$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4acc51dd-c2ae-3061-ac0a-d471805c3c1a.roa File: 4acc51dd-c2ae-3061-ac0a-d471805c3c1a.roa (raw, json) Hash identifier: UhwREqGuZgxhcAUWCNvlecqUAdgdaHxBKt3wFGe30iw= Subject key identifier: 94:B6:C6:DD:3A:37:F5:71:2D:3E:47:2D:F8:00:4F:3C:4C:E9:75:E5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B76F25DC6DB3A1004E4FC8280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4acc51dd-c2ae-3061-ac0a-d471805c3c1a.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 7342 IP address blocks: 209.131.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:5d:c6:db:3a:10:04:e4:fc:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=80648b1d-7ea3-47b5-87b5-eaba9c6b7afb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:80:07:0e:37:c5:e0:08:7e:60:b9:81:65:f5: 4c:fd:b3:4c:6d:95:50:11:fa:22:45:ee:60:85:77: 52:4f:f3:02:3e:6c:17:ea:e7:64:ea:6d:7b:8e:1f: 6a:c3:1e:ab:7b:5e:1d:80:8b:59:4e:d8:c5:d4:d1: 97:45:0b:88:0f:bd:ad:79:17:7f:56:ad:99:ff:28: 4c:74:4c:d4:b2:09:11:3c:e5:bb:56:2a:b8:e5:0f: dc:86:f9:9f:c3:e7:1a:aa:68:c5:e8:22:da:37:cd: ed:55:db:c6:6f:ce:87:d7:84:47:0c:d4:d6:d7:78: d9:47:f6:c4:bb:99:fb:07:47:18:b7:81:29:c4:c0: b4:c5:98:96:b2:58:3b:52:6c:16:1c:0a:78:f3:06: f8:76:10:b4:91:83:48:23:34:73:91:a5:13:e8:40: 57:26:5b:43:ae:6d:da:30:a9:d5:60:bd:76:f9:54: 1b:c8:b7:bb:bf:55:e5:3e:d6:c5:65:ef:8b:21:a2: 82:f5:62:9d:57:31:5a:a0:2d:72:a2:d3:64:08:68: 22:67:31:f8:9d:3e:8d:78:c5:17:d6:cb:a8:fa:08: f3:18:bf:e8:6d:59:7e:01:e3:d4:dc:d1:cb:27:76: 2a:a4:38:15:60:0b:d1:70:92:e1:79:c4:cc:ff:eb: c1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B6:C6:DD:3A:37:F5:71:2D:3E:47:2D:F8:00:4F:3C:4C:E9:75:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4acc51dd-c2ae-3061-ac0a-d471805c3c1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:3d:1f:ac:27:77:73:2b:ca:5c:0f:cb:44:c6:d0:c8:08:8d: e0:9a:af:22:ef:59:f1:1a:7c:61:00:09:8c:b0:e6:71:4f:1f: 9b:23:c0:f8:39:a4:21:eb:28:9a:08:fa:4d:07:d9:88:17:b9: e0:24:6f:a7:1c:45:70:39:d3:a6:3e:3e:a6:84:e7:82:50:13: 5b:6c:72:c6:eb:f1:13:5a:ae:56:05:0a:6f:de:28:e8:fc:e6: 8b:6a:27:a7:d4:fc:ae:7e:cb:83:16:85:c1:3d:3c:2b:58:2b: 1f:57:c8:28:78:1a:76:a4:d2:e3:51:06:45:22:07:5d:18:9e: a8:d3:7a:1f:b5:d3:4b:b0:20:7d:9a:92:98:ef:41:a8:83:6e: 03:4b:22:ec:30:3d:6c:37:3d:2d:65:1d:e2:6f:28:18:2e:d7: 97:f4:c9:77:43:ba:80:3d:fa:6c:2a:d1:b3:22:54:ab:21:ef: 02:93:44:ab:75:d3:d8:ff:9a:d3:f2:5d:4e:06:9e:ac:26:1d: f9:f5:b6:6d:ca:f2:eb:84:ec:f5:15:39:a2:19:e1:7c:0c:a8: 5d:8b:36:42:62:ef:49:c0:1a:24:cd:36:35:f9:0e:48:e5:a3: 7b:6f:ef:cf:10:66:f6:c3:7b:94:41:bc:7c:00:2b:1f:c2:96: d4:68:f1:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28l3G2zoQBOT8goAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ODA2NDhiMWQtN2VhMy00N2I1LTg3YjUtZWFiYTljNmI3YWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYAHDjfF4Ah+YLmBZfVM/bNMbZVQEfoiRe5g hXdST/MCPmwX6udk6m17jh9qwx6re14dgItZTtjF1NGXRQuID72teRd/Vq2Z/yhM dEzUsgkRPOW7Viq45Q/chvmfw+caqmjF6CLaN83tVdvGb86H14RHDNTW13jZR/bE u5n7B0cYt4EpxMC0xZiWslg7UmwWHAp48wb4dhC0kYNIIzRzkaUT6EBXJltDrm3a MKnVYL12+VQbyLe7v1XlPtbFZe+LIaKC9WKdVzFaoC1yotNkCGgiZzH4nT6NeMUX 1suo+gjzGL/obVl+AePU3NHLJ3YqpDgVYAvRcJLhecTM/+vBXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJS2xt06N/VxLT5HLfgATzxM6XXlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGFjYzUxZGQtYzJhZS0z MDYxLWFjMGEtZDQ3MTgwNWMzYzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE49H6wnd3MrylwPy0TG0MgIjeCaryLvWfEafGEACYyw5nFPH5sjwPg5 pCHrKJoI+k0H2YgXueAkb6ccRXA506Y+PqaE54JQE1tscsbr8RNarlYFCm/eKOj8 5otqJ6fU/K5+y4MWhcE9PCtYKx9XyCh4Gnak0uNRBkUiB10YnqjTeh+100uwIH2a kpjvQaiDbgNLIuwwPWw3PS1lHeJvKBgu15f0yXdDuoA9+mwq0bMiVKsh7wKTRKt1 09j/mtPyXU4GnqwmHfn1tm3K8uuE7PUVOaIZ4XwMqF2LNkJi70nAGiTNNjX5Dkjl o3tv788QZvbDe5RBvHwAKx/CltRo8Sg= -----END CERTIFICATE-----Generated at Mon Oct 20 10:02:00 2025 by rpki-client