$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/131cc1ca-a2b9-308a-bc43-20f459206e9d.roa File: 131cc1ca-a2b9-308a-bc43-20f459206e9d.roa (raw, json) Hash identifier: TRpmz8MOK7AIX2bT4Jx4f+8h5jT64NIHi1yT/2UEctI= Subject key identifier: B1:24:70:55:EA:EB:48:A8:DD:45:FC:DA:A8:1B:9B:57:37:71:6D:39 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584B6FF74B63355AFEF27D519780 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/131cc1ca-a2b9-308a-bc43-20f459206e9d.roa Signing time: Tue 07 Oct 2025 01:00:29 +0000 ROA not before: Tue 07 Oct 2025 01:00:29 +0000 ROA not after: Mon 05 Jan 2026 02:00:29 +0000 asID: 14618 IP address blocks: 207.202.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:f7:4b:63:35:5a:fe:f2:7d:51:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Oct 7 01:00:29 2025 GMT Not After : Jan 5 02:00:29 2026 GMT Subject: CN=1fb15db7-72ae-4ab5-ae98-13f09e3f46a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:33:23:36:42:84:9c:ee:3c:25:97:b8:68:ac: 01:ff:2e:35:b0:08:be:a7:46:5e:1c:20:9f:37:a1: 46:c2:03:79:e5:df:6c:f7:6a:37:83:02:c7:16:b3: 99:4f:f4:cc:7b:a4:65:5a:9f:14:09:7f:4a:db:a2: c3:1a:00:d5:05:8e:98:6a:2b:fd:57:71:22:d8:9e: 92:b3:81:b7:77:de:e1:47:03:3e:8b:79:8a:97:c3: 00:b4:f6:eb:d6:d5:11:43:9d:a7:fb:1b:e4:22:29: 78:39:e1:d9:2b:7b:3f:89:9f:18:b6:db:ca:ef:08: 40:e5:25:9c:2b:f1:ce:49:7d:b7:ab:13:d6:12:a8: 99:82:88:6e:65:31:05:3d:87:ad:f4:e8:59:95:14: 5e:8b:bb:5a:8d:7a:da:ed:4e:6d:62:a9:d5:61:db: a2:87:c4:bb:94:6a:cc:29:39:87:10:bd:bd:1c:45: b0:4b:26:fe:8b:e5:a3:6f:36:1a:a6:5e:c7:f0:93: 2d:2d:6c:14:bf:00:cd:ca:7a:5f:38:11:43:af:99: 10:84:77:95:f4:f3:56:55:9a:ab:21:fe:0c:9a:41: c5:d0:0e:3e:ab:a8:db:33:97:c5:d1:d7:2a:c5:fd: 38:67:e0:e4:cc:42:b0:d8:ee:bd:a2:b5:27:c9:6f: fc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:24:70:55:EA:EB:48:A8:DD:45:FC:DA:A8:1B:9B:57:37:71:6D:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/131cc1ca-a2b9-308a-bc43-20f459206e9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:f2:2f:8d:c9:62:12:ce:d1:1c:98:31:2b:4c:28:6d:12:c3: cf:ff:49:77:2f:d3:6f:e3:5c:77:95:93:20:4b:aa:23:8e:4c: d7:7c:96:f8:cb:c1:1d:df:ed:ba:b7:09:5b:79:83:58:b7:ab: ca:75:86:4f:d7:b5:36:6f:75:88:ea:e9:37:2f:f4:36:5d:b8: c0:da:49:54:37:2a:fd:fc:84:7a:96:03:d5:18:b1:f6:94:25: fd:b0:de:2e:06:95:9a:3b:be:90:00:6c:93:7f:aa:e3:5b:b2: 4d:c1:70:1c:51:90:31:f8:3e:7f:06:4e:45:d9:4d:e4:cd:a0: de:16:98:1a:2f:a4:e5:27:20:e6:b2:80:58:57:4e:07:79:60: ed:2f:ce:f5:98:73:72:96:c4:79:f4:c6:7a:0e:fb:38:80:7a: a8:08:c4:ff:4d:e9:74:44:66:a4:f3:44:91:3b:35:9c:35:12: 8b:33:31:0c:1f:14:71:cc:d5:bb:c7:2d:07:90:3a:54:cc:16: 3c:c9:f6:26:55:b5:cb:9c:5b:89:57:8d:f0:b4:a6:8d:43:b9: 6b:fb:e0:35:32:6c:aa:51:23:2f:43:7f:21:12:61:16:32:04: 15:75:fd:97:2a:eb:90:36:8d:47:9a:b8:2e:8f:b8:5a:2d:21: 28:d7:28:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtv90tjNVr+8n1Rl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MTAwNzAxMDAyOVoXDTI2MDEwNTAyMDAyOVowLzEtMCsGA1UEAxMk MWZiMTVkYjctNzJhZS00YWI1LWFlOTgtMTNmMDllM2Y0NmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTMjNkKEnO48JZe4aKwB/y41sAi+p0ZeHCCf N6FGwgN55d9s92o3gwLHFrOZT/TMe6RlWp8UCX9K26LDGgDVBY6Yaiv9V3Ei2J6S s4G3d97hRwM+i3mKl8MAtPbr1tURQ52n+xvkIil4OeHZK3s/iZ8YttvK7whA5SWc K/HOSX23qxPWEqiZgohuZTEFPYet9OhZlRRei7tajXra7U5tYqnVYduih8S7lGrM KTmHEL29HEWwSyb+i+WjbzYapl7H8JMtLWwUvwDNynpfOBFDr5kQhHeV9PNWVZqr If4MmkHF0A4+q6jbM5fF0dcqxf04Z+DkzEKw2O69orUnyW/8yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEkcFXq60io3UX82qgbm1c3cW05MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvMTMxY2MxY2EtYTJiOS0z MDhhLWJjNDMtMjBmNDU5MjA2ZTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8oWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHyL43JYhLO0RyYMStMKG0Sw8//SXcv02/jXHeVkyBLqiOOTNd8lvjL wR3f7bq3CVt5g1i3q8p1hk/XtTZvdYjq6Tcv9DZduMDaSVQ3Kv38hHqWA9UYsfaU Jf2w3i4GlZo7vpAAbJN/quNbsk3BcBxRkDH4Pn8GTkXZTeTNoN4WmBovpOUnIOay gFhXTgd5YO0vzvWYc3KWxHn0xnoO+ziAeqgIxP9N6XREZqTzRJE7NZw1EoszMQwf FHHM1bvHLQeQOlTMFjzJ9iZVtcucW4lXjfC0po1DuWv74DUybKpRIy9DfyESYRYy BBV1/Zcq65A2jUeauC6PuFotISjXKNI= -----END CERTIFICATE-----Generated at Wed Oct 8 21:22:44 2025 by rpki-client