$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/50e5ee0a-a970-3a04-beba-69c525f3c7e6.roa File: 50e5ee0a-a970-3a04-beba-69c525f3c7e6.roa (raw, json) Hash identifier: fYvj4a5uQotYPqppRHS9/FFhYwx0wj5FdvzMASu/JeM= Subject key identifier: C7:07:C8:89:85:E8:61:9A:05:4A:60:C6:8D:E4:7F:9F:BF:C2:39:14 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584B970CE54C7832964D04FB6600 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/50e5ee0a-a970-3a04-beba-69c525f3c7e6.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 30967 IP address blocks: 205.252.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:e5:4c:78:32:96:4d:04:fb:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=eb67b5eb-8ac4-46af-a867-930f8dc2a804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:45:34:67:3e:c4:c0:92:4d:a3:26:4c:30:6b: b2:4a:85:f7:2d:4c:f1:3a:19:70:e5:40:14:c8:ff: 96:4d:65:cb:45:0b:8f:ea:85:66:e6:ff:3f:bf:76: f5:e8:ab:cb:88:ed:8f:55:20:21:16:16:4d:c6:db: 6e:bd:04:12:d5:a6:bd:3c:73:e7:33:3c:d1:74:df: 78:d1:f1:0a:ea:ce:89:e9:a0:72:3b:2e:d7:06:a1: e5:38:2a:bc:cf:59:89:3f:66:76:fa:f6:30:f9:d1: 77:da:32:3d:d0:76:55:12:8e:63:54:c7:ad:f3:39: 92:7d:71:2b:2f:31:4b:c9:75:87:66:d9:6e:42:01: 28:25:46:c8:a0:08:b9:08:21:f2:6a:59:7d:83:b1: e0:66:60:e4:36:fc:ad:78:95:55:75:43:ab:36:ad: e9:a7:34:ad:2e:46:e8:55:35:34:ac:0b:e0:80:46: a8:fa:16:21:59:c1:e9:2e:78:3d:a5:0e:64:51:41: 76:47:a8:9b:76:07:18:76:00:f9:a3:06:f0:c4:24: 5a:05:45:43:2c:73:40:09:18:f2:16:cf:30:94:49: f8:5a:77:2d:36:6e:cc:8d:5b:df:91:79:05:25:46: 62:da:b5:71:a9:e5:a1:77:32:93:a5:af:36:38:85: d7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:07:C8:89:85:E8:61:9A:05:4A:60:C6:8D:E4:7F:9F:BF:C2:39:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/50e5ee0a-a970-3a04-beba-69c525f3c7e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 205.252.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:a1:44:1f:80:4f:3e:2d:07:de:6c:6e:e1:34:00:f1:08:b8: 72:32:eb:fb:56:22:29:fc:a6:10:16:38:48:f5:b2:10:f1:25: 77:99:6f:a4:4d:9f:07:fe:2f:43:5d:98:94:f3:59:12:a6:43: 8c:9c:ed:94:37:b5:8c:9e:dc:3f:c6:28:df:cd:1a:de:0f:8d: 77:e3:4a:38:c7:ea:a0:dc:c8:f6:7c:92:91:21:d8:6b:06:7c: ec:f3:3f:b3:2c:98:03:d8:86:31:10:d9:9e:51:f8:3b:0c:70: c1:db:ce:92:1a:59:7f:6a:dc:d3:ab:dc:5f:43:67:7d:24:95: b9:e4:59:dd:df:97:62:18:7b:89:e6:7c:88:3c:cc:92:37:6a: 06:95:c2:41:22:81:48:6d:e3:ce:7f:36:95:b0:49:c1:22:9b: 20:06:a9:ba:b9:d5:82:7d:f9:89:c2:fe:2a:90:77:98:00:37: 6a:33:06:d8:d3:a0:84:a2:fc:66:3d:e7:3b:3e:48:cb:c4:a6: 2a:59:3a:a1:28:41:3d:fc:99:e2:2f:9d:3d:6a:45:6f:61:f0: 7a:bd:d1:8e:71:83:ff:6e:77:40:e0:c9:2c:35:5d:bd:c3:61: f7:26:dd:bb:bc:db:3f:19:05:9a:84:81:8c:cb:54:b1:a3:61: 03:f0:bb:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDOVMeDKWTQT7ZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ZWI2N2I1ZWItOGFjNC00NmFmLWE4NjctOTMwZjhkYzJhODA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEU0Zz7EwJJNoyZMMGuySoX3LUzxOhlw5UAU yP+WTWXLRQuP6oVm5v8/v3b16KvLiO2PVSAhFhZNxttuvQQS1aa9PHPnMzzRdN94 0fEK6s6J6aByOy7XBqHlOCq8z1mJP2Z2+vYw+dF32jI90HZVEo5jVMet8zmSfXEr LzFLyXWHZtluQgEoJUbIoAi5CCHyall9g7HgZmDkNvyteJVVdUOrNq3ppzStLkbo VTU0rAvggEao+hYhWcHpLng9pQ5kUUF2R6ibdgcYdgD5owbwxCRaBUVDLHNACRjy Fs8wlEn4WnctNm7MjVvfkXkFJUZi2rVxqeWhdzKTpa82OIXXqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcHyImF6GGaBUpgxo3kf5+/wjkUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvNTBlNWVlMGEtYTk3MC0z YTA0LWJlYmEtNjljNTI1ZjNjN2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzfzpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmhRB+ATz4tB95sbuE0APEIuHIy6/tWIin8phAWOEj1shDxJXeZb6RN nwf+L0NdmJTzWRKmQ4yc7ZQ3tYye3D/GKN/NGt4PjXfjSjjH6qDcyPZ8kpEh2GsG fOzzP7MsmAPYhjEQ2Z5R+DsMcMHbzpIaWX9q3NOr3F9DZ30klbnkWd3fl2IYe4nm fIg8zJI3agaVwkEigUht485/NpWwScEimyAGqbq51YJ9+YnC/iqQd5gAN2ozBtjT oISi/GY95zs+SMvEpipZOqEoQT38meIvnT1qRW9h8Hq90Y5xg/9ud0DgySw1Xb3D Yfcm3bu82z8ZBZqEgYzLVLGjYQPwu2k= -----END CERTIFICATE-----Generated at Sat Oct 25 13:33:36 2025 by rpki-client