$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/591c3c16-29be-383d-a211-f4243526102e.roa File: 591c3c16-29be-383d-a211-f4243526102e.roa (raw, json) Hash identifier: j3OhAiM/znPByFKCmNWQmzMdAWNtN9cBzR8s85UVKmM= Subject key identifier: 5E:71:84:A1:DE:70:13:82:EE:0B:B8:04:8F:63:75:03:2A:69:24:89 Certificate issuer: /CN=9825dda6-0df7-4c35-af65-4bb69cf71053 Certificate serial: 010D0C9F4328584B84E76DECB644475C15F448C0 Authority key identifier: 0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/591c3c16-29be-383d-a211-f4243526102e.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16509 IP address blocks: 208.80.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:6d:ec:b6:44:47:5c:15:f4:48:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9825dda6-0df7-4c35-af65-4bb69cf71053 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=ba24c73d-47cd-482c-9d46-a0362c26ab72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e9:92:19:4c:a0:24:99:d7:91:6e:da:0d:bb: ab:5f:51:57:7f:13:8f:06:a6:7a:12:d3:41:84:09: 56:18:c6:d8:83:7d:5c:48:58:7e:83:a7:cb:9c:b2: 58:8f:0b:95:23:f7:60:2d:30:8e:67:fe:94:fe:fe: dd:a5:54:9b:76:98:d6:aa:3e:37:b6:be:02:ce:4e: a7:ec:73:c7:c8:48:6a:0a:24:a5:7c:42:47:3a:f4: e9:62:6d:74:71:4d:73:6c:4c:aa:6b:34:55:f4:b7: 90:7a:13:ee:da:a0:b1:04:16:f0:89:aa:ed:a7:b3: d0:6d:e0:ab:40:62:f5:bc:84:11:27:9f:3c:fa:45: ad:06:b3:af:5a:f0:42:b5:64:80:e3:e9:57:aa:13: 7f:d2:33:a6:00:45:c8:f4:ed:f5:23:2b:70:dd:74: ed:ec:30:4a:68:16:fa:ec:d8:41:81:0b:b5:94:59: 6c:2c:7a:8f:21:f0:08:b0:ff:c3:8f:11:d1:f7:43: 03:e5:ed:2c:bc:70:94:ae:23:f1:fb:15:a6:ef:cf: 71:ca:ca:f0:e6:8b:6c:85:20:54:54:97:ea:52:05: 62:ef:57:bc:35:63:a8:9f:0b:e8:8b:8c:f5:19:71: aa:af:dc:cb:66:22:f6:db:94:5e:26:00:ed:bc:60: 4c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:71:84:A1:DE:70:13:82:EE:0B:B8:04:8F:63:75:03:2A:69:24:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/591c3c16-29be-383d-a211-f4243526102e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl X509v3 Authority Key Identifier: keyid:0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer sbgp-ipAddrBlock: critical IPv4: 208.80.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:6c:12:d3:26:53:eb:25:b3:3a:31:9d:67:c1:c2:91:a5:ca: 26:49:78:1a:bd:60:ac:b3:13:8a:96:52:f0:ec:ab:8a:fe:12: cb:66:1e:06:a3:b6:c6:24:38:a7:da:b6:b5:47:15:df:34:28: 8e:50:21:29:1c:11:b1:d3:df:3d:f8:95:50:4c:8c:9a:3a:01: df:e7:ec:97:9f:99:57:4d:50:15:c9:4a:a0:d6:4d:80:fb:1f: e8:19:dc:13:51:a6:71:7d:31:5d:fe:ba:4b:5e:80:1d:3c:13: 2a:aa:ca:93:2d:90:9b:23:29:69:ff:16:86:8a:57:c9:d4:46: 4c:be:df:d3:c2:d7:72:a0:81:65:53:c5:b4:65:cf:55:33:ad: 4e:7d:f6:c4:e5:fa:33:ee:3a:d9:fa:df:55:e1:e2:ad:6b:f6: 97:4e:a4:e9:ae:44:58:81:94:0e:aa:8f:1b:6f:df:d9:05:2f: bc:9b:ce:5d:d0:4a:11:e9:4e:7a:67:b8:40:b4:e3:d4:ad:8e: 42:44:90:36:17:22:b3:86:db:01:2c:d7:73:83:6b:b6:7f:ca: 71:d8:b8:4f:9e:12:37:ca:72:98:a7:17:69:1a:1d:28:c5:48: 5c:81:2f:4e:c6:6a:39:60:72:3e:84:51:c8:cf:65:79:78:3b: 74:bf:24:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE523stkRHXBX0SMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgyNWRkYTYtMGRmNy00YzM1LWFmNjUtNGJiNjljZjcx MDUzMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk YmEyNGM3M2QtNDdjZC00ODJjLTlkNDYtYTAzNjJjMjZhYjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+mSGUygJJnXkW7aDburX1FXfxOPBqZ6EtNB hAlWGMbYg31cSFh+g6fLnLJYjwuVI/dgLTCOZ/6U/v7dpVSbdpjWqj43tr4Czk6n 7HPHyEhqCiSlfEJHOvTpYm10cU1zbEyqazRV9LeQehPu2qCxBBbwiartp7PQbeCr QGL1vIQRJ588+kWtBrOvWvBCtWSA4+lXqhN/0jOmAEXI9O31Iytw3XTt7DBKaBb6 7NhBgQu1lFlsLHqPIfAIsP/DjxHR90MD5e0svHCUriPx+xWm789xysrw5otshSBU VJfqUgVi71e8NWOonwvoi4z1GXGqr9zLZiL225ReJgDtvGBM1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5xhKHecBOC7gu4BI9jdQMqaSSJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ODI1 ZGRhNi0wZGY3LTRjMzUtYWY2NS00YmI2OWNmNzEwNTMvNTkxYzNjMTYtMjliZS0z ODNkLWEyMTEtZjQyNDM1MjYxMDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTgyNWRkYTYtMGRmNy00YzM1LWFm NjUtNGJiNjljZjcxMDUzLzk4MjVkZGE2LTBkZjctNGMzNS1hZjY1LTRiYjY5Y2Y3 MTA1My5jcmwwHwYDVR0jBBgwFoAUD1Z9CXLtC8kPPAwfMwEEOGva3FwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ODI1ZGRhNi0wZGY3LTRjMzUtYWY2NS00YmI2 OWNmNzEwNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0FDKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdsEtMmU+slszoxnWfBwpGlyiZJeBq9YKyzE4qWUvDsq4r+EstmHgaj tsYkOKfatrVHFd80KI5QISkcEbHT3z34lVBMjJo6Ad/n7JefmVdNUBXJSqDWTYD7 H+gZ3BNRpnF9MV3+uktegB08EyqqypMtkJsjKWn/FoaKV8nURky+39PC13KggWVT xbRlz1UzrU599sTl+jPuOtn631Xh4q1r9pdOpOmuRFiBlA6qjxtv39kFL7ybzl3Q ShHpTnpnuEC049StjkJEkDYXIrOG2wEs13ODa7Z/ynHYuE+eEjfKcpinF2kaHSjF SFyBL07Gajlgcj6EUcjPZXl4O3S/JC4= -----END CERTIFICATE-----Generated at Mon Oct 20 11:14:43 2025 by rpki-client