$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/73ddd44a-b27f-3ea4-bcd3-7512a2dc55f2.roa File: 73ddd44a-b27f-3ea4-bcd3-7512a2dc55f2.roa (raw, json) Hash identifier: d9k3dqlgCrp2vqSQrW5xHE38H0uCDlpSCE81qbeNXdM= Subject key identifier: B7:BA:B5:EC:6E:C6:E4:F1:19:B3:7A:03:3F:15:6E:3F:13:0E:C1:53 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584B8DB110AD0DA79D08C6F74840 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/73ddd44a-b27f-3ea4-bcd3-7512a2dc55f2.roa Signing time: Fri 17 Oct 2025 16:33:26 +0000 ROA not before: Fri 17 Oct 2025 16:33:26 +0000 ROA not after: Thu 15 Jan 2026 17:33:26 +0000 asID: 21949 IP address blocks: 208.122.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8d:b1:10:ad:0d:a7:9d:08:c6:f7:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Oct 17 16:33:26 2025 GMT Not After : Jan 15 17:33:26 2026 GMT Subject: CN=70494096-a57d-4e54-814a-b1d98b4bc925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:11:57:98:67:e6:3d:bc:95:04:2c:18:2f:39: 89:bb:9f:8a:db:38:7a:1b:25:7e:dd:44:f5:7b:60: ee:8d:30:9b:5a:81:36:23:00:cd:b1:13:09:1f:54: 9b:b5:b6:ce:6e:51:49:ec:07:88:4e:d5:c5:0d:57: 73:8d:41:97:7e:eb:d0:4c:85:f0:95:25:6a:20:b4: 06:1b:d1:1b:51:30:e0:f1:e9:f4:6e:f1:a1:c8:f3: 60:b0:c4:74:70:21:16:81:23:91:58:08:0e:1f:07: 11:9f:8f:d6:74:91:5a:4d:e4:13:76:d2:91:47:69: b5:6c:ba:8b:f5:52:f0:e1:d5:fa:21:1f:11:30:bc: 4f:7d:61:81:6b:78:b8:cf:cc:d6:60:d3:e3:6c:e4: 34:8d:67:6b:53:88:8a:05:19:ca:cd:75:54:2f:7c: 33:8d:da:e0:59:87:21:15:9b:05:bd:26:e7:1b:a3: 76:82:2b:40:f4:ec:ad:2e:7e:2f:94:e4:72:4f:eb: e2:ce:86:80:ab:ca:1e:ef:34:78:e7:5e:05:0e:a2: 45:54:a0:c4:60:6b:58:fe:51:75:6c:8e:d3:9b:e6: 97:19:60:b6:fa:bd:f2:f4:5a:e9:fc:58:b2:42:3f: f9:d1:6c:fc:a0:26:57:13:97:c4:1e:9a:e5:65:29: c4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:BA:B5:EC:6E:C6:E4:F1:19:B3:7A:03:3F:15:6E:3F:13:0E:C1:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/73ddd44a-b27f-3ea4-bcd3-7512a2dc55f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 208.122.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:3e:20:5e:9e:e6:b5:ce:e6:60:75:6e:58:ba:88:3d:2f:cc: da:a8:38:ca:96:16:e1:83:52:eb:ba:23:c8:af:dc:9b:f8:f8: a6:30:47:c3:c5:db:0a:dc:c1:46:88:e0:f0:0c:88:89:a8:c2: dd:21:2e:f6:23:b8:91:b7:16:8c:97:ba:14:59:0e:f0:dd:82: 9a:b6:1a:1f:d5:15:15:b3:59:5d:63:83:fe:b8:fc:9a:4c:bb: 6b:41:8c:94:8d:63:b1:93:09:41:65:00:32:f3:d5:59:72:12: af:4d:e1:8b:f3:02:14:9a:a2:04:48:50:b1:fc:e8:23:3a:5d: f1:19:9b:f1:c3:59:a0:d3:0c:eb:72:9b:a7:d0:86:64:b5:2d: 60:37:f5:fa:20:e1:d2:7c:e4:a0:c2:74:d5:15:2e:e4:3e:0d: 96:f1:51:c3:c3:17:5d:8f:64:51:d5:41:1c:d1:7f:04:0b:f3: f1:68:77:00:0a:ae:a9:47:0c:a6:72:bc:a1:15:d5:e5:5b:da: 80:67:44:81:40:a2:fa:ee:eb:66:2d:fc:fd:6b:8d:33:03:63: 54:c8:7e:c7:47:57:b4:76:be:1e:33:87:44:af:d8:4b:9f:4f: 97:37:af:e9:ab:1b:70:aa:56:4e:d3:c7:36:e7:9a:76:9c:ee: 25:65:e6:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuNsRCtDaedCMb3SEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MTAxNzE2MzMyNloXDTI2MDExNTE3MzMyNlowLzEtMCsGA1UEAxMk NzA0OTQwOTYtYTU3ZC00ZTU0LTgxNGEtYjFkOThiNGJjOTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhFXmGfmPbyVBCwYLzmJu5+K2zh6GyV+3UT1 e2DujTCbWoE2IwDNsRMJH1SbtbbOblFJ7AeITtXFDVdzjUGXfuvQTIXwlSVqILQG G9EbUTDg8en0bvGhyPNgsMR0cCEWgSORWAgOHwcRn4/WdJFaTeQTdtKRR2m1bLqL 9VLw4dX6IR8RMLxPfWGBa3i4z8zWYNPjbOQ0jWdrU4iKBRnKzXVUL3wzjdrgWYch FZsFvSbnG6N2gitA9OytLn4vlORyT+vizoaAq8oe7zR4514FDqJFVKDEYGtY/lF1 bI7Tm+aXGWC2+r3y9Frp/FiyQj/50Wz8oCZXE5fEHprlZSnECwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLe6texuxuTxGbN6Az8Vbj8TDsFTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvNzNkZGQ0NGEtYjI3Zi0z ZWE0LWJjZDMtNzUxMmEyZGM1NWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0HoYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHg+IF6e5rXO5mB1bli6iD0vzNqoOMqWFuGDUuu6I8iv3Jv4+KYwR8PF 2wrcwUaI4PAMiImowt0hLvYjuJG3FoyXuhRZDvDdgpq2Gh/VFRWzWV1jg/64/JpM u2tBjJSNY7GTCUFlADLz1VlyEq9N4YvzAhSaogRIULH86CM6XfEZm/HDWaDTDOty m6fQhmS1LWA39fog4dJ85KDCdNUVLuQ+DZbxUcPDF12PZFHVQRzRfwQL8/FodwAK rqlHDKZyvKEV1eVb2oBnRIFAovru62Yt/P1rjTMDY1TIfsdHV7R2vh4zh0Sv2Euf T5c3r+mrG3CqVk7Txzbnmnac7iVl5rQ= -----END CERTIFICATE-----Generated at Sat Nov 1 02:30:34 2025 by rpki-client