$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/2e9dc843-f02d-3b87-b047-7e650f5681ac.roa File: 2e9dc843-f02d-3b87-b047-7e650f5681ac.roa (raw, json) Hash identifier: r7f8N6igDGUdTRmSSOsM5Tk5dKZDyfBJCX05cmqd3SU= Subject key identifier: A1:AE:01:AE:0D:02:61:EB:38:82:4F:73:49:EB:92:53:4D:E3:54:45 Certificate issuer: /CN=25ec66d9-6873-4655-8a15-555b07c2edb4 Certificate serial: 010D0C9F4328584B5571E7BFB93EE614C55C6C80 Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/2e9dc843-f02d-3b87-b047-7e650f5681ac.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 400400 IP address blocks: 209.112.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:e7:bf:b9:3e:e6:14:c5:5c:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4 Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=f6ea9530-08bd-4be3-a6ca-541ea0bc8316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8d:b1:b6:e8:25:9e:52:54:a9:da:a5:95:41: e7:cd:83:00:e1:22:48:b0:09:57:4c:d3:9d:d0:58: 4f:ef:bf:ff:c2:14:b2:f6:b1:9e:f0:8b:b6:76:d0: a8:ed:25:3c:1b:be:a9:a6:4d:6f:e7:42:4b:68:d2: ec:d0:eb:b7:9f:e6:37:9f:4d:f9:0d:66:31:54:84: 86:ec:b9:4e:c7:3e:9b:06:7b:6b:27:14:3e:23:a0: 9e:12:72:6b:ab:6e:5f:75:c1:14:6a:18:b1:c7:70: c1:d6:11:c7:04:54:d5:39:25:bf:17:96:da:56:8e: f5:cd:15:ad:5b:1a:d2:af:e9:28:52:5d:02:72:57: 97:4d:0f:0c:ae:97:1f:f0:3d:a2:8f:3d:e5:19:c4: 1a:1c:f8:ee:e6:db:ec:f0:60:8c:97:fc:4c:79:ff: d2:8b:7a:1a:0f:35:68:1f:3a:c0:5f:45:6c:1f:10: 53:26:f6:e2:4c:c1:1a:38:2b:92:36:48:3d:2b:3b: 74:be:95:da:42:f2:9e:1f:88:68:4f:09:c9:ff:59: 6a:1e:73:b1:ce:ed:f5:f0:df:49:e2:90:29:ec:ce: 60:4e:eb:c3:f0:e7:a7:fa:20:66:e8:2b:55:de:d5: a3:77:10:07:0d:25:d8:96:f1:6e:ba:50:5b:83:1c: 79:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:AE:01:AE:0D:02:61:EB:38:82:4F:73:49:EB:92:53:4D:E3:54:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/2e9dc843-f02d-3b87-b047-7e650f5681ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl X509v3 Authority Key Identifier: keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer sbgp-ipAddrBlock: critical IPv4: 209.112.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:bc:0a:47:a7:8a:c3:ca:a7:e2:95:11:00:39:f6:51:9e:96: 00:ef:88:be:81:70:b8:61:20:34:10:77:f1:a3:53:8a:57:f9: 6c:f5:1e:80:9d:29:fa:79:cd:ed:f1:b6:e5:bb:04:f1:7d:aa: 9f:1c:2e:85:70:87:ea:33:d3:ab:45:d7:22:d7:11:a3:a2:62: 90:3f:47:28:6f:e8:80:e6:af:f7:81:dc:5f:80:cd:8a:54:7c: b5:c1:d1:eb:49:9c:70:78:79:a6:c4:9d:8b:3e:e7:8d:a3:02: 4a:55:4f:d4:75:c2:b3:07:13:c6:fa:85:9b:ae:4b:6c:25:15: 55:5f:3d:e7:7e:4a:34:19:2c:17:4d:15:40:28:c1:a1:10:10: 5e:f6:1a:bc:bf:3f:7b:fe:82:a8:a2:01:fc:c1:21:87:0a:3b: 49:2a:77:74:e9:cc:c7:27:47:03:97:89:cc:29:cc:dd:5a:5f: b7:4d:4c:b1:9e:63:39:a0:cd:95:02:cc:36:f9:17:bf:dc:e3: c8:da:de:2d:02:d3:e0:db:bb:03:59:87:ee:45:db:29:0f:e0: 4b:2c:fa:15:22:93:cc:1b:b2:53:b9:4d:00:4e:46:14:1b:3c: b5:25:ca:68:50:17:f4:dd:1c:b6:2e:8c:13:9c:a6:b0:ef:24: c7:0f:2f:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVcee/uT7mFMVcbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVlYzY2ZDktNjg3My00NjU1LThhMTUtNTU1YjA3YzJl ZGI0MB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk ZjZlYTk1MzAtMDhiZC00YmUzLWE2Y2EtNTQxZWEwYmM4MzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk42xtuglnlJUqdqllUHnzYMA4SJIsAlXTNOd 0FhP77//whSy9rGe8Iu2dtCo7SU8G76ppk1v50JLaNLs0Ou3n+Y3n035DWYxVISG 7LlOxz6bBntrJxQ+I6CeEnJrq25fdcEUahixx3DB1hHHBFTVOSW/F5baVo71zRWt WxrSr+koUl0CcleXTQ8Mrpcf8D2ijz3lGcQaHPju5tvs8GCMl/xMef/Si3oaDzVo HzrAX0VsHxBTJvbiTMEaOCuSNkg9Kzt0vpXaQvKeH4hoTwnJ/1lqHnOxzu318N9J 4pAp7M5gTuvD8Oen+iBm6CtV3tWjdxAHDSXYlvFuulBbgxx5OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGuAa4NAmHrOIJPc0nrklNN41RFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNWVj NjZkOS02ODczLTQ2NTUtOGExNS01NTViMDdjMmVkYjQvMmU5ZGM4NDMtZjAyZC0z Yjg3LWIwNDctN2U2NTBmNTY4MWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjVlYzY2ZDktNjg3My00NjU1LThh MTUtNTU1YjA3YzJlZGI0LzI1ZWM2NmQ5LTY4NzMtNDY1NS04YTE1LTU1NWIwN2My ZWRiNC5jcmwwHwYDVR0jBBgwFoAU4SNp7dNw6XPTAABlwTj8t+2yeQYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNWVjNjZkOS02ODczLTQ2NTUtOGExNS01NTVi MDdjMmVkYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XBsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF68CkenisPKp+KVEQA59lGelgDviL6BcLhhIDQQd/GjU4pX+Wz1HoCd Kfp5ze3xtuW7BPF9qp8cLoVwh+oz06tF1yLXEaOiYpA/Ryhv6IDmr/eB3F+AzYpU fLXB0etJnHB4eabEnYs+542jAkpVT9R1wrMHE8b6hZuuS2wlFVVfPed+SjQZLBdN FUAowaEQEF72Gry/P3v+gqiiAfzBIYcKO0kqd3TpzMcnRwOXicwpzN1aX7dNTLGe YzmgzZUCzDb5F7/c48ja3i0C0+DbuwNZh+5F2ykP4Ess+hUik8wbslO5TQBORhQb PLUlymhQF/TdHLYujBOcprDvJMcPL5Y= -----END CERTIFICATE-----Generated at Mon Oct 20 16:28:10 2025 by rpki-client