$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85b99b16-3c92-33b6-9ed8-133467e30af3.roa File: 85b99b16-3c92-33b6-9ed8-133467e30af3.roa (raw, json) Hash identifier: Nn3VoiiBGIrxAGZPMn183bdT1qLNK3hYwcmBdeES1y4= Subject key identifier: DF:11:27:2E:50:DE:F8:43:1E:48:EB:11:52:C7:EF:40:9F:33:26:3C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B8EAD06CA2DAA5BE76333E000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85b99b16-3c92-33b6-9ed8-133467e30af3.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 7342 IP address blocks: 209.131.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ad:06:ca:2d:aa:5b:e7:63:33:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=c991300d-4a47-4d15-8358-9da915ea6b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4f:ba:7c:70:75:a5:5f:b2:4c:0b:f5:d2:02: 15:40:94:31:1c:81:3a:c3:0a:6f:92:80:ec:9a:33: bf:04:dd:88:8d:a8:d8:42:5c:9f:64:95:55:90:af: 14:70:82:05:da:cf:09:81:a2:97:ef:9a:7f:21:b1: 1e:33:21:3c:00:c0:d4:c1:c9:cf:51:b9:8a:a1:94: 4a:bd:65:65:4c:5b:76:e2:50:77:45:4b:4c:47:fd: 62:42:7f:32:17:a5:44:1c:f7:58:38:86:50:74:12: 08:0e:06:2d:84:4b:2f:4f:73:4d:d1:19:09:91:55: 86:eb:bf:57:3d:e2:bc:92:c0:20:1c:ac:36:6a:17: 6b:28:1e:93:9b:e0:e1:5a:93:67:b1:4b:42:f6:75: fc:0e:f7:46:2f:f4:f8:08:4c:e1:25:b3:55:79:4a: 09:1e:f9:58:93:d0:c5:45:bf:76:a9:bb:61:46:cf: 4c:ed:1d:42:79:bf:ff:a3:6b:32:b7:32:5e:02:03: 3e:c0:3b:af:41:de:57:a6:69:22:79:5f:9a:73:a5: 08:ad:85:da:dc:c9:bb:05:7e:23:0a:7f:22:90:f9: b6:88:fb:95:73:67:92:1c:b3:90:92:b3:83:4b:1a: 36:e5:f5:91:e0:3a:0c:97:14:d6:46:df:03:12:12: f8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:11:27:2E:50:DE:F8:43:1E:48:EB:11:52:C7:EF:40:9F:33:26:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85b99b16-3c92-33b6-9ed8-133467e30af3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:ba:c9:3b:0c:ba:1f:e0:5b:9e:b3:47:30:e0:7c:6b:19:d7: 1d:be:3d:fa:2c:3a:73:c9:9e:11:3e:85:e0:9f:a3:8b:74:5a: 76:ea:1d:6e:c5:73:ce:b8:31:d7:08:83:c6:f3:dd:5c:ab:fc: 49:a0:63:76:75:6a:a4:f4:df:a2:0e:e7:33:1f:3d:8a:d6:87: b8:d5:64:9a:c7:6e:d5:78:1b:0b:5d:4f:a0:57:5d:20:f5:1a: a4:8c:32:28:7d:e8:26:24:34:01:d6:e6:77:f6:be:01:38:23: 09:b8:15:7d:f3:36:1e:ff:ac:0a:66:3b:99:06:b3:70:0a:ec: 4d:05:ac:e8:33:1d:1f:34:79:26:5b:82:0f:79:81:ea:9a:35: 07:8e:46:d3:72:48:12:73:19:c7:bf:f5:49:bd:7d:37:35:88: aa:d4:20:34:78:ce:3f:8f:bb:41:f8:e5:cf:6a:ca:3a:18:c0: 8c:85:a8:40:d7:ea:ad:17:b2:d2:24:2b:a1:c0:43:2e:48:15: d9:a8:fb:8b:3c:11:2c:8b:59:10:1b:24:d7:6e:e3:ab:f6:28: ee:69:11:ef:0b:d6:a3:b0:a8:40:9a:c3:2c:c0:79:9b:a7:0a: d7:92:af:6d:85:c0:0a:e9:ca:c0:a0:3d:0e:14:35:f3:9e:e5: 6e:23:84:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrQbKLapb52Mz4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk Yzk5MTMwMGQtNGE0Ny00ZDE1LTgzNTgtOWRhOTE1ZWE2YjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk+6fHB1pV+yTAv10gIVQJQxHIE6wwpvkoDs mjO/BN2IjajYQlyfZJVVkK8UcIIF2s8JgaKX75p/IbEeMyE8AMDUwcnPUbmKoZRK vWVlTFt24lB3RUtMR/1iQn8yF6VEHPdYOIZQdBIIDgYthEsvT3NN0RkJkVWG679X PeK8ksAgHKw2ahdrKB6Tm+DhWpNnsUtC9nX8DvdGL/T4CEzhJbNVeUoJHvlYk9DF Rb92qbthRs9M7R1Ceb//o2sytzJeAgM+wDuvQd5XpmkieV+ac6UIrYXa3Mm7BX4j Cn8ikPm2iPuVc2eSHLOQkrODSxo25fWR4DoMlxTWRt8DEhL4hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8RJy5Q3vhDHkjrEVLH70CfMyY8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODViOTliMTYtM2M5Mi0z M2I2LTllZDgtMTMzNDY3ZTMwYWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAe6yTsMuh/gW56zRzDgfGsZ1x2+PfosOnPJnhE+heCfo4t0WnbqHW7F c864MdcIg8bz3Vyr/EmgY3Z1aqT036IO5zMfPYrWh7jVZJrHbtV4GwtdT6BXXSD1 GqSMMih96CYkNAHW5nf2vgE4Iwm4FX3zNh7/rApmO5kGs3AK7E0FrOgzHR80eSZb gg95geqaNQeORtNySBJzGce/9Um9fTc1iKrUIDR4zj+Pu0H45c9qyjoYwIyFqEDX 6q0XstIkK6HAQy5IFdmo+4s8ESyLWRAbJNdu46v2KO5pEe8L1qOwqECawyzAeZun CteSr22FwArpysCgPQ4UNfOe5W4jhIs= -----END CERTIFICATE-----Generated at Mon Oct 20 08:05:47 2025 by rpki-client