$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/71e37659-e7c7-3451-968b-7b80386600a8.roa File: 71e37659-e7c7-3451-968b-7b80386600a8.roa (raw, json) Hash identifier: RoUJpiwPCkLE2fVRpUP+9ro2fvv+yY+zr+a9+voDWW0= Subject key identifier: 45:E9:A7:4D:66:A9:89:8F:F6:90:A5:46:59:2B:47:AC:AB:D2:DE:53 Certificate issuer: /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Certificate serial: 010D0C9F4328584B970CDC116E93D828A3AE7D20 Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/71e37659-e7c7-3451-968b-7b80386600a8.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 54238 IP address blocks: 209.151.220.0/22 maxlen: 22 209.151.220.0/24 maxlen: 24 209.151.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:dc:11:6e:93:d8:28:a3:ae:7d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=4cd527a5-ffd5-4de1-9007-317f4574928e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:27:94:b0:10:99:fc:6b:3a:df:d3:92:0e:0b: 49:70:fd:ce:3c:3b:62:8d:fe:82:9a:b0:86:9c:72: 72:c1:b8:79:09:ca:3f:9d:67:79:b8:ca:42:b1:8a: e3:ed:74:a1:ec:00:79:69:d5:3f:cb:f7:29:15:01: 08:e1:83:75:b0:ab:a7:22:01:fd:99:ed:b8:6e:8b: 11:74:12:f6:d7:5c:4c:f3:55:f2:9c:76:18:b4:ed: 25:c2:0d:09:cb:9e:bc:7a:4a:49:a3:32:53:08:ec: 7f:33:c2:6a:4c:ef:87:f8:4e:05:7c:5e:20:95:07: bf:96:ff:cc:e0:cf:bb:55:ec:8e:52:df:9c:6f:92: 1a:dc:86:c9:28:75:3f:a9:de:ca:41:6f:59:29:07: e7:d8:a2:7b:6c:7f:af:11:eb:d7:03:2d:44:ba:01: fe:97:9c:8e:8d:53:7c:73:4f:b5:fb:fc:a4:df:e7: f6:a3:d7:f9:04:19:7f:6a:ba:9f:eb:e7:32:8b:02: ee:f8:1a:ff:44:80:0b:9d:29:d2:83:c9:be:92:d0: a5:4f:39:cf:a4:c4:9d:f1:d4:8e:87:63:81:66:66: 8d:df:e9:13:21:62:e4:ea:e1:b2:c2:d0:4d:7e:d1: 9b:8f:4d:6d:35:e6:d1:b4:8e:33:b8:e9:6d:c5:3c: 89:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E9:A7:4D:66:A9:89:8F:F6:90:A5:46:59:2B:47:AC:AB:D2:DE:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/71e37659-e7c7-3451-968b-7b80386600a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl X509v3 Authority Key Identifier: keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer sbgp-ipAddrBlock: critical IPv4: 209.151.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:13:05:0d:8e:09:70:c1:09:f2:d8:da:1c:24:00:65:14:39: 57:ae:dc:24:6b:39:79:75:4b:e8:fb:29:a3:09:cc:b8:a2:48: 22:8b:14:ff:c7:1d:d8:57:21:45:78:74:d3:5d:d6:e4:23:93: ac:ee:e6:da:45:32:b7:7d:5d:e3:3e:d3:e5:9f:af:e6:78:ed: 1c:47:a7:ad:57:cb:a1:ed:e5:94:9b:8a:a0:31:65:72:31:c1: 05:da:20:cd:e1:9c:7b:59:03:a0:e7:1f:c0:79:19:58:6c:2c: 1d:45:61:16:cb:bd:24:d0:f6:49:a5:b7:cb:9d:a4:8f:98:a9: 05:c1:08:14:c8:55:88:cf:1e:1c:bc:a5:75:e3:3d:93:32:a0: a6:91:34:93:bd:a3:37:99:d7:eb:8f:97:7d:48:dc:65:07:51: 1a:de:bb:67:b8:72:bd:49:96:65:51:54:9f:c5:ea:ff:de:4d: 91:97:21:06:e0:3e:d1:e9:73:18:95:66:8c:d6:a3:8b:2e:63: 92:5a:09:fa:2c:8a:4c:ac:d5:45:2a:5a:19:d2:d1:a7:f3:e2: d0:ae:31:be:4a:86:5a:88:40:03:ce:6d:39:d8:76:23:82:8b: c4:f6:31:76:78:8b:62:5c:cb:12:0e:f1:95:82:4c:6a:49:13: 1c:2f:c1:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDNwRbpPYKKOufSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM1YWY5ZTYtNTAwOS00NGRhLWJkMTMtYWY1YzhlYjU2 NGMzMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk NGNkNTI3YTUtZmZkNS00ZGUxLTkwMDctMzE3ZjQ1NzQ5MjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCeUsBCZ/Gs639OSDgtJcP3OPDtijf6CmrCG nHJywbh5Cco/nWd5uMpCsYrj7XSh7AB5adU/y/cpFQEI4YN1sKunIgH9me24bosR dBL211xM81XynHYYtO0lwg0Jy568ekpJozJTCOx/M8JqTO+H+E4FfF4glQe/lv/M 4M+7VeyOUt+cb5Ia3IbJKHU/qd7KQW9ZKQfn2KJ7bH+vEevXAy1EugH+l5yOjVN8 c0+1+/yk3+f2o9f5BBl/arqf6+cyiwLu+Br/RIALnSnSg8m+ktClTznPpMSd8dSO h2OBZmaN3+kTIWLk6uGywtBNftGbj01tNebRtI4zuOltxTyJlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXpp01mqYmP9pClRlkrR6yr0t5TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVh ZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVjOGViNTY0YzMvNzFlMzc2NTktZTdjNy0z NDUxLTk2OGItN2I4MDM4NjYwMGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWM1YWY5ZTYtNTAwOS00NGRhLWJk MTMtYWY1YzhlYjU2NGMzLzFjNWFmOWU2LTUwMDktNDRkYS1iZDEzLWFmNWM4ZWI1 NjRjMy5jcmwwHwYDVR0jBBgwFoAUip3SRpI+SzXC0JUmHwmxRVsznagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYzVhZjllNi01MDA5LTQ0ZGEtYmQxMy1hZjVj OGViNTY0YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ZfcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABATBQ2OCXDBCfLY2hwkAGUUOVeu3CRrOXl1S+j7KaMJzLiiSCKLFP/H HdhXIUV4dNNd1uQjk6zu5tpFMrd9XeM+0+Wfr+Z47RxHp61Xy6Ht5ZSbiqAxZXIx wQXaIM3hnHtZA6DnH8B5GVhsLB1FYRbLvSTQ9kmlt8udpI+YqQXBCBTIVYjPHhy8 pXXjPZMyoKaRNJO9ozeZ1+uPl31I3GUHURreu2e4cr1JlmVRVJ/F6v/eTZGXIQbg PtHpcxiVZozWo4suY5JaCfosikys1UUqWhnS0afz4tCuMb5KhlqIQAPObTnYdiOC i8T2MXZ4i2JcyxIO8ZWCTGpJExwvwc8= -----END CERTIFICATE-----Generated at Tue Nov 4 13:20:36 2025 by rpki-client