$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/d6ed83b7-d5df-3a9e-b44a-fd7b542bfb1e.roa File: d6ed83b7-d5df-3a9e-b44a-fd7b542bfb1e.roa (raw, json) Hash identifier: w+Nk8n1WQ/44dP3jGiiP/SqgSRxw0v18fE4+2KNsMCg= Subject key identifier: C3:E4:0C:A6:69:CA:39:22:00:CA:A8:F0:D1:E8:AE:EC:9E:55:23:AF Certificate issuer: /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Certificate serial: 010D0C9F4328584BB192617D9EB296563658B7D0 Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/d6ed83b7-d5df-3a9e-b44a-fd7b542bfb1e.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 5065 IP address blocks: 208.123.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:61:7d:9e:b2:96:56:36:58:b7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=2b38372b-bb93-4651-a02a-fb3e67417517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:da:34:7c:7c:e0:ac:1d:fe:05:2b:2b:06:cf: b1:59:2f:e9:1d:c3:74:ef:c7:0e:33:24:7b:ca:ac: 9c:c6:f4:01:ab:a7:3a:a3:29:8d:0c:2d:00:15:c6: a2:5f:e6:04:68:88:61:0a:7b:a0:19:99:37:ac:83: c8:83:16:e6:5c:cf:42:9d:08:8b:c4:81:30:b7:46: d2:b0:b3:41:ba:fb:3d:9b:7f:fa:ea:b0:b1:fa:2c: 51:5d:97:07:f4:66:e8:56:dc:2f:45:47:2d:11:1e: 0f:88:07:e4:55:af:12:70:29:e4:78:93:02:26:d4: 90:38:2d:a5:66:95:0e:94:e4:2e:d3:05:ab:bf:a4: d6:b0:48:fc:81:1e:c1:76:36:0f:71:5a:95:73:0b: 30:c9:95:67:83:f7:c8:53:dc:11:58:a0:a1:50:72: 0c:c4:0e:6e:b9:a2:33:ae:cd:f5:b0:f9:fa:92:9a: 24:86:25:23:b5:c5:66:35:e3:9c:44:09:c5:2f:2d: d6:02:4e:c6:ac:a9:e5:08:01:f9:a8:3f:c4:cd:f8: 9a:01:b1:ba:13:8a:9e:29:d6:bf:4b:3f:aa:7f:2f: da:61:ed:1e:4e:46:15:ee:a4:7c:38:07:67:f2:0f: 4b:ed:08:0d:97:36:f3:ae:74:88:41:dd:07:c1:f6: 59:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E4:0C:A6:69:CA:39:22:00:CA:A8:F0:D1:E8:AE:EC:9E:55:23:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/d6ed83b7-d5df-3a9e-b44a-fd7b542bfb1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl X509v3 Authority Key Identifier: keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer sbgp-ipAddrBlock: critical IPv4: 208.123.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:e5:2d:eb:c2:fc:f2:8a:f7:3c:7a:c8:39:e9:60:b6:e8:df: f8:3a:8b:47:47:c8:da:a4:a6:5f:72:7d:99:9c:0b:15:fb:12: 1b:93:0c:4b:39:3c:54:7c:3b:01:1f:22:d5:75:97:10:73:45: bb:b1:f9:36:cc:94:3a:21:1f:01:87:be:44:c8:c9:ab:09:09: c6:7f:1e:5a:29:3e:48:00:e5:38:2e:58:7f:07:a8:c4:a6:b3: 2b:ef:65:40:db:1a:7e:f3:24:e7:d1:f6:0d:1c:0a:2f:62:f7: 22:e7:dd:8e:ce:da:ea:30:50:a3:74:e2:da:da:96:b9:99:37: bb:6b:82:61:bd:74:52:ac:4e:cc:41:79:2d:5d:e8:bf:1f:1e: b2:c8:d9:e8:56:31:5a:5f:29:26:73:ca:fd:0a:23:f3:6a:a0: 92:c1:0c:0e:c8:0c:28:a4:6f:28:19:da:3c:de:e2:f0:08:d1: a5:85:fd:0f:48:09:a2:d3:a8:3b:f6:ec:27:85:a2:0c:b9:be: f5:c7:0a:ac:e7:79:de:0c:a1:81:7c:fa:36:ab:3c:03:fd:8e: e1:66:53:81:2e:c5:65:df:95:9c:b2:ae:0a:92:11:d3:e2:1f: 85:ec:64:78:a0:06:9a:47:29:db:d6:7f:48:09:05:1c:7c:ba: 7c:ec:fa:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkmF9nrKWVjZYt9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk NWVlMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk MmIzODM3MmItYmI5My00NjUxLWEwMmEtZmIzZTY3NDE3NTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgto0fHzgrB3+BSsrBs+xWS/pHcN078cOMyR7 yqycxvQBq6c6oymNDC0AFcaiX+YEaIhhCnugGZk3rIPIgxbmXM9CnQiLxIEwt0bS sLNBuvs9m3/66rCx+ixRXZcH9GboVtwvRUctER4PiAfkVa8ScCnkeJMCJtSQOC2l ZpUOlOQu0wWrv6TWsEj8gR7BdjYPcVqVcwswyZVng/fIU9wRWKChUHIMxA5uuaIz rs31sPn6kpokhiUjtcVmNeOcRAnFLy3WAk7GrKnlCAH5qD/EzfiaAbG6E4qeKda/ Sz+qfy/aYe0eTkYV7qR8OAdn8g9L7QgNlzbzrnSIQd0HwfZZOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPkDKZpyjkiAMqo8NHoruyeVSOvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5 MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvZDZlZDgzYjctZDVkZi0z YTllLWI0NGEtZmQ3YjU0MmJmYjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4 Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1 YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HvdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjlLevC/PKK9zx6yDnpYLbo3/g6i0dHyNqkpl9yfZmcCxX7EhuTDEs5 PFR8OwEfItV1lxBzRbux+TbMlDohHwGHvkTIyasJCcZ/HlopPkgA5TguWH8HqMSm syvvZUDbGn7zJOfR9g0cCi9i9yLn3Y7O2uowUKN04tralrmZN7trgmG9dFKsTsxB eS1d6L8fHrLI2ehWMVpfKSZzyv0KI/NqoJLBDA7IDCikbygZ2jze4vAI0aWF/Q9I CaLTqDv27CeFogy5vvXHCqzned4MoYF8+jarPAP9juFmU4EuxWXflZyyrgqSEdPi H4XsZHigBppHKdvWf0gJBRx8unzs+h0= -----END CERTIFICATE-----Generated at Mon Nov 3 16:12:43 2025 by rpki-client