$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7af1a9d7-c226-4beb-8f1e-623878125f52/0b40f60e-30b5-3843-ad6a-53e0375d2413.roa File: 0b40f60e-30b5-3843-ad6a-53e0375d2413.roa (raw, json) Hash identifier: ReOEa4K/esJH3Mv+O8GQ3JFGwBwO3IFxXzcAusCPrdQ= Subject key identifier: 8B:C8:61:F6:13:95:B9:6B:8D:68:CF:BF:AB:62:F1:69:E7:97:E1:27 Certificate issuer: /CN=7af1a9d7-c226-4beb-8f1e-623878125f52 Certificate serial: 010D0C9F4328584B02936041C73CC64601CFB680 Authority key identifier: 8A:8D:A3:93:DC:37:54:A6:B8:9A:56:2B:7D:23:6D:F6:14:8B:A9:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7af1a9d7-c226-4beb-8f1e-623878125f52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7af1a9d7-c226-4beb-8f1e-623878125f52/0b40f60e-30b5-3843-ad6a-53e0375d2413.roa Signing time: Thu 28 Aug 2025 20:36:16 +0000 ROA not before: Thu 28 Aug 2025 20:36:16 +0000 ROA not after: Wed 26 Nov 2025 21:36:16 +0000 asID: 19106 IP address blocks: 143.207.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7af1a9d7-c226-4beb-8f1e-623878125f52/7af1a9d7-c226-4beb-8f1e-623878125f52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7af1a9d7-c226-4beb-8f1e-623878125f52/7af1a9d7-c226-4beb-8f1e-623878125f52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7af1a9d7-c226-4beb-8f1e-623878125f52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:02:93:60:41:c7:3c:c6:46:01:cf:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7af1a9d7-c226-4beb-8f1e-623878125f52 Validity Not Before: Aug 28 20:36:16 2025 GMT Not After : Nov 26 21:36:16 2025 GMT Subject: CN=878bd38e-72dc-49a9-9c8e-6cf3e8264807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:80:74:2b:e0:21:79:bf:8d:aa:b3:99:99:26: 66:9b:37:9c:f3:9e:07:04:9d:5b:41:be:be:84:db: 79:3e:e7:51:80:bb:d7:5a:74:ef:4b:50:e7:6b:5a: c5:ef:2a:64:39:0e:c3:a6:48:32:da:dd:ca:28:3c: eb:2b:36:4a:5d:18:f9:f3:3f:9c:0b:7e:e5:35:7a: 15:73:53:26:72:a6:2c:3a:9d:ef:43:19:e5:76:8c: b8:15:5d:2f:88:8a:2a:67:92:1c:7c:c9:20:cd:fc: 77:aa:e7:1c:86:2d:38:2f:60:23:5d:3f:90:18:44: eb:97:31:66:f4:bb:0f:91:5e:fa:20:43:91:8a:8b: 33:a7:33:01:f7:eb:b3:e7:6b:bd:96:cc:b7:8d:57: 33:37:61:77:f3:e8:93:20:65:ca:81:66:96:09:a6: 13:c6:e6:70:ae:cc:29:3c:c9:68:01:b5:a8:54:c8: c3:b9:d3:e7:e3:eb:ab:6a:7d:e1:f9:18:3b:30:bd: 61:06:cc:98:91:a4:78:d5:24:6a:c1:c8:49:38:71: 70:32:d8:a4:89:c1:26:a4:57:ab:30:52:ad:1c:4b: 49:03:b0:c9:46:ea:c4:b3:1d:bb:6e:6d:69:4c:72: 21:66:f5:61:82:90:eb:31:da:3e:29:49:9c:b6:53: a9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C8:61:F6:13:95:B9:6B:8D:68:CF:BF:AB:62:F1:69:E7:97:E1:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7af1a9d7-c226-4beb-8f1e-623878125f52/0b40f60e-30b5-3843-ad6a-53e0375d2413.