$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a97b9046-55be-3d39-8005-833ad34d16c8.roa File: a97b9046-55be-3d39-8005-833ad34d16c8.roa (raw, json) Hash identifier: +THsjrlpfWKUc5kd0d4koSHLxhPYYSPmjo2dDJmBJpk= Subject key identifier: AD:41:DE:E1:EE:56:1C:43:E2:9D:52:38:BB:A2:28:92:B4:8A:45:E2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B891781493A513BA2B26E6980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a97b9046-55be-3d39-8005-833ad34d16c8.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 0 IP address blocks: 209.131.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:81:49:3a:51:3b:a2:b2:6e:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=8491bde5-638f-4c50-9e25-c8311bc17d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:13:ff:ad:e7:ac:c0:cb:b7:80:4d:82:b2:d3: e9:19:01:05:79:39:b6:dd:06:6b:3a:7e:25:02:77: 18:ee:c4:cb:5c:14:13:74:d5:80:73:11:96:55:2b: 6b:45:f0:62:ea:0c:e9:24:54:30:1f:8e:c0:b0:a3: 50:03:0d:f1:33:02:02:d6:c4:52:05:15:d6:a8:fe: 76:58:76:8f:d5:f0:74:1c:1a:75:80:8d:4d:49:8a: e3:00:28:af:fc:3c:7b:b4:9e:a9:1c:44:61:c5:07: cc:ba:25:07:8a:8d:45:14:be:e3:78:3b:77:1d:f6: ca:6f:c9:37:f4:00:b3:b2:61:ad:20:7f:49:e5:01: 70:77:79:5a:ac:cf:44:fd:08:93:48:dd:6a:9d:11: df:5f:94:4f:42:f7:87:10:34:68:2d:aa:af:4f:52: 87:d9:83:e7:1b:06:35:44:46:3f:24:6d:ef:ae:75: 1f:b5:7f:e6:dc:2f:e1:73:03:26:d1:d9:2d:91:e2: cf:9d:c8:d5:29:46:3e:ae:33:35:06:a4:00:dc:f5: 16:da:2a:15:ea:d4:18:c7:b0:ce:ff:8c:e3:bc:83: eb:54:24:74:38:17:77:ed:f1:01:f6:10:aa:9f:66: 86:29:80:23:c2:c4:ad:e8:3b:94:a3:19:0b:89:3e: b1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:41:DE:E1:EE:56:1C:43:E2:9D:52:38:BB:A2:28:92:B4:8A:45:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a97b9046-55be-3d39-8005-833ad34d16c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:a4:b1:1b:1e:2f:82:fd:ec:6d:dc:4f:9e:4c:f1:19:47:2d: 35:00:24:bf:22:33:db:df:a4:4b:b6:e0:f7:28:04:5c:48:fd: 9b:d1:c8:21:e5:60:e0:22:36:73:b7:1e:e4:2c:4a:0c:85:1f: 46:4b:84:07:ff:86:f1:26:0f:c1:43:36:1d:ca:2b:9a:25:62: 42:59:17:17:ee:d6:2c:c8:8a:f4:25:8c:43:c6:70:eb:b9:b3: 50:ed:27:0c:93:1e:f0:97:7c:c2:41:dd:f2:50:50:42:e8:63: 66:a7:23:60:98:00:9c:1c:6d:cb:91:6d:e1:b7:23:cd:21:dd: 0f:2c:d8:8f:b5:e0:f9:07:e0:0d:e2:10:47:3d:24:c1:c9:02: fb:ef:42:f2:ef:37:1d:ad:a1:9a:1c:39:ae:74:f3:db:39:43: 41:d3:15:b5:3c:32:5b:d8:69:fd:39:0a:11:65:9a:62:49:22: 81:67:9d:13:fa:45:c2:8e:35:a2:ce:48:c0:93:17:1d:7c:2f: 2b:f8:44:9c:62:b9:32:d6:30:41:7f:e7:6e:e3:62:91:1a:02: d2:62:ea:92:55:91:df:c6:5d:35:1d:9e:76:00:0c:eb:69:64: 9b:e2:58:d7:2f:8f:5b:54:5b:c3:07:10:6a:eb:a2:90:a5:4c: bd:ab:f6:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF4FJOlE7orJuaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk ODQ5MWJkZTUtNjM4Zi00YzUwLTllMjUtYzgzMTFiYzE3ZDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxP/reeswMu3gE2CstPpGQEFeTm23QZrOn4l AncY7sTLXBQTdNWAcxGWVStrRfBi6gzpJFQwH47AsKNQAw3xMwIC1sRSBRXWqP52 WHaP1fB0HBp1gI1NSYrjACiv/Dx7tJ6pHERhxQfMuiUHio1FFL7jeDt3HfbKb8k3 9ACzsmGtIH9J5QFwd3larM9E/QiTSN1qnRHfX5RPQveHEDRoLaqvT1KH2YPnGwY1 REY/JG3vrnUftX/m3C/hcwMm0dktkeLPncjVKUY+rjM1BqQA3PUW2ioV6tQYx7DO /4zjvIPrVCR0OBd37fEB9hCqn2aGKYAjwsSt6DuUoxkLiT6xawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1B3uHuVhxD4p1SOLuiKJK0ikXiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTk3YjkwNDYtNTViZS0z ZDM5LTgwMDUtODMzYWQzNGQxNmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiksRseL4L97G3cT55M8RlHLTUAJL8iM9vfpEu24PcoBFxI/ZvRyCHl YOAiNnO3HuQsSgyFH0ZLhAf/hvEmD8FDNh3KK5olYkJZFxfu1izIivQljEPGcOu5 s1DtJwyTHvCXfMJB3fJQUELoY2anI2CYAJwcbcuRbeG3I80h3Q8s2I+14PkH4A3i EEc9JMHJAvvvQvLvNx2toZocOa5089s5Q0HTFbU8MlvYaf05ChFlmmJJIoFnnRP6 RcKONaLOSMCTFx18Lyv4RJxiuTLWMEF/527jYpEaAtJi6pJVkd/GXTUdnnYADOtp ZJviWNcvj1tUW8MHEGrropClTL2r9pc= -----END CERTIFICATE-----Generated at Sun Oct 19 23:57:58 2025 by rpki-client