$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/5fc1f543-5c6b-31d9-b4ec-b076efd518a4.roa File: 5fc1f543-5c6b-31d9-b4ec-b076efd518a4.roa (raw, json) Hash identifier: 2uf4hXyut3mv4FUh0nz2O3f4pDoghD88YBWO1gdJ/Yk= Subject key identifier: AD:69:13:E3:1A:82:08:47:B3:6E:26:8E:1C:A9:57:EB:D4:08:16:17 Certificate issuer: /CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Certificate serial: 010D0C9F4328584AFC1BF20D44BE61112DBC2040 Authority key identifier: D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/5fc1f543-5c6b-31d9-b4ec-b076efd518a4.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 62856 IP address blocks: 209.112.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:f2:0d:44:be:61:11:2d:bc:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=a6c7f69a-0574-46be-ac69-58eeb92dfb6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ad:a3:b4:85:9e:b4:db:fe:a4:cb:fb:e3:b5: 70:29:6a:49:1f:89:81:6b:3b:8a:3b:c1:11:91:fb: 8b:81:90:3b:92:05:35:18:54:67:22:be:1e:81:71: 38:92:4e:cf:a7:eb:91:12:5f:3a:01:fd:d9:45:7c: 2a:8b:71:c0:aa:7f:9b:88:7e:80:c2:03:40:4b:c8: be:de:b2:54:e4:a4:a7:5b:f5:d6:f3:63:cb:46:27: 3d:88:ff:be:c9:ae:4d:4f:61:89:c0:30:bc:e6:cd: 95:8b:3f:1b:12:90:ca:81:71:0b:42:c1:f8:21:93: 1b:5e:d3:3a:56:9d:f1:6b:0a:54:3b:f6:b3:28:2a: 7a:9c:7d:fd:ea:9b:84:33:df:35:ac:07:5b:43:42: 5c:f2:64:88:b0:14:c7:e4:b6:3e:97:75:b9:a5:f3: 8a:dd:85:e1:8e:31:14:fb:6e:eb:68:99:37:2a:17: a1:c5:4d:ce:a7:e3:14:7b:c5:d0:45:0a:bb:76:b0: 8a:35:58:ab:6a:b1:4a:07:eb:f6:52:c8:f1:ca:3a: f7:a0:26:b8:2e:25:6c:0c:f1:b5:e9:56:f8:f1:b7: 36:9e:1e:d5:fd:1d:a8:da:85:e4:2c:bc:6a:e0:df: 42:2b:70:3d:fb:09:4b:42:7e:c5:b0:25:1f:5d:c0: 6d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:69:13:E3:1A:82:08:47:B3:6E:26:8E:1C:A9:57:EB:D4:08:16:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/5fc1f543-5c6b-31d9-b4ec-b076efd518a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl X509v3 Authority Key Identifier: keyid:D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer sbgp-ipAddrBlock: critical IPv4: 209.112.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:9f:a4:bf:c0:9d:75:ab:d5:e5:ff:20:22:99:4a:11:5c:d6: 81:a9:08:81:49:6a:c9:6d:0a:cc:f9:c5:93:eb:c2:f7:77:18: 13:a4:54:b1:f3:b2:e1:22:fb:b8:01:12:46:67:8f:89:61:e1: b3:07:8c:79:19:a5:a5:97:a4:60:d0:c3:e7:bc:b2:26:c6:35: 4e:59:c0:85:6d:93:ca:29:76:48:f6:de:2b:d8:c3:79:60:60: 30:47:92:15:8e:2c:de:b8:12:73:6a:60:1e:1f:2e:61:56:04: 7c:c1:17:d8:4f:95:ce:45:9b:20:c8:3d:5e:06:eb:79:b1:cb: cf:2f:92:44:e2:9c:2b:12:33:78:af:b6:e0:60:fe:a0:4e:51: 29:e8:e4:e0:03:fe:47:fa:61:f4:c2:53:e6:69:4d:c1:10:6e: 2c:4f:70:c1:ef:7f:d5:ad:47:7f:1b:3e:99:6d:f3:4e:69:50: 3b:a6:78:5e:99:6c:bb:88:44:9e:0b:ab:18:76:a8:b2:50:d8: f5:05:ee:33:44:a4:1e:77:6a:a1:e0:d4:f6:60:ea:8d:34:7e: 55:db:e0:8e:5d:58:8a:5a:2b:82:0b:18:9d:fc:66:3f:df:d0: ca:c7:12:36:df:5e:d4:65:cc:ca:5d:6b:61:a1:d5:17:10:00: f7:71:96:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G/INRL5hES28IEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFmN2RmMzUtYzY3Zi00NDBkLTk3OTktNDYxZTdhODA5 ZWYzMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk YTZjN2Y2OWEtMDU3NC00NmJlLWFjNjktNThlZWI5MmRmYjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq2jtIWetNv+pMv747VwKWpJH4mBazuKO8ER kfuLgZA7kgU1GFRnIr4egXE4kk7Pp+uREl86Af3ZRXwqi3HAqn+biH6AwgNAS8i+ 3rJU5KSnW/XW82PLRic9iP++ya5NT2GJwDC85s2Viz8bEpDKgXELQsH4IZMbXtM6 Vp3xawpUO/azKCp6nH396puEM981rAdbQ0Jc8mSIsBTH5LY+l3W5pfOK3YXhjjEU +27raJk3KhehxU3Op+MUe8XQRQq7drCKNVirarFKB+v2Usjxyjr3oCa4LiVsDPG1 6Vb48bc2nh7V/R2o2oXkLLxq4N9CK3A9+wlLQn7FsCUfXcBtswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1pE+MagghHs24mjhypV+vUCBYXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3 ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFlN2E4MDllZjMvNWZjMWY1NDMtNWM2Yi0z MWQ5LWI0ZWMtYjA3NmVmZDUxOGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWFmN2RmMzUtYzY3Zi00NDBkLTk3 OTktNDYxZTdhODA5ZWYzL2VhZjdkZjM1LWM2N2YtNDQwZC05Nzk5LTQ2MWU3YTgw OWVmMy5jcmwwHwYDVR0jBBgwFoAU2Wzj3bzwBlTPKTIqIy/84RLCWzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFl N2E4MDllZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0XBqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqfpL/AnXWr1eX/ICKZShFc1oGpCIFJasltCsz5xZPrwvd3GBOkVLHz suEi+7gBEkZnj4lh4bMHjHkZpaWXpGDQw+e8sibGNU5ZwIVtk8opdkj23ivYw3lg YDBHkhWOLN64EnNqYB4fLmFWBHzBF9hPlc5FmyDIPV4G63mxy88vkkTinCsSM3iv tuBg/qBOUSno5OAD/kf6YfTCU+ZpTcEQbixPcMHvf9WtR38bPplt805pUDumeF6Z bLuIRJ4Lqxh2qLJQ2PUF7jNEpB53aqHg1PZg6o00flXb4I5dWIpaK4ILGJ38Zj/f 0MrHEjbfXtRlzMpda2Gh1RcQAPdxloE= -----END CERTIFICATE-----Generated at Mon Oct 20 13:05:03 2025 by rpki-client