$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/b90f3189-2f92-330b-88a6-55af6118e67a.roa File: b90f3189-2f92-330b-88a6-55af6118e67a.roa (raw, json) Hash identifier: pI15yDUWiXvUQyTYw7aHc6Ro5XVoXUvgo3c3dAsvmSE= Subject key identifier: 2B:5B:F4:6A:E0:0F:F7:85:10:24:80:67:59:F1:42:09:16:41:45:A7 Certificate issuer: /CN=a9d449fa-f08e-4170-95fc-cd3217049f27 Certificate serial: 010D0C9F4328584B6A61ED6F98430078ED514D20 Authority key identifier: 12:FB:7D:7C:B7:41:01:23:16:58:6A:79:5A:13:90:EF:23:19:34:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/b90f3189-2f92-330b-88a6-55af6118e67a.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 19605 IP address blocks: 205.233.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:ed:6f:98:43:00:78:ed:51:4d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9d449fa-f08e-4170-95fc-cd3217049f27 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=cfb2e141-1d0c-4633-8900-348c96814b39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1f:c1:89:eb:76:23:90:5b:77:97:02:63:82: 4f:68:3c:7d:02:e7:d7:f2:d5:6f:77:23:82:07:fa: 1d:cd:f4:05:be:3c:bd:db:79:2a:10:45:7b:02:9d: 07:1b:f5:c0:66:ef:f5:98:ff:3b:75:eb:5b:df:dc: 72:e8:56:1c:e4:6f:82:7b:24:fb:6d:a6:1d:fe:74: e7:63:57:c6:3e:ea:25:b1:e9:e7:c8:81:9b:94:e1: 09:ba:51:f6:d1:3b:b2:da:8e:4f:4a:cd:4b:24:21: f5:ca:9f:86:a5:fa:93:11:26:12:ec:37:60:e4:9d: ed:14:d7:4a:87:ec:d7:bc:ad:69:b7:db:42:fe:b8: 8e:23:12:37:10:2d:fb:6c:2e:8f:63:34:d3:54:57: b2:25:6e:43:19:82:53:1a:14:6b:50:83:6d:e9:21: be:6c:92:09:9e:8e:35:d9:76:7d:b8:67:8c:a5:d9: cd:11:b1:c5:73:47:fa:d7:f5:2c:2f:cc:ba:bd:ea: 17:fb:88:b0:ea:3a:70:11:e1:86:bf:06:dd:56:b8: 07:14:0f:c3:9c:64:90:ae:f9:eb:fb:79:68:da:6c: bb:66:63:4f:cb:e2:3d:ca:b9:97:f2:d3:c7:04:d1: b8:ca:85:32:d7:6e:0a:f6:a0:08:64:04:80:ee:50: 29:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:5B:F4:6A:E0:0F:F7:85:10:24:80:67:59:F1:42:09:16:41:45:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/b90f3189-2f92-330b-88a6-55af6118e67a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.crl X509v3 Authority Key Identifier: keyid:12:FB:7D:7C:B7:41:01:23:16:58:6A:79:5A:13:90:EF:23:19:34:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer sbgp-ipAddrBlock: critical IPv4: 205.233.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:7f:16:ed:54:81:a6:c0:09:24:85:86:ae:16:75:b5:f6:1e: 7e:2c:b3:a5:4d:0b:58:ef:46:2d:21:90:0d:00:34:bd:84:fc: 7e:71:d5:f5:91:a9:f1:5c:fa:c4:31:1b:e5:43:e4:c3:75:36: 4b:e4:02:4d:3c:46:c4:1e:27:5b:21:6c:92:d7:12:05:f7:b9: 34:e2:42:e1:59:75:cb:e8:e5:da:5b:86:2a:97:71:6d:63:0c: 4f:93:10:b2:94:f5:e6:68:14:ad:44:fd:3e:d5:3d:49:79:b1: 8d:05:ed:cf:b7:e5:89:8c:e2:28:0e:88:b7:5c:e0:06:c5:cb: d0:7b:ae:a9:04:09:df:a2:19:71:21:7b:1e:f1:35:a0:65:3b: 39:c7:23:5d:a0:1c:61:a1:47:42:83:96:ca:a6:73:77:11:e3: ba:bf:3d:6c:07:6f:53:89:77:03:9a:f6:d6:29:79:21:4a:91: 91:65:86:4b:25:9b:cd:7b:94:70:5d:db:0c:32:3b:7c:86:4e: f5:00:0d:a8:f6:e3:70:1b:66:2b:e6:88:c4:4a:fa:56:2a:3c: eb:56:07:dc:4c:9f:09:af:25:19:e2:d9:be:8d:eb:a1:32:e8: 04:27:ed:21:e8:b1:a7:38:91:80:da:36:d0:15:10:36:e4:da: 36:20:61:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYe1vmEMAeO1RTSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTlkNDQ5ZmEtZjA4ZS00MTcwLTk1ZmMtY2QzMjE3MDQ5 ZjI3MB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk Y2ZiMmUxNDEtMWQwYy00NjMzLTg5MDAtMzQ4Yzk2ODE0YjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhh/Biet2I5Bbd5cCY4JPaDx9AufX8tVvdyOC B/odzfQFvjy923kqEEV7Ap0HG/XAZu/1mP87detb39xy6FYc5G+CeyT7baYd/nTn Y1fGPuolsennyIGblOEJulH20Tuy2o5PSs1LJCH1yp+GpfqTESYS7Ddg5J3tFNdK h+zXvK1pt9tC/riOIxI3EC37bC6PYzTTVFeyJW5DGYJTGhRrUINt6SG+bJIJno41 2XZ9uGeMpdnNEbHFc0f61/UsL8y6veoX+4iw6jpwEeGGvwbdVrgHFA/DnGSQrvnr +3lo2my7ZmNPy+I9yrmX8tPHBNG4yoUy124K9qAIZASA7lAp/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtb9GrgD/eFECSAZ1nxQgkWQUWnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hOWQ0 NDlmYS1mMDhlLTQxNzAtOTVmYy1jZDMyMTcwNDlmMjcvYjkwZjMxODktMmY5Mi0z MzBiLTg4YTYtNTVhZjYxMThlNjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTlkNDQ5ZmEtZjA4ZS00MTcwLTk1 ZmMtY2QzMjE3MDQ5ZjI3L2E5ZDQ0OWZhLWYwOGUtNDE3MC05NWZjLWNkMzIxNzA0 OWYyNy5jcmwwHwYDVR0jBBgwFoAUEvt9fLdBASMWWGp5WhOQ7yMZNI0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hOWQ0NDlmYS1mMDhlLTQxNzAtOTVmYy1jZDMy MTcwNDlmMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzeksMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKB/Fu1UgabACSSFhq4WdbX2Hn4ss6VNC1jvRi0hkA0ANL2E/H5x1fWR qfFc+sQxG+VD5MN1NkvkAk08RsQeJ1shbJLXEgX3uTTiQuFZdcvo5dpbhiqXcW1j DE+TELKU9eZoFK1E/T7VPUl5sY0F7c+35YmM4igOiLdc4AbFy9B7rqkECd+iGXEh ex7xNaBlOznHI12gHGGhR0KDlsqmc3cR47q/PWwHb1OJdwOa9tYpeSFKkZFlhksl m817lHBd2wwyO3yGTvUADaj243AbZivmiMRK+lYqPOtWB9xMnwmvJRni2b6N66Ey 6AQn7SHosac4kYDaNtAVEDbk2jYgYSI= -----END CERTIFICATE-----Generated at Fri Oct 10 22:02:06 2025 by rpki-client