$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/4bf76b6d-5970-3d19-8ade-5717d3645acf.roa File: 4bf76b6d-5970-3d19-8ade-5717d3645acf.roa (raw, json) Hash identifier: fq6XOV9npysHHnASbSJ5pY2saeZvXBin9S0pKV+7Qqo= Subject key identifier: 75:32:9D:41:5A:A8:B8:9A:49:92:4C:8A:E6:F7:67:92:52:8B:95:D3 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584B1806E9B87E56D07B9DAD0680 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/4bf76b6d-5970-3d19-8ade-5717d3645acf.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 11232 IP address blocks: 209.169.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:e9:b8:7e:56:d0:7b:9d:ad:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=974ece47-3186-4f07-b522-409eb6731d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:31:49:87:6f:fe:0a:b8:1c:0f:ab:22:2f:3a: 22:4b:e0:7e:1c:c3:29:e9:d8:76:19:ef:b3:bf:f1: 7d:ad:6e:fa:c2:8d:1a:28:eb:47:f4:4e:29:c4:18: d0:0e:91:3e:77:e5:68:a5:dc:df:e9:e1:c0:b8:d3: 46:af:a3:c2:29:81:f4:e5:58:8f:1b:dd:89:2c:74: e5:14:08:a6:e6:24:fa:84:3d:03:ec:b2:b8:b0:a9: d3:dd:31:24:5b:1c:aa:22:ec:c9:43:ae:08:d4:44: ab:33:5c:80:15:30:d8:c8:f4:49:cb:1a:3e:15:73: af:7e:99:c3:e3:7e:82:ec:71:11:8f:35:9a:0e:13: b9:4c:c5:13:cb:e5:58:52:35:03:d4:0b:27:64:b3: 75:e0:d3:f9:03:42:d4:fe:6c:cb:75:eb:65:1d:c4: 55:30:1c:1d:ac:6d:fb:ed:92:f3:d6:25:60:e1:8a: 6c:a3:aa:84:1f:be:49:f2:48:6e:12:8b:af:1e:55: c0:5b:5c:8e:e8:72:92:7b:5c:7e:cf:93:82:40:05: 5b:be:af:6a:93:d3:e2:a0:74:43:d9:4b:6e:ae:5c: 7d:dc:84:41:41:37:43:b0:3f:29:4a:78:80:5a:c0: dd:ce:75:ad:11:c7:69:5f:1f:b5:9b:ef:cd:5e:8f: 05:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:32:9D:41:5A:A8:B8:9A:49:92:4C:8A:E6:F7:67:92:52:8B:95:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/4bf76b6d-5970-3d19-8ade-5717d3645acf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 209.169.218.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:d9:06:9b:f4:d9:60:a5:7a:08:3d:28:4d:8f:91:c2:a6:8a: ce:f8:79:94:83:d4:5f:0b:8a:db:c6:ab:82:4a:70:5c:e1:ab: f9:b2:26:54:89:61:b1:c5:2f:c3:8f:34:3e:f0:e4:9d:2f:6b: 0e:4d:bb:7c:85:9d:5b:09:6d:84:94:c3:39:9a:f1:6a:fb:4b: 22:db:8c:07:5d:a7:46:65:20:85:5b:06:68:be:64:87:8a:0c: d7:84:c9:3e:23:32:aa:9c:6b:7e:fa:c4:0a:5c:6e:8d:90:72: d4:3a:eb:13:a4:eb:5c:3c:ec:27:5f:20:87:6d:1f:d8:2d:97: 57:22:44:09:86:72:8e:33:93:7e:3d:17:af:2a:b7:8e:1b:2e: 00:83:03:ba:6f:e8:63:8c:d7:2b:22:da:a6:4a:77:32:e6:5e: e0:89:59:70:ea:ac:ef:2c:22:5f:67:a5:fa:51:ea:48:4e:53: 61:f9:4e:a6:86:3e:52:65:ee:3d:12:dc:e4:ad:57:39:d0:ee: 6b:ff:ee:9e:66:84:58:db:c3:2d:72:92:c6:67:e1:c9:39:51: ef:a5:50:56:7e:6c:1c:83:91:40:cb:40:f4:2d:7e:d8:30:ff: 4e:85:5c:6b:19:97:b0:5c:d5:08:2e:b6:3d:e1:87:cb:64:1a: 26:d5:b8:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBum4flbQe52tBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk OTc0ZWNlNDctMzE4Ni00ZjA3LWI1MjItNDA5ZWI2NzMxZDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjFJh2/+CrgcD6siLzoiS+B+HMMp6dh2Ge+z v/F9rW76wo0aKOtH9E4pxBjQDpE+d+Vopdzf6eHAuNNGr6PCKYH05ViPG92JLHTl FAim5iT6hD0D7LK4sKnT3TEkWxyqIuzJQ64I1ESrM1yAFTDYyPRJyxo+FXOvfpnD 436C7HERjzWaDhO5TMUTy+VYUjUD1AsnZLN14NP5A0LU/mzLdetlHcRVMBwdrG37 7ZLz1iVg4Ypso6qEH75J8khuEouvHlXAW1yO6HKSe1x+z5OCQAVbvq9qk9PioHRD 2Uturlx93IRBQTdDsD8pSniAWsDdznWtEcdpXx+1m+/NXo8FWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUynUFaqLiaSZJMiub3Z5JSi5XTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvNGJmNzZiNmQtNTk3MC0z ZDE5LThhZGUtNTcxN2QzNjQ1YWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0anaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3ZBpv02WClegg9KE2PkcKmis74eZSD1F8LitvGq4JKcFzhq/myJlSJ YbHFL8OPND7w5J0vaw5Nu3yFnVsJbYSUwzma8Wr7SyLbjAddp0ZlIIVbBmi+ZIeK DNeEyT4jMqqca376xApcbo2QctQ66xOk61w87CdfIIdtH9gtl1ciRAmGco4zk349 F68qt44bLgCDA7pv6GOM1ysi2qZKdzLmXuCJWXDqrO8sIl9npfpR6khOU2H5TqaG PlJl7j0S3OStVznQ7mv/7p5mhFjbwy1yksZn4ck5Ue+lUFZ+bByDkUDLQPQtftgw /06FXGsZl7Bc1Qgutj3hh8tkGibVuAw= -----END CERTIFICATE-----Generated at Mon Oct 20 10:43:14 2025 by rpki-client