$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/9f2a19a6-cca4-3107-b341-3910714d79f0.roa File: 9f2a19a6-cca4-3107-b341-3910714d79f0.roa (raw, json) Hash identifier: jYBuJCsaWjOi6vxkPn0m0ZR6GO78WVgODEG6IuaXRZI= Subject key identifier: C5:D8:4F:15:E5:EF:B8:66:CB:01:DF:51:45:9F:FD:68:F5:0E:60:5A Certificate issuer: /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Certificate serial: 010D0C9F4328584B8917836A913B679E4C481D40 Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/9f2a19a6-cca4-3107-b341-3910714d79f0.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 7029 IP address blocks: 209.250.8.0/23 maxlen: 23 209.250.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:83:6a:91:3b:67:9e:4c:48:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=6a40e483-2242-41bd-b8db-f68fcd7c15d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8b:61:c1:a6:82:58:a0:bd:fb:ce:fc:a8:c2: 84:ea:37:b9:6c:10:5f:9d:13:87:8c:a0:f4:12:46: c8:84:cf:19:97:85:1c:4f:49:1e:f4:12:23:aa:b7: 67:5f:2a:60:0b:e3:c2:08:6e:3d:06:5e:95:a6:91: b2:3c:93:88:d9:0a:9d:7a:10:02:36:30:4e:81:48: f3:3e:69:b5:42:72:08:65:b8:fc:cc:41:f4:08:59: ae:93:d3:1f:70:df:a6:80:46:6a:7c:5f:71:99:27: 65:6b:2b:04:e2:e1:b9:75:d2:ce:cf:b9:60:c5:10: 79:ce:8e:d0:bd:6f:1a:6d:87:a7:e4:a5:4e:09:74: 99:48:36:fb:ea:f2:6b:55:3f:8b:ec:60:2c:fe:9f: da:ff:63:28:ab:ec:c8:9b:3a:5a:bd:59:51:fe:e5: 87:e0:91:18:23:44:f5:f8:0b:7f:a3:c8:40:b3:27: 58:2e:1e:21:ef:0a:6e:3f:a2:b3:6b:56:43:bc:51: 82:e0:61:d0:34:ad:e2:af:57:39:b9:3c:db:ba:74: 65:de:3b:49:c3:ba:fe:1a:50:d9:1f:58:45:5d:e5: cc:5b:1b:5c:70:2b:ac:e9:0a:28:f0:3a:4a:bd:c1: dd:5e:27:43:23:77:90:96:a9:b2:1e:54:81:0a:a7: fc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D8:4F:15:E5:EF:B8:66:CB:01:DF:51:45:9F:FD:68:F5:0E:60:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/9f2a19a6-cca4-3107-b341-3910714d79f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl X509v3 Authority Key Identifier: keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer sbgp-ipAddrBlock: critical IPv4: 209.250.8.0/23 209.250.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:53:e5:7e:be:80:5a:c6:19:70:8e:1b:65:d7:bc:21:1e:31: c0:71:5b:7b:d0:d9:26:2d:18:b5:b2:77:c7:d1:4f:b8:14:ca: 63:1d:b9:70:de:78:3e:03:4b:72:ab:1d:9b:2e:78:90:02:60: 15:7d:f0:d4:a2:ca:10:54:e5:bd:df:93:3f:c5:fa:6e:fd:48: fe:b2:c1:a3:25:fd:57:e4:1d:db:a4:ba:4b:8a:14:75:63:f1: a9:33:c9:c9:74:1e:7a:04:28:63:c7:b4:af:13:14:af:6e:8a: ec:bf:d7:1e:5b:38:42:5f:49:a9:6d:50:78:0e:df:e7:be:81: ed:70:69:00:19:d9:eb:54:44:55:b2:88:25:3e:a3:43:64:8d: 05:eb:85:7d:10:7c:71:26:e5:97:1f:ef:09:5d:ac:0e:bf:97: 7a:31:f1:f7:d8:3d:d1:ab:d4:c9:53:21:c6:a7:d4:51:de:bc: fd:51:23:87:3d:51:bf:ef:ad:46:9b:f6:cd:35:fd:c0:b9:19: 4b:7e:d8:83:2b:5a:5c:b6:36:8e:51:ea:89:df:ea:fb:88:f7: 8b:94:3e:b8:66:e9:12:71:00:22:40:4d:2a:a8:69:5f:90:2f: d8:5d:7b:52:69:d0:63:f3:cb:c9:de:4a:44:cc:46:d1:a4:b0: df:5c:76:1d -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuJF4NqkTtnnkxIHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk2YjZjNjUtMTFiYi00MDVlLWEzNGEtYjcxNmZjZGM3 ZGQ0MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk NmE0MGU0ODMtMjI0Mi00MWJkLWI4ZGItZjY4ZmNkN2MxNWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjothwaaCWKC9+878qMKE6je5bBBfnROHjKD0 EkbIhM8Zl4UcT0ke9BIjqrdnXypgC+PCCG49Bl6VppGyPJOI2QqdehACNjBOgUjz Pmm1QnIIZbj8zEH0CFmuk9MfcN+mgEZqfF9xmSdlaysE4uG5ddLOz7lgxRB5zo7Q vW8abYen5KVOCXSZSDb76vJrVT+L7GAs/p/a/2Moq+zImzpavVlR/uWH4JEYI0T1 +At/o8hAsydYLh4h7wpuP6Kza1ZDvFGC4GHQNK3ir1c5uTzbunRl3jtJw7r+GlDZ H1hFXeXMWxtccCus6Qoo8DpKvcHdXidDI3eQlqmyHlSBCqf8KwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMXYTxXl77hmywHfUUWf/Wj1DmBaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZi NmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2ZmNkYzdkZDQvOWYyYTE5YTYtY2NhNC0z MTA3LWIzNDEtMzkxMDcxNGQ3OWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjk2YjZjNjUtMTFiYi00MDVlLWEz NGEtYjcxNmZjZGM3ZGQ0L2Y5NmI2YzY1LTExYmItNDA1ZS1hMzRhLWI3MTZmY2Rj N2RkNC5jcmwwHwYDVR0jBBgwFoAUXA5zSiCBvLBmexmGdhkHGO6ne+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZiNmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2 ZmNkYzdkZDQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB0foIAwQB 0foMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFFT5X6+gFrGGXCOG2XXvCEeMcBxW3vQ2SYtGLWyd8fRT7gU ymMduXDeeD4DS3KrHZsueJACYBV98NSiyhBU5b3fkz/F+m79SP6ywaMl/VfkHduk ukuKFHVj8akzycl0HnoEKGPHtK8TFK9uiuy/1x5bOEJfSaltUHgO3+e+ge1waQAZ 2etURFWyiCU+o0NkjQXrhX0QfHEm5Zcf7wldrA6/l3ox8ffYPdGr1MlTIcan1FHe vP1RI4c9Ub/vrUab9s01/cC5GUt+2IMrWly2No5R6onf6vuI94uUPrhm6RJxACJA TSqoaV+QL9hde1Jp0GPzy8neSkTMRtGksN9cdh0= -----END CERTIFICATE-----Generated at Mon Oct 20 02:41:57 2025 by rpki-client