$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/bfdffa93-f619-3f96-9cd8-50c37514e6bb.roa File: bfdffa93-f619-3f96-9cd8-50c37514e6bb.roa (raw, json) Hash identifier: QNDLyU4iS408LtqJF8SZAyyObMi6j7pueDksTY8b5RE= Subject key identifier: C4:2C:15:A2:9F:14:77:43:FF:80:30:B6:8C:45:87:62:06:06:FB:92 Certificate issuer: /CN=1ae9796a-5f3d-4f47-b117-42360a213e37 Certificate serial: 010D0C9F4328584B90E14540F5423F32C5198640 Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/bfdffa93-f619-3f96-9cd8-50c37514e6bb.roa Signing time: Sat 18 Oct 2025 19:58:00 +0000 ROA not before: Sat 18 Oct 2025 19:58:00 +0000 ROA not after: Fri 16 Jan 2026 20:58:00 +0000 asID: 1004 IP address blocks: 209.112.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:90:e1:45:40:f5:42:3f:32:c5:19:86:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37 Validity Not Before: Oct 18 19:58:00 2025 GMT Not After : Jan 16 20:58:00 2026 GMT Subject: CN=ec3c4045-b177-4b42-b47d-e36393bb396b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c7:41:01:33:12:ef:0d:ba:65:19:4f:bd:c8: 87:63:5e:80:f3:cc:0e:f9:8d:ad:83:43:66:75:bc: 1b:3a:c0:8c:00:d9:8c:cf:97:9b:63:d5:98:e9:1c: 19:98:ea:b8:ac:ec:52:9d:42:35:da:1d:65:b0:c5: 61:d5:f7:7b:76:34:17:3e:37:12:00:f6:48:4a:36: 13:00:a7:d5:12:5b:9a:9d:75:37:cd:28:33:1b:a7: 0c:a3:cc:79:93:08:62:8b:42:a9:cc:79:1c:be:1c: d0:de:da:85:79:8a:30:5a:31:a0:27:c4:17:49:5b: d2:9e:4c:3a:b3:1f:aa:05:e8:1e:01:91:7b:db:ed: 6c:18:24:d1:e9:bd:a0:3d:6a:11:c6:f8:1e:c3:cb: a8:a2:9a:4f:36:ff:1a:a8:83:0f:f2:c4:e8:bd:0c: ce:aa:43:91:6d:a5:47:d3:e4:48:10:1b:d6:02:aa: 1e:08:d8:01:00:b7:9c:f7:7c:e2:95:7c:7f:c8:23: 1f:81:ef:3b:09:76:2a:f3:8c:1d:ba:9e:27:b1:23: 2e:a3:d5:b0:32:93:58:d1:f9:38:e8:0d:5d:6c:63: 2c:bf:b1:64:25:cf:99:11:d3:37:7b:7e:39:2e:81: b3:db:50:b7:cc:ee:a9:20:f2:07:53:83:b2:88:c8: 4f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2C:15:A2:9F:14:77:43:FF:80:30:B6:8C:45:87:62:06:06:FB:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/bfdffa93-f619-3f96-9cd8-50c37514e6bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl X509v3 Authority Key Identifier: keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer sbgp-ipAddrBlock: critical IPv4: 209.112.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:b8:8e:c1:b5:02:76:49:c1:15:51:db:31:d1:46:3d:5f:ce: b3:ab:ae:8f:14:b5:a9:19:e9:f7:81:30:d7:61:8b:a6:bb:e0: ec:c0:9a:c9:26:41:e7:87:40:0b:db:84:39:e0:72:fb:c9:bd: 53:88:70:2d:55:cf:90:11:8e:c3:09:c2:77:7a:02:f5:4c:d3: 18:32:3e:69:0e:28:17:d2:16:1a:78:ac:85:ed:84:53:78:c1: da:7e:e8:58:83:67:95:22:52:98:43:2f:f4:e1:70:06:53:ed: e9:c2:5f:bf:cd:b9:0e:2d:b7:9d:5e:86:8b:34:57:01:97:47: bb:91:52:38:0d:a0:fc:83:b8:40:f4:f7:fa:72:56:ca:81:14: 11:55:29:76:aa:9a:53:5d:c6:3c:7b:6f:a4:28:95:63:60:77: f3:4f:2b:8e:43:ad:b6:f8:fb:72:d9:eb:e5:58:e4:33:84:e9: 4d:b6:77:b4:42:0d:c1:3b:99:ab:76:f9:0e:c5:c9:bf:ae:b4: fa:5d:2a:fc:5c:cb:17:0d:12:bc:cf:21:c7:9f:f7:81:22:fc: 16:03:c3:81:3f:ef:93:b8:8d:ff:fd:60:3e:1e:ec:6e:06:d9: 42:44:27:f5:9d:76:04:e0:94:b2:72:68:25:81:c6:09:3b:a2: 79:41:b1:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuQ4UVA9UI/MsUZhkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFlOTc5NmEtNWYzZC00ZjQ3LWIxMTctNDIzNjBhMjEz ZTM3MB4XDTI1MTAxODE5NTgwMFoXDTI2MDExNjIwNTgwMFowLzEtMCsGA1UEAxMk ZWMzYzQwNDUtYjE3Ny00YjQyLWI0N2QtZTM2MzkzYmIzOTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsdBATMS7w26ZRlPvciHY16A88wO+Y2tg0Nm dbwbOsCMANmMz5ebY9WY6RwZmOq4rOxSnUI12h1lsMVh1fd7djQXPjcSAPZISjYT AKfVEluanXU3zSgzG6cMo8x5kwhii0KpzHkcvhzQ3tqFeYowWjGgJ8QXSVvSnkw6 sx+qBegeAZF72+1sGCTR6b2gPWoRxvgew8uooppPNv8aqIMP8sTovQzOqkORbaVH 0+RIEBvWAqoeCNgBALec93zilXx/yCMfge87CXYq84wdup4nsSMuo9WwMpNY0fk4 6A1dbGMsv7FkJc+ZEdM3e345LoGz21C3zO6pIPIHU4OyiMhPIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQsFaKfFHdD/4AwtoxFh2IGBvuSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5 Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2MGEyMTNlMzcvYmZkZmZhOTMtZjYxOS0z Zjk2LTljZDgtNTBjMzc1MTRlNmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWFlOTc5NmEtNWYzZC00ZjQ3LWIx MTctNDIzNjBhMjEzZTM3LzFhZTk3OTZhLTVmM2QtNGY0Ny1iMTE3LTQyMzYwYTIx M2UzNy5jcmwwHwYDVR0jBBgwFoAUTss6/l8FHqwG3VnOR6besyl/QdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2 MGEyMTNlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XBaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADm4jsG1AnZJwRVR2zHRRj1fzrOrro8UtakZ6feBMNdhi6a74OzAmskm QeeHQAvbhDngcvvJvVOIcC1Vz5ARjsMJwnd6AvVM0xgyPmkOKBfSFhp4rIXthFN4 wdp+6FiDZ5UiUphDL/ThcAZT7enCX7/NuQ4tt51ehos0VwGXR7uRUjgNoPyDuED0 9/pyVsqBFBFVKXaqmlNdxjx7b6QolWNgd/NPK45Drbb4+3LZ6+VY5DOE6U22d7RC DcE7mat2+Q7Fyb+utPpdKvxcyxcNErzPIcef94Ei/BYDw4E/75O4jf/9YD4e7G4G 2UJEJ/WddgTglLJyaCWBxgk7onlBsR0= -----END CERTIFICATE-----Generated at Sun Oct 19 21:09:41 2025 by rpki-client