$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7f22042-0ac5-39e2-97b3-bc134de3c805.roa File: b7f22042-0ac5-39e2-97b3-bc134de3c805.roa (raw, json) Hash identifier: sRPzbR6eMCQjRHE7Jdj6I4sP/X70Ir/dM89seJCKbuw= Subject key identifier: E9:69:9C:6C:41:37:2D:9A:F4:CD:F6:92:D1:EB:77:AD:1C:FA:1D:0B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B76F25E4F710D2A989B071340 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7f22042-0ac5-39e2-97b3-bc134de3c805.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 7342 IP address blocks: 209.131.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:5e:4f:71:0d:2a:98:9b:07:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=f4859af9-abca-46c1-af4c-3a22dd38c096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f0:ff:fa:cd:41:8f:ee:6b:5d:47:f5:fc:7f: f4:59:20:41:98:5e:b9:f9:24:7d:26:f9:55:e8:d1: 46:3d:04:42:87:83:60:43:1f:04:68:83:b0:c3:ad: 56:b7:1a:48:a1:dd:27:53:bd:c1:cb:8b:b6:a6:c2: 26:b4:64:6c:05:be:10:35:4d:fd:34:53:dd:a6:26: 8d:c0:4d:5b:c4:66:d7:4c:74:5d:dc:76:e8:07:3a: 44:37:ad:99:b1:f1:bf:e3:e4:71:4d:aa:95:1f:ff: e2:1f:76:fb:86:d3:69:01:a5:72:eb:61:e9:09:d3: 77:5e:f9:2e:2c:38:fa:fb:81:e0:6f:a2:2a:22:e6: a1:de:92:05:43:5a:8d:8f:2e:01:b0:c0:08:fc:ee: c2:95:27:d5:d5:5e:23:fe:5a:f1:5f:04:3d:4a:17: 8d:84:2c:9f:7a:ec:b8:77:34:3f:9a:d2:cc:c3:f7: be:85:1c:6a:4a:06:b8:a4:98:73:85:30:81:80:1e: 1e:11:aa:c1:41:d5:dd:71:ef:9b:e3:b8:28:c9:ea: 22:97:ae:0a:65:f4:34:33:0f:bb:3b:cb:8b:02:9c: b0:8a:7f:a1:20:69:01:61:52:57:7d:16:6b:e1:67: 53:9a:7a:23:e3:e9:18:29:47:7d:55:ef:ae:a4:86: f0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:69:9C:6C:41:37:2D:9A:F4:CD:F6:92:D1:EB:77:AD:1C:FA:1D:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7f22042-0ac5-39e2-97b3-bc134de3c805.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:37:b5:58:5a:28:14:04:c9:73:f5:ab:0a:18:bf:44:c3:b1: 52:03:fe:d7:ca:58:76:b6:e5:48:33:86:22:80:f6:70:09:d6: a3:c7:ce:41:1d:4b:ad:fd:bc:c1:ab:42:37:a9:37:ad:55:c1: 9b:e8:1c:eb:98:10:b8:6d:b4:12:07:09:c6:82:c8:db:72:cb: 6c:cd:b5:78:88:f3:c3:86:4a:08:29:fe:cf:c3:94:f9:8a:38: df:a1:d8:8e:8a:f5:9a:a7:b0:6a:97:02:38:58:53:df:21:81: ea:9d:f6:d3:20:fb:de:2f:b3:c6:5f:34:5b:93:b1:bc:85:47: 43:9c:eb:00:d9:98:ae:7d:28:9e:67:36:89:bc:a3:47:d4:bd: ab:12:63:44:19:f7:57:26:08:c9:36:80:3a:13:cf:08:e9:27: f3:01:fa:b8:e7:3b:66:58:87:9e:57:01:51:a8:44:25:27:eb: f4:1f:b8:d4:bd:53:7b:89:46:8a:93:d5:4a:6d:0f:c9:82:f6: b3:a1:4c:62:01:ee:27:87:b9:80:8c:99:aa:f1:d8:6a:de:0b: f1:fa:4e:3c:fe:65:99:45:64:91:b0:f9:7e:7f:d6:b6:2a:e8: 49:c7:43:45:b8:d9:44:b0:b3:24:0b:13:04:07:46:ef:17:90: dc:06:40:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28l5PcQ0qmJsHE0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZjQ4NTlhZjktYWJjYS00NmMxLWFmNGMtM2EyMmRkMzhjMDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfD/+s1Bj+5rXUf1/H/0WSBBmF65+SR9JvlV 6NFGPQRCh4NgQx8EaIOww61WtxpIod0nU73By4u2psImtGRsBb4QNU39NFPdpiaN wE1bxGbXTHRd3HboBzpEN62ZsfG/4+RxTaqVH//iH3b7htNpAaVy62HpCdN3Xvku LDj6+4Hgb6IqIuah3pIFQ1qNjy4BsMAI/O7ClSfV1V4j/lrxXwQ9SheNhCyfeuy4 dzQ/mtLMw/e+hRxqSga4pJhzhTCBgB4eEarBQdXdce+b47goyeoil64KZfQ0Mw+7 O8uLApywin+hIGkBYVJXfRZr4WdTmnoj4+kYKUd9Ve+upIbw9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlpnGxBNy2a9M32ktHrd60c+h0LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjdmMjIwNDItMGFjNS0z OWUyLTk3YjMtYmMxMzRkZTNjODA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACs3tVhaKBQEyXP1qwoYv0TDsVID/tfKWHa25UgzhiKA9nAJ1qPHzkEd S639vMGrQjepN61VwZvoHOuYELhttBIHCcaCyNtyy2zNtXiI88OGSggp/s/DlPmK ON+h2I6K9ZqnsGqXAjhYU98hgeqd9tMg+94vs8ZfNFuTsbyFR0Oc6wDZmK59KJ5n Nom8o0fUvasSY0QZ91cmCMk2gDoTzwjpJ/MB+rjnO2ZYh55XAVGoRCUn6/QfuNS9 U3uJRoqT1UptD8mC9rOhTGIB7ieHuYCMmarx2GreC/H6Tjz+ZZlFZJGw+X5/1rYq 6EnHQ0W42USwsyQLEwQHRu8XkNwGQPg= -----END CERTIFICATE-----Generated at Mon Oct 20 07:08:44 2025 by rpki-client