$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/fd142f82-06f7-3937-9314-8f3c2d7275aa.roa File: fd142f82-06f7-3937-9314-8f3c2d7275aa.roa (raw, json) Hash identifier: 6BxSokEBr3/+keuItoPoT25Ed9DLTX02PrtBSs61Or4= Subject key identifier: 87:07:51:06:43:D1:BC:83:D3:DD:41:60:8C:B4:76:3A:0F:53:1C:02 Certificate issuer: /CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Certificate serial: 010D0C9F4328584B4081A4442B6DBC407BB5F910 Authority key identifier: EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/fd142f82-06f7-3937-9314-8f3c2d7275aa.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 207645 IP address blocks: 209.240.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:a4:44:2b:6d:bc:40:7b:b5:f9:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=68764a46-6394-4cf7-9a00-5e7784846b08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dd:06:3b:1e:ee:6f:0b:42:ff:4c:65:b3:1f: 0c:5f:8f:24:c7:8b:fa:5e:d6:db:c6:35:88:60:7a: 27:a2:3a:0e:20:8c:30:a7:bf:32:68:3f:7a:63:4e: 70:33:8c:b4:a2:30:9e:9f:98:6b:52:63:3c:54:16: 27:28:60:e2:74:aa:3f:99:b6:d9:28:21:b4:a1:1b: 6d:32:41:3a:8b:87:3e:c7:70:88:45:b6:87:11:84: d9:7a:71:d5:eb:a1:f8:e9:7d:c7:eb:9a:db:aa:0c: bf:d1:67:f8:dd:97:b4:88:34:0c:c3:30:26:42:32: c4:d7:e5:47:dd:46:60:9d:1c:3f:26:4a:b0:45:64: 17:3f:99:85:c4:47:e6:df:1b:f0:77:ca:4d:d5:f6: 1e:e2:8a:66:6f:ca:3f:bc:9c:0a:d0:bd:bf:6d:e3: 26:14:1a:e0:2a:78:8e:af:a8:4c:9d:3d:67:3e:28: 8c:31:9c:d4:b7:41:e2:f5:1c:d0:31:a8:98:43:5b: c5:3b:56:05:32:9d:98:12:4e:67:b5:6e:4b:eb:25: 1e:a4:30:54:96:39:18:c0:87:2c:5a:35:ad:72:31: 25:38:d3:7b:90:b7:e6:e4:55:ed:83:4c:42:c3:e5: 9d:b1:83:89:59:de:2d:95:b1:50:3d:f4:49:80:26: 05:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:07:51:06:43:D1:BC:83:D3:DD:41:60:8C:B4:76:3A:0F:53:1C:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/fd142f82-06f7-3937-9314-8f3c2d7275aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl X509v3 Authority Key Identifier: keyid:EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer sbgp-ipAddrBlock: critical IPv4: 209.240.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:c2:b6:1a:d9:48:54:45:fb:bd:d1:7a:71:1c:7a:3a:4e:4f: b9:7e:e0:60:17:31:a9:17:11:b3:1a:b3:97:58:a9:a1:e7:77: ea:11:16:b0:1b:a8:6c:8b:da:a6:2c:e1:80:88:90:e9:2e:85: 5a:27:c7:42:e4:e3:3f:9a:3f:e1:23:1f:0e:c4:5f:f2:8c:3b: c5:d5:01:c1:db:52:08:42:90:36:9e:ca:fd:6a:fc:3e:5f:35: d9:2b:93:ee:32:93:8d:81:42:e1:93:50:f3:ff:db:ea:59:3d: 03:98:e5:46:f4:6c:60:07:a0:2a:de:45:61:4f:61:14:31:16: 61:50:97:44:7f:eb:03:c3:d7:13:bd:d0:8a:73:f7:91:0d:7c: ed:bb:e4:aa:99:eb:82:91:73:64:d9:fe:6f:70:9c:50:bd:66: 58:26:71:13:48:6e:bd:4a:7b:2a:23:a3:a3:5b:71:d2:d9:8e: c4:63:da:c8:3f:49:3e:66:39:f4:34:60:64:c6:05:4e:78:63: 7e:73:58:33:2a:09:bd:e4:bd:48:a4:29:32:dc:41:23:7f:56: a1:5c:7e:79:08:36:e2:72:d7:4e:c2:7e:00:f9:70:db:2a:35: e8:97:57:89:1d:e8:f0:fb:59:fe:fa:b1:e2:bc:fb:db:ab:a4: a1:b0:f8:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgaREK228QHu1+RAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZlOTg5MTItNTFmYy00OTBlLWI1MmYtMGY2ZGI5YTI4 NDdlMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk Njg3NjRhNDYtNjM5NC00Y2Y3LTlhMDAtNWU3Nzg0ODQ2YjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt90GOx7ubwtC/0xlsx8MX48kx4v6XtbbxjWI YHonojoOIIwwp78yaD96Y05wM4y0ojCen5hrUmM8VBYnKGDidKo/mbbZKCG0oRtt MkE6i4c+x3CIRbaHEYTZenHV66H46X3H65rbqgy/0Wf43Ze0iDQMwzAmQjLE1+VH 3UZgnRw/JkqwRWQXP5mFxEfm3xvwd8pN1fYe4opmb8o/vJwK0L2/beMmFBrgKniO r6hMnT1nPiiMMZzUt0Hi9RzQMaiYQ1vFO1YFMp2YEk5ntW5L6yUepDBUljkYwIcs WjWtcjElONN7kLfm5FXtg0xCw+WdsYOJWd4tlbFQPfRJgCYFuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcHUQZD0byD091BYIy0djoPUxwCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5 ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZkYjlhMjg0N2UvZmQxNDJmODItMDZmNy0z OTM3LTkzMTQtOGYzYzJkNzI3NWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGZlOTg5MTItNTFmYy00OTBlLWI1 MmYtMGY2ZGI5YTI4NDdlL2RmZTk4OTEyLTUxZmMtNDkwZS1iNTJmLTBmNmRiOWEy ODQ3ZS5jcmwwHwYDVR0jBBgwFoAU7IFTNMBbGPl+30NKbxqXz6CvV2kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZk YjlhMjg0N2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0fAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErCthrZSFRF+73RenEcejpOT7l+4GAXMakXEbMas5dYqaHnd+oRFrAb qGyL2qYs4YCIkOkuhVonx0Lk4z+aP+EjHw7EX/KMO8XVAcHbUghCkDaeyv1q/D5f Ndkrk+4yk42BQuGTUPP/2+pZPQOY5Ub0bGAHoCreRWFPYRQxFmFQl0R/6wPD1xO9 0Ipz95ENfO275KqZ64KRc2TZ/m9wnFC9ZlgmcRNIbr1Keyojo6NbcdLZjsRj2sg/ ST5mOfQ0YGTGBU54Y35zWDMqCb3kvUikKTLcQSN/VqFcfnkINuJy107CfgD5cNsq NeiXV4kd6PD7Wf76seK8+9urpKGw+Jc= -----END CERTIFICATE-----Generated at Mon Oct 20 10:47:24 2025 by rpki-client