$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8fdbc9e3-73a8-3fca-b072-5ec3306de1ae.roa File: 8fdbc9e3-73a8-3fca-b072-5ec3306de1ae.roa (raw, json) Hash identifier: K4wMMHTGpWDvpXRFWOSbsRoS3+ckDCNYkOKJpwKC6Vs= Subject key identifier: 78:21:0E:75:D3:D3:A9:81:BF:3D:51:3F:3B:2C:70:E4:DB:F2:FF:49 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D07FA876615A527DCE5C0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8fdbc9e3-73a8-3fca-b072-5ec3306de1ae.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 62044 IP address blocks: 209.55.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:07:fa:87:66:15:a5:27:dc:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=38f48d48-c733-4ad9-a663-fe43b364a895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7c:d8:6e:33:c9:b3:0f:d5:1d:59:57:e1:20: 84:d3:c6:3e:a5:ff:5c:ba:49:54:9c:ea:4a:60:1a: b3:49:1a:a3:50:ab:71:14:cb:66:f5:78:03:13:96: 01:3c:86:ce:48:d5:98:1f:f1:b9:eb:ef:9c:67:4d: 57:6d:97:a2:e7:47:c9:25:28:87:d1:33:26:b6:23: 8c:fb:66:ec:6c:53:06:13:2d:6b:c6:f2:31:a3:e3: ae:f5:17:2d:6e:04:bd:10:59:ce:90:9c:9b:a1:f3: 3a:be:6d:dc:94:e6:cc:a3:db:3b:36:a1:bb:54:f0: e0:8d:c8:1b:cf:c4:94:f2:e5:ff:bb:6a:ba:bd:f2: 56:0e:5b:51:eb:08:bd:e9:67:fe:74:38:94:c6:e8: ce:dd:15:90:51:e0:5f:79:88:cb:53:0a:be:fc:4a: f2:63:a9:2f:e9:a2:67:e4:dd:5d:fc:3c:f6:4e:92: 4b:35:8e:13:9c:d7:43:8a:2f:8f:d0:06:ca:bd:97: 96:17:22:f5:76:12:d3:fc:ce:d7:ff:f3:72:b0:39: 78:10:e5:c8:19:3b:c9:24:dc:f2:34:3a:68:ed:9f: 63:a0:87:4b:44:65:99:69:5b:39:23:33:17:fc:e1: 8e:de:b3:24:0b:38:ad:8d:7d:03:82:72:42:b4:ef: d2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:21:0E:75:D3:D3:A9:81:BF:3D:51:3F:3B:2C:70:E4:DB:F2:FF:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8fdbc9e3-73a8-3fca-b072-5ec3306de1ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:98:83:1c:df:1f:0e:79:4b:a2:54:96:52:24:8d:1e:49:b8: 4b:45:cf:65:9d:63:30:df:eb:71:a4:36:ed:04:4e:12:4e:17: b3:1d:e6:e5:00:a8:8e:95:8c:fc:a2:44:36:b2:a8:46:5a:1e: 26:a9:3c:46:f2:0b:4b:91:6e:07:aa:3c:5b:95:0e:72:d9:88: 9c:ec:12:65:98:6d:05:2d:d5:d1:da:bf:b5:98:15:07:03:3d: 1a:ce:a6:d4:1d:0a:29:79:17:e4:10:ab:19:f5:b8:0e:46:b4: 93:19:6f:62:2d:1d:ef:65:f9:02:2a:d8:79:6b:50:15:1c:92: ae:07:11:9c:dd:af:13:f0:b7:32:d4:b9:1f:02:fa:ff:86:1c: 30:0a:44:84:4c:94:95:34:5e:3d:7c:ca:e5:07:dc:4b:4a:d2: c7:0f:4d:02:9c:a1:e4:1f:38:da:61:3d:84:b3:2b:1d:cb:93: 74:fe:2a:11:9b:9c:4e:3b:af:49:e1:12:3e:d8:1d:fb:0e:13: c7:95:4f:a1:6e:33:c9:f6:ff:fc:7c:7a:31:e0:fa:d0:f6:52: 73:42:73:32:52:b1:6b:12:6b:63:43:31:3e:ef:b6:87:94:bf: be:e0:6b:06:bb:79:b4:47:60:4f:e9:94:a2:0a:2d:f8:ec:6f: b6:19:ae:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQf6h2YVpSfc5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk MzhmNDhkNDgtYzczMy00YWQ5LWE2NjMtZmU0M2IzNjRhODk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3zYbjPJsw/VHVlX4SCE08Y+pf9cuklUnOpK YBqzSRqjUKtxFMtm9XgDE5YBPIbOSNWYH/G56++cZ01XbZei50fJJSiH0TMmtiOM +2bsbFMGEy1rxvIxo+Ou9RctbgS9EFnOkJybofM6vm3clObMo9s7NqG7VPDgjcgb z8SU8uX/u2q6vfJWDltR6wi96Wf+dDiUxujO3RWQUeBfeYjLUwq+/EryY6kv6aJn 5N1d/Dz2TpJLNY4TnNdDii+P0AbKvZeWFyL1dhLT/M7X//NysDl4EOXIGTvJJNzy NDpo7Z9joIdLRGWZaVs5IzMX/OGO3rMkCzitjX0DgnJCtO/SNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHghDnXT06mBvz1RPzsscOTb8v9JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvOGZkYmM5ZTMtNzNhOC0z ZmNhLWIwNzItNWVjMzMwNmRlMWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TesMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSYgxzfHw55S6JUllIkjR5JuEtFz2WdYzDf63GkNu0EThJOF7Md5uUA qI6VjPyiRDayqEZaHiapPEbyC0uRbgeqPFuVDnLZiJzsEmWYbQUt1dHav7WYFQcD PRrOptQdCil5F+QQqxn1uA5GtJMZb2ItHe9l+QIq2HlrUBUckq4HEZzdrxPwtzLU uR8C+v+GHDAKRIRMlJU0Xj18yuUH3EtK0scPTQKcoeQfONphPYSzKx3Lk3T+KhGb nE47r0nhEj7YHfsOE8eVT6FuM8n2//x8ejHg+tD2UnNCczJSsWsSa2NDMT7vtoeU v77gawa7ebRHYE/plKIKLfjsb7YZrgk= -----END CERTIFICATE-----Generated at Thu Oct 23 08:19:03 2025 by rpki-client