$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2338458a-35c8-3785-8934-34add329d7cf.roa File: 2338458a-35c8-3785-8934-34add329d7cf.roa (raw, json) Hash identifier: qc5EgQPOuQX66skYYOf/VmMXcR70wxFc+rAQG8AHVr8= Subject key identifier: DD:BF:56:85:E5:47:6A:C2:DF:D9:27:07:3A:5B:19:46:E4:A5:3D:6D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B76F25DB71A0FA82C4C2EC560 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2338458a-35c8-3785-8934-34add329d7cf.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 7342 IP address blocks: 209.131.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:5d:b7:1a:0f:a8:2c:4c:2e:c5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=f128eb5b-7387-465b-8d06-c277103edf52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5a:b9:84:f5:6d:33:36:90:fe:64:4f:91:7c: d4:e6:85:64:75:34:80:10:e2:66:da:d2:7c:07:b8: fc:a2:6a:59:aa:db:10:ae:f0:50:7f:c0:ff:54:fc: aa:a2:a3:96:1f:cb:a3:5e:c1:06:ec:8f:77:68:9e: 26:67:08:0b:89:95:e2:6a:63:67:f0:fe:02:b8:70: 8f:de:ac:05:ab:35:13:e9:e8:cb:6d:c4:31:0a:9f: cf:3a:d6:23:78:07:39:c7:02:0c:ea:8c:9a:1b:47: 82:ff:a5:bc:f7:24:03:43:1a:64:46:e3:b5:4b:c7: 6e:f3:34:f4:b9:77:df:31:9f:63:3e:ae:d9:7e:02: 52:8f:f7:7c:09:10:f6:56:31:82:a9:ba:7e:9f:35: c9:78:d6:67:24:e2:5d:21:e3:d7:d5:25:a5:5d:78: 48:78:6f:eb:6b:2e:ff:8d:33:56:97:24:9d:4d:6a: 3d:97:37:2d:04:53:10:c7:bd:1a:08:14:08:f1:1c: 06:fc:5e:6e:23:38:2e:70:39:bd:dd:69:97:b9:a1: 11:3f:84:7d:ea:a9:03:52:ac:7d:0e:f6:e7:31:56: be:f0:dc:3f:ba:40:8f:3d:49:8c:f4:eb:f1:aa:52: 3d:b7:6a:50:8f:40:05:18:d3:a5:d7:22:0e:80:ea: 7a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:BF:56:85:E5:47:6A:C2:DF:D9:27:07:3A:5B:19:46:E4:A5:3D:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2338458a-35c8-3785-8934-34add329d7cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:a8:3a:82:b6:ec:42:f6:ed:b5:f4:e2:1d:68:de:64:8e:16: 28:e3:05:77:c6:16:95:7e:01:d9:85:83:b1:35:89:df:5f:1c: 31:d5:3b:5e:72:11:40:aa:38:15:42:6d:4c:30:f6:f6:42:d4: 6e:9d:97:fd:9f:eb:4f:b6:04:4c:b8:61:7a:53:9d:3b:7b:7f: 95:74:cd:a3:23:7b:20:79:86:fb:59:d9:30:1e:53:ec:45:05: ba:3b:be:cd:24:5e:4e:2c:1e:d8:79:10:4b:8c:59:02:cf:da: 0a:ff:6c:2b:23:a1:51:70:f6:4e:c2:1f:63:1a:57:04:9d:36: 46:aa:64:54:13:fa:e8:e6:17:34:37:4f:1d:80:5e:6b:88:5b: d0:a1:14:22:49:31:cc:d0:b3:90:b7:cb:bb:73:ad:f8:0e:6c: 95:1f:39:b3:d5:43:10:16:c0:5c:42:59:8b:1f:70:97:42:0c: 18:3d:7b:26:dc:b7:74:dd:19:07:19:72:2d:42:2b:29:f9:68: f3:97:cc:40:03:95:70:1e:75:73:55:24:91:a1:6c:df:77:4c: bf:e3:37:f6:17:93:b4:e7:ae:db:9f:3e:d0:bd:08:f2:66:63: 3d:f9:44:05:a7:aa:c6:d4:3c:e5:d6:67:8d:a3:00:29:1e:c6: 35:83:5e:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28l23Gg+oLEwuxWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZjEyOGViNWItNzM4Ny00NjViLThkMDYtYzI3NzEwM2VkZjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlq5hPVtMzaQ/mRPkXzU5oVkdTSAEOJm2tJ8 B7j8ompZqtsQrvBQf8D/VPyqoqOWH8ujXsEG7I93aJ4mZwgLiZXiamNn8P4CuHCP 3qwFqzUT6ejLbcQxCp/POtYjeAc5xwIM6oyaG0eC/6W89yQDQxpkRuO1S8du8zT0 uXffMZ9jPq7ZfgJSj/d8CRD2VjGCqbp+nzXJeNZnJOJdIePX1SWlXXhIeG/ray7/ jTNWlySdTWo9lzctBFMQx70aCBQI8RwG/F5uIzgucDm93WmXuaERP4R96qkDUqx9 DvbnMVa+8Nw/ukCPPUmM9OvxqlI9t2pQj0AFGNOl1yIOgOp6UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2/VoXlR2rC39knBzpbGUbkpT1tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjMzODQ1OGEtMzVjOC0z Nzg1LTg5MzQtMzRhZGQzMjlkN2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YO9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKaoOoK27EL27bX04h1o3mSOFijjBXfGFpV+AdmFg7E1id9fHDHVO15y EUCqOBVCbUww9vZC1G6dl/2f60+2BEy4YXpTnTt7f5V0zaMjeyB5hvtZ2TAeU+xF Bbo7vs0kXk4sHth5EEuMWQLP2gr/bCsjoVFw9k7CH2MaVwSdNkaqZFQT+ujmFzQ3 Tx2AXmuIW9ChFCJJMczQs5C3y7tzrfgObJUfObPVQxAWwFxCWYsfcJdCDBg9eybc t3TdGQcZci1CKyn5aPOXzEADlXAedXNVJJGhbN93TL/jN/YXk7TnrtufPtC9CPJm Yz35RAWnqsbUPOXWZ42jACkexjWDXso= -----END CERTIFICATE-----Generated at Mon Oct 20 04:49:19 2025 by rpki-client