$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a/34e0a6e4-865d-3aa5-bce9-f8059fb70647.roa File: 34e0a6e4-865d-3aa5-bce9-f8059fb70647.roa (raw, json) Hash identifier: hULJaqORBZx9rnLzF6gGaVFW+5jbsjfXVIEDzn4Dv0M= Subject key identifier: AA:DE:CE:02:62:68:75:A4:FD:46:F3:95:D7:4C:D3:D1:E6:43:B3:2D Certificate issuer: /CN=093dd42f-849c-49fe-b795-49e66b3b3b7a Certificate serial: 010D0C9F4328584B5B0740EE7AC460CC29F60080 Authority key identifier: 70:40:2F:13:DE:4B:CF:1F:36:0C:22:D7:6C:CF:D9:59:4B:8C:AE:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a/34e0a6e4-865d-3aa5-bce9-f8059fb70647.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 36562 IP address blocks: 206.225.26.0/24 maxlen: 24 206.225.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a/093dd42f-849c-49fe-b795-49e66b3b3b7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a/093dd42f-849c-49fe-b795-49e66b3b3b7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:40:ee:7a:c4:60:cc:29:f6:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093dd42f-849c-49fe-b795-49e66b3b3b7a Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=eda1a741-2116-4e64-8e0a-2376d11a0f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a4:93:21:1c:e5:a4:2b:db:17:2e:8f:3a:03: e7:47:69:25:b7:68:0c:b1:17:8f:ae:72:df:c3:80: 02:c2:03:b4:30:75:d6:33:b0:e4:98:05:b5:ff:88: d0:02:20:8f:e6:44:71:30:86:c6:22:05:ec:71:55: 47:6e:86:b2:45:64:c9:4e:60:7e:bb:6c:be:1c:d2: 25:63:9e:ab:ef:57:ce:f3:58:eb:d9:d0:92:04:46: 98:8e:01:45:ca:4d:2d:a4:44:2e:c4:89:f8:65:42: 68:e3:df:12:f7:c1:c0:41:b7:f1:51:31:8f:d1:6e: ea:1a:ef:5c:d9:28:8f:69:ce:e3:d9:1f:42:a4:2b: 86:99:6d:77:0d:9f:fa:15:f2:78:b3:d3:02:9e:ac: 6a:2d:53:76:65:92:d8:af:79:4f:ae:3d:6c:82:22: 8c:08:16:c8:d8:d1:97:0b:09:ad:d0:8d:c6:24:99: 3a:0c:56:76:fc:41:f3:ff:47:95:09:60:0d:a0:82: 0d:e8:c7:27:82:dd:76:d2:dd:37:fa:3a:90:90:3b: ad:56:53:cd:44:ad:23:1c:03:4c:ef:d9:7d:21:a7: 4c:14:0f:1d:f0:a1:c0:90:a5:61:82:f6:b6:e3:fd: 34:3a:46:2b:63:d2:5e:b2:9a:54:09:52:77:ce:63: f5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:DE:CE:02:62:68:75:A4:FD:46:F3:95:D7:4C:D3:D1:E6:43:B3:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a/34e0a6e4-865d-3aa5-bce9-f8059fb70647.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a/093dd42f-849c-49fe-b795-49e66b3b3b7a.crl X509v3 Authority Key Identifier: keyid:70:40:2F:13:DE:4B:CF:1F:36:0C:22:D7:6C:CF:D9:59:4B:8C:AE:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/093dd42f-849c-49fe-b795-49e66b3b3b7a.cer sbgp-ipAddrBlock: critical IPv4: 206.225.26.