$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2ef62aaf-c8e0-3ca0-bbee-95227c5df1b7.roa File: 2ef62aaf-c8e0-3ca0-bbee-95227c5df1b7.roa (raw, json) Hash identifier: qirYBLcDwYhE90jUXOWLgPOK3pduM08aym7ysNkw+aM= Subject key identifier: 0F:51:72:16:07:C1:8F:D1:5A:65:C7:8E:D5:6E:E6:23:89:E6:48:14 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584B832B552E765A02EAD9C9C420 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2ef62aaf-c8e0-3ca0-bbee-95227c5df1b7.roa Signing time: Mon 13 Oct 2025 22:05:54 +0000 ROA not before: Mon 13 Oct 2025 22:05:54 +0000 ROA not after: Sun 11 Jan 2026 23:05:54 +0000 asID: 61461 IP address blocks: 206.0.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:83:2b:55:2e:76:5a:02:ea:d9:c9:c4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 13 22:05:54 2025 GMT Not After : Jan 11 23:05:54 2026 GMT Subject: CN=4a9c1f9b-4a27-4b9e-9129-e361cd0a62dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4c:e5:1b:3d:78:fe:b9:13:62:b1:c5:a4:e2: 48:50:df:1b:d6:98:bc:de:2d:17:11:b4:da:06:c5: 60:2d:d4:67:38:4d:b7:c4:0f:4a:80:f5:76:34:ea: 5a:c1:98:b9:cf:f4:f3:e1:69:22:86:2a:e4:98:11: a9:21:b8:3f:b3:e1:6e:62:73:34:63:34:2f:7b:85: 20:04:ed:53:82:fd:60:22:20:27:33:c5:b1:33:90: bf:9f:67:1b:0c:a3:16:ee:6c:91:18:c3:5a:38:96: ad:e7:a4:73:6d:43:46:8a:32:10:ef:4a:d4:d1:6c: e0:ff:de:51:ab:c4:a6:6f:26:21:31:59:03:1e:75: f1:86:36:ad:32:fd:af:e7:b2:c0:f5:52:db:dc:76: e3:6b:83:82:c2:c6:d4:73:09:72:bc:24:4b:93:85: 65:47:1c:f7:71:6e:67:40:ad:41:7d:9e:aa:95:44: 2a:dc:f3:77:ff:28:95:0c:01:08:74:02:07:34:a2: f0:47:6d:3c:a7:bb:a0:d7:ce:fb:93:84:4a:5d:96: 22:a6:0f:f2:ce:42:cd:c6:ea:8d:46:56:ea:8e:8b: 21:30:dc:da:18:fa:02:05:b3:02:8d:12:54:3c:9b: c2:77:c4:8a:d9:43:6f:96:88:c4:0f:97:46:c2:98: bc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:51:72:16:07:C1:8F:D1:5A:65:C7:8E:D5:6E:E6:23:89:E6:48:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2ef62aaf-c8e0-3ca0-bbee-95227c5df1b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 206.0.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:b6:eb:a5:a6:4c:d1:ce:e6:50:7a:65:3b:bf:3c:b1:15:c2: 9b:28:e5:80:bd:42:79:8a:9c:73:46:4f:a6:5f:97:bd:f6:08: c2:99:d8:36:8f:81:92:57:d2:55:68:09:da:72:9e:9d:24:4c: 61:b8:59:38:b8:41:4d:1a:56:19:22:51:7e:94:25:39:49:1e: 8e:99:de:30:1c:ef:12:89:a6:42:31:ee:7d:7d:8c:20:33:bf: c5:91:05:8c:aa:4c:8e:41:83:45:3c:f9:41:c7:12:d1:39:a5: db:b0:b6:81:13:c3:4a:fb:9e:12:e0:83:3b:ef:7b:d1:dc:1a: f6:91:56:50:a9:5d:ca:6d:9e:54:c7:1e:df:78:26:97:46:d0: 0c:67:fa:13:6f:14:f5:81:43:b3:01:a3:00:cd:0f:a6:d0:d9: ba:f8:3a:14:24:da:b4:33:e2:90:62:43:7c:e4:d4:1b:47:c7: 4b:5d:bc:3f:db:df:04:1f:f9:66:af:79:62:f6:7a:0c:07:e4: ee:83:be:e3:c6:44:d4:23:ab:8d:a5:77:71:56:aa:c7:5c:a2: 23:71:1c:b6:fd:a7:ec:a3:1a:d4:1d:a4:51:69:67:6d:b9:86: 61:ec:58:20:cb:9c:dd:23:03:e8:ed:0b:1a:9c:24:d9:44:69: de:a4:29:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuDK1UudloC6tnJxCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAxMzIyMDU1NFoXDTI2MDExMTIzMDU1NFowLzEtMCsGA1UEAxMk NGE5YzFmOWItNGEyNy00YjllLTkxMjktZTM2MWNkMGE2MmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEzlGz14/rkTYrHFpOJIUN8b1pi83i0XEbTa BsVgLdRnOE23xA9KgPV2NOpawZi5z/Tz4WkihirkmBGpIbg/s+FuYnM0YzQve4Ug BO1Tgv1gIiAnM8WxM5C/n2cbDKMW7myRGMNaOJat56RzbUNGijIQ70rU0Wzg/95R q8SmbyYhMVkDHnXxhjatMv2v57LA9VLb3Hbja4OCwsbUcwlyvCRLk4VlRxz3cW5n QK1BfZ6qlUQq3PN3/yiVDAEIdAIHNKLwR208p7ug1877k4RKXZYipg/yzkLNxuqN RlbqjoshMNzaGPoCBbMCjRJUPJvCd8SK2UNvlojED5dGwpi8swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9RchYHwY/RWmXHjtVu5iOJ5kgUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMmVmNjJhYWYtYzhlMC0z Y2EwLWJiZWUtOTUyMjdjNWRmMWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzgDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIW266WmTNHO5lB6ZTu/PLEVwpso5YC9QnmKnHNGT6Zfl732CMKZ2DaP gZJX0lVoCdpynp0kTGG4WTi4QU0aVhkiUX6UJTlJHo6Z3jAc7xKJpkIx7n19jCAz v8WRBYyqTI5Bg0U8+UHHEtE5pduwtoETw0r7nhLggzvve9HcGvaRVlCpXcptnlTH Ht94JpdG0Axn+hNvFPWBQ7MBowDND6bQ2br4OhQk2rQz4pBiQ3zk1BtHx0tdvD/b 3wQf+WaveWL2egwH5O6DvuPGRNQjq42ld3FWqsdcoiNxHLb9p+yjGtQdpFFpZ225 hmHsWCDLnN0jA+jtCxqcJNlEad6kKbs= -----END CERTIFICATE-----Generated at Sat Nov 1 20:10:01 2025 by rpki-client