$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/778c411d-d7df-3c97-9219-3ef234ab6f08.roa File: 778c411d-d7df-3c97-9219-3ef234ab6f08.roa (raw, json) Hash identifier: xhYLzL3qZYBdEMaKxgHZcm/NwMkcRauM13c2j2Nuryc= Subject key identifier: 2B:F2:B5:B9:68:9A:0A:09:D0:81:82:0C:3C:9F:71:36:CC:CA:B2:F2 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584B7B21F4031BB71D93EE05C950 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/778c411d-d7df-3c97-9219-3ef234ab6f08.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 207.202.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:21:f4:03:1b:b7:1d:93:ee:05:c9:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=40b61dcf-f6f9-4674-964d-3b960e7548fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8e:71:71:2b:6f:53:2c:8c:33:20:74:a4:c5: 93:54:0d:15:79:6f:25:37:b6:8a:5c:c2:66:67:e3: 84:99:5f:b2:af:63:45:bb:b0:0d:20:3b:df:92:e7: 07:af:d1:ff:5b:5d:25:43:ab:de:77:47:c6:2f:98: a7:40:3b:bc:64:56:6a:7d:8e:e8:2b:6d:01:cb:84: 40:b5:df:90:38:23:4e:cc:d3:06:8a:1f:4a:23:a8: 9d:8d:7c:94:c7:2d:8f:c5:c3:58:fe:69:89:99:c1: e4:fb:6e:d5:0f:23:81:da:5e:04:8c:d5:1d:ba:5b: ee:62:5f:ac:29:4f:bb:62:c0:89:86:7c:ab:95:fe: f4:e6:46:a7:76:3c:ba:4f:c3:20:8f:dc:6f:43:0f: 3d:01:ee:c0:f5:a5:3a:0c:5e:28:81:58:3e:f3:e3: 44:21:86:cf:f7:78:52:9a:95:05:b7:7e:b4:55:26: b4:88:da:04:fb:b0:6b:48:12:6b:3b:ef:42:4b:0d: 91:a6:bd:61:e1:07:23:b0:1e:ca:95:54:42:66:67: b3:90:8e:0c:3d:6b:83:ae:d3:94:66:17:5b:18:e7: 6b:a8:d5:11:69:f9:73:4f:46:2c:90:f5:6a:f4:5a: 3e:7f:35:01:a6:40:27:40:7d:0e:8f:70:bb:5c:aa: 74:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F2:B5:B9:68:9A:0A:09:D0:81:82:0C:3C:9F:71:36:CC:CA:B2:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/778c411d-d7df-3c97-9219-3ef234ab6f08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:fe:31:90:02:be:f6:c7:2a:0c:ea:79:96:bd:24:ac:40:79: 73:53:dd:4e:34:c0:7b:85:12:f6:55:4c:b2:6b:3c:72:c9:37: 9a:5d:46:1f:ea:18:34:f4:80:63:30:76:ba:be:fa:61:49:fe: a4:51:7f:0c:3d:cf:75:94:f3:b5:81:1b:b9:0f:df:0f:2d:1a: f7:9e:81:6a:e6:6a:ac:44:9c:99:f4:4e:40:75:a9:7f:40:07: 66:6c:87:cf:7a:94:ee:21:3e:2e:57:f3:52:35:b1:ed:41:94: 08:c4:ba:66:e7:46:6e:81:fd:f0:90:ad:84:9a:a2:60:1c:3e: 06:dd:f8:68:68:75:14:21:40:75:ed:89:e0:38:79:13:98:c8: bb:55:53:f0:02:69:2c:21:71:07:c0:16:b1:d9:73:f8:5c:ff: c7:46:48:c2:03:8b:09:f8:47:b6:fa:03:57:88:6d:ef:52:24: 04:49:45:61:e9:90:69:d8:50:cd:d7:28:7e:8f:78:56:c1:a3: 4d:07:5f:65:ee:4b:4c:f8:e8:06:cd:69:c4:48:ce:e3:1e:1c: d5:3b:d4:65:55:7c:e6:cf:a5:95:d9:0f:c7:c9:f0:36:eb:94: 84:f3:16:0a:96:bf:fc:ca:08:af:03:ad:49:a1:d2:4f:4f:19: 48:92:14:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7IfQDG7cdk+4FyVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk NDBiNjFkY2YtZjZmOS00Njc0LTk2NGQtM2I5NjBlNzU0OGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyo5xcStvUyyMMyB0pMWTVA0VeW8lN7aKXMJm Z+OEmV+yr2NFu7ANIDvfkucHr9H/W10lQ6ved0fGL5inQDu8ZFZqfY7oK20By4RA td+QOCNOzNMGih9KI6idjXyUxy2PxcNY/mmJmcHk+27VDyOB2l4EjNUdulvuYl+s KU+7YsCJhnyrlf705kandjy6T8Mgj9xvQw89Ae7A9aU6DF4ogVg+8+NEIYbP93hS mpUFt360VSa0iNoE+7BrSBJrO+9CSw2Rpr1h4QcjsB7KlVRCZmezkI4MPWuDrtOU ZhdbGOdrqNURaflzT0YskPVq9Fo+fzUBpkAnQH0Oj3C7XKp0zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvytblomgoJ0IGCDDyfcTbMyrLyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvNzc4YzQxMWQtZDdkZi0z Yzk3LTkyMTktM2VmMjM0YWI2ZjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8ohMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAET+MZACvvbHKgzqeZa9JKxAeXNT3U40wHuFEvZVTLJrPHLJN5pdRh/q GDT0gGMwdrq++mFJ/qRRfww9z3WU87WBG7kP3w8tGveegWrmaqxEnJn0TkB1qX9A B2Zsh896lO4hPi5X81I1se1BlAjEumbnRm6B/fCQrYSaomAcPgbd+GhodRQhQHXt ieA4eROYyLtVU/ACaSwhcQfAFrHZc/hc/8dGSMIDiwn4R7b6A1eIbe9SJARJRWHp kGnYUM3XKH6PeFbBo00HX2XuS0z46AbNacRIzuMeHNU71GVVfObPpZXZD8fJ8Dbr lITzFgqWv/zKCK8DrUmh0k9PGUiSFFk= -----END CERTIFICATE-----Generated at Mon Oct 20 13:52:36 2025 by rpki-client