$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5cfdcd6a-8a95-39df-b60f-5fd2ad86a2a0.roa File: 5cfdcd6a-8a95-39df-b60f-5fd2ad86a2a0.roa (raw, json) Hash identifier: FfSm6V6GgBcoqSUN1AphHtZzfWDZ7fY+b9AE7cWhe6o= Subject key identifier: 64:6C:1A:49:89:29:F9:0C:E3:F6:0F:F0:CF:77:99:3E:EE:3B:F0:AF Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584BA0E9A099EF703C2EC96C0D80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5cfdcd6a-8a95-39df-b60f-5fd2ad86a2a0.roa Signing time: Fri 24 Oct 2025 13:47:46 +0000 ROA not before: Fri 24 Oct 2025 13:47:46 +0000 ROA not after: Thu 22 Jan 2026 14:47:46 +0000 asID: 49020 IP address blocks: 206.62.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:e9:a0:99:ef:70:3c:2e:c9:6c:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 24 13:47:46 2025 GMT Not After : Jan 22 14:47:46 2026 GMT Subject: CN=333c745c-22d6-48dd-b7a5-72488c26f69c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6a:91:ef:2c:a2:c3:e0:78:e8:ba:cf:86:48: cd:e4:f4:4a:49:cf:13:16:cb:8b:46:95:5e:ab:55: c3:e0:e7:71:8b:15:d1:bb:01:9c:55:ac:4f:7e:a1: 4e:6d:3f:b4:4e:e3:9a:ba:a6:53:96:90:72:00:61: 08:1b:bd:30:32:7c:e4:0f:c6:76:04:a0:a4:ef:d4: 7f:8b:1e:00:d2:56:9a:ce:c4:15:da:ab:b0:9b:f9: 82:05:ec:e4:e1:49:53:3d:43:4b:56:2b:13:7a:90: 0b:f5:2c:68:81:47:53:78:3f:07:64:cb:9a:84:c0: 92:bf:0d:91:77:aa:0d:c5:c7:4d:e9:43:64:fb:8b: 6b:fd:5f:73:28:da:8e:f2:52:e1:d6:3f:c8:0b:43: 8f:07:97:c1:f0:ed:e2:d5:35:43:2f:c3:13:05:9d: f2:f4:86:ea:f9:35:0f:1c:52:35:c3:1c:19:64:1a: 7e:4a:bc:c1:4b:52:b4:ea:95:0d:53:44:4b:5f:77: 9a:33:1d:c7:76:20:bd:39:2d:a6:4c:12:5b:05:cc: 7b:ff:d8:13:1e:09:22:90:f4:ed:c4:19:6a:c6:e5: dd:c7:ab:4f:b4:77:b0:77:ed:2f:fd:68:d3:54:26: 83:f2:25:67:e5:86:5e:3f:01:7b:e9:ae:0f:1c:27: 20:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:6C:1A:49:89:29:F9:0C:E3:F6:0F:F0:CF:77:99:3E:EE:3B:F0:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/5cfdcd6a-8a95-39df-b60f-5fd2ad86a2a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 206.62.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:71:16:cb:0d:57:44:0d:66:70:40:79:d9:84:04:f0:b3:84: 91:01:be:73:3d:04:c7:b4:96:b1:74:d8:ac:f0:df:36:29:9c: 62:c9:59:3d:27:34:96:b8:e8:9d:86:9b:7b:8e:3c:4c:33:6b: d6:45:ca:9f:c7:ad:19:10:a1:e1:a6:ce:d4:2f:94:37:42:ac: 44:b7:75:96:f1:ce:84:c2:b8:83:ba:ad:fe:2e:3c:11:19:09: 24:16:4b:e8:95:20:c3:21:e3:23:5b:80:c2:d1:5b:2e:1a:6e: d3:56:27:bf:01:4b:a4:94:95:78:48:fa:82:ca:66:68:de:9a: 00:87:f5:0c:d6:87:8c:9a:33:59:73:98:05:ee:91:71:02:f9: ae:c7:bf:a2:cb:dc:2d:85:58:fb:80:d0:8e:ba:51:95:11:5c: f1:5f:a6:9e:74:93:fd:49:7d:2f:1e:0c:33:d6:13:4e:40:c2: ae:df:a3:ff:15:70:65:15:5f:13:15:34:5a:9b:4a:5d:f5:ed: db:e6:05:6c:88:2e:c6:a8:8e:29:84:56:0f:cf:f7:33:b6:de: 63:f9:a6:24:52:65:45:42:55:22:24:49:24:1b:17:4f:6c:e1: 2c:d6:c2:05:7a:e9:d6:f9:09:63:13:37:6a:b0:ef:4b:20:4f: 57:11:38:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug6aCZ73A8LslsDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTAyNDEzNDc0NloXDTI2MDEyMjE0NDc0NlowLzEtMCsGA1UEAxMk MzMzYzc0NWMtMjJkNi00OGRkLWI3YTUtNzI0ODhjMjZmNjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWqR7yyiw+B46LrPhkjN5PRKSc8TFsuLRpVe q1XD4OdxixXRuwGcVaxPfqFObT+0TuOauqZTlpByAGEIG70wMnzkD8Z2BKCk79R/ ix4A0laazsQV2quwm/mCBezk4UlTPUNLVisTepAL9SxogUdTeD8HZMuahMCSvw2R d6oNxcdN6UNk+4tr/V9zKNqO8lLh1j/IC0OPB5fB8O3i1TVDL8MTBZ3y9Ibq+TUP HFI1wxwZZBp+SrzBS1K06pUNU0RLX3eaMx3HdiC9OS2mTBJbBcx7/9gTHgkikPTt xBlqxuXdx6tPtHewd+0v/WjTVCaD8iVn5YZePwF76a4PHCcgPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRsGkmJKfkM4/YP8M93mT7uO/CvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvNWNmZGNkNmEtOGE5NS0z OWRmLWI2MGYtNWZkMmFkODZhMmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzj4wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMpxFssNV0QNZnBAedmEBPCzhJEBvnM9BMe0lrF02Kzw3zYpnGLJWT0n NJa46J2Gm3uOPEwza9ZFyp/HrRkQoeGmztQvlDdCrES3dZbxzoTCuIO6rf4uPBEZ CSQWS+iVIMMh4yNbgMLRWy4abtNWJ78BS6SUlXhI+oLKZmjemgCH9QzWh4yaM1lz mAXukXEC+a7Hv6LL3C2FWPuA0I66UZURXPFfpp50k/1JfS8eDDPWE05Awq7fo/8V cGUVXxMVNFqbSl317dvmBWyILsaojimEVg/P9zO23mP5piRSZUVCVSIkSSQbF09s 4SzWwgV66db5CWMTN2qw70sgT1cROHU= -----END CERTIFICATE-----Generated at Mon Oct 27 21:38:48 2025 by rpki-client