$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/65a8e938-ed34-3296-90e4-cc66fbe2f351.roa File: 65a8e938-ed34-3296-90e4-cc66fbe2f351.roa (raw, json) Hash identifier: gapkLRYI6jgsfnJEZ6DOi325BnbV0VBf4aT8kWPusJg= Subject key identifier: 51:27:5E:8F:65:13:14:47:29:E5:82:A6:39:72:27:1B:00:28:CE:EA Certificate issuer: /CN=c739b1fc-db89-423c-9437-5e3b11048882 Certificate serial: 010D0C9F4328584B5B074B4C10B5852A9409FD40 Authority key identifier: DC:21:25:D0:49:8C:CA:F7:CC:E2:D0:4E:72:30:23:2E:C8:03:AF:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/65a8e938-ed34-3296-90e4-cc66fbe2f351.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 40080 IP address blocks: 205.207.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/c739b1fc-db89-423c-9437-5e3b11048882.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/c739b1fc-db89-423c-9437-5e3b11048882.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:4b:4c:10:b5:85:2a:94:09:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c739b1fc-db89-423c-9437-5e3b11048882 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=0c59db34-76d4-443d-80c1-488c4e8f4567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:08:99:a9:08:07:d7:bc:aa:0c:3d:0b:88:24: 58:15:e3:b7:41:89:e8:2f:a1:15:9b:c2:fb:04:2f: 55:f7:b7:8e:08:aa:f7:fd:98:38:f9:82:5b:cc:a4: 56:1f:e9:2f:16:39:2a:69:09:26:da:38:c8:96:76: 3b:3f:b3:c5:fb:aa:98:28:fb:52:87:64:92:84:45: db:cf:62:de:8a:90:fb:2a:9c:0c:ba:be:b9:76:fc: f2:2e:7e:32:d7:52:12:35:9a:f1:bd:f8:55:1c:45: 75:26:a1:ed:c2:1f:ec:34:24:a3:5a:8f:25:43:fc: 51:9f:49:8a:99:df:aa:93:4e:e2:b6:8f:b3:68:d9: 7a:38:86:c2:9d:75:95:9a:a6:5a:d9:5a:5e:38:09: 08:f8:0a:63:d8:b2:90:7e:36:fe:47:b1:09:d8:72: cd:21:c2:3f:4a:f7:09:94:79:f9:e5:f6:c0:20:3d: 68:21:8d:a4:50:c6:8f:a8:ea:f1:69:f9:ab:83:72: d2:4f:1c:ff:0e:d0:9c:16:82:50:b3:98:41:de:f0: 62:cb:10:2d:5d:98:a7:25:df:ef:49:2a:1c:76:5d: a7:b3:08:77:a4:4f:dd:f0:f4:0c:98:23:b8:07:23: a6:2d:b8:2e:25:a4:41:b9:9e:6d:ef:69:5e:52:17: 0c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:27:5E:8F:65:13:14:47:29:E5:82:A6:39:72:27:1B:00:28:CE:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/65a8e938-ed34-3296-90e4-cc66fbe2f351.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882/c739b1fc-db89-423c-9437-5e3b11048882.crl X509v3 Authority Key Identifier: keyid:DC:21:25:D0:49:8C:CA:F7:CC:E2:D0:4E:72:30:23:2E:C8:03:AF:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c739b1fc-db89-423c-9437-5e3b11048882.cer sbgp-ipAddrBlock: critical IPv4: 205.207.