$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8d87423d-9c77-32eb-a42e-8d280394d29b.roa File: 8d87423d-9c77-32eb-a42e-8d280394d29b.roa (raw, json) Hash identifier: TjNgnA1oFCY7QxVmzJMiAwJBm6oUhujTOHJFx4XeAjY= Subject key identifier: 23:6C:8A:AD:C1:40:19:0A:0E:8F:FF:7C:94:30:5C:5A:D8:2D:B7:60 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D0911AEF5CC9774A2D510 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8d87423d-9c77-32eb-a42e-8d280394d29b.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 62044 IP address blocks: 209.55.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:09:11:ae:f5:cc:97:74:a2:d5:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=64648820-dbbf-4ef8-b227-fcc4dbd00361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fc:43:17:95:2f:bc:a6:e7:f9:d5:c9:65:5f: 34:27:49:bf:d6:f0:79:49:d5:c5:b2:af:7a:af:ea: f8:3d:67:45:5a:59:72:c0:19:77:70:21:7c:02:5e: a5:0f:e6:a1:ce:4a:27:66:07:34:8a:ad:5d:2f:71: 3a:9e:7b:3a:55:58:e0:23:bb:d9:e4:09:d9:66:17: 65:6c:2a:a7:89:82:cf:1c:63:2e:60:b8:e8:af:db: 8a:da:47:6f:5f:22:bb:bb:14:7f:ab:69:93:85:f2: 12:44:25:0a:3e:48:35:fc:0e:27:79:fb:36:f1:3b: c3:e7:27:55:b7:78:c7:b6:b2:4a:f0:73:97:51:41: b2:30:48:e9:dd:74:70:c2:e6:6f:54:d6:10:32:0e: 63:54:8b:05:c6:9e:2a:06:6b:e1:7c:f2:6b:c3:cd: 29:d3:5a:04:c6:2a:18:02:83:c2:a7:d1:5b:ca:33: 1c:89:d4:4a:01:23:da:da:84:68:2c:24:7e:b7:88: 9e:20:3b:9d:7c:5d:ce:69:69:82:53:a9:eb:60:0e: 65:95:f7:dc:a9:1a:84:3c:50:8f:02:c0:f3:10:ca: cb:66:77:43:44:5c:bb:59:55:a3:88:07:91:c7:2a: ea:d9:4d:5b:8a:47:1b:b4:a1:39:b5:5b:5d:f1:61: dc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:6C:8A:AD:C1:40:19:0A:0E:8F:FF:7C:94:30:5C:5A:D8:2D:B7:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8d87423d-9c77-32eb-a42e-8d280394d29b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:83:74:e1:22:1d:11:e5:90:bb:1a:f3:fd:21:a5:fb:91:7f: 9f:56:ae:5e:d3:14:0d:e4:36:2e:f4:22:0b:22:27:d4:3c:d7: 16:17:42:58:fe:4e:3d:18:1a:94:26:b9:0e:34:96:3c:d3:16: b1:55:27:a5:cc:c2:0b:8d:f2:d3:07:c9:01:a4:95:e0:3a:fb: 50:66:76:01:cf:2d:61:12:82:25:f7:77:08:ac:11:ca:20:00: 10:81:bd:4a:3a:72:98:2f:6b:66:58:8e:a3:cf:20:df:49:08: 3f:3a:6c:15:e6:93:13:04:17:ad:37:3e:37:7b:34:70:d3:1b: 89:93:c9:e3:f4:c8:0d:d6:c3:fe:c3:5c:b0:43:38:f0:ca:d9: e8:a2:82:0b:c6:6a:be:8a:2b:e3:e0:d1:5b:07:5b:78:82:2b: 51:a7:5e:2d:16:e1:84:55:6a:f4:74:cb:f1:7e:03:b0:e4:60: d8:e9:e1:54:48:fa:49:ac:81:fd:46:b4:03:21:e9:60:c9:7a: a8:da:55:a9:6b:88:1f:c6:6d:78:3d:7f:84:79:dd:6d:43:f4: cc:6c:2d:cc:e4:92:3b:ff:89:db:6e:61:69:53:53:d9:bf:23: 1d:d4:38:7d:a0:20:cb:6c:b5:24:48:9f:dd:39:90:cb:47:c2: a2:95:ec:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQkRrvXMl3Si1RAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk NjQ2NDg4MjAtZGJiZi00ZWY4LWIyMjctZmNjNGRiZDAwMzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfxDF5UvvKbn+dXJZV80J0m/1vB5SdXFsq96 r+r4PWdFWllywBl3cCF8Al6lD+ahzkonZgc0iq1dL3E6nns6VVjgI7vZ5AnZZhdl bCqniYLPHGMuYLjor9uK2kdvXyK7uxR/q2mThfISRCUKPkg1/A4nefs28TvD5ydV t3jHtrJK8HOXUUGyMEjp3XRwwuZvVNYQMg5jVIsFxp4qBmvhfPJrw80p01oExioY AoPCp9FbyjMcidRKASPa2oRoLCR+t4ieIDudfF3OaWmCU6nrYA5llffcqRqEPFCP AsDzEMrLZndDRFy7WVWjiAeRxyrq2U1bikcbtKE5tVtd8WHccQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNsiq3BQBkKDo//fJQwXFrYLbdgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvOGQ4NzQyM2QtOWM3Ny0z MmViLWE0MmUtOGQyODAzOTRkMjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Te9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALmDdOEiHRHlkLsa8/0hpfuRf59Wrl7TFA3kNi70IgsiJ9Q81xYXQlj+ Tj0YGpQmuQ40ljzTFrFVJ6XMwguN8tMHyQGkleA6+1BmdgHPLWESgiX3dwisEcog ABCBvUo6cpgva2ZYjqPPIN9JCD86bBXmkxMEF603Pjd7NHDTG4mTyeP0yA3Ww/7D XLBDOPDK2eiiggvGar6KK+Pg0VsHW3iCK1GnXi0W4YRVavR0y/F+A7DkYNjp4VRI +kmsgf1GtAMh6WDJeqjaValriB/GbXg9f4R53W1D9MxsLczkkjv/idtuYWlTU9m/ Ix3UOH2gIMtstSRIn905kMtHwqKV7FY= -----END CERTIFICATE-----Generated at Thu Oct 23 08:19:01 2025 by rpki-client