$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/28f971b7-05b5-3e55-aa1a-eba5c026a515.roa File: 28f971b7-05b5-3e55-aa1a-eba5c026a515.roa (raw, json) Hash identifier: 4EcRlKyLxk1oZUHdn7znelb9tgc/pwqA5SosWvENJFg= Subject key identifier: 7F:82:7E:8A:16:79:A8:17:53:EC:F7:03:CE:87:E9:6E:C7:82:68:0F Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D07A3CC9A08C77EF4A600 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/28f971b7-05b5-3e55-aa1a-eba5c026a515.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 53813 IP address blocks: 209.55.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:07:a3:cc:9a:08:c7:7e:f4:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=ea8558e1-660f-4d6c-861d-32f5cf1d7cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:93:9d:14:f0:5e:d8:17:5b:37:42:95:75:bb: 7d:e2:bc:7e:bd:31:75:f1:56:12:8e:c6:01:00:80: 1c:55:6b:b8:d8:be:1b:54:ba:67:08:e6:0d:3d:9d: cd:e4:65:f0:a0:c0:e8:aa:04:80:df:ab:27:57:99: c2:5c:95:4a:8a:5e:ff:a3:98:47:8b:fb:5b:72:2f: 1b:27:c0:06:38:17:f3:20:d5:38:03:b7:f2:ba:21: 52:64:43:70:59:47:20:b0:70:94:c5:48:58:49:60: 4a:11:4c:d1:02:b4:47:61:9b:3f:b5:ad:d7:27:ca: ef:c6:78:b5:59:49:34:7d:d5:52:79:b9:b3:a8:87: 40:36:1c:61:2a:73:47:f5:16:e3:00:d2:c1:35:fe: 28:32:2d:3f:c3:a5:c2:fc:0e:43:3f:16:96:db:1c: 7d:de:42:b6:57:ac:e5:49:93:ee:45:10:dd:74:18: be:d3:19:df:f9:61:33:7b:9b:1d:15:6b:15:95:29: 62:02:c2:8a:f1:de:2e:4a:98:d8:e4:9b:a5:95:d2: a3:95:a3:fe:a0:8f:2c:fd:2b:47:54:67:61:01:54: a4:ef:48:47:27:60:28:c1:0f:3c:77:d5:ce:62:38: 63:79:a7:fe:69:57:41:de:6f:aa:a9:75:a6:b4:aa: 22:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:82:7E:8A:16:79:A8:17:53:EC:F7:03:CE:87:E9:6E:C7:82:68:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/28f971b7-05b5-3e55-aa1a-eba5c026a515.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:df:97:74:89:fb:18:31:40:ce:6e:33:ac:e6:73:ea:47:a7: 21:dc:32:f4:85:0c:55:1b:c3:ed:87:f2:4c:ec:ba:72:72:93: 65:65:bc:a8:e8:0e:55:67:a9:d6:f4:0d:de:72:3f:9a:23:d0: 3c:9d:c6:cb:c4:e3:5a:da:95:9f:3f:55:28:f8:8a:d1:7d:6d: 33:83:cd:53:8b:ca:0d:bb:c6:e4:1d:5e:2e:48:fd:71:4c:23: d4:08:4d:05:02:88:14:5e:ea:03:0c:7a:ab:54:00:48:60:61: e0:56:93:7b:49:ec:5c:f6:c8:43:de:fd:37:c3:a1:32:27:f0: 00:97:c2:03:65:73:16:67:42:a3:d0:01:cd:29:9f:75:78:a4: b4:d4:a9:54:a6:cb:83:23:31:a4:68:98:da:d7:00:48:43:b4: 52:9f:2d:6e:54:c4:db:ac:63:63:f3:f6:2c:47:11:cc:78:91: 21:94:6b:f9:4d:a3:40:c9:8c:ae:68:5a:30:90:94:80:7e:d9: 02:24:b2:79:a4:e2:08:9e:98:19:6a:8a:84:e7:04:c7:b5:5b: 94:41:5c:45:58:50:bb:a1:9f:9e:0e:42:6b:d6:9e:22:85:6d: b1:de:fd:9e:16:c5:e8:d8:3c:69:6b:59:20:94:b2:cf:9b:78: 59:48:24:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQejzJoIx370pgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk ZWE4NTU4ZTEtNjYwZi00ZDZjLTg2MWQtMzJmNWNmMWQ3Y2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZOdFPBe2BdbN0KVdbt94rx+vTF18VYSjsYB AIAcVWu42L4bVLpnCOYNPZ3N5GXwoMDoqgSA36snV5nCXJVKil7/o5hHi/tbci8b J8AGOBfzINU4A7fyuiFSZENwWUcgsHCUxUhYSWBKEUzRArRHYZs/ta3XJ8rvxni1 WUk0fdVSebmzqIdANhxhKnNH9RbjANLBNf4oMi0/w6XC/A5DPxaW2xx93kK2V6zl SZPuRRDddBi+0xnf+WEze5sdFWsVlSliAsKK8d4uSpjY5JulldKjlaP+oI8s/StH VGdhAVSk70hHJ2AowQ88d9XOYjhjeaf+aVdB3m+qqXWmtKoi5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+CfooWeagXU+z3A86H6W7HgmgPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMjhmOTcxYjctMDViNS0z ZTU1LWFhMWEtZWJhNWMwMjZhNTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TenMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLfl3SJ+xgxQM5uM6zmc+pHpyHcMvSFDFUbw+2H8kzsunJyk2VlvKjo DlVnqdb0Dd5yP5oj0DydxsvE41ralZ8/VSj4itF9bTODzVOLyg27xuQdXi5I/XFM I9QITQUCiBRe6gMMeqtUAEhgYeBWk3tJ7Fz2yEPe/TfDoTIn8ACXwgNlcxZnQqPQ Ac0pn3V4pLTUqVSmy4MjMaRomNrXAEhDtFKfLW5UxNusY2Pz9ixHEcx4kSGUa/lN o0DJjK5oWjCQlIB+2QIksnmk4giemBlqioTnBMe1W5RBXEVYULuhn54OQmvWniKF bbHe/Z4WxejYPGlrWSCUss+beFlIJM8= -----END CERTIFICATE-----Generated at Thu Oct 23 02:14:20 2025 by rpki-client