$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c715b1a-49b0-44da-9244-0e8dcbb67b6b/1283cdf1-5a26-34ba-ba1c-c9d889e039b5.roa File: 1283cdf1-5a26-34ba-ba1c-c9d889e039b5.roa (raw, json) Hash identifier: ho/tWhRsrDboLIotHovzbXwXbrkdxDcjBY3Nj/6YqPg= Subject key identifier: 21:F2:6C:2C:D8:23:0B:DD:64:48:6F:FC:6C:E7:28:82:85:3F:24:3F Certificate issuer: /CN=0c715b1a-49b0-44da-9244-0e8dcbb67b6b Certificate serial: 010D0C9F4328584BC96AE4F20382D119C9229AE0 Authority key identifier: B8:26:9D:E3:23:A8:2A:C5:D8:61:48:3B:E4:60:C0:6C:D1:26:C5:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c715b1a-49b0-44da-9244-0e8dcbb67b6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c715b1a-49b0-44da-9244-0e8dcbb67b6b/1283cdf1-5a26-34ba-ba1c-c9d889e039b5.roa Signing time: Sat 08 Nov 2025 02:00:30 +0000 ROA not before: Sat 08 Nov 2025 02:00:30 +0000 ROA not after: Fri 06 Feb 2026 02:00:30 +0000 asID: 14618 IP address blocks: 207.167.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c715b1a-49b0-44da-9244-0e8dcbb67b6b/0c715b1a-49b0-44da-9244-0e8dcbb67b6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c715b1a-49b0-44da-9244-0e8dcbb67b6b/0c715b1a-49b0-44da-9244-0e8dcbb67b6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c715b1a-49b0-44da-9244-0e8dcbb67b6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c9:6a:e4:f2:03:82:d1:19:c9:22:9a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c715b1a-49b0-44da-9244-0e8dcbb67b6b Validity Not Before: Nov 8 02:00:30 2025 GMT Not After : Feb 6 02:00:30 2026 GMT Subject: CN=1b040ea1-514b-436e-8478-94e995e77e4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:51:35:5c:9f:aa:66:dd:07:f6:f0:d0:c1:98: 8e:9c:dc:5a:05:f2:82:eb:c5:e9:53:f1:e9:94:70: 52:4c:86:62:4e:b8:5a:bc:ea:95:5e:b1:3b:3c:4c: af:90:e0:66:da:75:53:30:2b:7f:e2:38:3f:7c:21: aa:e5:d3:2e:4d:d8:27:b6:ec:be:8c:6d:28:8e:22: 69:d0:80:d8:ca:fe:96:fa:6a:c0:21:19:80:5c:79: a3:d4:f8:7c:7e:28:28:27:0e:0d:b7:82:96:0e:59: a8:e7:93:0c:3b:d7:bb:8a:fe:5d:9a:cc:53:70:08: cc:e5:ff:93:05:1e:91:69:ef:fb:c6:15:f4:f0:38: 96:88:5f:a9:1e:2e:33:16:59:7a:78:6f:29:48:12: 91:d2:12:be:d5:23:fe:61:17:a4:60:74:42:db:8f: 9a:f6:db:55:9f:b9:92:5a:e3:bd:61:f7:b0:be:14: 90:bf:7f:a4:f8:33:d0:d7:6c:b9:a7:71:f9:fc:a5: 49:c5:7b:58:8a:69:cb:ee:f8:ae:5e:23:24:d5:2f: cb:03:bf:ae:c8:36:7c:30:87:c0:04:3e:48:99:a9: dd:d8:07:4a:44:f8:90:5e:ef:ae:38:41:b7:1f:90: 16:a2:75:b3:79:b6:08:d4:0e:6c:a6:17:c4:83:17: 1b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F2:6C:2C:D8:23:0B:DD:64:48:6F:FC:6C:E7:28:82:85:3F:24:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c715b1a-49b0-44da-9244-0e8dcbb67b6b/1283cdf1-5a26-34ba-ba1c-c9d889e039b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c715b1a-49b0-44da-9244-0e8dcbb67b6b/0c715b1a-49b0-44da-9244-0e8dcbb67b6b.crl X509v3 Authority Key Identifier: keyid:B8:26:9D:E3:23:A8:2A:C5:D8:61:48:3B:E4:60:C0:6C:D1:26:C5:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0c715b1a-49b0-44da-9244-0e8dcbb67b6b.cer sbgp-ipAddrBlock: critical IPv4: 207.167.