$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/a9b294af-ddbd-365a-bb3f-75c215c307a2.roa File: a9b294af-ddbd-365a-bb3f-75c215c307a2.roa (raw, json) Hash identifier: cOTVomqCeu0P65qzBMmqhahIVA/VntwpT49BBow3zRA= Subject key identifier: 4D:EE:D9:5B:9B:2B:3B:99:14:8D:90:D9:F3:5A:DF:3C:9B:25:4F:26 Certificate issuer: /CN=c3a9f614-c620-42e4-acad-b328d6a97099 Certificate serial: 010D0C9F4328584B4D11E46BE688B7542AA49F00 Authority key identifier: CC:33:C4:9B:48:E5:B4:6F:57:2F:B3:5D:B4:0F:D0:5C:B1:D2:61:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/a9b294af-ddbd-365a-bb3f-75c215c307a2.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 14618 IP address blocks: 207.188.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/c3a9f614-c620-42e4-acad-b328d6a97099.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/c3a9f614-c620-42e4-acad-b328d6a97099.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:e4:6b:e6:88:b7:54:2a:a4:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3a9f614-c620-42e4-acad-b328d6a97099 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=b5a5ad4d-72bb-4b9e-9ddb-b89ff3c58ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f7:86:09:1b:e3:22:a1:1c:10:a1:31:e4:2e: f5:a7:56:5c:d1:d6:c4:65:69:66:e5:b9:8d:93:a1: e3:85:77:15:a4:c7:cd:eb:f8:c5:e0:aa:c4:84:84: 0c:cc:d0:e0:da:e3:25:ad:c8:8b:d9:83:ad:90:bc: 75:83:9b:d8:0d:70:f3:4b:b0:d6:78:86:77:a5:cd: e2:d3:17:91:03:05:0f:c2:1b:a8:a5:74:14:d4:64: 7b:5f:04:74:c3:01:3d:c9:39:00:bb:43:a1:36:81: e9:d2:35:79:af:b0:d0:5c:43:4a:59:30:b3:50:d8: 40:2c:16:bb:24:e4:67:f1:60:4d:61:54:33:8c:3e: 07:e5:9d:00:27:4b:31:54:cf:c9:0d:14:d4:62:87: a6:80:5c:4f:d6:9b:d8:9d:06:ee:f8:66:6f:73:56: 2c:fe:28:f3:e4:61:75:22:79:cf:30:2a:b7:3b:39: 7a:60:7b:d5:bb:b7:b2:9e:ac:16:e4:c8:3e:f3:f1: f2:bd:4b:ee:30:8a:f8:ba:17:fd:3b:a8:7c:08:b7: 53:57:ea:e0:d8:6f:7b:e6:48:db:38:1c:63:69:13: 2c:a7:3d:2a:9d:d4:9e:c9:be:cc:11:f5:15:a8:a8: d5:45:ed:f9:80:21:df:28:ed:2a:68:87:16:dd:3c: c8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:EE:D9:5B:9B:2B:3B:99:14:8D:90:D9:F3:5A:DF:3C:9B:25:4F:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/a9b294af-ddbd-365a-bb3f-75c215c307a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/c3a9f614-c620-42e4-acad-b328d6a97099.crl X509v3 Authority Key Identifier: keyid:CC:33:C4:9B:48:E5:B4:6F:57:2F:B3:5D:B4:0F:D0:5C:B1:D2:61:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099.cer sbgp-ipAddrBlock: critical IPv4: 207.188.