$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/c7093601-774e-30f5-ac5e-a18688f8332c.roa File: c7093601-774e-30f5-ac5e-a18688f8332c.roa (raw, json) Hash identifier: QPAaFaU+F8oZysM26tEFnjSkr/GmXzqI8EqhwONRMDM= Subject key identifier: A7:40:AF:44:A1:3A:50:64:55:BD:98:5F:E9:D4:35:DE:BF:99:43:48 Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F4328584BBB7592E119AC4F2216C15480 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/c7093601-774e-30f5-ac5e-a18688f8332c.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 394708 IP address blocks: 209.173.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:92:e1:19:ac:4f:22:16:c1:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=52bb727a-b485-403b-8a4b-51973468193a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a1:23:97:bd:17:de:65:df:82:7b:85:5b:64: a8:3e:f1:1a:d1:23:3a:fb:70:13:14:e7:80:ce:35: 59:3b:70:3c:f1:00:ef:70:e6:6d:1c:81:bb:8d:03: 9d:4b:47:cc:0f:45:80:fc:5c:61:b7:fd:17:10:e0: 78:4d:07:5a:ae:21:f2:78:ca:52:a5:8a:8e:f9:1a: 14:c3:3d:a2:84:2f:3d:16:9c:30:a6:70:c0:ff:f6: 72:6a:13:87:92:4b:38:5f:77:85:3d:90:4b:cd:68: 27:74:23:ae:aa:82:7a:f2:1f:38:fb:6a:cf:7e:37: 71:0f:ce:08:11:6d:5f:13:d7:fb:ba:ee:24:a7:41: 70:16:fe:c7:ed:c3:23:40:73:19:30:c4:79:18:ac: e4:6e:fc:b4:3a:88:34:e8:1d:e9:fa:46:38:fc:9e: 6a:c2:40:ad:03:55:50:f2:3c:df:e2:d5:62:68:c9: ee:67:d8:4f:1c:c5:9a:33:ba:22:60:2c:9a:05:e1: d8:97:bf:fb:17:fb:79:d6:b3:69:68:bd:a8:2e:ca: 97:94:23:bb:41:f3:5a:f2:3e:2b:8d:ef:53:58:bf: c6:2b:fb:d7:80:c4:54:13:2c:71:48:43:47:db:25: 4b:28:7d:a3:fa:2b:1d:90:2b:87:0d:be:84:67:7a: 05:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:40:AF:44:A1:3A:50:64:55:BD:98:5F:E9:D4:35:DE:BF:99:43:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/c7093601-774e-30f5-ac5e-a18688f8332c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 209.173.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:37:89:4a:52:c9:29:be:ec:d3:8e:33:98:d5:d6:0a:52:db: da:97:2a:26:12:46:95:1f:96:ea:df:e2:54:91:a2:30:52:97: f9:67:0b:0f:4b:24:13:ea:7f:1a:e7:44:36:c1:50:7c:6d:8c: 00:51:cc:9d:87:57:cc:11:c9:ee:a5:d3:e4:3c:cc:4b:1a:b4: 88:61:7e:d0:f9:1f:05:25:49:19:cd:14:6c:e5:4d:97:06:9d: 7a:2c:5e:76:ad:ad:93:76:40:9b:66:ff:b7:b8:f7:92:96:f8: cb:81:6e:5a:57:ae:11:8a:52:ab:8c:d2:ed:f6:56:f3:55:ef: 09:81:13:0c:44:d3:ef:96:e2:08:00:b5:86:ad:80:b0:0c:47: 4d:b6:0f:34:d5:71:24:0f:59:4b:5c:4f:0b:97:8d:59:8c:a4: 61:bc:54:93:33:8d:a0:56:bd:e4:de:ae:57:c9:b6:18:37:d4: bf:ba:b0:d5:67:24:f1:77:85:65:26:ec:ad:7e:b2:c1:a3:74: b1:23:11:91:53:6f:21:a7:0e:da:4e:56:79:9c:8d:3a:f0:79: 09:fe:9a:9a:9f:69:5f:59:b6:7f:13:ea:02:66:2f:be:a8:73: bc:e9:b5:2d:a3:27:e5:b0:69:58:ab:c7:7c:a4:47:cf:1d:1d: 23:a2:c3:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dZLhGaxPIhbBVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk NTJiYjcyN2EtYjQ4NS00MDNiLThhNGItNTE5NzM0NjgxOTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26Ejl70X3mXfgnuFW2SoPvEa0SM6+3ATFOeA zjVZO3A88QDvcOZtHIG7jQOdS0fMD0WA/Fxht/0XEOB4TQdariHyeMpSpYqO+RoU wz2ihC89FpwwpnDA//ZyahOHkks4X3eFPZBLzWgndCOuqoJ68h84+2rPfjdxD84I EW1fE9f7uu4kp0FwFv7H7cMjQHMZMMR5GKzkbvy0Oog06B3p+kY4/J5qwkCtA1VQ 8jzf4tViaMnuZ9hPHMWaM7oiYCyaBeHYl7/7F/t51rNpaL2oLsqXlCO7QfNa8j4r je9TWL/GK/vXgMRUEyxxSENH2yVLKH2j+isdkCuHDb6EZ3oFMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdAr0ShOlBkVb2YX+nUNd6/mUNIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvYzcwOTM2MDEtNzc0ZS0z MGY1LWFjNWUtYTE4Njg4ZjgzMzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0a2iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC03iUpSySm+7NOOM5jV1gpS29qXKiYSRpUflurf4lSRojBSl/lnCw9L JBPqfxrnRDbBUHxtjABRzJ2HV8wRye6l0+Q8zEsatIhhftD5HwUlSRnNFGzlTZcG nXosXnatrZN2QJtm/7e495KW+MuBblpXrhGKUquM0u32VvNV7wmBEwxE0++W4ggA tYatgLAMR022DzTVcSQPWUtcTwuXjVmMpGG8VJMzjaBWveTerlfJthg31L+6sNVn JPF3hWUm7K1+ssGjdLEjEZFTbyGnDtpOVnmcjTrweQn+mpqfaV9Ztn8T6gJmL76o c7zptS2jJ+WwaVirx3ykR88dHSOiwz8= -----END CERTIFICATE-----Generated at Mon Nov 3 08:43:19 2025 by rpki-client