$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/8e5a05a2-0b0a-34bb-92e7-96d38e1f41ef.roa File: 8e5a05a2-0b0a-34bb-92e7-96d38e1f41ef.roa (raw, json) Hash identifier: DK5QTsesbxwMymHcSdOR3J8LdIkiVrsN7zVSToicuCY= Subject key identifier: 4B:19:A5:D5:92:0D:AA:CE:6D:8D:72:05:D9:F2:8E:9B:B1:2F:55:7A Certificate issuer: /CN=5dc12714-5247-41c5-b244-d0edceb32982 Certificate serial: 010D0C9F4328584B67974627841A07E34B879020 Authority key identifier: 1D:F2:65:5D:FA:A6:94:E2:F8:5F:02:FD:43:1D:AE:D7:53:97:1A:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/8e5a05a2-0b0a-34bb-92e7-96d38e1f41ef.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 22856 IP address blocks: 209.237.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/5dc12714-5247-41c5-b244-d0edceb32982.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/5dc12714-5247-41c5-b244-d0edceb32982.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:46:27:84:1a:07:e3:4b:87:90:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dc12714-5247-41c5-b244-d0edceb32982 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=dceb3da5-d8d3-4cf7-9cae-73eba1040803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:61:7f:ba:59:d9:b7:e3:75:8b:fe:42:99:10: 24:65:4b:cb:60:54:6e:69:59:b5:bf:86:73:ff:03: 77:cc:cf:a4:9d:a0:3a:f8:dd:de:4e:81:f2:70:73: c2:f8:64:36:61:b2:87:f1:df:8d:cb:00:e0:92:18: 48:03:b5:32:a6:54:99:28:57:97:5c:3d:85:1f:46: 9c:bc:df:02:7c:e2:b6:8e:6d:be:ce:4b:6a:91:10: 29:23:37:b6:93:87:2e:60:9a:57:bf:10:27:b6:34: 7b:ae:b1:67:da:6b:65:d7:45:16:e6:93:51:3e:b7: a9:78:e2:83:ea:59:1c:40:ae:00:5d:9b:dd:95:67: 99:2a:36:30:53:ec:a8:e0:71:40:af:31:1d:6b:e5: 97:af:13:da:f1:a8:7f:31:72:c4:5b:75:db:8d:87: 05:4c:8e:55:38:f5:88:a0:13:1a:ea:b8:c2:4a:fe: 6f:e8:cd:96:0b:dd:ac:64:70:d6:42:97:9e:6c:71: 7b:17:da:3f:c9:14:60:83:de:fd:b0:3c:77:5b:74: 9e:69:cb:86:09:8b:37:b9:41:57:cd:58:34:c1:42: ac:04:fa:5d:6a:33:29:a5:66:b7:e2:d1:69:d0:33: 5e:c8:98:57:e5:4b:cf:06:86:12:51:7b:a7:76:08: d2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:19:A5:D5:92:0D:AA:CE:6D:8D:72:05:D9:F2:8E:9B:B1:2F:55:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/8e5a05a2-0b0a-34bb-92e7-96d38e1f41ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/5dc12714-5247-41c5-b244-d0edceb32982.crl X509v3 Authority Key Identifier: keyid:1D:F2:65:5D:FA:A6:94:E2:F8:5F:02:FD:43:1D:AE:D7:53:97:1A:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982.cer sbgp-ipAddrBlock: critical IPv4: 209.237.