$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/01ab4558-bb9d-35cf-b94f-1ebee7f1e6c2.roa File: 01ab4558-bb9d-35cf-b94f-1ebee7f1e6c2.roa (raw, json) Hash identifier: poP04mYJSLnjnAoMqXu5RUln2ud2KNaCGsq47JBGepc= Subject key identifier: 88:38:51:31:9E:AE:C1:C7:17:6C:C4:BA:22:A1:44:0A:C8:21:2C:FF Certificate issuer: /CN=e4233913-8c3d-4df4-bd7d-495f7afba2ac Certificate serial: 010D0C9F4328584B3556E14F3EC701360AE16F80 Authority key identifier: 23:E9:67:A1:5B:A9:96:F3:5E:F7:44:E1:D1:D6:08:7E:0E:EC:60:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/01ab4558-bb9d-35cf-b94f-1ebee7f1e6c2.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 10930 IP address blocks: 209.251.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/e4233913-8c3d-4df4-bd7d-495f7afba2ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/e4233913-8c3d-4df4-bd7d-495f7afba2ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:e1:4f:3e:c7:01:36:0a:e1:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4233913-8c3d-4df4-bd7d-495f7afba2ac Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=cadb2fb7-f48a-4881-a82f-ee0956891282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6c:e4:17:67:19:5e:2f:9e:9a:25:11:38:d8: 91:21:34:12:92:44:ad:de:cf:66:7e:eb:3b:8c:be: 2b:86:f8:ae:ac:41:f5:4b:e6:4c:7d:56:7a:ff:f5: e9:a6:17:2b:5c:67:cf:bb:41:49:d0:8f:d2:46:b7: 68:68:4d:dd:e2:f9:b8:db:a3:c0:96:0e:44:bd:dc: 72:d9:63:a8:55:ce:cc:87:8e:04:93:18:85:7b:36: b3:08:b0:88:25:ad:7a:73:b7:0c:d6:20:1a:4a:c5: 4a:c8:5f:73:2e:6a:00:77:41:91:74:66:94:0d:14: 29:14:87:31:67:c3:83:47:e1:cc:be:d5:8f:08:74: 14:51:dd:a8:38:e6:c9:63:68:0c:94:c4:45:ba:ba: af:57:c7:98:e2:bd:e2:8f:1c:a7:63:a8:53:ac:c4: ee:be:e5:95:9a:cf:14:4e:ac:79:91:2c:29:9f:40: d1:3a:cc:88:b5:5f:fd:f7:6a:09:61:90:a3:96:14: ef:d5:68:de:c2:ba:09:3f:d1:1a:a0:db:dc:ab:9c: d8:e3:cb:da:e7:8d:08:c3:42:48:7a:cd:13:37:48: 86:c0:a3:3a:a9:82:55:07:85:73:27:99:43:71:88: 08:13:00:c5:86:45:73:5d:03:d6:96:f7:27:92:93: 0d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:38:51:31:9E:AE:C1:C7:17:6C:C4:BA:22:A1:44:0A:C8:21:2C:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/01ab4558-bb9d-35cf-b94f-1ebee7f1e6c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/e4233913-8c3d-4df4-bd7d-495f7afba2ac.crl X509v3 Authority Key Identifier: keyid:23:E9:67:A1:5B:A9:96:F3:5E:F7:44:E1:D1:D6:08:7E:0E:EC:60:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac.cer sbgp-ipAddrBlock: critical IPv4: 209.251.