$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/d9aff715-467a-358e-a765-6f5f138dd650.roa File: d9aff715-467a-358e-a765-6f5f138dd650.roa (raw, json) Hash identifier: FKtUFXY8hjNhAlhvyTGlnSsA2RL8d8mg6NQLge/yNs4= Subject key identifier: 17:44:ED:01:43:64:26:BB:3F:3E:67:49:7A:03:4A:0B:DB:E1:92:F0 Certificate issuer: /CN=09c51633-340e-4eac-820c-a36b33746085 Certificate serial: 010D0C9F4328584B7C87630919FAE97406CF9C00 Authority key identifier: 58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/d9aff715-467a-358e-a765-6f5f138dd650.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 8075 IP address blocks: 199.21.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:63:09:19:fa:e9:74:06:cf:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09c51633-340e-4eac-820c-a36b33746085 Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=1b6d6bd4-737e-4a9a-9f02-a015fcbd1112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:25:6d:74:0e:fc:dc:7a:c3:82:b0:fb:58:ab: c5:4e:52:29:0b:c6:46:b2:a4:20:9f:b8:80:c6:74: 54:74:29:b5:3b:17:61:62:a8:61:72:84:75:09:79: 6e:b8:2e:0a:40:e8:4d:c2:35:6b:f9:b2:ae:ae:5a: 62:0b:20:cc:6a:a1:42:35:4c:0c:d4:2c:6f:0b:5a: b6:e7:cc:22:dc:ac:99:de:88:7b:9d:53:f1:26:12: 55:3f:69:c7:70:a8:e8:b5:58:9f:05:67:48:e3:fe: 19:71:20:9a:3a:be:d0:20:e1:67:c0:ca:48:8d:75: fc:f1:3d:c4:42:6a:c9:37:24:cc:bc:7c:4d:b6:b2: 9f:0d:d2:d5:9f:a8:9d:84:a1:77:d6:a3:4b:18:5f: e9:d7:e9:ec:29:bd:e4:1f:c5:be:91:df:9e:e2:06: 92:65:51:62:7d:8d:ef:50:83:4c:28:c8:73:04:bb: 0c:4e:d4:4d:34:3a:de:f9:ad:24:07:2d:0d:bb:e0: 59:f5:ac:6d:49:73:53:fd:40:0d:0d:0d:db:64:47: 84:b1:69:dc:b2:10:43:b8:61:fa:b0:31:46:f3:a7: 2d:02:ba:19:13:f7:cc:12:97:61:6f:5e:41:cf:dd: ec:da:60:1f:c6:fa:f9:b0:2e:11:43:46:5f:9b:6b: 5a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:44:ED:01:43:64:26:BB:3F:3E:67:49:7A:03:4A:0B:DB:E1:92:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/d9aff715-467a-358e-a765-6f5f138dd650.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl X509v3 Authority Key Identifier: keyid:58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer sbgp-ipAddrBlock: critical IPv4: 199.21.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:a0:ba:ff:f9:a9:0b:73:2c:d9:d6:74:79:cc:02:86:4e:1e: 87:b0:c7:5b:64:ca:1a:04:7b:02:db:da:62:57:59:1c:bb:90: c9:e3:88:a9:09:ad:41:eb:fa:b6:d9:d6:14:cc:97:5b:44:3b: 47:bd:92:90:e5:9a:21:c1:6f:8d:4f:ff:27:6d:f9:de:b4:78: 14:78:cd:c0:45:ab:90:f5:cc:cb:7c:b8:35:fc:d9:bb:8c:75: 1b:bd:93:d0:e5:0f:91:1e:ec:6e:a1:65:24:cb:70:46:f9:5a: b2:c7:a3:a2:cf:b9:30:f0:31:89:48:af:f5:4e:37:e0:b9:9b: 0a:a4:00:63:20:01:55:47:69:0d:de:5a:46:22:51:5f:2c:8a: 8e:a0:da:db:68:f4:da:7f:7d:05:d8:87:9c:f2:9c:d9:e8:27: a0:a5:0a:a1:76:f3:29:41:ff:35:47:5a:56:9e:a9:29:95:86: e3:78:aa:21:7f:f1:5b:ce:dd:0a:83:a4:f2:77:26:ef:4f:11: 7f:b2:da:d3:36:e2:9b:cd:43:55:50:53:da:e0:2a:b9:c0:ed: e6:23:94:0c:bc:d7:cf:9b:d4:31:03:4e:61:4b:55:a0:b0:0b: 9b:71:81:ca:a8:8c:4a:3f:ea:de:23:dc:2c:dc:c0:df:64:bb: 54:78:6c:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h2MJGfrpdAbPnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDljNTE2MzMtMzQwZS00ZWFjLTgyMGMtYTM2YjMzNzQ2 MDg1MB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk MWI2ZDZiZDQtNzM3ZS00YTlhLTlmMDItYTAxNWZjYmQxMTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiVtdA783HrDgrD7WKvFTlIpC8ZGsqQgn7iA xnRUdCm1OxdhYqhhcoR1CXluuC4KQOhNwjVr+bKurlpiCyDMaqFCNUwM1CxvC1q2 58wi3KyZ3oh7nVPxJhJVP2nHcKjotVifBWdI4/4ZcSCaOr7QIOFnwMpIjXX88T3E QmrJNyTMvHxNtrKfDdLVn6idhKF31qNLGF/p1+nsKb3kH8W+kd+e4gaSZVFifY3v UINMKMhzBLsMTtRNNDre+a0kBy0Nu+BZ9axtSXNT/UANDQ3bZEeEsWncshBDuGH6 sDFG86ctAroZE/fMEpdhb15Bz93s2mAfxvr5sC4RQ0Zfm2tazQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdE7QFDZCa7Pz5nSXoDSgvb4ZLwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wOWM1 MTYzMy0zNDBlLTRlYWMtODIwYy1hMzZiMzM3NDYwODUvZDlhZmY3MTUtNDY3YS0z NThlLWE3NjUtNmY1ZjEzOGRkNjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDljNTE2MzMtMzQwZS00ZWFjLTgy MGMtYTM2YjMzNzQ2MDg1LzA5YzUxNjMzLTM0MGUtNGVhYy04MjBjLWEzNmIzMzc0 NjA4NS5jcmwwHwYDVR0jBBgwFoAUWNtEW2RUCGl6OWNosWnxoviKwTQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wOWM1MTYzMy0zNDBlLTRlYWMtODIwYy1hMzZi MzM3NDYwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqguv/5qQtzLNnWdHnMAoZOHoewx1tkyhoEewLb2mJXWRy7kMnjiKkJ rUHr+rbZ1hTMl1tEO0e9kpDlmiHBb41P/ydt+d60eBR4zcBFq5D1zMt8uDX82buM dRu9k9DlD5Ee7G6hZSTLcEb5WrLHo6LPuTDwMYlIr/VON+C5mwqkAGMgAVVHaQ3e WkYiUV8sio6g2tto9Np/fQXYh5zynNnoJ6ClCqF28ylB/zVHWlaeqSmVhuN4qiF/ 8VvO3QqDpPJ3Ju9PEX+y2tM24pvNQ1VQU9rgKrnA7eYjlAy818+b1DEDTmFLVaCw C5txgcqojEo/6t4j3CzcwN9ku1R4bMw= -----END CERTIFICATE-----Generated at Mon Oct 20 02:17:20 2025 by rpki-client