:85:77:92:9b:19:cf:43:a4: 9a:2c:1c:26:4f:a5:cb:ac:d3:ca:3b:34:68:8b:b4:01:44:05: 05:63:8b:3e:70:c5:4d:f7:8c:da:77:14:75:65:55:f0:af:09: a2:92:0b:99:7a:47:cd:37:8f:37:f1:62:e2:90:30:61:38:2d: 89:d4:18:cd:f1:24:e2:6b:ee:aa:5e:81:ce:fb:9d:f7:8f:f7: 72:96:a9:a0:9d:ba:10:58:b1:59:56:e1:ba:9f:82:05:ac:40: ee:85:6d:87:28:62:96:03:4d:5d:03:69:32:32:00:c9:66:ea: 57:d6:7c:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4iOkY2JDpI0cYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY2ODMwYTQtMGU2Zi00OWExLTk4MjMtYWYyYWU5MmFj N2YyMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk ODJkYWY4YjktYjhlOC00MjA5LTk4ZmQtNWZjYmViNTIzOWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbGLYA2oMISfWpVqQvyirSVMQKk2rb1tuKWD c/iUMnefClNl707Jf3M+PRNyq4BOBJt57N4MvFpTPu+lffO+31lCTFc96F+VZzff bfWBBOSvya7c7UzBpkGtQRdd7h6HFd4q3CGalIrQMg1BbaP+4C1H1fif3oq56bir 932szmbnv4/RodKQ1KLbsx2td4ys7goQlDbQXQjhQDpaBgYKo0TR9sLv0Jx2g7OM 3bHX/9NRLHS0cB1gjIbcHZcYliyCqmr6Zv7g0vWbq/fjlgQl48eKyo4QNZlSivca gmXr7ARuYoTHVGirhruC93oI8SOz26DveMnCZOGsD5UCuotNeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6XMAZeEnWjdH1DQn5wEnA/x2s6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NjY4 MzBhNC0wZTZmLTQ5YTEtOTgyMy1hZjJhZTkyYWM3ZjIvNDhkMDY5YmEtNWVmOC0z ZjY0LWE2NTMtZDgwNmZlOGZkMDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTY2ODMwYTQtMGU2Zi00OWExLTk4 MjMtYWYyYWU5MmFjN2YyLzk2NjgzMGE0LTBlNmYtNDlhMS05ODIzLWFmMmFlOTJh YzdmMi5jcmwwHwYDVR0jBBgwFoAU3F9NtqqhGEEdYousdKiAYb8FFEMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NjY4MzBhNC0wZTZmLTQ5YTEtOTgyMy1hZjJh ZTkyYWM3ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzzX8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABm90akFAG0DZ8a7SFDHWv2seGHX4rZTsOQ7OKSrv7hvABrJPXJuRZHy y3mT+SloXpNfidpHrxninfAMDz8Nh9IS01Z7PIpZoNiGuLjjOVCWg+BFqqr+lbOO Ro/B37hptB4KGvHHWsFJ0aWPAlnTPNa7sbk2kuIu2ljlPCvBcLQJ/2T77gDIfkuF d5KbGc9DpJosHCZPpcus08o7NGiLtAFEBQVjiz5wxU33jNp3FHVlVfCvCaKSC5l6 R803jzfxYuKQMGE4LYnUGM3xJOJr7qpegc77nfeP93KWqaCduhBYsVlW4bqfggWs QO6FbYcoYpYDTV0DaTIyAMlm6lfWfPo= -----END CERTIFICATE-----Generated at Mon Oct 20 13:45:28 2025 by rpki-client