$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/059721de-e619-3d5c-9446-7a8a6df39cf2.roa File: 059721de-e619-3d5c-9446-7a8a6df39cf2.roa (raw, json) Hash identifier: wKa4g5KINDDMP2T2jY28mAocNVsqHjx829Uo38/dDAk= Subject key identifier: B4:EA:E7:AB:D4:17:42:F0:21:90:3D:83:A3:11:0F:E8:13:FE:18:04 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B76F25F11816B2D22B9704D40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/059721de-e619-3d5c-9446-7a8a6df39cf2.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 7342 IP address blocks: 209.131.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:5f:11:81:6b:2d:22:b9:70:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=b363a4ba-76b9-446b-b9ba-eb0046862140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a1:7d:7f:ce:e8:8d:bb:20:8f:41:a7:39:23: 01:a8:3f:97:60:c3:35:70:d3:0a:86:67:0f:fc:ce: 12:35:07:aa:6d:57:e1:e8:30:89:c8:ff:d9:70:f3: 12:43:3c:e9:17:38:bd:d8:9e:5e:b9:16:b1:12:23: d8:12:d9:29:02:11:85:25:8d:3c:de:49:d2:57:bd: 08:c1:23:4a:97:6e:a4:b2:52:15:d4:69:1d:c7:dd: dd:35:92:6b:c6:b5:7f:e0:f3:49:a3:60:eb:fe:03: 15:03:69:2c:81:aa:41:f2:46:8c:1c:08:71:38:2b: 44:64:49:ff:e5:d1:21:f2:e4:c3:e3:18:cd:19:01: e2:c5:52:ef:7f:3e:97:28:9c:b7:17:16:38:40:86: e8:45:b6:35:75:e9:63:9c:b0:59:1d:5d:fd:b7:5b: a0:d5:c7:53:48:97:55:bd:1d:d9:0c:66:24:a3:9a: ce:a0:90:9a:53:15:cc:77:7a:bf:c8:88:2f:9a:c5: 76:a5:15:bf:97:c7:15:0a:1e:47:d6:fb:55:11:50: 2d:46:c3:a4:4f:4a:c8:60:2d:2d:3f:1d:60:cb:67: 0e:84:1e:5f:b0:59:a3:ae:2c:bd:dd:88:bb:c8:b8: 28:cf:32:70:f2:53:93:0a:55:c4:aa:6b:a7:88:25: d5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:EA:E7:AB:D4:17:42:F0:21:90:3D:83:A3:11:0F:E8:13:FE:18:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/059721de-e619-3d5c-9446-7a8a6df39cf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:21:77:fa:44:c0:1d:3c:8f:e5:3e:81:5d:3e:77:04:67:21: 05:5c:7c:c1:d6:35:59:db:9c:c5:71:ea:68:f7:ea:9e:60:33: c5:02:bd:9a:f6:0b:a9:65:f5:77:fb:d6:6b:50:34:6b:a1:16: 8a:1f:4f:0a:33:4b:84:cb:c3:4b:97:70:1d:a6:29:72:cd:b9: 70:4c:e1:f2:c7:8b:a8:5c:ac:04:88:94:6d:dd:3a:03:8b:ec: a0:39:9f:e1:e8:66:e7:39:f1:81:f6:99:40:dc:27:b3:e7:19: 96:32:3b:f8:2c:33:b5:9c:f6:6e:a1:04:b4:ec:26:11:1f:50: 89:6f:01:a8:3b:61:45:23:ca:98:8d:93:2b:5f:2b:51:30:90: 61:49:63:59:be:a8:c5:94:3d:a5:34:d6:58:23:47:81:e3:db: 87:20:6a:cd:b0:c6:ca:64:28:8f:7c:f1:4b:1b:40:4d:08:7f: f2:d3:6f:77:33:01:2f:6d:c4:a2:29:fe:ec:c0:c1:46:5f:1e: e6:c4:35:c9:2a:09:57:df:ac:6a:8a:49:a8:4c:f3:f7:22:83: fb:cb:df:28:a3:42:9c:17:87:99:9c:20:d7:2f:48:0a:3f:4f: aa:bc:d5:fa:f7:81:a6:eb:14:0b:68:11:ca:90:2e:c4:38:f3: 78:0e:81:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28l8RgWstIrlwTUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk YjM2M2E0YmEtNzZiOS00NDZiLWI5YmEtZWIwMDQ2ODYyMTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qF9f87ojbsgj0GnOSMBqD+XYMM1cNMKhmcP /M4SNQeqbVfh6DCJyP/ZcPMSQzzpFzi92J5euRaxEiPYEtkpAhGFJY083knSV70I wSNKl26kslIV1Gkdx93dNZJrxrV/4PNJo2Dr/gMVA2ksgapB8kaMHAhxOCtEZEn/ 5dEh8uTD4xjNGQHixVLvfz6XKJy3FxY4QIboRbY1deljnLBZHV39t1ug1cdTSJdV vR3ZDGYko5rOoJCaUxXMd3q/yIgvmsV2pRW/l8cVCh5H1vtVEVAtRsOkT0rIYC0t Px1gy2cOhB5fsFmjriy93Yi7yLgozzJw8lOTClXEqmuniCXVvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTq56vUF0LwIZA9g6MRD+gT/hgEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDU5NzIxZGUtZTYxOS0z ZDVjLTk0NDYtN2E4YTZkZjM5Y2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJchd/pEwB08j+U+gV0+dwRnIQVcfMHWNVnbnMVx6mj36p5gM8UCvZr2 C6ll9Xf71mtQNGuhFoofTwozS4TLw0uXcB2mKXLNuXBM4fLHi6hcrASIlG3dOgOL 7KA5n+HoZuc58YH2mUDcJ7PnGZYyO/gsM7Wc9m6hBLTsJhEfUIlvAag7YUUjypiN kytfK1EwkGFJY1m+qMWUPaU01lgjR4Hj24cgas2wxspkKI988UsbQE0If/LTb3cz AS9txKIp/uzAwUZfHubENckqCVffrGqKSahM8/cig/vL3yijQpwXh5mcINcvSAo/ T6q81fr3gabrFAtoEcqQLsQ483gOgek= -----END CERTIFICATE-----Generated at Mon Oct 20 06:59:45 2025 by rpki-client