$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/30f87a7d-64ce-318f-85a0-b9500c3737a3.roa File: 30f87a7d-64ce-318f-85a0-b9500c3737a3.roa (raw, json) Hash identifier: 4Usq4u5OcWD3hVdBNUXduqAqZkXXi1Nh9XYN4dm4JPo= Subject key identifier: 54:D8:C4:83:31:4A:08:09:A8:A8:38:03:4F:30:F0:B3:E0:B0:73:A7 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584B36BC51702D397583BDF67500 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/30f87a7d-64ce-318f-85a0-b9500c3737a3.roa Signing time: Tue 16 Sep 2025 13:00:41 +0000 ROA not before: Tue 16 Sep 2025 13:00:41 +0000 ROA not after: Mon 15 Dec 2025 14:00:41 +0000 asID: 13768 IP address blocks: 209.15.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:36:bc:51:70:2d:39:75:83:bd:f6:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Sep 16 13:00:41 2025 GMT Not After : Dec 15 14:00:41 2025 GMT Subject: CN=cea04267-bb7e-469d-83bb-d006edd2258e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:54:5e:7b:0d:d8:b3:43:3f:f5:77:3b:36:bb: 5f:b4:c7:6b:bf:cb:41:0e:8c:5b:aa:c7:be:23:11: 05:4d:b9:8d:95:92:c7:ab:ea:d4:18:14:87:5e:b0: 8a:6e:27:dd:58:24:82:72:31:d3:f7:2b:f4:e5:00: 2b:a4:df:26:d4:ab:1d:63:70:ad:ae:0d:43:7c:39: d8:20:13:66:51:8e:fd:49:4d:87:a0:e6:fc:5a:e9: 08:38:2c:28:05:37:4e:62:70:84:aa:3b:54:ff:98: 8b:4c:34:26:c7:f7:89:2c:8f:65:6f:13:e4:fb:6f: 4c:26:30:38:b4:e8:a3:f8:27:7a:93:66:20:b6:7c: b0:78:a2:01:86:2c:02:64:de:33:f6:18:9f:35:fa: 5d:1d:01:d6:f8:7e:d3:42:bd:3c:d0:b5:90:ef:7e: ab:01:c6:36:2d:33:df:2e:f5:00:dc:80:24:7c:26: 0b:53:a2:14:aa:2c:a1:a8:14:fa:41:e5:48:75:b8: b4:df:b2:3d:37:94:63:e9:f9:e2:0f:7a:a1:b9:ce: f0:9a:39:29:20:12:61:97:3e:e6:75:f0:74:4b:86: 4f:88:a1:50:74:74:29:fa:a9:55:45:9c:59:ba:fe: c1:7c:8a:98:e8:8d:5d:9d:a0:b2:95:a3:14:ac:bc: d4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D8:C4:83:31:4A:08:09:A8:A8:38:03:4F:30:F0:B3:E0:B0:73:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/30f87a7d-64ce-318f-85a0-b9500c3737a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 209.15.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:bb:88:73:85:0a:22:04:34:35:c7:eb:7b:5c:44:1f:3d:bc: eb:17:c0:6d:96:95:71:4f:2c:7e:7d:56:58:ba:2d:8f:4b:09: 4a:27:4f:75:63:d9:e1:d3:69:8a:21:6e:82:b3:0d:e4:d9:14: 7d:e2:fd:95:68:7d:fe:42:f6:26:3f:a2:86:99:ae:2c:bd:21: 05:84:ad:af:5c:ca:2f:4b:6d:3e:2e:80:e8:02:5e:7c:57:e3: 63:23:2e:1b:57:53:7b:43:04:08:8d:67:14:57:0e:9e:82:48: 7d:9b:73:7b:e0:fc:9f:a6:39:46:c8:40:91:66:12:0a:84:bb: 1e:0b:c9:f2:5d:14:11:58:64:2c:01:e9:09:c6:22:d6:29:67: d1:88:54:80:8d:7c:5c:55:85:19:b4:dd:37:f9:68:ce:20:ec: 20:e3:c9:a6:d9:1f:2a:69:42:16:eb:05:93:1f:0a:1b:34:b0: 37:bc:fb:46:ee:4c:17:39:9f:e3:04:ea:75:9a:6a:76:db:67: 52:ef:29:11:cf:f0:b8:60:f6:87:98:cf:ba:b9:dd:2a:71:27: 76:da:c2:64:8d:1b:66:47:62:f1:1f:4a:f2:a9:b7:5b:53:de: ac:d1:3e:28:27:b4:71:87:3f:43:27:28:a1:99:46:a3:2a:33: fb:7e:9b:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs2vFFwLTl1g732dQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI1MDkxNjEzMDA0MVoXDTI1MTIxNTE0MDA0MVowLzEtMCsGA1UEAxMk Y2VhMDQyNjctYmI3ZS00NjlkLTgzYmItZDAwNmVkZDIyNThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVReew3Ys0M/9Xc7NrtftMdrv8tBDoxbqse+ IxEFTbmNlZLHq+rUGBSHXrCKbifdWCSCcjHT9yv05QArpN8m1KsdY3Ctrg1DfDnY IBNmUY79SU2HoOb8WukIOCwoBTdOYnCEqjtU/5iLTDQmx/eJLI9lbxPk+29MJjA4 tOij+Cd6k2YgtnyweKIBhiwCZN4z9hifNfpdHQHW+H7TQr080LWQ736rAcY2LTPf LvUA3IAkfCYLU6IUqiyhqBT6QeVIdbi037I9N5Rj6fniD3qhuc7wmjkpIBJhlz7m dfB0S4ZPiKFQdHQp+qlVRZxZuv7BfIqY6I1dnaCylaMUrLzUuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTYxIMxSggJqKg4A08w8LPgsHOnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvMzBmODdhN2QtNjRjZS0z MThmLTg1YTAtYjk1MDBjMzczN2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Q8pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGK7iHOFCiIENDXH63tcRB89vOsXwG2WlXFPLH59Vli6LY9LCUonT3Vj 2eHTaYohboKzDeTZFH3i/ZVoff5C9iY/ooaZriy9IQWEra9cyi9LbT4ugOgCXnxX 42MjLhtXU3tDBAiNZxRXDp6CSH2bc3vg/J+mOUbIQJFmEgqEux4LyfJdFBFYZCwB 6QnGItYpZ9GIVICNfFxVhRm03Tf5aM4g7CDjyabZHyppQhbrBZMfChs0sDe8+0bu TBc5n+ME6nWaanbbZ1LvKRHP8Lhg9oeYz7q53SpxJ3bawmSNG2ZHYvEfSvKpt1tT 3qzRPigntHGHP0MnKKGZRqMqM/t+m1o= -----END CERTIFICATE-----Generated at Mon Oct 20 10:38:45 2025 by rpki-client