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:2d:df:86:bb:31:ab:54:d9:f0:9b:54:57:67:fc:0b:15:fb: 40:46:78:0a:d2:a2:ff:d6:14:52:b5:0d:24:bb:61:9a:75:ea: 36:37:5d:9a:bc:42:ba:6d:4d:fc:5f:69:49:32:21:0e:59:7c: 95:83:f9:9e:c4:18:42:ab:33:74:fc:47:1e:d8:dd:f4:56:ac: 22:ba:46:87:23:7c:e6:c6:1c:04:ec:a5:e5:90:ae:d5:4b:35: b7:6c:b6:ee:80:5a:76:a1:64:f9:c7:17:81:ce:81:b5:51:66: 89:64:e5:d4:43:0a:0c:00:10:17:59:62:ec:58:00:a2:4a:77: e8:ec:fc:3d:27:c8:16:15:7f:b5:cd:70:e3:b2:15:40:84:ad: dd:d1:c8:cd:3e:d5:8c:56:5a:96:65:b6:40:eb:a9:1e:bc:69: 05:34:49:19:05:1d:78:0b:26:50:09:70:ae:e6:b6:3f:b6:09: 9e:18:ec:40:3d:f9:46:69:45:43:f4:74:af:05:86:b5:7d:c6: 32:95:23:01:36:b3:64:02:82:71:be:de:2c:0a:3a:1a:79:a6: d3:77:39:9e:1d:2e:b2:b0:59:d4:59:1d:ff:02:9b:21:62:2d: bf:bc:7c:fa:5d:f6:d9:1d:91:fd:65:d6:dd:5e:0e:29:25:d6: bd:88:f8:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvJauTyA4LRGckimuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM3MTViMWEtNDliMC00NGRhLTkyNDQtMGU4ZGNiYjY3 YjZiMB4XDTI1MTEwODAyMDAzMFoXDTI2MDIwNjAyMDAzMFowLzEtMCsGA1UEAxMk MWIwNDBlYTEtNTE0Yi00MzZlLTg0NzgtOTRlOTk1ZTc3ZTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1E1XJ+qZt0H9vDQwZiOnNxaBfKC68XpU/Hp lHBSTIZiTrhavOqVXrE7PEyvkOBm2nVTMCt/4jg/fCGq5dMuTdgntuy+jG0ojiJp 0IDYyv6W+mrAIRmAXHmj1Ph8figoJw4Nt4KWDlmo55MMO9e7iv5dmsxTcAjM5f+T BR6Rae/7xhX08DiWiF+pHi4zFll6eG8pSBKR0hK+1SP+YRekYHRC24+a9ttVn7mS WuO9YfewvhSQv3+k+DPQ12y5p3H5/KVJxXtYimnL7viuXiMk1S/LA7+uyDZ8MIfA BD5Imand2AdKRPiQXu+uOEG3H5AWonWzebYI1A5sphfEgxcb8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHybCzYIwvdZEhv/GznKIKFPyQ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYzcx NWIxYS00OWIwLTQ0ZGEtOTI0NC0wZThkY2JiNjdiNmIvMTI4M2NkZjEtNWEyNi0z NGJhLWJhMWMtYzlkODg5ZTAzOWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGM3MTViMWEtNDliMC00NGRhLTky NDQtMGU4ZGNiYjY3YjZiLzBjNzE1YjFhLTQ5YjAtNDRkYS05MjQ0LTBlOGRjYmI2 N2I2Yi5jcmwwHwYDVR0jBBgwFoAUuCad4yOoKsXYYUg75GDAbNEmxcAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYzcxNWIxYS00OWIwLTQ0ZGEtOTI0NC0wZThk Y2JiNjdiNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz6dcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQt34a7MatU2fCbVFdn/AsV+0BGeArSov/WFFK1DSS7YZp16jY3XZq8 QrptTfxfaUkyIQ5ZfJWD+Z7EGEKrM3T8Rx7Y3fRWrCK6RocjfObGHATspeWQrtVL Nbdstu6AWnahZPnHF4HOgbVRZolk5dRDCgwAEBdZYuxYAKJKd+js/D0nyBYVf7XN cOOyFUCErd3RyM0+1YxWWpZltkDrqR68aQU0SRkFHXgLJlAJcK7mtj+2CZ4Y7EA9 +UZpRUP0dK8FhrV9xjKVIwE2s2QCgnG+3iwKOhp5ptN3OZ4dLrKwWdRZHf8CmyFi Lb+8fPpd9tkdkf1l1t1eDikl1r2I+Pg= -----END CERTIFICATE-----Generated at Sat Nov 8 13:06:09 2025 by rpki-client