$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/eb41162d-67c3-3989-9557-d8754f1cec57.roa File: eb41162d-67c3-3989-9557-d8754f1cec57.roa (raw, json) Hash identifier: EMxslfErohNL7a5Y4aJl9AQX2pzgbCoiL18lSkkc1v0= Subject key identifier: F2:6C:E3:D2:1E:99:86:BC:E2:F2:62:2D:22:BB:54:B0:D5:69:CC:80 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584BA0D244ED7EE425FCF408B380 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/eb41162d-67c3-3989-9557-d8754f1cec57.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 3491 IP address blocks: 207.176.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:44:ed:7e:e4:25:fc:f4:08:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=0f4af4cb-6f49-42fd-b301-9a36d93c5c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:59:05:0a:45:dd:2f:95:cc:05:9e:6e:07:92: 0e:69:a0:67:d0:da:64:38:13:68:bb:0a:3e:d3:e5: 07:f3:ea:03:a1:20:3e:e6:f6:2e:77:ae:70:36:53: 83:fc:8b:5c:8d:f7:7d:a1:6b:3b:a1:36:57:87:bc: d3:a3:c0:6d:7d:a6:27:0c:4b:65:d2:90:76:a3:3c: 13:57:6a:07:21:2e:82:92:9e:ee:c4:92:0b:b8:0b: 0d:92:a1:25:eb:6d:cb:b5:a0:b7:58:a8:9b:16:c3: 0e:63:16:16:3d:fc:db:6d:d3:76:d5:23:52:d5:7e: f9:05:cc:9f:ac:87:fd:2e:6a:05:58:d3:f9:23:c7: 3c:d1:d8:19:88:03:99:4f:75:0a:7a:24:81:b7:95: fb:4c:e6:ee:ff:da:80:5e:ea:48:da:30:d0:0b:fc: 30:1c:da:76:21:2b:73:09:2c:19:d1:8a:34:2c:d2: 15:b9:99:de:e8:a7:64:73:c4:75:39:e0:61:1e:bf: 12:32:c5:1d:44:29:87:93:61:cd:a4:7c:7c:4e:91: 4f:65:18:f7:37:a2:d9:92:50:64:93:d1:4b:c4:79: 37:5a:9c:b9:4b:f3:02:20:70:2f:61:70:5b:f8:f9: d7:97:3e:f7:77:c8:76:f9:21:1b:ec:61:40:f9:92: ba:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:6C:E3:D2:1E:99:86:BC:E2:F2:62:2D:22:BB:54:B0:D5:69:CC:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/eb41162d-67c3-3989-9557-d8754f1cec57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 207.176.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:c0:46:7b:c4:b3:41:90:bc:f5:05:1c:f2:1d:73:a8:dd:06: db:d9:f0:58:91:b2:9c:5e:37:f9:4e:b7:57:a7:a6:ac:17:79: 07:06:a2:79:34:d0:9f:ff:d5:ec:5f:5a:11:d9:e0:0f:5f:4a: e7:9c:fb:2d:5b:9a:fd:23:16:da:56:b2:fb:7d:88:96:86:a8: 04:75:38:1d:7d:2c:13:a9:46:39:15:f5:4c:1c:7a:9b:5e:0d: 59:66:ce:a8:a6:95:b7:28:c3:4d:35:78:49:cd:37:91:ce:5e: 0c:41:f0:fc:b8:d5:3b:95:22:46:d7:44:2b:09:5d:33:fe:45: bb:00:24:79:5f:f3:43:cd:27:46:a3:80:5f:84:0c:da:56:95: ca:16:25:0f:34:b2:31:e9:32:f2:8f:8c:cc:47:21:92:9f:75: a0:9c:d2:8b:76:57:76:40:1e:a6:88:f0:bf:89:07:f3:c5:ac: 70:df:4f:ed:b6:25:c2:c4:91:b8:ee:9c:9f:f9:74:95:70:05: d0:1c:95:76:e0:08:51:db:1f:c1:fd:92:1f:96:d7:5d:f8:8b: c7:58:d2:2e:ee:61:2e:de:40:68:b7:f1:b5:ab:f8:d2:47:7c: fe:b6:27:b4:06:ea:4a:9c:59:7b:e2:3d:a9:7a:12:77:b7:00: 3e:83:ba:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0kTtfuQl/PQIs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MGY0YWY0Y2ItNmY0OS00MmZkLWIzMDEtOWEzNmQ5M2M1YzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFkFCkXdL5XMBZ5uB5IOaaBn0NpkOBNouwo+ 0+UH8+oDoSA+5vYud65wNlOD/Itcjfd9oWs7oTZXh7zTo8BtfaYnDEtl0pB2ozwT V2oHIS6Ckp7uxJILuAsNkqEl623LtaC3WKibFsMOYxYWPfzbbdN21SNS1X75Bcyf rIf9LmoFWNP5I8c80dgZiAOZT3UKeiSBt5X7TObu/9qAXupI2jDQC/wwHNp2IStz CSwZ0Yo0LNIVuZne6Kdkc8R1OeBhHr8SMsUdRCmHk2HNpHx8TpFPZRj3N6LZklBk k9FLxHk3Wpy5S/MCIHAvYXBb+PnXlz73d8h2+SEb7GFA+ZK6OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJs49IemYa84vJiLSK7VLDVacyAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvZWI0MTE2MmQtNjdjMy0z OTg5LTk1NTctZDg3NTRmMWNlYzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz7BQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITARnvEs0GQvPUFHPIdc6jdBtvZ8FiRspxeN/lOt1enpqwXeQcGonk0 0J//1exfWhHZ4A9fSuec+y1bmv0jFtpWsvt9iJaGqAR1OB19LBOpRjkV9Uwcepte DVlmzqimlbcow001eEnNN5HOXgxB8Py41TuVIkbXRCsJXTP+RbsAJHlf80PNJ0aj gF+EDNpWlcoWJQ80sjHpMvKPjMxHIZKfdaCc0ot2V3ZAHqaI8L+JB/PFrHDfT+22 JcLEkbjunJ/5dJVwBdAclXbgCFHbH8H9kh+W1134i8dY0i7uYS7eQGi38bWr+NJH fP62J7QG6kqcWXviPal6Ene3AD6DuiI= -----END CERTIFICATE-----Generated at Sat Oct 25 13:35:54 2025 by rpki-client