$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3baafcc-c361-335e-84bb-5a3a91705f0c.roa File: d3baafcc-c361-335e-84bb-5a3a91705f0c.roa (raw, json) Hash identifier: 6jil5qfk90iPhLmF4AYyaPsQDfnz5U0iBYYvUsesxvo= Subject key identifier: E2:3B:EF:F5:47:D4:BB:8A:BA:4F:E6:A8:5C:24:AC:29:C4:74:62:CB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B8EACFA66E79220207F436C80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3baafcc-c361-335e-84bb-5a3a91705f0c.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 7342 IP address blocks: 209.131.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:fa:66:e7:92:20:20:7f:43:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=875db3d3-2e3f-448c-943b-ac926a4886b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:45:6f:6e:c3:6d:76:3e:67:4d:e3:f2:51:47: 9f:5d:4c:b0:f9:24:9e:41:a0:d6:72:82:17:cc:af: 8f:64:fc:ca:0e:a1:44:54:89:03:10:2c:0a:5e:93: 20:73:29:a7:1c:66:62:8d:a9:64:0b:8d:92:ce:f1: ac:7a:df:f0:42:4e:ee:f5:ac:5b:85:1a:7f:91:41: 80:e2:9b:51:ef:04:88:2c:9f:89:90:a6:6b:c9:b1: e7:3a:4f:eb:26:cc:61:b1:ba:b1:16:d3:8d:17:ff: 56:a1:66:d0:fb:5c:e4:4e:cc:0b:0d:58:4f:fa:67: 78:73:2c:c4:ca:18:8a:f8:ee:5b:87:e2:fc:b5:0d: 71:35:a7:ef:93:91:c0:d9:2d:d5:80:3a:ad:54:1f: bc:37:b8:16:0b:52:24:03:b3:5a:c4:b7:f6:ca:98: 29:6b:42:71:00:19:8b:64:19:d7:11:fd:30:ea:ed: 58:97:ed:a7:1d:fe:90:bd:21:0c:02:45:21:fb:9a: 67:0c:8e:e8:80:43:a8:39:1c:3d:f6:54:8a:53:fd: 2d:16:09:d0:6d:41:57:76:b4:38:61:d7:f2:6a:bb: 56:84:8d:56:1c:40:cd:40:fd:bd:e1:72:91:f1:da: df:75:3d:d6:12:ce:59:f1:66:80:e8:74:00:1f:33: 6a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:3B:EF:F5:47:D4:BB:8A:BA:4F:E6:A8:5C:24:AC:29:C4:74:62:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3baafcc-c361-335e-84bb-5a3a91705f0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:15:a2:9f:2e:d1:8f:bc:d4:98:08:86:62:68:e8:8c:72:4c: 4a:9f:02:f1:ef:eb:42:89:d2:46:d2:d7:fb:c7:87:4c:75:2a: ed:94:7d:58:e6:a8:fd:1f:8c:61:d4:c5:7b:68:79:7d:c7:23: d0:10:9a:5f:b9:d3:64:e0:cc:17:73:07:94:55:c2:93:08:87: f9:20:57:75:b6:63:49:09:33:04:d9:1c:cd:e7:cb:77:35:e1: b5:8b:03:3c:36:4a:33:e8:01:02:2d:a2:c8:54:52:c9:f6:44: 04:ee:05:63:66:cc:00:01:84:dc:44:0b:b2:f0:80:2b:9c:24: a9:03:24:ba:30:30:2b:8c:5a:13:be:a3:76:dc:aa:af:e7:4b: f4:8d:cf:ec:6b:31:ee:ef:6e:d0:30:18:39:b3:f3:a4:8b:6d: 52:3e:56:bd:cf:14:7a:42:21:90:a5:e6:4d:0a:1a:99:6e:ad: 53:77:ed:3c:39:72:a4:d8:58:21:82:a4:69:b4:11:e7:48:0e: f3:3e:f5:79:e0:6f:02:5f:5a:74:61:28:37:99:e7:d3:6e:b0: 08:94:fe:9c:6b:15:bc:b3:be:a7:2b:33:db:17:bf:61:91:be: ed:85:0f:aa:c4:ee:35:79:f7:53:ef:dc:fb:d6:89:ff:e4:3e: 0f:c7:d6:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrPpm55IgIH9DbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ODc1ZGIzZDMtMmUzZi00NDhjLTk0M2ItYWM5MjZhNDg4NmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkVvbsNtdj5nTePyUUefXUyw+SSeQaDWcoIX zK+PZPzKDqFEVIkDECwKXpMgcymnHGZijalkC42SzvGset/wQk7u9axbhRp/kUGA 4ptR7wSILJ+JkKZrybHnOk/rJsxhsbqxFtONF/9WoWbQ+1zkTswLDVhP+md4cyzE yhiK+O5bh+L8tQ1xNafvk5HA2S3VgDqtVB+8N7gWC1IkA7NaxLf2ypgpa0JxABmL ZBnXEf0w6u1Yl+2nHf6QvSEMAkUh+5pnDI7ogEOoORw99lSKU/0tFgnQbUFXdrQ4 YdfyartWhI1WHEDNQP294XKR8drfdT3WEs5Z8WaA6HQAHzNqBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOI77/VH1LuKuk/mqFwkrCnEdGLLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDNiYWFmY2MtYzM2MS0z MzVlLTg0YmItNWEzYTkxNzA1ZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAVop8u0Y+81JgIhmJo6IxyTEqfAvHv60KJ0kbS1/vHh0x1Ku2UfVjm qP0fjGHUxXtoeX3HI9AQml+502TgzBdzB5RVwpMIh/kgV3W2Y0kJMwTZHM3ny3c1 4bWLAzw2SjPoAQItoshUUsn2RATuBWNmzAABhNxEC7LwgCucJKkDJLowMCuMWhO+ o3bcqq/nS/SNz+xrMe7vbtAwGDmz86SLbVI+Vr3PFHpCIZCl5k0KGplurVN37Tw5 cqTYWCGCpGm0EedIDvM+9XngbwJfWnRhKDeZ59NusAiU/pxrFbyzvqcrM9sXv2GR vu2FD6rE7jV591Pv3PvWif/kPg/H1g8= -----END CERTIFICATE-----Generated at Mon Oct 20 07:13:38 2025 by rpki-client