$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/476c714e-2cf9-3b0d-a179-f838724e41da.roa File: 476c714e-2cf9-3b0d-a179-f838724e41da.roa (raw, json) Hash identifier: 8LVak1RVoph13M5OqquYCJBR0+B2z5fJ50BFAnn8QWY= Subject key identifier: F9:2A:95:6C:C1:78:99:CD:FB:C8:73:12:61:9E:90:D3:E4:B8:BD:A7 Certificate issuer: /CN=1ae9796a-5f3d-4f47-b117-42360a213e37 Certificate serial: 010D0C9F4328584B36BC526052893F21B08D0240 Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/476c714e-2cf9-3b0d-a179-f838724e41da.roa Signing time: Tue 16 Sep 2025 13:00:41 +0000 ROA not before: Tue 16 Sep 2025 13:00:41 +0000 ROA not after: Mon 15 Dec 2025 14:00:41 +0000 asID: 13627 IP address blocks: 209.112.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:bc:52:60:52:89:3f:21:b0:8d:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37 Validity Not Before: Sep 16 13:00:41 2025 GMT Not After : Dec 15 14:00:41 2025 GMT Subject: CN=342a01ad-ac40-45c0-8376-2d47ccd86510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f3:02:4d:95:74:a1:b8:53:aa:29:7a:92:f7: ef:72:d5:a3:be:68:3d:96:06:d3:c4:2a:7f:cb:1c: 2e:da:da:14:f4:33:20:41:d3:b9:4e:ef:73:36:e9: 64:8c:43:a4:df:27:48:aa:da:93:58:37:db:db:e5: 83:bd:0b:08:c7:c3:3c:a3:27:1e:d4:ac:41:81:0a: a1:99:f1:95:08:ee:aa:bd:c4:bb:e5:d5:19:34:06: b4:7a:ce:c2:db:a0:9a:e0:78:df:2b:3e:13:83:4f: 78:74:67:e0:0b:39:b5:8c:13:9f:7c:14:30:e2:39: 44:0b:75:06:36:3b:f8:c1:38:ba:e7:05:1c:6b:14: 02:21:1b:c4:c5:4c:b8:9f:c1:b0:18:56:db:66:bf: d8:06:85:ee:d6:4d:f9:76:28:e9:ff:fd:94:f8:3e: 95:1a:49:a0:56:c3:83:95:66:d7:89:37:93:e8:02: 5b:a7:73:16:3a:00:65:e6:38:5b:52:24:b3:4f:05: fb:6e:94:bc:1c:8c:d7:a4:07:f1:81:0d:9f:df:84: 63:8a:2a:d2:28:6b:f2:8b:fb:4d:75:f9:af:92:5b: 22:33:a5:db:69:62:3c:a9:de:07:1a:8f:96:2e:c2: 76:2c:2b:fe:60:d3:85:0d:b1:38:5d:2c:0a:64:c5: 46:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:2A:95:6C:C1:78:99:CD:FB:C8:73:12:61:9E:90:D3:E4:B8:BD:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/476c714e-2cf9-3b0d-a179-f838724e41da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl X509v3 Authority Key Identifier: keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer sbgp-ipAddrBlock: critical IPv4: 209.112.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:43:91:f7:d8:55:ca:ed:c0:9f:25:47:9d:f0:51:ef:72:3f: 25:74:1b:b1:9b:c0:8f:d7:49:c0:cd:90:37:bf:4f:6a:22:f6: 7e:cd:13:d5:3d:ee:b1:dd:5c:de:92:0f:9b:0b:bb:cc:26:bc: 1f:f7:a8:6c:64:89:7b:b1:26:49:b8:f8:89:29:cb:e2:b0:0b: 1c:41:66:3a:65:8b:62:e4:db:a8:de:6a:f4:bf:51:15:95:02: e4:99:3a:d6:d9:c5:e8:b8:d3:2c:03:08:84:08:59:6d:6a:fe: 0b:f3:62:a8:b7:01:5d:42:6b:c4:d6:fd:13:0f:03:41:2e:04: d2:7e:2c:d5:31:8a:75:b7:6a:15:6e:6d:0f:45:cd:1e:2a:99: 00:86:91:48:f7:bd:9d:b2:47:94:d3:9c:d9:db:80:79:75:fb: b3:99:2a:c9:f1:5a:cd:60:a6:f3:b0:17:ab:b5:3c:9c:5b:a6: 3e:29:e1:49:69:54:7d:94:21:a8:de:2a:52:c5:f0:68:f3:b5: 8b:67:05:19:6c:a5:7a:9b:6f:b0:fb:13:53:65:ed:dc:1f:76: 92:73:a3:80:7f:f7:9a:5a:26:5b:7e:6f:63:01:3e:48:e3:46: 3d:74:3e:3b:cc:0b:30:15:86:80:fd:fa:b6:bd:76:16:90:51: 2e:16:05:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs2vFJgUok/IbCNAkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFlOTc5NmEtNWYzZC00ZjQ3LWIxMTctNDIzNjBhMjEz ZTM3MB4XDTI1MDkxNjEzMDA0MVoXDTI1MTIxNTE0MDA0MVowLzEtMCsGA1UEAxMk MzQyYTAxYWQtYWM0MC00NWMwLTgzNzYtMmQ0N2NjZDg2NTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/MCTZV0obhTqil6kvfvctWjvmg9lgbTxCp/ yxwu2toU9DMgQdO5Tu9zNulkjEOk3ydIqtqTWDfb2+WDvQsIx8M8oyce1KxBgQqh mfGVCO6qvcS75dUZNAa0es7C26Ca4HjfKz4Tg094dGfgCzm1jBOffBQw4jlEC3UG Njv4wTi65wUcaxQCIRvExUy4n8GwGFbbZr/YBoXu1k35dijp//2U+D6VGkmgVsOD lWbXiTeT6AJbp3MWOgBl5jhbUiSzTwX7bpS8HIzXpAfxgQ2f34RjiirSKGvyi/tN dfmvklsiM6XbaWI8qd4HGo+WLsJ2LCv+YNOFDbE4XSwKZMVGxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkqlWzBeJnN+8hzEmGekNPkuL2nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5 Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2MGEyMTNlMzcvNDc2YzcxNGUtMmNmOS0z YjBkLWExNzktZjgzODcyNGU0MWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWFlOTc5NmEtNWYzZC00ZjQ3LWIx MTctNDIzNjBhMjEzZTM3LzFhZTk3OTZhLTVmM2QtNGY0Ny1iMTE3LTQyMzYwYTIx M2UzNy5jcmwwHwYDVR0jBBgwFoAUTss6/l8FHqwG3VnOR6besyl/QdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2 MGEyMTNlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XBZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9DkffYVcrtwJ8lR53wUe9yPyV0G7GbwI/XScDNkDe/T2oi9n7NE9U9 7rHdXN6SD5sLu8wmvB/3qGxkiXuxJkm4+Ikpy+KwCxxBZjpli2Lk26jeavS/URWV AuSZOtbZxei40ywDCIQIWW1q/gvzYqi3AV1Ca8TW/RMPA0EuBNJ+LNUxinW3ahVu bQ9FzR4qmQCGkUj3vZ2yR5TTnNnbgHl1+7OZKsnxWs1gpvOwF6u1PJxbpj4p4Ulp VH2UIajeKlLF8GjztYtnBRlspXqbb7D7E1Nl7dwfdpJzo4B/95paJlt+b2MBPkjj Rj10PjvMCzAVhoD9+ra9dhaQUS4WBTc= -----END CERTIFICATE-----Generated at Mon Oct 20 02:24:46 2025 by rpki-client