$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1bf077d6-68e0-35e4-9a86-4683bff20968.roa File: 1bf077d6-68e0-35e4-9a86-4683bff20968.roa (raw, json) Hash identifier: vrtdn6sS0W6ylvmjS18DXJIgUAwfMkuwkXDkrBlleJw= Subject key identifier: A4:D2:B7:FA:2D:6C:FE:E9:D6:AD:0C:73:CA:A4:CC:DA:3D:C5:A7:D8 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584B1F0169F4D321CEA811B18BC0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1bf077d6-68e0-35e4-9a86-4683bff20968.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 26421 IP address blocks: 209.150.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:69:f4:d3:21:ce:a8:11:b1:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=d1cec102-348b-40a3-93bc-5f652c5627d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:29:2f:3a:47:ee:ca:89:3d:0b:79:80:83:cd: 5f:16:b4:f8:14:90:49:ac:f3:b6:4c:90:7d:25:9f: 81:e0:7d:49:41:76:0a:42:42:e3:a3:6d:48:9d:30: b3:73:fa:30:1f:bf:2e:64:6e:04:43:9c:1c:30:39: cb:ee:1b:70:8c:ef:27:3d:94:e4:33:bd:8e:58:7d: 24:7b:0b:dd:78:02:2e:f4:ae:ce:b4:02:69:e9:65: 08:e3:5c:b7:17:41:d0:5d:45:59:31:dd:4e:c1:11: 8a:6e:57:cd:3a:87:ed:0f:d5:59:fb:f1:39:2e:d9: 0b:9b:cb:d4:99:35:0d:8a:e0:fd:e7:e2:65:93:99: b7:f5:41:b2:ee:d9:77:55:6b:46:cb:ab:37:55:8b: c4:19:21:b2:2d:4a:8b:1a:cb:4e:cc:1d:f5:9c:f7: 2d:c4:c9:5b:64:c7:08:7b:b4:3d:4b:a5:3c:21:e1: 69:93:71:2a:bc:ca:d5:2a:32:d7:c7:04:cf:52:33: 0c:3c:6d:09:88:2d:ca:34:cc:17:dc:cb:b9:c6:97: 3b:97:b5:d2:37:61:40:d6:34:81:b3:35:63:47:d5: f7:ff:4f:e5:0e:09:1b:e8:b5:44:a9:9c:75:90:4f: 3b:c9:21:fd:dd:d6:71:c8:9b:ba:74:67:5e:97:cf: 24:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D2:B7:FA:2D:6C:FE:E9:D6:AD:0C:73:CA:A4:CC:DA:3D:C5:A7:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1bf077d6-68e0-35e4-9a86-4683bff20968.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 209.150.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:de:21:4a:84:87:31:6b:7d:f6:79:90:2e:14:24:fd:95:a4: bc:33:99:81:6c:d5:f6:9a:bb:61:b1:e6:7c:eb:f7:f2:a3:be: ee:15:32:66:0e:9b:49:19:dd:00:bc:47:02:ae:7f:a8:76:7d: 64:be:29:c8:3e:1b:e6:e3:3a:dc:a9:b9:7a:40:00:17:53:a4: 75:57:28:d3:29:d2:65:ba:59:09:99:85:50:e9:63:10:e0:32: 5a:50:54:63:47:11:0a:f0:94:a7:27:c2:eb:85:4c:e4:fa:0d: b9:df:63:81:43:c9:37:e6:06:e2:be:45:65:cd:ae:6a:ce:c5: 3b:b7:88:dc:09:8a:03:dd:50:13:34:83:59:7f:53:a4:40:7c: ef:d0:73:25:c8:66:82:8c:62:84:bd:4b:fb:fa:6b:fd:5c:d2: 21:5d:2d:f0:8c:f3:b5:9c:ca:4a:8a:01:84:20:4b:04:b7:73: b2:b4:6d:a5:07:7a:2f:f1:23:58:e6:60:4d:75:a0:fe:4a:1f: 5b:f4:b5:87:7a:c3:98:41:62:60:18:6d:7b:8a:0c:ae:c0:64: af:58:5b:6d:13:7e:ce:cd:fb:c7:85:36:ea:8e:55:a8:b8:98: a2:61:97:e7:fb:bf:11:59:7f:12:71:2d:0c:33:59:16:25:e1: 69:57:62:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAWn00yHOqBGxi8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZDFjZWMxMDItMzQ4Yi00MGEzLTkzYmMtNWY2NTJjNTYyN2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCkvOkfuyok9C3mAg81fFrT4FJBJrPO2TJB9 JZ+B4H1JQXYKQkLjo21InTCzc/owH78uZG4EQ5wcMDnL7htwjO8nPZTkM72OWH0k ewvdeAIu9K7OtAJp6WUI41y3F0HQXUVZMd1OwRGKblfNOoftD9VZ+/E5LtkLm8vU mTUNiuD95+Jlk5m39UGy7tl3VWtGy6s3VYvEGSGyLUqLGstOzB31nPctxMlbZMcI e7Q9S6U8IeFpk3EqvMrVKjLXxwTPUjMMPG0JiC3KNMwX3Mu5xpc7l7XSN2FA1jSB szVjR9X3/0/lDgkb6LVEqZx1kE87ySH93dZxyJu6dGdel88kQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTSt/otbP7p1q0Mc8qkzNo9xafYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMWJmMDc3ZDYtNjhlMC0z NWU0LTlhODYtNDY4M2JmZjIwOTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZZMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzeIUqEhzFrffZ5kC4UJP2VpLwzmYFs1faau2Gx5nzr9/Kjvu4VMmYO m0kZ3QC8RwKuf6h2fWS+Kcg+G+bjOtypuXpAABdTpHVXKNMp0mW6WQmZhVDpYxDg MlpQVGNHEQrwlKcnwuuFTOT6DbnfY4FDyTfmBuK+RWXNrmrOxTu3iNwJigPdUBM0 g1l/U6RAfO/QcyXIZoKMYoS9S/v6a/1c0iFdLfCM87WcykqKAYQgSwS3c7K0baUH ei/xI1jmYE11oP5KH1v0tYd6w5hBYmAYbXuKDK7AZK9YW20Tfs7N+8eFNuqOVai4 mKJhl+f7vxFZfxJxLQwzWRYl4WlXYhw= -----END CERTIFICATE-----Generated at Mon Oct 20 03:58:50 2025 by rpki-client