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:29:19:02:7c:4d:53:5b:c7:e4:84:98:7c:1f:d5:55:6e:80: 00:de:ae:98:92:80:6a:67:d4:b8:2a:82:20:25:0f:35:31:1c: 43:e1:34:c9:78:0c:45:7c:13:48:55:3b:0a:6e:6d:03:cc:b2: 8e:af:78:ea:23:2d:bf:9d:c8:dd:75:b3:90:f7:12:9c:c3:61: ac:2a:4e:99:dc:6d:34:ca:b8:b9:2e:50:6f:78:4f:84:21:25: d9:0e:8c:30:91:e1:c5:89:50:46:c3:09:36:a1:bf:2b:b7:94: 40:7a:ce:87:77:b8:4c:f1:5c:da:8c:d7:5f:11:b1:b1:32:c2: b1:ac:13:24:2d:eb:07:8c:20:e0:ef:0b:61:e0:60:af:18:f3: 19:d8:00:d4:57:77:a0:03:3f:f9:f5:ac:92:1b:7b:08:95:c6: 05:01:8d:3c:9d:f8:fd:72:9d:0d:03:d2:0b:2a:72:51:a3:b3: d3:4b:3c:eb:f9:12:0a:a2:8b:68:b5:02:3a:a0:61:a8:31:60: f5:56:98:64:8d:31:4f:ec:83:bb:09:24:69:29:8a:9b:65:40: ad:0b:42:ea:b8:b6:a6:27:50:31:17:b5:33:63:ca:69:04:a2: 9a:70:fe:af:bb:78:2f:60:10:bf:54:91:88:f9:53:20:fa:fa: f0:06:c8:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0DuesRgzCn2AIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDkzZGQ0MmYtODQ5Yy00OWZlLWI3OTUtNDllNjZiM2Iz YjdhMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ZWRhMWE3NDEtMjExNi00ZTY0LThlMGEtMjM3NmQxMWEwZjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaSTIRzlpCvbFy6POgPnR2klt2gMsRePrnLf w4ACwgO0MHXWM7DkmAW1/4jQAiCP5kRxMIbGIgXscVVHboayRWTJTmB+u2y+HNIl Y56r71fO81jr2dCSBEaYjgFFyk0tpEQuxIn4ZUJo498S98HAQbfxUTGP0W7qGu9c 2SiPac7j2R9CpCuGmW13DZ/6FfJ4s9MCnqxqLVN2ZZLYr3lPrj1sgiKMCBbI2NGX Cwmt0I3GJJk6DFZ2/EHz/0eVCWANoIIN6Mcngt120t03+jqQkDutVlPNRK0jHANM 79l9IadMFA8d8KHAkKVhgva24/00OkYrY9JesppUCVJ3zmP1ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrezgJiaHWk/UbzlddM09HmQ7MtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wOTNk ZDQyZi04NDljLTQ5ZmUtYjc5NS00OWU2NmIzYjNiN2EvMzRlMGE2ZTQtODY1ZC0z YWE1LWJjZTktZjgwNTlmYjcwNjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDkzZGQ0MmYtODQ5Yy00OWZlLWI3 OTUtNDllNjZiM2IzYjdhLzA5M2RkNDJmLTg0OWMtNDlmZS1iNzk1LTQ5ZTY2YjNi M2I3YS5jcmwwHwYDVR0jBBgwFoAUcEAvE95Lzx82DCLXbM/ZWUuMriEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wOTNkZDQyZi04NDljLTQ5ZmUtYjc5NS00OWU2 NmIzYjNiN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzuEaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0pGQJ8TVNbx+SEmHwf1VVugADerpiSgGpn1LgqgiAlDzUxHEPhNMl4 DEV8E0hVOwpubQPMso6veOojLb+dyN11s5D3EpzDYawqTpncbTTKuLkuUG94T4Qh JdkOjDCR4cWJUEbDCTahvyu3lEB6zod3uEzxXNqM118RsbEywrGsEyQt6weMIODv C2HgYK8Y8xnYANRXd6ADP/n1rJIbewiVxgUBjTyd+P1ynQ0D0gsqclGjs9NLPOv5 Egqii2i1AjqgYagxYPVWmGSNMU/sg7sJJGkpiptlQK0LQuq4tqYnUDEXtTNjymkE oppw/q+7eC9gEL9UkYj5UyD6+vAGyCU= -----END CERTIFICATE-----Generated at Mon Oct 20 18:19:00 2025 by rpki-client