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7af1a9d7-c226-4beb-8f1e-623878125f52/7af1a9d7-c226-4beb-8f1e-623878125f52.crl X509v3 Authority Key Identifier: keyid:8A:8D:A3:93:DC:37:54:A6:B8:9A:56:2B:7D:23:6D:F6:14:8B:A9:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7af1a9d7-c226-4beb-8f1e-623878125f52.cer sbgp-ipAddrBlock: critical IPv4: 143.207.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:bc:92:d7:8f:c1:96:5f:7c:d9:c1:5c:32:a3:12:ff:a5:6b: a1:e2:53:2b:64:cc:fd:c9:21:cc:c3:d5:0b:aa:35:3e:19:2d: e9:69:31:2b:64:c6:dc:ea:3a:a6:72:81:06:2e:1d:97:7c:ea: ba:10:cd:89:11:b4:74:7c:d3:3b:7d:3b:ab:7c:72:0d:73:38: b9:00:61:d4:66:4a:18:ef:ee:5b:06:a4:b5:cc:75:1c:63:fa: aa:1e:c9:10:fb:f2:67:66:4f:e8:5c:4d:8b:b7:fb:b2:07:10: 3e:15:58:0b:46:dc:74:c7:b7:2d:a7:4c:61:87:d1:60:dd:fa: ec:75:27:b1:fb:8b:32:30:b8:f6:39:9a:7d:25:a5:aa:5b:e7: 72:67:8d:51:71:82:cc:80:de:dd:41:37:27:2e:5b:34:9c:c7: ca:32:d1:de:0d:14:d6:17:14:66:ce:ba:7d:28:23:79:6e:a7: 6b:0b:d6:ae:f3:eb:a6:82:3f:a9:67:bf:30:a8:22:47:e4:6f: 79:3d:24:73:87:2c:87:75:52:b5:93:cb:04:51:61:af:de:78: 9f:ed:d4:b4:03:5c:a0:d1:b7:35:61:c4:3f:14:32:4f:90:ff: 6f:58:d3:20:40:7e:48:39:4e:2d:1e:44:90:88:56:00:c1:e2: 27:6e:fe:30 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEsCk2BBxzzGRgHPtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2FmMWE5ZDctYzIyNi00YmViLThmMWUtNjIzODc4MTI1 ZjUyMB4XDTI1MDgyODIwMzYxNloXDTI1MTEyNjIxMzYxNlowLzEtMCsGA1UEAxMk ODc4YmQzOGUtNzJkYy00OWE5LTljOGUtNmNmM2U4MjY0ODA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oB0K+Aheb+NqrOZmSZmmzec854HBJ1bQb6+ hNt5PudRgLvXWnTvS1Dna1rF7ypkOQ7Dpkgy2t3KKDzrKzZKXRj58z+cC37lNXoV c1MmcqYsOp3vQxnldoy4FV0viIoqZ5IcfMkgzfx3qucchi04L2AjXT+QGETrlzFm 9LsPkV76IEORioszpzMB9+uz52u9lsy3jVczN2F38+iTIGXKgWaWCaYTxuZwrswp PMloAbWoVMjDudPn4+uran3h+Rg7ML1hBsyYkaR41SRqwchJOHFwMtikicEmpFer MFKtHEtJA7DJRurEsx27bm1pTHIhZvVhgpDrMdo+KUmctlOp4wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIvIYfYTlblrjWjPv6ti8Wnnl+EnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83YWYx YTlkNy1jMjI2LTRiZWItOGYxZS02MjM4NzgxMjVmNTIvMGI0MGY2MGUtMzBiNS0z ODQzLWFkNmEtNTNlMDM3NWQyNDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvN2FmMWE5ZDctYzIyNi00YmViLThm MWUtNjIzODc4MTI1ZjUyLzdhZjFhOWQ3LWMyMjYtNGJlYi04ZjFlLTYyMzg3ODEy NWY1Mi5jcmwwHwYDVR0jBBgwFoAUio2jk9w3VKa4mlYrfSNt9hSLqWUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC83YWYxYTlkNy1jMjI2LTRiZWItOGYxZS02MjM4 NzgxMjVmNTIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAj88wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAHbyS14/Bll982cFcMqMS/6VroeJTK2TM/ckhzMPVC6o1Phkt6WkxK2TG 3Oo6pnKBBi4dl3zquhDNiRG0dHzTO307q3xyDXM4uQBh1GZKGO/uWwaktcx1HGP6 qh7JEPvyZ2ZP6FxNi7f7sgcQPhVYC0bcdMe3LadMYYfRYN367HUnsfuLMjC49jma fSWlqlvncmeNUXGCzIDe3UE3Jy5bNJzHyjLR3g0U1hcUZs66fSgjeW6nawvWrvPr poI/qWe/MKgiR+RveT0kc4csh3VStZPLBFFhr954n+3UtANcoNG3NWHEPxQyT5D/ b1jTIEB+SDlOLR5EkIhWAMHiJ27+MA== -----END CERTIFICATE-----Generated at Wed Oct 8 23:01:16 2025 by rpki-client