$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/5803a2c4-7c55-35f9-9a13-0e58a51ba6e4.roa File: 5803a2c4-7c55-35f9-9a13-0e58a51ba6e4.roa (raw, json) Hash identifier: hDRziR8zfrYdEb5g0MhPAItxuVJktHt/+IRHzv8EsEs= Subject key identifier: DA:17:10:CD:AB:29:5B:66:E8:1B:B4:B6:E7:E1:52:00:2C:FD:DE:82 Certificate issuer: /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Certificate serial: 010D0C9F4328584B5B07486455B4158C5DC6DC00 Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/5803a2c4-7c55-35f9-9a13-0e58a51ba6e4.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 7029 IP address blocks: 209.250.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:48:64:55:b4:15:8c:5d:c6:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=5a37ce1c-aae3-41be-a752-bf7b7c23accf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:67:9c:0c:59:b4:b4:9c:48:dc:fb:b7:b6:01: 65:03:19:88:b1:d5:0d:37:7f:99:8c:4f:57:57:5b: fe:09:8c:cc:4f:57:49:2f:be:d5:9e:17:4a:1e:6e: 1a:28:49:30:b5:97:22:e5:67:c5:71:f2:0c:ed:81: 28:47:d1:fe:13:90:73:7b:22:5d:b1:82:4e:d0:2b: ab:36:3a:34:45:ab:8e:9d:d9:96:e5:66:c8:c5:53: d9:c3:5d:33:66:ed:6a:6a:4c:bc:be:22:5a:39:7a: 19:39:12:fd:0d:09:68:ce:e0:35:c8:00:29:5f:b9: 33:17:14:7c:c8:2d:41:6e:b5:2a:33:07:e3:99:d2: 45:a9:37:55:fb:4c:4b:1d:94:b9:c0:49:23:35:61: f3:50:ec:b3:82:af:88:74:40:3f:b4:2b:b3:e6:02: 99:26:88:8a:47:f4:9d:53:91:d8:a4:5e:ce:13:ce: cc:2a:f7:80:cd:36:29:44:85:d8:f8:47:19:95:4a: 34:39:48:52:71:d2:c3:5a:d2:3c:d3:80:24:55:d9: 93:96:37:c6:92:ef:6a:51:ef:1a:c5:7f:01:6b:60: 3f:14:3c:f5:d5:1e:6b:61:b8:01:96:76:8d:23:a9: b0:6d:20:40:0c:bc:3a:50:4b:7d:ef:7f:34:e2:ed: 93:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:17:10:CD:AB:29:5B:66:E8:1B:B4:B6:E7:E1:52:00:2C:FD:DE:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/5803a2c4-7c55-35f9-9a13-0e58a51ba6e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl X509v3 Authority Key Identifier: keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer sbgp-ipAddrBlock: critical IPv4: 209.250.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:f1:b5:10:cf:fe:ee:ba:1a:e6:1d:8e:d8:21:e9:71:4b:e8: 3a:a8:26:c4:f1:75:39:13:38:61:0a:d2:f0:12:89:18:d2:69: 7f:ba:3a:e4:06:4d:5b:6a:5b:f8:60:3c:2c:d6:89:54:0c:24: 47:e6:6f:2b:67:77:46:e7:03:6d:8c:5d:66:bb:d0:50:90:08: be:36:54:45:91:be:bf:40:e9:22:87:f5:22:da:f7:d6:b1:05: 85:ab:ff:1f:ac:14:e3:03:f3:ce:4d:21:dc:a4:d5:12:b3:71: 46:da:7f:26:8a:0a:e4:21:e2:66:fe:89:23:e1:df:fa:89:04: 3d:92:8c:eb:cc:c3:5c:05:8d:9f:f2:22:f1:d0:ec:6e:40:2d: 35:d8:23:d3:1c:94:4f:31:b9:d2:08:74:f3:b0:52:f3:7e:07: c9:a1:9b:a9:18:79:1b:e8:d6:68:9d:f2:59:60:83:e2:a8:18: 2f:2a:5a:75:d2:d8:67:84:49:d7:17:61:a6:66:ad:7f:fa:6c: 31:fa:0d:ee:a6:3a:4b:b1:5c:b4:5a:8e:fd:96:89:18:86:0b: 6f:bf:69:64:2a:35:7a:ce:7d:85:f7:6d:38:fc:99:98:f0:eb: bb:b0:44:08:de:d6:b7:98:fb:99:70:fd:d0:13:52:d9:57:c2: c1:a5:06:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0hkVbQVjF3G3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk2YjZjNjUtMTFiYi00MDVlLWEzNGEtYjcxNmZjZGM3 ZGQ0MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk NWEzN2NlMWMtYWFlMy00MWJlLWE3NTItYmY3YjdjMjNhY2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2ecDFm0tJxI3Pu3tgFlAxmIsdUNN3+ZjE9X V1v+CYzMT1dJL77VnhdKHm4aKEkwtZci5WfFcfIM7YEoR9H+E5BzeyJdsYJO0Cur Njo0RauOndmW5WbIxVPZw10zZu1qaky8viJaOXoZORL9DQlozuA1yAApX7kzFxR8 yC1BbrUqMwfjmdJFqTdV+0xLHZS5wEkjNWHzUOyzgq+IdEA/tCuz5gKZJoiKR/Sd U5HYpF7OE87MKveAzTYpRIXY+EcZlUo0OUhScdLDWtI804AkVdmTljfGku9qUe8a xX8Ba2A/FDz11R5rYbgBlnaNI6mwbSBADLw6UEt973804u2T9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNoXEM2rKVtm6Bu0tufhUgAs/d6CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZi NmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2ZmNkYzdkZDQvNTgwM2EyYzQtN2M1NS0z NWY5LTlhMTMtMGU1OGE1MWJhNmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjk2YjZjNjUtMTFiYi00MDVlLWEz NGEtYjcxNmZjZGM3ZGQ0L2Y5NmI2YzY1LTExYmItNDA1ZS1hMzRhLWI3MTZmY2Rj N2RkNC5jcmwwHwYDVR0jBBgwFoAUXA5zSiCBvLBmexmGdhkHGO6ne+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZiNmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2 ZmNkYzdkZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0foLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7xtRDP/u66GuYdjtgh6XFL6DqoJsTxdTkTOGEK0vASiRjSaX+6OuQG TVtqW/hgPCzWiVQMJEfmbytnd0bnA22MXWa70FCQCL42VEWRvr9A6SKH9SLa99ax BYWr/x+sFOMD885NIdyk1RKzcUbafyaKCuQh4mb+iSPh3/qJBD2SjOvMw1wFjZ/y IvHQ7G5ALTXYI9MclE8xudIIdPOwUvN+B8mhm6kYeRvo1mid8llgg+KoGC8qWnXS 2GeESdcXYaZmrX/6bDH6De6mOkuxXLRajv2WiRiGC2+/aWQqNXrOfYX3bTj8mZjw 67uwRAje1reY+5lw/dATUtlXwsGlBiI= -----END CERTIFICATE-----Generated at Thu Oct 9 06:12:19 2025 by rpki-client