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:87:1d:a0:a1:e3:89:82:c6:09:6a:e1:40:03:15:3e:08:07: 6a:f5:88:f1:6b:f1:41:c7:c7:7b:b7:ca:9a:7d:57:bb:8a:01: 71:53:1b:44:9c:5c:67:0d:f1:69:54:49:61:5b:06:60:56:ee: 0e:a9:41:08:fc:d9:67:8f:fc:7c:0b:b7:7d:83:68:5a:fc:b8: a7:f6:10:2a:82:c4:63:24:01:9c:9a:6d:57:79:58:38:30:66: 8e:ec:f7:dd:9f:2d:35:e7:d3:44:d4:d7:8e:87:d8:d4:d4:9c: 14:2c:cd:e0:18:2d:92:a9:08:90:19:23:93:b5:98:65:f9:96: 2f:24:3b:da:b7:f4:22:8f:bb:bd:8d:3d:ec:c8:17:3f:7c:a3: a0:03:bb:1d:cd:0c:ef:82:80:ec:bf:a4:e3:40:eb:ca:49:67: 79:76:b1:43:15:24:ca:8d:b0:60:10:4d:19:6f:af:cb:13:ec: d1:c5:8b:98:ef:5c:7d:87:3e:db:1d:83:b3:c9:13:e3:30:28: 15:a0:1c:27:59:e3:35:ce:bd:41:2d:e2:47:f1:01:c5:d0:b1: 31:39:e1:7a:ae:93:46:d5:98:ec:0a:8e:a8:64:56:bf:54:51: d9:18:85:87:6c:5f:83:38:7c:c8:17:e8:44:74:29:68:f3:d7: 9f:32:2c:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0tMELWFKpQJ/UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzczOWIxZmMtZGI4OS00MjNjLTk0MzctNWUzYjExMDQ4 ODgyMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk MGM1OWRiMzQtNzZkNC00NDNkLTgwYzEtNDg4YzRlOGY0NTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQiZqQgH17yqDD0LiCRYFeO3QYnoL6EVm8L7 BC9V97eOCKr3/Zg4+YJbzKRWH+kvFjkqaQkm2jjIlnY7P7PF+6qYKPtSh2SShEXb z2LeipD7KpwMur65dvzyLn4y11ISNZrxvfhVHEV1JqHtwh/sNCSjWo8lQ/xRn0mK md+qk07ito+zaNl6OIbCnXWVmqZa2VpeOAkI+Apj2LKQfjb+R7EJ2HLNIcI/SvcJ lHn55fbAID1oIY2kUMaPqOrxafmrg3LSTxz/DtCcFoJQs5hB3vBiyxAtXZinJd/v SSocdl2nswh3pE/d8PQMmCO4ByOmLbguJaRBuZ5t72leUhcMBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEnXo9lExRHKeWCpjlyJxsAKM7qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jNzM5 YjFmYy1kYjg5LTQyM2MtOTQzNy01ZTNiMTEwNDg4ODIvNjVhOGU5MzgtZWQzNC0z Mjk2LTkwZTQtY2M2NmZiZTJmMzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzczOWIxZmMtZGI4OS00MjNjLTk0 MzctNWUzYjExMDQ4ODgyL2M3MzliMWZjLWRiODktNDIzYy05NDM3LTVlM2IxMTA0 ODg4Mi5jcmwwHwYDVR0jBBgwFoAU3CEl0EmMyvfM4tBOcjAjLsgDr04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jNzM5YjFmYy1kYjg5LTQyM2MtOTQzNy01ZTNi MTEwNDg4ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzc8cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECHHaCh44mCxglq4UADFT4IB2r1iPFr8UHHx3u3ypp9V7uKAXFTG0Sc XGcN8WlUSWFbBmBW7g6pQQj82WeP/HwLt32DaFr8uKf2ECqCxGMkAZyabVd5WDgw Zo7s992fLTXn00TU146H2NTUnBQszeAYLZKpCJAZI5O1mGX5li8kO9q39CKPu72N PezIFz98o6ADux3NDO+CgOy/pONA68pJZ3l2sUMVJMqNsGAQTRlvr8sT7NHFi5jv XH2HPtsdg7PJE+MwKBWgHCdZ4zXOvUEt4kfxAcXQsTE54Xquk0bVmOwKjqhkVr9U UdkYhYdsX4M4fMgX6ER0KWjz158yLMg= -----END CERTIFICATE-----Generated at Sat Oct 11 19:03:49 2025 by rpki-client