$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/6e97f03d-b0ff-3e8d-a7cd-57b4940c6290.roa File: 6e97f03d-b0ff-3e8d-a7cd-57b4940c6290.roa (raw, json) Hash identifier: HmXWg54Kif/J55rhbzAUItD4qY7IR5ozWqztpWwXLVA= Subject key identifier: CD:0C:55:C9:C4:F3:16:BE:60:C8:F3:E3:3A:FE:22:53:DF:74:F7:1D Certificate issuer: /CN=e407c8fd-b808-41d1-af5e-a88d2dd556f9 Certificate serial: 010D0C9F4328584B5DD1E500B8D3FFB5731EF3E0 Authority key identifier: 39:88:56:13:51:28:01:35:37:02:BA:15:76:26:0A:52:03:98:3E:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/6e97f03d-b0ff-3e8d-a7cd-57b4940c6290.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 396982 IP address blocks: 168.235.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:e5:00:b8:d3:ff:b5:73:1e:f3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e407c8fd-b808-41d1-af5e-a88d2dd556f9 Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=ee4e167f-0e8a-41ad-9c2f-0bbb00c27a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d1:23:65:4f:cd:fd:79:86:02:e2:f9:a8:46: 4e:ad:6a:34:73:67:cc:58:49:3a:3d:3b:02:b7:8c: 7b:42:cd:70:79:74:32:9b:ce:b4:cc:41:28:e5:7c: 8c:9a:ce:8f:66:7a:0d:02:eb:b2:bb:1b:8a:05:94: a1:91:58:7d:01:42:ec:08:fd:75:aa:b4:cf:94:9a: 31:8a:88:c1:2b:61:ed:99:9f:fe:d5:e0:0c:46:c2: ce:fd:f0:cf:b5:8a:bf:a1:dc:cf:57:58:8e:7a:44: 87:fe:cf:b0:c9:78:d3:ce:08:d5:86:bd:24:8f:92: 1c:26:c2:3e:90:8b:03:3e:34:c3:d1:0a:12:b5:6d: d1:0b:29:50:00:12:b4:df:05:2a:ed:af:4a:c4:64: 35:54:9f:01:4f:7e:d8:e1:ea:16:b5:7b:10:74:c9: e8:54:7c:f6:96:50:75:41:86:f9:26:85:ed:e6:b1: 12:34:3e:ef:6d:61:7f:6d:71:8f:40:cd:bb:46:b0: 21:af:89:3a:d6:97:20:28:50:0d:95:64:d9:58:9e: 61:08:d0:c7:1e:71:2e:f7:81:1e:bb:40:9c:28:f8: 8e:a7:d5:cd:63:3b:f6:62:0e:26:27:54:07:05:47: e2:ee:89:b3:19:b0:bf:e6:b6:81:e0:84:44:87:90: 48:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:0C:55:C9:C4:F3:16:BE:60:C8:F3:E3:3A:FE:22:53:DF:74:F7:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/6e97f03d-b0ff-3e8d-a7cd-57b4940c6290.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.crl X509v3 Authority Key Identifier: keyid:39:88:56:13:51:28:01:35:37:02:BA:15:76:26:0A:52:03:98:3E:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer sbgp-ipAddrBlock: critical IPv4: 168.235.