$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/34a15df3-ae78-372e-8160-e71d118b8d2e.roa File: 34a15df3-ae78-372e-8160-e71d118b8d2e.roa (raw, json) Hash identifier: 0h9pU8mpHYMuOYka5euBiaNGyqL5Ebmi49AQfd1pGIw= Subject key identifier: F5:46:BB:BD:A9:87:B2:A1:F7:FA:A0:93:40:31:CA:67:47:42:33:DF Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584B87B21C7D10E159A74488B8C0 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/34a15df3-ae78-372e-8160-e71d118b8d2e.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 3356 IP address blocks: 209.224.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:1c:7d:10:e1:59:a7:44:88:b8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=b5010309-265e-4544-9d7a-f7fb11bda19b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:97:6e:9a:93:89:b2:d8:2a:1f:40:92:ea:3e: fa:cb:3c:87:0f:07:28:b4:13:ec:29:d4:c2:5f:11: 6e:d5:d6:f3:27:30:16:70:bf:64:21:bd:c4:7f:eb: 3a:72:46:1b:3f:82:6a:51:3f:3c:8f:3b:ea:87:d7: b7:fc:c6:c1:8a:34:6e:aa:63:1b:90:8d:75:6b:57: 90:86:90:04:24:8c:5e:1e:7f:b6:b1:f3:79:b1:20: 2d:3a:e3:44:dd:43:97:a3:93:0d:bd:89:ba:f3:fa: 59:fe:a7:b9:0a:fe:a9:67:7d:33:e9:a8:ac:9c:29: 58:28:74:2a:32:58:15:90:59:ea:8e:fb:91:f3:32: ef:99:6b:11:35:a6:4d:e4:cc:af:d6:8f:05:dc:08: 96:a8:cc:34:b7:34:74:ce:a0:16:22:d3:0a:fb:2e: 3b:5d:81:e0:d0:bc:8b:8b:2c:96:63:3e:17:a9:ad: 09:c3:fc:ee:b9:1b:d5:e3:92:43:0c:ac:5d:85:cd: 15:e9:3e:9c:a9:8f:a1:bd:da:de:b9:53:33:8c:87: 4f:21:ae:e4:ab:39:f5:11:e5:c3:87:f6:b6:cb:41: 82:fe:86:a6:0c:95:77:b5:35:96:d0:27:2d:f5:84: 75:e8:be:3f:09:a0:76:8a:98:de:17:5a:1e:57:c9: 73:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:46:BB:BD:A9:87:B2:A1:F7:FA:A0:93:40:31:CA:67:47:42:33:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/34a15df3-ae78-372e-8160-e71d118b8d2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 209.224.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:dc:be:53:4c:0c:98:62:48:12:07:04:e8:91:4a:2f:d9:18: fb:dc:b8:d0:3b:1b:c6:eb:da:a1:15:12:41:7d:3e:28:b3:31: 8a:bc:69:6c:15:5e:7b:67:4d:fd:8a:01:f3:bc:3e:9b:25:0e: 14:ee:f6:65:b4:91:20:55:b5:b0:74:62:53:bd:26:fb:67:81: 42:5b:5a:c9:7f:90:72:79:24:65:95:13:30:49:f4:fb:3f:bb: c6:92:55:40:8c:d4:5b:a2:44:56:b8:bf:98:03:8c:a6:fa:98: 59:88:4f:54:a3:c2:fa:12:8f:db:da:36:da:21:d2:a7:84:52: 28:4e:7a:cf:93:65:5a:7d:d1:a3:45:a4:fe:18:a8:d8:d3:a1: a4:d4:39:2b:e6:23:7d:84:9e:9c:8e:72:08:18:9a:b7:b8:e1: 98:ea:93:67:97:a2:50:41:b8:d8:0a:ef:98:a6:7a:37:d3:92: 81:59:72:49:20:92:74:50:4f:2e:04:a4:42:cf:69:de:42:ed: fe:81:69:6f:ee:7a:c8:f9:4a:91:5e:bf:a6:8f:2e:52:ab:52: 89:60:b6:de:20:b5:f0:43:06:b8:84:ec:b3:1c:83:d4:95:e7: e9:ae:4b:b3:89:40:4c:66:25:22:3f:3d:38:a0:8a:f2:24:eb: 1d:04:da:d1 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuHshx9EOFZp0SIuMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk YjUwMTAzMDktMjY1ZS00NTQ0LTlkN2EtZjdmYjExYmRhMTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpdumpOJstgqH0CS6j76yzyHDwcotBPsKdTC XxFu1dbzJzAWcL9kIb3Ef+s6ckYbP4JqUT88jzvqh9e3/MbBijRuqmMbkI11a1eQ hpAEJIxeHn+2sfN5sSAtOuNE3UOXo5MNvYm68/pZ/qe5Cv6pZ30z6aisnClYKHQq MlgVkFnqjvuR8zLvmWsRNaZN5Myv1o8F3AiWqMw0tzR0zqAWItMK+y47XYHg0LyL iyyWYz4Xqa0Jw/zuuRvV45JDDKxdhc0V6T6cqY+hvdreuVMzjIdPIa7kqzn1EeXD h/a2y0GC/oamDJV3tTWW0Cct9YR16L4/CaB2ipjeF1oeV8lz+wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPVGu72ph7Kh9/qgk0AxymdHQjPfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMzRhMTVkZjMtYWU3OC0z NzJlLTgxNjAtZTcxZDExOGI4ZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0eAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAPNy+U0wMmGJIEgcE6JFKL9kY+9y40DsbxuvaoRUSQX0+KLMxirxpbBVe e2dN/YoB87w+myUOFO72ZbSRIFW1sHRiU70m+2eBQltayX+QcnkkZZUTMEn0+z+7 xpJVQIzUW6JEVri/mAOMpvqYWYhPVKPC+hKP29o22iHSp4RSKE56z5NlWn3Ro0Wk /hio2NOhpNQ5K+YjfYSenI5yCBiat7jhmOqTZ5eiUEG42ArvmKZ6N9OSgVlySSCS dFBPLgSkQs9p3kLt/oFpb+56yPlKkV6/po8uUqtSiWC23iC18EMGuITssxyD1JXn 6a5Ls4lATGYlIj89OKCK8iTrHQTa0Q== -----END CERTIFICATE-----Generated at Mon Oct 20 10:36:16 2025 by rpki-client