$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/a2212d2b-8250-3896-b964-9c6440e53224.roa File: a2212d2b-8250-3896-b964-9c6440e53224.roa (raw, json) Hash identifier: TK++6ZdVV2Pqn2L8rn0Io5ccbDdZbtLIqMiiUPvLIL0= Subject key identifier: F3:4F:33:04:F5:0F:00:8B:F6:42:5B:D6:3D:A6:B4:8B:05:5A:09:F2 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584B99D78F061F11B634BDD35600 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/a2212d2b-8250-3896-b964-9c6440e53224.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 26658 IP address blocks: 172.87.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:8f:06:1f:11:b6:34:bd:d3:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=d707c57e-d509-43fc-b008-2db2633c4883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:de:36:c5:a6:89:55:2c:65:aa:dc:76:5c:62: 5b:f4:b8:19:d6:94:88:8f:95:84:55:2c:04:41:61: 7b:a3:3b:5d:64:8d:76:8a:ca:64:2d:b9:a3:0b:7e: 0c:c9:01:ad:d6:ba:cb:45:27:f1:d3:60:5c:a0:f3: 76:b3:10:4c:fb:4d:4b:69:0b:3b:8f:51:68:0c:8c: b1:c6:63:5f:6f:bc:fe:56:e0:3a:f2:dd:a2:68:1b: 24:8b:2e:a8:87:51:17:9a:ea:9a:51:a1:c4:f2:f6: 80:75:57:68:89:84:43:e8:94:5e:63:d3:c3:b4:93: 6f:29:4b:93:03:f0:ae:82:97:dd:1a:6e:0a:bc:8e: 11:b0:2a:a0:4e:7f:a1:60:ed:70:23:d8:e1:3b:99: dc:7d:bd:3a:3a:77:91:eb:53:01:65:25:a8:d6:40: 3f:3a:f0:88:83:b4:c8:f9:ce:27:f0:f9:70:c1:26: 20:84:1f:c3:e0:9d:fa:e5:9b:2c:60:c0:29:bf:5d: 18:1f:e6:d6:dd:a1:2b:8a:f0:73:d0:52:c7:b0:f3: 02:16:fb:86:f0:cd:eb:cd:4f:cc:96:0b:10:ec:49: 0a:9a:fb:7b:b5:0b:40:e8:ca:0f:2c:62:57:45:00: 7e:5a:41:e9:cd:84:1c:fc:7d:fb:ee:3d:e2:ae:d7: 88:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:4F:33:04:F5:0F:00:8B:F6:42:5B:D6:3D:A6:B4:8B:05:5A:09:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/a2212d2b-8250-3896-b964-9c6440e53224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 172.87.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:ec:c3:83:ae:7e:ee:34:36:8c:c4:51:16:76:1b:84:1d:4e: 97:38:1d:43:ed:58:29:d1:b5:cd:6c:01:3d:0f:ae:6f:40:88: 02:25:79:79:9d:22:60:04:a2:b8:61:53:ee:2b:a3:8c:c6:d8: 5a:aa:c7:38:db:43:91:57:04:df:fa:8e:29:ef:fc:e7:10:ce: 5c:a3:e3:67:a0:e9:2f:1b:a4:78:8a:f8:54:ee:ab:43:2e:fc: e4:2a:94:96:af:72:a4:f2:0d:6d:f1:e8:50:4b:dc:09:db:f9: 17:95:c8:7f:4e:eb:88:b3:22:c6:63:83:06:af:da:f0:5a:7e: e7:51:3c:a8:8a:b3:21:04:36:d0:26:0c:b4:a1:11:d9:51:52: b7:f4:d4:54:cd:8a:73:8d:c0:25:64:c3:9b:3c:69:5a:b8:37: 4a:10:b0:eb:97:ad:e4:e2:45:20:8d:c2:39:7d:62:f6:72:54: 7c:95:e9:b0:0b:c3:d8:ce:62:f3:a0:65:8f:be:9e:82:dc:15: 98:41:a4:a5:64:73:e0:98:b4:6f:05:f8:91:fb:18:e2:94:52: f9:bf:15:71:0a:17:cf:72:97:a9:9a:32:35:3a:11:e3:fb:97: 45:7c:09:4e:3f:d5:65:11:c8:61:42:0b:e6:db:c2:c7:9a:14: 54:cb:d6:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ148GHxG2NL3TVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZDcwN2M1N2UtZDUwOS00M2ZjLWIwMDgtMmRiMjYzM2M0ODgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo942xaaJVSxlqtx2XGJb9LgZ1pSIj5WEVSwE QWF7oztdZI12ispkLbmjC34MyQGt1rrLRSfx02BcoPN2sxBM+01LaQs7j1FoDIyx xmNfb7z+VuA68t2iaBskiy6oh1EXmuqaUaHE8vaAdVdoiYRD6JReY9PDtJNvKUuT A/CugpfdGm4KvI4RsCqgTn+hYO1wI9jhO5ncfb06OneR61MBZSWo1kA/OvCIg7TI +c4n8PlwwSYghB/D4J365ZssYMApv10YH+bW3aErivBz0FLHsPMCFvuG8M3rzU/M lgsQ7EkKmvt7tQtA6MoPLGJXRQB+WkHpzYQc/H377j3irteISQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNPMwT1DwCL9kJb1j2mtIsFWgnyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvYTIyMTJkMmItODI1MC0z ODk2LWI5NjQtOWM2NDQwZTUzMjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErFfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnsw4Oufu40NozEURZ2G4QdTpc4HUPtWCnRtc1sAT0Prm9AiAIleXmd ImAEorhhU+4ro4zG2FqqxzjbQ5FXBN/6jinv/OcQzlyj42eg6S8bpHiK+FTuq0Mu /OQqlJavcqTyDW3x6FBL3Anb+ReVyH9O64izIsZjgwav2vBafudRPKiKsyEENtAm DLShEdlRUrf01FTNinONwCVkw5s8aVq4N0oQsOuXreTiRSCNwjl9YvZyVHyV6bAL w9jOYvOgZY++noLcFZhBpKVkc+CYtG8F+JH7GOKUUvm/FXEKF89yl6maMjU6EeP7 l0V8CU4/1WURyGFCC+bbwseaFFTL1i8= -----END CERTIFICATE-----Generated at Mon Oct 27 10:00:58 2025 by rpki-client