$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8173fc6f-7f0d-3db3-8647-6d275781dbbc.roa File: 8173fc6f-7f0d-3db3-8647-6d275781dbbc.roa (raw, json) Hash identifier: 1mfLsoHjhxKbo7eC9O+peNFQEwq9cTWaXjzpBO8qzu8= Subject key identifier: C1:70:B1:1D:9D:29:67:87:FD:5C:E4:B5:75:CE:A7:00:14:96:97:45 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B8EAD0684CEBE9797CD24F680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8173fc6f-7f0d-3db3-8647-6d275781dbbc.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 7342 IP address blocks: 209.131.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ad:06:84:ce:be:97:97:cd:24:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=df3728b3-d768-45d7-974c-93550a727152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f7:d5:97:b9:4d:b5:cf:fd:0c:88:88:2b:a4: d7:1c:9b:ad:90:fb:b4:aa:4b:7a:5d:3c:6d:e1:6e: 6e:34:1e:56:6d:a7:a1:90:71:7c:8e:9e:d9:25:b5: 07:25:65:94:63:7a:84:99:11:57:e4:7a:47:ee:b3: 3b:b5:40:c4:a4:6d:39:2e:6c:49:2a:a4:c3:40:6e: 66:8b:85:22:f1:6b:28:08:de:3c:c3:06:96:4f:d9: 5c:12:3b:89:6e:59:31:cd:9f:35:fc:49:2d:5a:15: ad:86:48:b1:7c:6d:75:69:eb:86:0d:af:df:a5:56: 50:1d:23:73:ec:af:f6:e6:3b:5f:fa:b9:9f:e7:fc: eb:9a:7d:d4:59:c8:f2:2f:af:c0:98:38:8c:5e:ce: 6b:ed:f4:1a:57:b4:38:cf:89:3e:0b:23:81:e4:8c: ad:20:53:6a:85:16:b5:12:71:57:bc:89:d6:e0:8c: 46:fe:64:5b:13:e4:a4:d4:b7:7f:8e:2f:2f:ca:63: ae:fc:db:9f:7b:c5:6f:5c:54:66:ea:fd:71:53:bf: d9:53:3c:93:43:6c:5d:95:1d:83:81:bb:1d:b3:03: 33:13:4b:67:9e:17:d6:28:83:7e:cd:f2:87:c7:fc: 01:1c:e2:63:ca:15:4e:68:c8:c4:45:30:d3:4d:e7: 10:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:70:B1:1D:9D:29:67:87:FD:5C:E4:B5:75:CE:A7:00:14:96:97:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8173fc6f-7f0d-3db3-8647-6d275781dbbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:2d:e6:18:73:a2:c3:2a:09:ea:d2:53:b5:ee:9f:f5:94:46: e6:61:e4:8d:84:04:4e:6f:0e:4f:26:31:ea:cb:55:f5:84:e9: 75:d5:f9:c4:62:fc:bc:de:75:5b:e7:ff:e7:dc:4e:ac:66:f7: 26:da:be:51:10:63:82:97:ba:5b:fc:63:39:e5:5e:34:86:e1: 8c:88:01:36:11:fc:74:04:1d:ba:3d:f5:57:b2:47:9a:c0:06: 3f:42:5e:9e:92:af:f6:4d:eb:f4:c2:3d:a0:d6:ae:d8:2b:6b: 65:fc:6e:98:21:91:93:df:06:c7:19:0b:a8:01:df:bb:a1:ca: dc:82:94:6f:10:25:60:f8:08:27:51:31:f5:16:4f:d1:4c:86: 9a:1c:e4:e5:13:31:3d:9c:12:f2:3c:63:4b:7d:bc:80:14:45: 2f:ab:02:ce:3f:be:db:08:45:3e:ec:6f:fb:a4:71:7e:b0:b3: 8c:cf:c7:87:f0:9e:85:17:2a:b0:f7:f4:96:d1:43:04:72:91: c3:9c:33:71:c5:30:7b:ea:52:e0:3c:d3:b3:79:4c:08:8d:9b: 33:db:60:2a:b8:6c:9c:40:62:ea:8f:03:d4:86:ee:57:57:00: cf:9e:1d:49:ab:7f:6d:ce:bd:c1:35:c2:66:b7:13:4f:ec:3c: f1:02:4e:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrQaEzr6Xl80k9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ZGYzNzI4YjMtZDc2OC00NWQ3LTk3NGMtOTM1NTBhNzI3MTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqffVl7lNtc/9DIiIK6TXHJutkPu0qkt6XTxt 4W5uNB5WbaehkHF8jp7ZJbUHJWWUY3qEmRFX5HpH7rM7tUDEpG05LmxJKqTDQG5m i4Ui8WsoCN48wwaWT9lcEjuJblkxzZ81/EktWhWthkixfG11aeuGDa/fpVZQHSNz 7K/25jtf+rmf5/zrmn3UWcjyL6/AmDiMXs5r7fQaV7Q4z4k+CyOB5IytIFNqhRa1 EnFXvInW4IxG/mRbE+Sk1Ld/ji8vymOu/Nufe8VvXFRm6v1xU7/ZUzyTQ2xdlR2D gbsdswMzE0tnnhfWKIN+zfKHx/wBHOJjyhVOaMjERTDTTecQQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFwsR2dKWeH/VzktXXOpwAUlpdFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODE3M2ZjNmYtN2YwZC0z ZGIzLTg2NDctNmQyNzU3ODFkYmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGst5hhzosMqCerSU7Xun/WURuZh5I2EBE5vDk8mMerLVfWE6XXV+cRi /LzedVvn/+fcTqxm9ybavlEQY4KXulv8YznlXjSG4YyIATYR/HQEHbo99VeyR5rA Bj9CXp6Sr/ZN6/TCPaDWrtgra2X8bpghkZPfBscZC6gB37uhytyClG8QJWD4CCdR MfUWT9FMhpoc5OUTMT2cEvI8Y0t9vIAURS+rAs4/vtsIRT7sb/ukcX6ws4zPx4fw noUXKrD39JbRQwRykcOcM3HFMHvqUuA807N5TAiNmzPbYCq4bJxAYuqPA9SG7ldX AM+eHUmrf23OvcE1wma3E0/sPPECTsc= -----END CERTIFICATE-----Generated at Mon Oct 20 10:36:37 2025 by rpki-client