$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3904b05f-1572-3f5c-856b-2bcb2ca72fdc.roa File: 3904b05f-1572-3f5c-856b-2bcb2ca72fdc.roa (raw, json) Hash identifier: e9fuf2DLzKfmgNN9SFRPAYBDVJcioDe2lo3Y+uUA74s= Subject key identifier: ED:7D:A8:3E:65:FA:71:E0:E3:E4:BD:19:26:CC:57:F1:F5:58:A8:DE Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D08DF4516CB574C00D700 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3904b05f-1572-3f5c-856b-2bcb2ca72fdc.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 62044 IP address blocks: 209.55.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:08:df:45:16:cb:57:4c:00:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=29bf5f95-4773-4ef7-9739-241694ba02d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:67:81:04:b2:b3:d9:34:d6:38:6b:33:f6:25: 0f:98:c5:ab:2d:93:2c:1e:79:31:db:71:31:5b:a1: 1b:18:10:39:9d:8d:07:38:a8:e9:97:0f:74:ae:90: 14:90:67:3b:9c:7a:45:af:c1:2b:8f:59:64:1a:a1: 25:aa:90:22:7d:04:a9:d9:e5:cc:58:4f:e6:96:91: 80:90:a3:7c:e3:11:12:ec:4e:60:c6:79:c1:5b:95: 24:88:0a:67:ad:9e:fd:98:33:ef:4b:7e:82:ca:cb: 21:e3:aa:8a:14:97:c1:f4:56:85:93:e3:98:d4:23: 77:4d:e9:d5:5e:9e:61:24:cf:99:db:a3:5f:1f:ad: 88:87:f3:23:d2:4a:c2:42:0e:49:ed:3d:30:d3:65: f2:3a:b4:cd:4d:0b:94:a0:1d:34:ee:41:5e:6c:32: 4f:f5:86:b5:93:6d:54:0b:4d:1c:e9:bb:e1:b5:c7: 4c:fc:b5:e3:53:24:2d:c7:ee:ea:86:7b:ef:93:c4: d1:9e:90:16:0f:8f:78:f7:c5:f8:7e:3c:a8:58:6a: 29:b0:a0:e3:cd:25:03:b0:92:20:29:05:58:7c:4b: 2a:44:1d:2e:f6:ef:3f:ab:88:d9:0c:2a:f3:52:56: bb:e6:91:ba:0a:b6:7b:64:eb:f9:4f:98:95:9f:95: b4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7D:A8:3E:65:FA:71:E0:E3:E4:BD:19:26:CC:57:F1:F5:58:A8:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3904b05f-1572-3f5c-856b-2bcb2ca72fdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:a7:37:01:cb:ba:ed:fc:df:ff:30:58:53:3a:81:99:da:8f: b5:f5:fe:c1:4d:e5:69:42:af:c1:03:0c:aa:ae:8e:24:08:bf: b1:3a:cd:5f:83:98:95:58:cc:90:36:df:31:4f:e7:de:7b:ee: b6:1d:c4:8a:9c:63:21:9f:8a:d1:25:26:b3:76:35:b6:91:c9: 85:89:ae:36:df:eb:4e:ff:5a:74:ee:ed:59:9e:96:e8:6d:0e: a8:24:44:33:2f:37:22:c6:07:29:af:e7:10:81:8a:b6:b4:15: 0e:16:00:e2:66:cd:ae:62:f1:9d:a6:39:7b:0c:8d:0e:42:ae: d2:1b:b1:62:13:1f:c5:b8:07:4d:90:bd:1a:ba:e0:b5:ff:b6: 1d:a3:f8:08:45:3a:60:95:aa:ab:3e:e7:2b:9a:36:c6:e8:d9: c5:92:ce:76:61:9e:17:8a:f8:8a:f7:d8:66:5a:1a:6a:18:0e: 65:ae:5e:a1:a7:70:68:92:91:04:de:de:6b:e2:2d:90:c6:31: 9c:d0:b5:c4:fb:a2:97:88:17:d5:80:2a:3c:95:ce:db:3d:fb: 48:4d:f5:f8:45:d0:11:8f:0d:6f:e3:09:0e:d2:49:48:d2:2e: 6d:d9:64:4e:f9:e7:d7:9d:11:39:61:6d:22:a1:60:28:65:5d: 17:f7:cf:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQjfRRbLV0wA1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk MjliZjVmOTUtNDc3My00ZWY3LTk3MzktMjQxNjk0YmEwMmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWeBBLKz2TTWOGsz9iUPmMWrLZMsHnkx23Ex W6EbGBA5nY0HOKjplw90rpAUkGc7nHpFr8Erj1lkGqElqpAifQSp2eXMWE/mlpGA kKN84xES7E5gxnnBW5UkiApnrZ79mDPvS36Cyssh46qKFJfB9FaFk+OY1CN3TenV Xp5hJM+Z26NfH62Ih/Mj0krCQg5J7T0w02XyOrTNTQuUoB007kFebDJP9Ya1k21U C00c6bvhtcdM/LXjUyQtx+7qhnvvk8TRnpAWD49498X4fjyoWGopsKDjzSUDsJIg KQVYfEsqRB0u9u8/q4jZDCrzUla75pG6CrZ7ZOv5T5iVn5W0BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO19qD5l+nHg4+S9GSbMV/H1WKjeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMzkwNGIwNWYtMTU3Mi0z ZjVjLTg1NmItMmJjYjJjYTcyZmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Te5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmnNwHLuu383/8wWFM6gZnaj7X1/sFN5WlCr8EDDKqujiQIv7E6zV+D mJVYzJA23zFP59577rYdxIqcYyGfitElJrN2NbaRyYWJrjbf607/WnTu7Vmeluht DqgkRDMvNyLGBymv5xCBira0FQ4WAOJmza5i8Z2mOXsMjQ5CrtIbsWITH8W4B02Q vRq64LX/th2j+AhFOmCVqqs+5yuaNsbo2cWSznZhnheK+Ir32GZaGmoYDmWuXqGn cGiSkQTe3mviLZDGMZzQtcT7opeIF9WAKjyVzts9+0hN9fhF0BGPDW/jCQ7SSUjS Lm3ZZE7559edETlhbSKhYChlXRf3z9A= -----END CERTIFICATE-----Generated at Thu Oct 23 08:14:47 2025 by rpki-client