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:a3:43:4c:49:93:17:b4:58:48:81:47:e8:6b:62:38:da:7f: e5:ee:79:de:e7:4e:af:b2:06:52:df:34:d4:fd:af:49:92:4d: a2:3e:2e:d2:65:2b:89:f3:8d:6a:c9:58:48:1a:4d:48:e0:0d: ee:92:86:ed:a7:15:62:33:9e:c1:f6:c1:a1:23:dc:b8:58:e1: 4e:88:58:0a:a3:11:de:16:39:05:74:3d:50:ca:68:83:9d:92: b7:8e:74:d1:7c:06:6b:a8:09:4e:99:fd:9b:41:d3:1c:ed:9a: cc:82:13:6e:fd:20:a4:83:9d:49:f9:85:2b:96:59:2d:70:23: 3e:76:24:f6:43:3d:18:c6:ab:64:71:c6:3a:16:99:96:69:8c: 2f:36:b2:7b:3a:85:9e:38:7f:7c:4b:82:7a:4a:d1:ae:3f:cd: b7:e6:3a:6d:28:43:fc:f7:36:0c:ed:99:37:e1:a9:92:ef:19: 16:4b:7a:1a:ac:f7:14:c2:e5:9a:2c:c0:59:c0:c0:e9:a4:5a: a4:da:78:22:f5:cd:34:f2:fa:a0:da:46:17:2f:34:6d:b0:04: 77:c0:9a:09:37:12:c3:ef:fb:06:7a:d8:6d:81:ff:fa:01:74: c6:b3:fd:67:6e:1a:fd:8e:a2:e7:e7:7f:58:f1:a4:10:bf:9e: 74:99:53:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEeRr5oi3VCqknwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNhOWY2MTQtYzYyMC00MmU0LWFjYWQtYjMyOGQ2YTk3 MDk5MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk YjVhNWFkNGQtNzJiYi00YjllLTlkZGItYjg5ZmYzYzU4ZWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgveGCRvjIqEcEKEx5C71p1Zc0dbEZWlm5bmN k6HjhXcVpMfN6/jF4KrEhIQMzNDg2uMlrciL2YOtkLx1g5vYDXDzS7DWeIZ3pc3i 0xeRAwUPwhuopXQU1GR7XwR0wwE9yTkAu0OhNoHp0jV5r7DQXENKWTCzUNhALBa7 JORn8WBNYVQzjD4H5Z0AJ0sxVM/JDRTUYoemgFxP1pvYnQbu+GZvc1Ys/ijz5GF1 InnPMCq3Ozl6YHvVu7eynqwW5Mg+8/HyvUvuMIr4uhf9O6h8CLdTV+rg2G975kjb OBxjaRMspz0qndSeyb7MEfUVqKjVRe35gCHfKO0qaIcW3TzIOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3u2VubKzuZFI2Q2fNa3zybJU8mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2E5 ZjYxNC1jNjIwLTQyZTQtYWNhZC1iMzI4ZDZhOTcwOTkvYTliMjk0YWYtZGRiZC0z NjVhLWJiM2YtNzVjMjE1YzMwN2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNhOWY2MTQtYzYyMC00MmU0LWFj YWQtYjMyOGQ2YTk3MDk5L2MzYTlmNjE0LWM2MjAtNDJlNC1hY2FkLWIzMjhkNmE5 NzA5OS5jcmwwHwYDVR0jBBgwFoAUzDPEm0jltG9XL7NdtA/QXLHSYUAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2E5ZjYxNC1jNjIwLTQyZTQtYWNhZC1iMzI4 ZDZhOTcwOTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz7wQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyjQ0xJkxe0WEiBR+hrYjjaf+Xued7nTq+yBlLfNNT9r0mSTaI+LtJl K4nzjWrJWEgaTUjgDe6Shu2nFWIznsH2waEj3LhY4U6IWAqjEd4WOQV0PVDKaIOd kreOdNF8BmuoCU6Z/ZtB0xztmsyCE279IKSDnUn5hSuWWS1wIz52JPZDPRjGq2Rx xjoWmZZpjC82sns6hZ44f3xLgnpK0a4/zbfmOm0oQ/z3NgztmTfhqZLvGRZLehqs 9xTC5ZoswFnAwOmkWqTaeCL1zTTy+qDaRhcvNG2wBHfAmgk3EsPv+wZ62G2B//oB dMaz/WduGv2Ooufnf1jxpBC/nnSZU6c= -----END CERTIFICATE-----Generated at Wed Oct 8 23:15:18 2025 by rpki-client