$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/d97d9c80-7670-3dfc-af78-3aea843af4ca.roa File: d97d9c80-7670-3dfc-af78-3aea843af4ca.roa (raw, json) Hash identifier: 9qre0DvXn7x7cR7g8GQEtvkyVsvrKAg8SXIaLKpTb9M= Subject key identifier: DE:99:67:02:16:75:20:2F:7A:0B:56:52:22:A9:57:75:61:16:52:D1 Certificate issuer: /CN=55640631-1b52-4455-ab16-7633a452f342 Certificate serial: 010D0C9F4328584B99D7AE421A30A4355BCF53C0 Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/d97d9c80-7670-3dfc-af78-3aea843af4ca.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 13760 IP address blocks: 209.209.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:ae:42:1a:30:a4:35:5b:cf:53:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55640631-1b52-4455-ab16-7633a452f342 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=1a59e5fb-9ce3-49a0-9de5-e61a4a66f601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2d:6e:7d:96:f9:29:c0:fd:bb:38:17:74:f1: af:c4:eb:4b:65:57:af:23:f8:e4:66:b5:1f:5f:1e: e9:e7:cc:f7:de:67:51:30:1a:4d:1a:46:d0:ac:29: d4:cb:8c:82:18:e1:ca:73:b6:32:d6:5a:0f:95:6b: 81:05:11:50:24:e1:dc:34:45:bd:69:04:a1:b4:ea: 7f:7f:ff:68:a3:52:fe:01:b6:a5:ba:be:c2:e0:8e: 74:d4:13:1c:45:aa:fe:4f:bc:e7:1f:8b:ae:40:a4: 48:75:04:bd:14:ba:1c:ee:fe:57:35:de:4a:50:24: 72:f4:1d:c8:09:06:b3:84:41:d6:1d:30:2d:1b:46: 50:24:d8:af:61:b3:14:e5:e2:5e:be:53:26:0c:5d: b5:47:30:83:33:b1:99:64:3e:3a:d4:66:69:bc:42: 02:ac:f0:1a:75:01:91:05:23:4e:d8:b8:47:44:1e: 23:9d:05:d5:06:7c:ff:96:9f:b7:2f:52:28:fd:13: a6:c3:ad:a4:b9:07:b9:fe:c9:49:46:63:e6:89:ab: 65:8a:28:20:bd:cd:01:32:ba:c9:85:d8:82:ad:5d: f1:94:cf:e1:b2:72:f7:c8:08:6c:db:81:6c:71:72: 38:f1:62:93:ca:6c:3e:8a:9e:ff:9a:8a:e5:a3:61: 31:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:99:67:02:16:75:20:2F:7A:0B:56:52:22:A9:57:75:61:16:52:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/d97d9c80-7670-3dfc-af78-3aea843af4ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl X509v3 Authority Key Identifier: keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer sbgp-ipAddrBlock: critical IPv4: 209.209.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:1c:48:fb:a1:1c:7b:ed:4d:0d:81:84:22:21:8c:c4:c8:0e: 09:da:73:fa:9b:c9:1d:56:1b:df:8a:ab:1b:cf:eb:5f:4f:8d: 58:e7:19:cc:01:3d:95:4f:f6:f8:81:fd:eb:17:0e:56:e0:b1: 77:a1:03:9d:bc:ac:6e:2a:31:5b:15:fb:a1:1b:aa:db:30:cc: 91:c8:33:cf:cb:41:3f:04:f9:43:27:62:89:67:ea:6f:24:67: 9b:22:1e:2e:1f:66:76:8c:45:36:e4:1d:56:cb:bb:bd:c6:d4: 26:e6:82:d3:41:4b:30:a8:01:83:78:90:1f:10:73:3b:a4:f7: 16:e1:e1:a6:6b:4f:ba:d3:8a:96:e7:2b:ff:c3:fd:cd:9a:1e: 66:28:d0:65:bd:13:a2:fe:2e:c8:74:13:7c:ed:3f:c5:51:ed: 00:09:a7:33:60:0f:51:11:26:e8:4b:b7:43:66:4b:7d:df:7b: 8b:3b:ef:11:27:66:61:7e:bf:84:3c:87:b5:9f:e9:69:27:2f: ea:18:8f:e8:84:93:7c:9a:fd:bf:18:67:62:ea:56:c4:8d:e4: 2b:c0:1c:48:83:ff:a7:b2:2a:80:cf:ee:a7:fc:9e:7e:46:26: 3e:c4:8f:00:d0:94:37:3e:82:2d:2e:78:8b:0d:00:c8:3e:f7: 6c:74:47:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ165CGjCkNVvPU8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU2NDA2MzEtMWI1Mi00NDU1LWFiMTYtNzYzM2E0NTJm MzQyMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MWE1OWU1ZmItOWNlMy00OWEwLTlkZTUtZTYxYTRhNjZmNjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS1ufZb5KcD9uzgXdPGvxOtLZVevI/jkZrUf Xx7p58z33mdRMBpNGkbQrCnUy4yCGOHKc7Yy1loPlWuBBRFQJOHcNEW9aQShtOp/ f/9oo1L+Abalur7C4I501BMcRar+T7znH4uuQKRIdQS9FLoc7v5XNd5KUCRy9B3I CQazhEHWHTAtG0ZQJNivYbMU5eJevlMmDF21RzCDM7GZZD461GZpvEICrPAadQGR BSNO2LhHRB4jnQXVBnz/lp+3L1Io/ROmw62kuQe5/slJRmPmiatliiggvc0BMrrJ hdiCrV3xlM/hsnL3yAhs24FscXI48WKTymw+ip7/morlo2ExCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6ZZwIWdSAvegtWUiKpV3VhFlLRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0 MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMzYTQ1MmYzNDIvZDk3ZDljODAtNzY3MC0z ZGZjLWFmNzgtM2FlYTg0M2FmNGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU2NDA2MzEtMWI1Mi00NDU1LWFi MTYtNzYzM2E0NTJmMzQyLzU1NjQwNjMxLTFiNTItNDQ1NS1hYjE2LTc2MzNhNDUy ZjM0Mi5jcmwwHwYDVR0jBBgwFoAUUFWo2WFkn0lVufdBNbv9C6u3l7wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMz YTQ1MmYzNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0dHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFscSPuhHHvtTQ2BhCIhjMTIDgnac/qbyR1WG9+KqxvP619PjVjnGcwB PZVP9viB/esXDlbgsXehA528rG4qMVsV+6EbqtswzJHIM8/LQT8E+UMnYoln6m8k Z5siHi4fZnaMRTbkHVbLu73G1CbmgtNBSzCoAYN4kB8Qczuk9xbh4aZrT7rTipbn K//D/c2aHmYo0GW9E6L+Lsh0E3ztP8VR7QAJpzNgD1ERJuhLt0NmS33fe4s77xEn ZmF+v4Q8h7Wf6WknL+oYj+iEk3ya/b8YZ2LqVsSN5CvAHEiD/6eyKoDP7qf8nn5G Jj7EjwDQlDc+gi0ueIsNAMg+92x0R4A= -----END CERTIFICATE-----Generated at Tue Oct 28 02:40:05 2025 by rpki-client