$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/a37594dd-4a90-3345-9735-36199e690a84.roa File: a37594dd-4a90-3345-9735-36199e690a84.roa (raw, json) Hash identifier: dX9i5dRu4TMR8iyxjZebdRl2OBA1gfgPaOY5eJzy2N8= Subject key identifier: 2A:C2:73:46:41:4C:3B:B0:44:31:C7:BC:05:19:9E:24:9C:EB:A5:6D Certificate issuer: /CN=88e1646b-e1b3-42e7-8591-3a57fd436369 Certificate serial: 010D0C9F4328584BA0D25E73FF01A62520CC2400 Authority key identifier: BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/a37594dd-4a90-3345-9735-36199e690a84.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 14513 IP address blocks: 205.221.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:5e:73:ff:01:a6:25:20:cc:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88e1646b-e1b3-42e7-8591-3a57fd436369 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=d522e305-1071-4e04-a543-37fcd3cf7581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9f:4c:34:bf:84:79:a7:cb:fc:7d:f4:f5:d6: a8:a5:f2:01:a8:28:47:f4:85:6a:c0:86:c5:45:fb: ba:c2:51:77:5f:e8:7b:ed:9a:e1:3c:0d:8d:2d:0e: d4:29:d4:d1:3b:eb:45:e9:e6:8a:08:ee:00:af:2b: 5d:d7:ee:f8:bf:33:17:a3:b3:9e:56:e2:1a:cd:67: 0b:93:02:ff:29:a6:ad:c6:ba:17:ed:07:c1:60:a0: 7a:be:a4:63:17:6d:0a:37:20:a3:54:63:ce:15:c5: 17:5d:8b:b4:72:ac:13:c7:e8:14:6c:c7:32:f2:00: ee:7b:39:7b:a7:7b:78:4c:52:88:c8:b0:77:68:b6: e5:af:4b:47:ce:07:a4:b7:e6:d0:34:12:79:f7:11: a2:65:d8:0a:eb:91:fc:cd:78:4f:6f:91:d7:db:65: e4:93:12:56:d4:66:e5:94:f8:bd:e4:a8:25:60:87: 41:2a:b7:c8:e0:0e:ad:3d:e9:61:81:76:9b:85:3e: 3d:2c:d1:09:43:2d:65:3c:27:96:9c:0d:c5:a5:20: 32:36:4d:87:c0:07:b0:1b:8d:e7:30:78:53:d8:d6: c7:a9:dd:9a:f8:dc:7d:4d:f6:b1:ee:5b:55:3c:91: 9e:35:3b:9c:09:36:d6:3f:48:2d:49:08:17:2e:9e: af:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C2:73:46:41:4C:3B:B0:44:31:C7:BC:05:19:9E:24:9C:EB:A5:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/a37594dd-4a90-3345-9735-36199e690a84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl X509v3 Authority Key Identifier: keyid:BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer sbgp-ipAddrBlock: critical IPv4: 205.221.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:70:43:0b:c5:43:71:96:f9:a0:38:d2:4b:12:f0:2b:0e:c4: 60:22:45:7c:db:f6:d1:24:69:07:23:a7:65:b5:ea:bb:90:5f: 3b:47:ae:01:ba:2a:bb:38:85:67:51:d6:e0:1d:60:ad:56:4e: 5f:a4:fb:72:4c:ab:7d:0d:b2:c4:ab:55:7b:b1:9e:ad:cc:b4: 62:b0:df:e6:a1:e4:dd:87:58:ce:b6:a2:fc:b9:35:d6:36:56: f3:31:29:24:14:ef:42:cd:6e:e6:8d:72:82:f9:1a:93:2b:90: 27:71:3d:36:b0:d7:e3:c5:c8:a3:46:e6:02:5b:b2:b6:70:fd: 00:2c:c3:bb:1d:0e:58:34:13:0d:dd:35:31:f2:c7:65:1b:b0: ae:0f:3f:dd:79:e6:f1:4c:46:e2:4d:4d:34:c3:ac:07:93:43: 26:53:1c:37:29:07:b1:5f:3a:ff:48:27:ee:60:8c:0b:d4:02: 39:b3:45:46:bf:2b:69:55:52:34:9f:61:a3:1a:b2:26:92:e1: 1e:d4:a3:dc:22:b1:f3:23:af:5b:c1:bc:f5:e5:24:d9:f0:b5: 45:52:e2:cb:cf:1d:81:81:f0:a9:40:01:21:9d:63:9d:59:6b: ff:2a:bf:5a:d6:4e:55:ea:6e:df:18:8d:80:b7:af:b3:f8:d3: de:94:0b:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0l5z/wGmJSDMJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhlMTY0NmItZTFiMy00MmU3LTg1OTEtM2E1N2ZkNDM2 MzY5MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ZDUyMmUzMDUtMTA3MS00ZTA0LWE1NDMtMzdmY2QzY2Y3NTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJ9MNL+EeafL/H309daopfIBqChH9IVqwIbF Rfu6wlF3X+h77ZrhPA2NLQ7UKdTRO+tF6eaKCO4Arytd1+74vzMXo7OeVuIazWcL kwL/KaatxroX7QfBYKB6vqRjF20KNyCjVGPOFcUXXYu0cqwTx+gUbMcy8gDuezl7 p3t4TFKIyLB3aLblr0tHzgekt+bQNBJ59xGiZdgK65H8zXhPb5HX22XkkxJW1Gbl lPi95KglYIdBKrfI4A6tPelhgXabhT49LNEJQy1lPCeWnA3FpSAyNk2HwAewG43n MHhT2NbHqd2a+Nx9Tfax7ltVPJGeNTucCTbWP0gtSQgXLp6vuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrCc0ZBTDuwRDHHvAUZniSc66VtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84OGUx NjQ2Yi1lMWIzLTQyZTctODU5MS0zYTU3ZmQ0MzYzNjkvYTM3NTk0ZGQtNGE5MC0z MzQ1LTk3MzUtMzYxOTllNjkwYTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODhlMTY0NmItZTFiMy00MmU3LTg1 OTEtM2E1N2ZkNDM2MzY5Lzg4ZTE2NDZiLWUxYjMtNDJlNy04NTkxLTNhNTdmZDQz NjM2OS5jcmwwHwYDVR0jBBgwFoAUukMjcrv3l+XytBPr7L8gMlwthZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84OGUxNjQ2Yi1lMWIzLTQyZTctODU5MS0zYTU3 ZmQ0MzYzNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzd2kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFwQwvFQ3GW+aA40ksS8CsOxGAiRXzb9tEkaQcjp2W16ruQXztHrgG6 Krs4hWdR1uAdYK1WTl+k+3JMq30NssSrVXuxnq3MtGKw3+ah5N2HWM62ovy5NdY2 VvMxKSQU70LNbuaNcoL5GpMrkCdxPTaw1+PFyKNG5gJbsrZw/QAsw7sdDlg0Ew3d NTHyx2UbsK4PP9155vFMRuJNTTTDrAeTQyZTHDcpB7FfOv9IJ+5gjAvUAjmzRUa/ K2lVUjSfYaMasiaS4R7Uo9wisfMjr1vBvPXlJNnwtUVS4svPHYGB8KlAASGdY51Z a/8qv1rWTlXqbt8YjYC3r7P4096UCxI= -----END CERTIFICATE-----Generated at Tue Oct 28 07:15:34 2025 by rpki-client