$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/b8cdfb1b-eac8-3067-a2a3-52df8a15a921.roa File: b8cdfb1b-eac8-3067-a2a3-52df8a15a921.roa (raw, json) Hash identifier: v5u+z2mnrkcqR5yh/x/7A0TqGESZw+8QxvEfUSz+jjk= Subject key identifier: F8:23:28:EC:97:23:06:97:06:5A:32:A7:A7:6E:FD:31:B8:F7:D3:2A Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584B0A1164FCB4447CE80731A500 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/b8cdfb1b-eac8-3067-a2a3-52df8a15a921.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 16509 IP address blocks: 207.202.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:64:fc:b4:44:7c:e8:07:31:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=92eaff74-077b-4d49-98ab-7e5267db14f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:eb:15:cf:f1:d8:d8:8c:31:3c:fc:95:c1:5b: b5:75:01:98:5b:26:b2:a6:80:f5:c3:37:64:9f:be: 4d:00:c7:2e:76:39:56:f6:f1:2f:93:50:c5:2a:90: 03:ba:60:b6:f5:36:dc:cd:c1:43:04:56:b2:89:cd: 1f:22:ac:be:fd:20:44:e2:c7:17:23:c4:fc:04:1a: b0:c3:2d:de:0d:80:cc:a1:6e:62:39:c0:49:eb:62: a1:f6:cb:f8:9a:46:7d:d8:24:8a:0c:c2:4e:2f:01: ed:44:64:f9:e3:4a:34:81:bd:ca:c2:3d:24:5f:c6: 11:2d:44:65:b1:ee:47:78:18:22:2c:6b:1c:79:0a: 94:df:7a:02:76:1e:93:6b:3c:03:dd:9f:49:8f:38: 3c:48:e8:b4:72:e6:be:bc:34:18:02:7b:63:ec:31: 00:c9:6e:e6:12:ec:72:c1:20:fd:43:05:35:e4:4b: e8:bf:9e:f0:0c:6f:1d:a6:05:f8:e5:da:bf:05:58: 9d:96:ed:72:eb:b2:9a:ab:4f:68:a2:15:00:36:19: 6c:0a:6a:7a:51:59:b5:a8:0d:4e:e6:8a:b8:00:32: d2:67:9d:e5:b6:be:64:b8:97:e2:c7:87:01:6d:5f: 3a:54:6c:67:4f:89:13:25:22:8f:79:d9:4f:2c:c8: 0e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:23:28:EC:97:23:06:97:06:5A:32:A7:A7:6E:FD:31:B8:F7:D3:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/b8cdfb1b-eac8-3067-a2a3-52df8a15a921.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 207.202.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:da:c9:0f:2e:ff:0d:44:30:ce:99:30:38:b2:99:5b:26:86: 78:e4:b5:e2:1c:23:1c:b4:2e:8c:54:76:70:fb:e8:b3:d0:79: 73:f0:f6:8d:ab:6f:5c:b8:8d:e2:a2:03:69:df:1e:4a:24:fd: 66:f6:d5:ba:63:28:b6:e6:84:6e:6d:61:66:5a:b3:35:aa:e8: 4c:42:04:be:21:30:d5:bf:57:ec:73:8c:6d:55:82:e6:a5:23: b5:96:f3:b6:8a:d4:11:95:48:83:b9:2e:52:1b:0e:89:f5:d9: 89:31:f3:de:04:3e:d6:92:41:9d:06:b8:03:12:f2:df:f0:39: 19:8d:e3:5c:9d:1d:54:fd:5e:38:26:4a:32:19:d8:d5:d8:46: 58:83:3c:8b:6a:07:51:1f:56:62:35:f6:07:99:66:1c:4c:09: f1:1b:55:dc:30:4e:a4:9d:33:f0:78:cc:70:f1:e0:54:56:93: 18:8e:09:93:87:80:70:7f:e0:97:ac:7a:af:2c:8f:26:20:8b: 25:1d:04:ef:04:96:1c:cc:04:65:68:5c:77:3d:97:d8:3f:06: 3e:47:ca:81:a1:00:96:69:65:60:90:bc:56:a5:c2:6c:3f:c9: 83:b6:e6:48:e1:d3:5d:12:25:06:53:a5:58:8a:90:9f:5d:15: 82:5a:0d:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEWT8tER86AcxpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk OTJlYWZmNzQtMDc3Yi00ZDQ5LTk4YWItN2U1MjY3ZGIxNGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+sVz/HY2IwxPPyVwVu1dQGYWyaypoD1wzdk n75NAMcudjlW9vEvk1DFKpADumC29TbczcFDBFayic0fIqy+/SBE4scXI8T8BBqw wy3eDYDMoW5iOcBJ62Kh9sv4mkZ92CSKDMJOLwHtRGT540o0gb3Kwj0kX8YRLURl se5HeBgiLGsceQqU33oCdh6TazwD3Z9Jjzg8SOi0cua+vDQYAntj7DEAyW7mEuxy wSD9QwU15Evov57wDG8dpgX45dq/BVidlu1y67Kaq09oohUANhlsCmp6UVm1qA1O 5oq4ADLSZ53ltr5kuJfix4cBbV86VGxnT4kTJSKPedlPLMgONQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgjKOyXIwaXBloyp6du/TG499MqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvYjhjZGZiMWItZWFjOC0z MDY3LWEyYTMtNTJkZjhhMTVhOTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8pAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATayQ8u/w1EMM6ZMDiymVsmhnjkteIcIxy0LoxUdnD76LPQeXPw9o2r b1y4jeKiA2nfHkok/Wb21bpjKLbmhG5tYWZaszWq6ExCBL4hMNW/V+xzjG1Vgual I7WW87aK1BGVSIO5LlIbDon12Ykx894EPtaSQZ0GuAMS8t/wORmN41ydHVT9Xjgm SjIZ2NXYRliDPItqB1EfVmI19geZZhxMCfEbVdwwTqSdM/B4zHDx4FRWkxiOCZOH gHB/4Jeseq8sjyYgiyUdBO8ElhzMBGVoXHc9l9g/Bj5HyoGhAJZpZWCQvFalwmw/ yYO25kjh010SJQZTpViKkJ9dFYJaDa4= -----END CERTIFICATE-----Generated at Mon Oct 20 13:53:02 2025 by rpki-client