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:c9:2e:cf:89:3c:6b:6f:2a:63:f4:f6:b7:37:83:8a:15:76: 10:2c:d6:a9:10:64:9d:47:50:f5:66:8a:f4:59:9e:49:93:dc: 75:d3:75:a6:f9:a7:a8:39:23:a0:dd:69:88:2e:95:7a:cd:14: 27:ff:df:df:3c:cc:f6:64:fd:56:fc:aa:cb:ae:c4:d2:6e:02: 95:c1:89:2b:00:6a:67:4b:29:30:9f:c9:da:3d:8c:f6:f3:e0: ba:b3:e1:b0:45:6c:c1:e2:06:c9:2e:9d:90:ea:be:d4:42:f1: f6:04:1c:8d:48:1c:72:f0:c5:53:86:e0:6d:7d:c9:72:2c:e2: bf:32:4a:1b:c0:07:fb:34:86:72:5e:44:48:84:bc:40:37:73: 04:9b:2d:80:f7:4f:d8:7d:75:80:ec:f7:1e:34:d5:17:9f:b5: f2:55:20:cc:de:b3:9d:f6:96:65:b4:22:9f:1a:cb:07:03:0d: 37:fb:59:0b:dd:d6:da:50:3f:91:60:8d:5f:3b:2e:94:00:8d: 9e:ec:ec:af:15:85:fd:75:09:89:07:d6:a8:ad:31:90:a1:99: 93:b0:bc:2e:f7:d7:6f:5b:3d:fb:f0:96:63:39:09:3d:67:42: ad:01:3b:43:10:86:3a:c3:86:02:31:59:8f:b8:2e:9f:2f:02: af:95:70:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0eUAuNP/tXMe8+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQwN2M4ZmQtYjgwOC00MWQxLWFmNWUtYTg4ZDJkZDU1 NmY5MB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk ZWU0ZTE2N2YtMGU4YS00MWFkLTljMmYtMGJiYjAwYzI3YTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndEjZU/N/XmGAuL5qEZOrWo0c2fMWEk6PTsC t4x7Qs1weXQym860zEEo5XyMms6PZnoNAuuyuxuKBZShkVh9AULsCP11qrTPlJox iojBK2HtmZ/+1eAMRsLO/fDPtYq/odzPV1iOekSH/s+wyXjTzgjVhr0kj5IcJsI+ kIsDPjTD0QoStW3RCylQABK03wUq7a9KxGQ1VJ8BT37Y4eoWtXsQdMnoVHz2llB1 QYb5JoXt5rESND7vbWF/bXGPQM27RrAhr4k61pcgKFANlWTZWJ5hCNDHHnEu94Ee u0CcKPiOp9XNYzv2Yg4mJ1QHBUfi7omzGbC/5raB4IREh5BIxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0MVcnE8xa+YMjz4zr+IlPfdPcdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNDA3 YzhmZC1iODA4LTQxZDEtYWY1ZS1hODhkMmRkNTU2ZjkvNmU5N2YwM2QtYjBmZi0z ZThkLWE3Y2QtNTdiNDk0MGM2MjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTQwN2M4ZmQtYjgwOC00MWQxLWFm NWUtYTg4ZDJkZDU1NmY5L2U0MDdjOGZkLWI4MDgtNDFkMS1hZjVlLWE4OGQyZGQ1 NTZmOS5jcmwwHwYDVR0jBBgwFoAUOYhWE1EoATU3AroVdiYKUgOYPgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNDA3YzhmZC1iODA4LTQxZDEtYWY1ZS1hODhk MmRkNTU2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOvqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPJLs+JPGtvKmP09rc3g4oVdhAs1qkQZJ1HUPVmivRZnkmT3HXTdab5 p6g5I6DdaYgulXrNFCf/3988zPZk/Vb8qsuuxNJuApXBiSsAamdLKTCfydo9jPbz 4Lqz4bBFbMHiBskunZDqvtRC8fYEHI1IHHLwxVOG4G19yXIs4r8yShvAB/s0hnJe REiEvEA3cwSbLYD3T9h9dYDs9x401ReftfJVIMzes532lmW0Ip8aywcDDTf7WQvd 1tpQP5FgjV87LpQAjZ7s7K8Vhf11CYkH1qitMZChmZOwvC73129bPfvwlmM5CT1n Qq0BO0MQhjrDhgIxWY+4Lp8vAq+VcGs= -----END CERTIFICATE-----Generated at Mon Nov 3 21:52:12 2025 by rpki-client