$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/ef2ac345-ce2f-3081-b10e-8289c3bf995e.roa File: ef2ac345-ce2f-3081-b10e-8289c3bf995e.roa (raw, json) Hash identifier: P1SfE0YAt/UZ4aaj2Umc2ULDEr2lfUR9+JbC6MjpatA= Subject key identifier: 03:83:32:5B:06:32:82:B7:18:CC:2A:CA:7D:D6:56:9E:61:89:97:9E Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F4328584B95A7945F64CD24C469296840 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/ef2ac345-ce2f-3081-b10e-8289c3bf995e.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 3491 IP address blocks: 207.176.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:94:5f:64:cd:24:c4:69:29:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=4a858e71-c747-4024-b8c8-5ba2a11f07f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:24:c3:e9:19:df:20:c0:e3:dc:cb:bc:47:15: e7:4b:fa:47:f3:47:5d:c1:00:bc:2f:82:66:40:87: 47:bd:87:7f:79:fc:e9:81:36:27:c4:e3:07:85:ff: 7b:04:e4:14:83:45:02:0d:bc:e6:05:42:8a:e6:e2: ac:03:44:35:84:a1:fe:c2:37:d5:64:f6:04:af:81: 55:7f:9a:ed:d2:65:50:e0:f1:ce:09:ca:66:cb:a6: df:1a:b0:45:89:bf:74:6d:b3:83:55:38:7d:d2:8b: be:01:51:ae:6e:df:d0:e8:26:0c:0b:e2:fb:76:5c: c1:93:91:e7:82:85:83:b6:92:28:ad:fc:d5:5c:cc: d3:b8:fa:cb:59:3c:84:94:50:6c:c1:35:2b:da:23: 05:c1:c5:ce:fd:0c:04:4c:5f:16:af:d7:ad:30:97: 38:64:d1:5c:b6:4f:8f:66:9a:56:8c:95:32:21:78: 36:38:a7:8e:a7:a8:8b:87:1c:7f:6e:04:18:c7:f6: 4a:95:40:1d:19:e7:e7:f6:d3:41:67:f7:44:6a:65: 2b:12:4a:45:17:29:18:57:fa:a5:6a:36:51:b7:15: 61:7f:8d:a2:df:ea:e9:8c:16:fb:b8:8f:e0:44:81: f9:56:c2:b3:82:64:3d:f6:36:db:61:42:37:dd:00: c8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:83:32:5B:06:32:82:B7:18:CC:2A:CA:7D:D6:56:9E:61:89:97:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/ef2ac345-ce2f-3081-b10e-8289c3bf995e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 207.176.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:14:bb:4f:85:ce:dc:53:18:d4:86:87:af:98:0a:ff:8c:13: 08:6b:f3:08:88:9b:8a:ba:be:c2:46:3e:0a:1b:7a:c8:5d:0e: 6c:78:76:ee:2d:bb:13:e3:a4:85:40:8e:ce:1a:a0:db:44:f3: 77:40:1a:b7:50:f9:c4:6d:3c:1e:86:91:85:53:5a:a4:5f:8c: 4e:8a:3c:7b:53:53:2d:4a:e1:e0:4d:f9:85:92:68:e6:1e:e1: fc:63:4c:19:45:a1:9f:3e:00:60:c1:25:23:0b:63:64:52:7c: 5f:43:0c:09:0b:ae:60:1c:69:4e:61:8e:3f:56:b5:9b:ef:92: a9:42:18:a4:38:03:dd:36:d8:7a:a3:bc:21:18:a8:99:7f:3a: df:01:7d:b7:4a:13:34:bc:df:dd:16:15:97:2a:02:3b:37:a2: 4a:54:5a:19:15:09:87:f7:55:a9:45:d9:30:87:ff:d7:74:1d: 71:80:ce:36:6f:bb:0d:4e:ff:ba:19:2e:13:43:be:03:c9:0c: a5:e4:97:bf:22:d3:86:d5:22:22:1f:68:e5:44:24:b8:f8:7b: d8:dc:91:ac:e4:a2:03:5e:27:54:d8:a2:d7:a5:36:b1:93:28: 36:b6:31:b1:e7:5e:cf:3f:63:0f:6b:80:e9:c7:54:5e:93:2f: 80:25:5b:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5RfZM0kxGkpaEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NGE4NThlNzEtYzc0Ny00MDI0LWI4YzgtNWJhMmExMWYwN2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiTD6RnfIMDj3Mu8RxXnS/pH80ddwQC8L4Jm QIdHvYd/efzpgTYnxOMHhf97BOQUg0UCDbzmBUKK5uKsA0Q1hKH+wjfVZPYEr4FV f5rt0mVQ4PHOCcpmy6bfGrBFib90bbODVTh90ou+AVGubt/Q6CYMC+L7dlzBk5Hn goWDtpIorfzVXMzTuPrLWTyElFBswTUr2iMFwcXO/QwETF8Wr9etMJc4ZNFctk+P ZppWjJUyIXg2OKeOp6iLhxx/bgQYx/ZKlUAdGefn9tNBZ/dEamUrEkpFFykYV/ql ajZRtxVhf42i3+rpjBb7uI/gRIH5VsKzgmQ99jbbYUI33QDI0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAODMlsGMoK3GMwqyn3WVp5hiZeeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvZWYyYWMzNDUtY2UyZi0z MDgxLWIxMGUtODI4OWMzYmY5OTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHz7AAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAUu0+FztxTGNSGh6+YCv+MEwhr8wiIm4q6vsJGPgobeshdDmx4du4t uxPjpIVAjs4aoNtE83dAGrdQ+cRtPB6GkYVTWqRfjE6KPHtTUy1K4eBN+YWSaOYe 4fxjTBlFoZ8+AGDBJSMLY2RSfF9DDAkLrmAcaU5hjj9WtZvvkqlCGKQ4A9022Hqj vCEYqJl/Ot8BfbdKEzS8390WFZcqAjs3okpUWhkVCYf3ValF2TCH/9d0HXGAzjZv uw1O/7oZLhNDvgPJDKXkl78i04bVIiIfaOVEJLj4e9jckazkogNeJ1TYotelNrGT KDa2MbHnXs8/Yw9rgOnHVF6TL4AlW1I= -----END CERTIFICATE-----Generated at Sat Oct 25 13:35:35 2025 by rpki-client