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:01:c0:e2:ba:c0:47:78:5b:a3:b1:7a:02:6c:61:45:6c:b6: c2:2b:3f:b7:69:73:43:0f:e9:00:b6:23:fb:fb:3e:0c:98:95: c1:d6:4d:fa:87:2c:95:3f:25:23:99:34:37:66:45:e3:84:b6: d9:02:03:24:57:3e:87:a8:22:63:94:43:8f:97:42:b3:1a:ef: 38:a8:ae:29:2f:8d:7d:9f:55:15:99:a0:34:17:12:2e:34:40: f9:4a:14:26:cb:88:a7:24:23:09:63:b5:55:a0:e0:d9:c8:ee: ec:c2:72:d7:95:53:68:5a:a1:c2:a1:e7:4e:12:54:fd:93:de: e7:55:4a:43:55:f8:64:d2:d9:31:54:ca:1e:b5:98:5a:4b:66: 15:ce:6e:cd:d0:56:a0:c6:00:48:f5:c1:e8:d3:d4:56:ce:dc: 27:20:37:32:b8:b3:2b:2b:2a:47:32:cc:da:4c:cd:8d:bc:4e: 16:0b:0a:af:e6:4f:c0:96:dc:cb:5d:2e:a6:42:21:97:24:c6: 38:2b:16:6d:66:fa:8b:67:78:c6:48:e4:b4:a6:0e:79:54:f1: f7:b3:84:52:e3:00:cf:38:81:80:9a:f3:4f:d7:81:1d:28:cd: 26:13:93:b5:6d:91:88:07:67:b7:ca:77:c9:36:e5:e6:a5:0f: a9:ea:0e:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VuFPPscBNgrhb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQyMzM5MTMtOGMzZC00ZGY0LWJkN2QtNDk1ZjdhZmJh MmFjMB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk Y2FkYjJmYjctZjQ4YS00ODgxLWE4MmYtZWUwOTU2ODkxMjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmzkF2cZXi+emiURONiRITQSkkSt3s9mfus7 jL4rhviurEH1S+ZMfVZ6//XpphcrXGfPu0FJ0I/SRrdoaE3d4vm426PAlg5Evdxy 2WOoVc7Mh44EkxiFezazCLCIJa16c7cM1iAaSsVKyF9zLmoAd0GRdGaUDRQpFIcx Z8ODR+HMvtWPCHQUUd2oOObJY2gMlMRFurqvV8eY4r3ijxynY6hTrMTuvuWVms8U Tqx5kSwpn0DROsyItV/992oJYZCjlhTv1WjewroJP9EaoNvcq5zY48va540Iw0JI es0TN0iGwKM6qYJVB4VzJ5lDcYgIEwDFhkVzXQPWlvcnkpMN9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIg4UTGersHHF2zEuiKhRArIISz/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lNDIz MzkxMy04YzNkLTRkZjQtYmQ3ZC00OTVmN2FmYmEyYWMvMDFhYjQ1NTgtYmI5ZC0z NWNmLWI5NGYtMWViZWU3ZjFlNmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTQyMzM5MTMtOGMzZC00ZGY0LWJk N2QtNDk1ZjdhZmJhMmFjL2U0MjMzOTEzLThjM2QtNGRmNC1iZDdkLTQ5NWY3YWZi YTJhYy5jcmwwHwYDVR0jBBgwFoAUI+lnoVuplvNe90Th0dYIfg7sYKswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lNDIzMzkxMy04YzNkLTRkZjQtYmQ3ZC00OTVm N2FmYmEyYWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0fvlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEBwOK6wEd4W6OxegJsYUVstsIrP7dpc0MP6QC2I/v7PgyYlcHWTfqH LJU/JSOZNDdmReOEttkCAyRXPoeoImOUQ4+XQrMa7ziorikvjX2fVRWZoDQXEi40 QPlKFCbLiKckIwljtVWg4NnI7uzCcteVU2haocKh504SVP2T3udVSkNV+GTS2TFU yh61mFpLZhXObs3QVqDGAEj1wejT1FbO3CcgNzK4sysrKkcyzNpMzY28ThYLCq/m T8CW3MtdLqZCIZckxjgrFm1m+otneMZI5LSmDnlU8fezhFLjAM84gYCa80/XgR0o zSYTk7VtkYgHZ7fKd8k25ealD6nqDgA= -----END CERTIFICATE-----Generated at Mon Oct 20 15:30:44 2025 by rpki-client