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:a3:c9:c0:4a:00:11:21:76:04:80:57:c3:e8:13:1b:2d:a9: 12:9e:34:3d:b2:d7:09:f1:fd:be:73:d8:c3:f0:dc:ff:7f:ed: f7:51:d6:c0:a6:fb:20:84:e6:a4:74:35:e4:43:7f:e0:48:ee: 45:0b:e0:c3:d0:e3:c5:fe:2e:08:e9:87:54:f7:9a:90:f9:b0: f5:3b:c3:29:44:8b:d6:c8:39:db:7b:0a:38:2e:96:4d:48:26: 9c:52:ef:b0:86:77:29:3d:1a:c3:e3:98:64:74:18:d0:d1:06: 4f:1c:18:0f:69:82:27:91:89:fb:69:49:46:f4:88:e8:04:45: 37:b8:8e:e0:a7:32:86:ab:a0:eb:97:06:4d:c2:27:b7:ec:d1: ac:e3:41:25:77:54:a4:bd:72:d4:0b:22:8e:fd:46:31:20:1f: 75:b0:79:35:59:0c:a7:ec:7d:36:d6:0e:e9:0a:9e:2d:70:2c: 29:94:47:3e:cf:cb:63:49:f7:89:d3:76:86:0f:37:44:f2:ec: 0a:6a:a8:09:1f:ea:a5:63:de:8c:b2:59:04:f9:21:26:5b:9d: ec:c4:b8:95:03:9a:12:f0:47:4f:f2:84:37:1c:76:e1:81:28: b0:b9:4e:7d:ae:b0:88:43:02:45:13:6c:4c:2f:d6:99:dc:65: fd:a0:c5:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl0YnhBoH40uHkCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjMTI3MTQtNTI0Ny00MWM1LWIyNDQtZDBlZGNlYjMy OTgyMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZGNlYjNkYTUtZDhkMy00Y2Y3LTljYWUtNzNlYmExMDQwODAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGF/ulnZt+N1i/5CmRAkZUvLYFRuaVm1v4Zz /wN3zM+knaA6+N3eToHycHPC+GQ2YbKH8d+NywDgkhhIA7UyplSZKFeXXD2FH0ac vN8CfOK2jm2+zktqkRApIze2k4cuYJpXvxAntjR7rrFn2mtl10UW5pNRPrepeOKD 6lkcQK4AXZvdlWeZKjYwU+yo4HFArzEda+WXrxPa8ah/MXLEW3XbjYcFTI5VOPWI oBMa6rjCSv5v6M2WC92sZHDWQpeebHF7F9o/yRRgg979sDx3W3SeacuGCYs3uUFX zVg0wUKsBPpdajMppWa34tFp0DNeyJhX5UvPBoYSUXundgjSkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsZpdWSDarObY1yBdnyjpuxL1V6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81ZGMx MjcxNC01MjQ3LTQxYzUtYjI0NC1kMGVkY2ViMzI5ODIvOGU1YTA1YTItMGIwYS0z NGJiLTkyZTctOTZkMzhlMWY0MWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWRjMTI3MTQtNTI0Ny00MWM1LWIy NDQtZDBlZGNlYjMyOTgyLzVkYzEyNzE0LTUyNDctNDFjNS1iMjQ0LWQwZWRjZWIz Mjk4Mi5jcmwwHwYDVR0jBBgwFoAUHfJlXfqmlOL4XwL9Qx2u11OXGlUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81ZGMxMjcxNC01MjQ3LTQxYzUtYjI0NC1kMGVk Y2ViMzI5ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e2ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOjycBKABEhdgSAV8PoExstqRKeND2y1wnx/b5z2MPw3P9/7fdR1sCm +yCE5qR0NeRDf+BI7kUL4MPQ48X+Lgjph1T3mpD5sPU7wylEi9bIOdt7Cjgulk1I JpxS77CGdyk9GsPjmGR0GNDRBk8cGA9pgieRiftpSUb0iOgERTe4juCnMoaroOuX Bk3CJ7fs0azjQSV3VKS9ctQLIo79RjEgH3WweTVZDKfsfTbWDukKni1wLCmURz7P y2NJ94nTdoYPN0Ty7ApqqAkf6qVj3oyyWQT5ISZbnezEuJUDmhLwR0/yhDccduGB KLC5Tn2usIhDAkUTbEwv1pncZf2gxW8= -----END CERTIFICATE-----Generated at Wed Oct 22 00:42:17 2025 by rpki-client