$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/7e94502a-45eb-379b-b267-18d68fcecb1d.roa File: 7e94502a-45eb-379b-b267-18d68fcecb1d.roa (raw, json) Hash identifier: x9isj3NZekQ4eAP8YFVcmZt0QM7bPE2s6ZH7t8+jVXc= Subject key identifier: 38:ED:C5:E2:E8:E1:B7:74:16:B8:93:F9:17:67:A2:2C:66:32:8B:B0 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584B6A61F0471837CC858DF00A00 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/7e94502a-45eb-379b-b267-18d68fcecb1d.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 4760 IP address blocks: 206.161.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:f0:47:18:37:cc:85:8d:f0:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=40d8fdae-524c-402e-a344-9ffeed60d360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:52:78:fc:e5:c8:31:fd:b9:0a:21:98:64:0a: 32:88:01:02:7c:c2:c6:c1:6e:f2:e6:be:66:fc:8f: af:08:48:d8:c9:01:b5:e6:0b:0e:a3:73:ce:bc:fe: 4c:d9:3d:aa:ba:5c:1f:ba:fa:1c:3c:99:4d:30:ea: 8b:a4:3b:68:6f:ac:37:fa:c0:b2:de:43:ba:9c:43: 44:66:02:63:6f:2b:08:04:aa:9b:63:93:3f:88:c9: 63:3a:b6:e7:4d:e5:a3:68:9f:b2:fe:12:0a:91:89: 58:fe:ff:d2:4d:43:6b:79:cd:25:0d:54:da:4a:68: 5e:34:14:20:95:1c:92:ce:81:35:84:fb:e9:d8:03: c7:cf:ec:b7:4f:4a:0f:82:88:f8:06:b8:30:2c:f5: c3:37:bb:dd:73:12:84:af:12:16:4e:6d:25:47:a7: f5:79:7f:58:11:52:18:e9:63:f1:b1:ea:33:51:96: d7:9f:cc:7e:77:7d:26:1e:0f:23:d0:86:61:57:1e: 1f:1e:e0:5b:c3:14:eb:93:61:e5:1f:b6:34:e4:eb: 77:2f:3f:f1:e0:f7:66:3f:a9:b4:6a:d7:32:01:38: 5b:0c:9a:27:35:e7:81:03:c9:af:17:59:de:3b:68: 27:82:3e:61:85:a4:85:73:7d:ab:81:c5:28:52:0f: 88:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:ED:C5:E2:E8:E1:B7:74:16:B8:93:F9:17:67:A2:2C:66:32:8B:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/7e94502a-45eb-379b-b267-18d68fcecb1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 206.161.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:de:1d:86:22:2c:28:55:62:f4:46:4c:86:ea:cc:9d:cf:52: 27:52:6b:c6:a8:5d:b4:8b:26:4d:47:39:b4:14:15:23:47:27: 70:f2:98:5a:21:b9:aa:23:da:e9:d6:2a:fd:58:98:fc:84:38: d9:a0:66:57:47:56:36:1b:fb:86:5f:bd:a6:4f:d1:4f:e9:7c: 2e:90:2b:ab:b2:fc:f8:e8:9d:55:82:f2:e2:18:3f:a1:dc:1a: dc:20:bc:da:8b:63:d9:95:39:63:e8:ae:5a:51:48:89:7d:8f: a3:03:d4:d4:a6:f7:0f:5b:1e:cd:a1:cd:b9:e1:4d:d1:ae:21: 8a:77:d8:1d:7a:c6:1a:92:d8:b3:44:8a:70:1a:56:c3:4e:a4: b1:4a:5e:01:84:33:4e:aa:ba:33:1f:29:ae:fc:a5:14:b7:9c: 08:a8:18:be:7d:1b:42:b0:81:c5:c2:73:bd:59:a1:2c:f8:28: e6:01:8e:3b:02:57:ab:49:8c:cd:44:04:8f:02:98:ad:38:03: 27:6d:a0:81:ec:ea:aa:79:ea:e2:28:8e:a0:1c:1c:54:9d:38: 8e:e7:7f:06:de:8b:14:1c:30:9b:47:6b:2b:06:43:e1:8b:87: 5c:bc:61:98:25:0c:03:0d:7a:82:12:9c:e6:57:11:1a:ad:5e: bd:c9:72:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYfBHGDfMhY3wCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk NDBkOGZkYWUtNTI0Yy00MDJlLWEzNDQtOWZmZWVkNjBkMzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVJ4/OXIMf25CiGYZAoyiAECfMLGwW7y5r5m /I+vCEjYyQG15gsOo3POvP5M2T2qulwfuvocPJlNMOqLpDtob6w3+sCy3kO6nENE ZgJjbysIBKqbY5M/iMljOrbnTeWjaJ+y/hIKkYlY/v/STUNrec0lDVTaSmheNBQg lRySzoE1hPvp2APHz+y3T0oPgoj4BrgwLPXDN7vdcxKErxIWTm0lR6f1eX9YEVIY 6WPxseozUZbXn8x+d30mHg8j0IZhVx4fHuBbwxTrk2HlH7Y05Ot3Lz/x4PdmP6m0 atcyAThbDJonNeeBA8mvF1neO2gngj5hhaSFc32rgcUoUg+I5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjtxeLo4bd0FriT+RdnoixmMouwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvN2U5NDUwMmEtNDVlYi0z NzliLWIyNjctMThkNjhmY2VjYjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzqFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADneHYYiLChVYvRGTIbqzJ3PUidSa8aoXbSLJk1HObQUFSNHJ3DymFoh uaoj2unWKv1YmPyEONmgZldHVjYb+4ZfvaZP0U/pfC6QK6uy/PjonVWC8uIYP6Hc GtwgvNqLY9mVOWPorlpRSIl9j6MD1NSm9w9bHs2hzbnhTdGuIYp32B16xhqS2LNE inAaVsNOpLFKXgGEM06qujMfKa78pRS3nAioGL59G0KwgcXCc71ZoSz4KOYBjjsC V6tJjM1EBI8CmK04AydtoIHs6qp56uIojqAcHFSdOI7nfwbeixQcMJtHaysGQ+GL h1y8YZglDAMNeoISnOZXERqtXr3Jcvs= -----END CERTIFICATE-----Generated at Fri Oct 24 13:00:57 2025 by rpki-client