$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/fc862717-a664-3367-88cf-5e0ecaaad117.roa File: fc862717-a664-3367-88cf-5e0ecaaad117.roa (raw, json) Hash identifier: eZbu6fef34ImkNKC1oLFrOqHVLlQT0FcQJAMyzo7x8E= Subject key identifier: 43:81:01:A5:A4:AD:B3:EC:0D:0C:AB:2C:69:A5:E5:E8:70:4F:23:80 Certificate issuer: /CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Certificate serial: 010D0C9F4328584B8EACC4919982C28EB67C4C00 Authority key identifier: F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/fc862717-a664-3367-88cf-5e0ecaaad117.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 46408 IP address blocks: 207.191.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:c4:91:99:82:c2:8e:b6:7c:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5df2e7f-8e83-432a-8c27-5546944dda4b Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=5887e8b1-7584-455b-a708-2af5374c1a5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ff:df:c2:3c:83:7d:1b:bc:1f:b3:03:75:1f: b0:43:c8:c1:4a:23:93:46:f9:e5:19:f7:d0:e2:59: 94:2e:30:10:d9:51:0b:a9:a2:79:b7:4b:08:f1:d5: f4:f5:b7:88:6a:4b:64:fa:91:13:10:aa:8f:60:d5: 62:b2:97:da:94:d2:9c:51:10:e6:ef:54:9b:ad:15: d6:99:f4:6e:01:a1:2c:02:37:3c:05:d5:4d:9f:f9: 3e:ab:4d:a7:34:86:88:1e:81:bb:29:d3:95:96:e5: f2:d5:10:c4:a3:87:f9:48:7c:a9:2c:37:0f:f4:bc: 7f:93:5b:76:f4:cb:38:e6:a0:83:ad:a4:d7:8a:e5: 5b:99:e9:62:51:c0:f9:5f:3e:1c:bb:4c:2b:bd:73: 20:ac:3e:ae:9a:62:91:9c:dc:86:3c:fa:cb:d0:73: 6f:16:bd:fc:f3:c6:21:f9:24:43:4a:ac:8d:ce:0c: 53:b3:60:ad:78:63:a0:ee:f9:d9:95:a3:3e:53:06: c0:ab:40:8c:31:e6:ea:16:1d:71:df:2f:fc:b9:20: 24:db:24:3e:c9:1a:e7:e3:8a:53:2b:0a:80:5f:e8: 58:d9:a9:46:b3:14:a5:aa:ec:46:6c:4d:f5:cc:02: 9a:0d:06:72:b6:16:e3:af:67:0e:49:0c:4b:80:34: a5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:81:01:A5:A4:AD:B3:EC:0D:0C:AB:2C:69:A5:E5:E8:70:4F:23:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/fc862717-a664-3367-88cf-5e0ecaaad117.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl X509v3 Authority Key Identifier: keyid:F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer sbgp-ipAddrBlock: critical IPv4: 207.191.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:b6:ab:df:2a:9a:d5:25:91:8e:2f:c9:ff:94:4f:a0:45:03: 10:ff:37:10:8c:8b:3a:50:de:90:32:27:87:94:4c:a7:c2:ce: 36:97:d7:20:47:da:1f:f4:24:c5:74:38:49:70:4f:79:3b:1f: 81:2f:b3:44:d4:a7:2c:cf:81:19:a0:7f:03:4d:70:0d:54:88: c3:20:66:c9:de:26:1b:f1:5e:b8:c8:5d:00:f8:e7:7c:c5:60: cf:8e:26:0b:ba:42:0a:6a:d8:5a:ab:b6:a9:9b:d9:ca:df:b6: 2a:0a:fd:34:4b:a0:eb:86:dd:74:34:9d:9c:bf:37:14:d5:54: ec:53:73:8c:c2:aa:58:19:4c:66:6d:19:af:64:e0:9e:5a:ca: 90:63:14:43:77:d6:ce:62:f6:18:e8:48:ca:70:fb:d9:84:f0: 5c:96:4a:8d:14:3b:31:b4:ca:c2:77:76:9a:a1:af:e8:a6:d6: a5:d4:2c:f2:27:31:d5:7d:a6:1b:70:94:ce:fd:cd:d4:a2:06: ab:fb:39:e5:7c:09:55:69:c6:70:e8:49:ff:c2:45:be:b0:7c: f5:06:a3:a0:90:b6:4e:55:d4:c6:cf:32:c8:96:75:ec:4f:37: 46:70:81:c8:0b:da:b8:cd:5e:c8:73:5b:3b:7b:f8:d6:dc:ad: a7:d6:4c:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrMSRmYLCjrZ8TAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkZjJlN2YtOGU4My00MzJhLThjMjctNTU0Njk0NGRk YTRiMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk NTg4N2U4YjEtNzU4NC00NTViLWE3MDgtMmFmNTM3NGMxYTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh//fwjyDfRu8H7MDdR+wQ8jBSiOTRvnlGffQ 4lmULjAQ2VELqaJ5t0sI8dX09beIaktk+pETEKqPYNVispfalNKcURDm71SbrRXW mfRuAaEsAjc8BdVNn/k+q02nNIaIHoG7KdOVluXy1RDEo4f5SHypLDcP9Lx/k1t2 9Ms45qCDraTXiuVbmeliUcD5Xz4cu0wrvXMgrD6ummKRnNyGPPrL0HNvFr3888Yh +SRDSqyNzgxTs2CteGOg7vnZlaM+UwbAq0CMMebqFh1x3y/8uSAk2yQ+yRrn44pT KwqAX+hY2alGsxSlquxGbE31zAKaDQZythbjr2cOSQxLgDSlVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOBAaWkrbPsDQyrLGml5ehwTyOAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRm MmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2OTQ0ZGRhNGIvZmM4NjI3MTctYTY2NC0z MzY3LTg4Y2YtNWUwZWNhYWFkMTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDVkZjJlN2YtOGU4My00MzJhLThj MjctNTU0Njk0NGRkYTRiL2Q1ZGYyZTdmLThlODMtNDMyYS04YzI3LTU1NDY5NDRk ZGE0Yi5jcmwwHwYDVR0jBBgwFoAU901L3g55e/8+XSHXuRqpy68UFwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kNWRmMmU3Zi04ZTgzLTQzMmEtOGMyNy01NTQ2 OTQ0ZGRhNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz7/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJC2q98qmtUlkY4vyf+UT6BFAxD/NxCMizpQ3pAyJ4eUTKfCzjaX1yBH 2h/0JMV0OElwT3k7H4Evs0TUpyzPgRmgfwNNcA1UiMMgZsneJhvxXrjIXQD453zF YM+OJgu6Qgpq2Fqrtqmb2crftioK/TRLoOuG3XQ0nZy/NxTVVOxTc4zCqlgZTGZt Ga9k4J5aypBjFEN31s5i9hjoSMpw+9mE8FyWSo0UOzG0ysJ3dpqhr+im1qXULPIn MdV9phtwlM79zdSiBqv7OeV8CVVpxnDoSf/CRb6wfPUGo6CQtk5V1MbPMsiWdexP N0ZwgcgL2rjNXshzWzt7+NbcrafWTLU= -----END CERTIFICATE-----Generated at Tue Oct 21 00:00:48 2025 by rpki-client