$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/419a7ea9-d997-3bd5-9fe3-d3243524b85f.roa File: 419a7ea9-d997-3bd5-9fe3-d3243524b85f.roa (raw, json) Hash identifier: RneZozA6RHp+fVL8WkNPbu64GStL5od3QJZTbZIIxTs= Subject key identifier: 23:59:F3:3E:21:E3:D7:97:4C:07:C4:7D:30:73:F3:14:F6:18:D4:D4 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584B1F016A2E49AA3CBCD84CB500 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/419a7ea9-d997-3bd5-9fe3-d3243524b85f.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 26421 IP address blocks: 209.234.206.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:6a:2e:49:aa:3c:bc:d8:4c:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=7a835c70-b775-459c-b55f-e0bdcced78e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b8:fb:28:4a:44:34:0d:05:c3:64:09:b6:f1: ba:bf:34:e2:19:56:61:ee:21:6a:34:53:ce:8d:71: af:86:fd:ea:e8:ae:80:dd:c3:d9:42:cf:cc:f0:86: f8:b7:e0:8e:d3:c2:8a:fe:8a:91:44:9f:67:cc:77: be:de:69:17:b9:74:ff:9c:e7:16:e1:84:3a:0d:b9: 5d:23:60:c9:4c:76:a1:f1:ed:04:b5:3c:7b:23:9f: db:e7:59:23:47:81:e8:31:45:ac:0c:80:85:87:1a: ea:72:13:29:12:7f:68:94:5a:de:af:37:50:19:db: 03:2f:e7:7c:a5:e7:49:25:e3:6f:9e:33:4e:72:2a: a5:ee:ce:b0:9c:c1:32:25:16:a7:48:dc:00:8a:a5: c7:79:70:57:93:d3:5c:d6:aa:77:d6:2b:81:4c:a3: 27:48:af:b1:42:0a:43:d7:af:ab:9a:98:97:7e:89: bc:5e:b4:8b:bf:c4:14:e1:a7:f9:8a:d8:92:f3:3d: 93:b5:23:c9:ea:6b:4b:27:1e:46:3f:eb:bc:b7:c6: ef:c2:33:95:26:60:81:77:6c:5d:5c:9c:e1:58:e8: 60:46:75:5b:04:90:e1:81:24:ec:70:a6:04:5f:be: 16:0b:91:fc:87:eb:63:25:96:08:f8:2c:04:75:1e: 0b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:59:F3:3E:21:E3:D7:97:4C:07:C4:7D:30:73:F3:14:F6:18:D4:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/419a7ea9-d997-3bd5-9fe3-d3243524b85f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 209.234.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:79:2e:e9:67:90:6f:eb:e5:06:e8:db:e1:ac:ef:55:4e:e3: bf:42:79:92:4f:39:6b:07:9e:43:d4:1c:e3:4b:ed:17:da:03: a4:1e:e1:1b:78:15:69:a5:06:7c:f1:b6:ae:7c:24:2a:d4:49: 05:ee:03:a9:9f:8b:d5:df:0b:3c:6c:2d:7b:c2:51:65:72:4e: 10:92:d5:36:09:57:84:c1:11:be:bc:eb:ec:6f:26:58:68:15: 07:c0:5b:78:41:31:7e:08:6d:7f:fc:82:1f:ad:ca:be:47:83: 7a:aa:ae:f1:3f:f2:c4:90:46:2b:23:3a:a8:f4:44:fb:1a:9e: 0a:b6:b1:04:29:49:3a:8d:97:94:95:8b:9e:3a:fb:03:a5:b8: 5e:8c:12:35:9a:b3:40:bf:f1:14:a7:1a:10:b8:a3:34:1f:05: 2e:55:4f:75:22:35:ec:0d:47:ce:d5:31:20:56:02:de:01:a1: a1:13:fa:aa:c5:98:86:4e:8c:43:a4:6d:c6:67:18:f2:38:df: 5d:20:a2:93:c7:58:c6:14:6a:5a:1f:bf:4c:c8:50:c7:f4:80: 24:5f:bf:a3:26:69:f5:ce:a8:78:71:a6:2c:10:b3:fa:54:5e: e3:c1:cd:ab:96:68:c7:25:bc:59:bd:5e:94:f8:a7:10:5d:f4: 02:aa:09:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAWouSao8vNhMtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk N2E4MzVjNzAtYjc3NS00NTljLWI1NWYtZTBiZGNjZWQ3OGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrj7KEpENA0Fw2QJtvG6vzTiGVZh7iFqNFPO jXGvhv3q6K6A3cPZQs/M8Ib4t+CO08KK/oqRRJ9nzHe+3mkXuXT/nOcW4YQ6Dbld I2DJTHah8e0EtTx7I5/b51kjR4HoMUWsDICFhxrqchMpEn9olFrerzdQGdsDL+d8 pedJJeNvnjNOciql7s6wnMEyJRanSNwAiqXHeXBXk9Nc1qp31iuBTKMnSK+xQgpD 16+rmpiXfom8XrSLv8QU4af5itiS8z2TtSPJ6mtLJx5GP+u8t8bvwjOVJmCBd2xd XJzhWOhgRnVbBJDhgSTscKYEX74WC5H8h+tjJZYI+CwEdR4LDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNZ8z4h49eXTAfEfTBz8xT2GNTUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNDE5YTdlYTktZDk5Ny0z YmQ1LTlmZTMtZDMyNDM1MjRiODVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0erOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGB5LulnkG/r5Qbo2+Gs71VO479CeZJPOWsHnkPUHONL7RfaA6Qe4Rt4 FWmlBnzxtq58JCrUSQXuA6mfi9XfCzxsLXvCUWVyThCS1TYJV4TBEb686+xvJlho FQfAW3hBMX4IbX/8gh+tyr5Hg3qqrvE/8sSQRisjOqj0RPsangq2sQQpSTqNl5SV i546+wOluF6MEjWas0C/8RSnGhC4ozQfBS5VT3UiNewNR87VMSBWAt4BoaET+qrF mIZOjEOkbcZnGPI4310gopPHWMYUalofv0zIUMf0gCRfv6MmafXOqHhxpiwQs/pU XuPBzauWaMclvFm9XpT4pxBd9AKqCd8= -----END CERTIFICATE-----Generated at Mon Oct 20 13:09:02 2025 by rpki-client