$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/149f19f9-ddf2-32e1-9d07-a184289910a5.roa File: 149f19f9-ddf2-32e1-9d07-a184289910a5.roa (raw, json) Hash identifier: Vsz+CxlnSolptpXX39hX/IHg2WgA9X9RVJlilcPT2GQ= Subject key identifier: 15:03:EF:C2:5B:2D:40:A7:43:C7:B9:A3:1C:E1:D8:45:58:8A:F8:49 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584B79BCB6BA0EB2AC4914EC8440 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/149f19f9-ddf2-32e1-9d07-a184289910a5.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 397422 IP address blocks: 209.237.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b6:ba:0e:b2:ac:49:14:ec:84:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=d574c49b-acb3-4e74-99c6-5a8e9be65a18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2d:51:e3:f4:b0:13:cb:48:51:db:45:34:6d: d2:8e:ef:ec:68:2b:49:2e:2f:af:f9:8f:28:4d:ee: 27:b4:f5:ee:8d:f0:d2:b2:8c:28:30:ba:92:7b:e4: 2c:8e:fa:70:d4:5a:15:43:bc:67:21:e9:c1:24:99: dc:50:77:3c:90:dc:56:8d:f9:7b:d7:1a:2e:32:09: 35:bd:34:88:81:68:34:f0:ad:3c:1e:14:a6:f8:fb: 2d:77:35:c6:a9:15:61:1d:04:f0:3a:af:44:71:88: fb:80:26:cf:47:de:65:19:93:46:0c:b3:11:bf:ed: 61:89:fc:83:6d:33:7b:f3:5a:0f:80:ec:bd:4f:28: 23:ec:a5:d2:f1:56:c3:55:b8:37:31:4b:ba:b3:1e: aa:58:08:5f:7f:f2:44:e2:eb:a6:59:8a:7f:bf:d9: 02:fc:e0:d0:b5:35:19:8a:59:b0:27:75:ca:67:2d: f9:d2:85:ec:46:5b:6f:0b:ee:0c:0d:b8:06:c9:9d: c7:b9:a7:fa:ae:82:9e:fa:a9:3c:8d:3f:d2:41:2b: c5:2d:0e:c1:1d:a8:65:b2:0d:4b:4a:f2:9c:19:7d: 98:0a:c4:8a:53:89:cc:de:ff:ef:bb:da:d5:ba:93: 4a:07:09:a4:b4:01:49:ff:da:11:a7:6d:0a:08:4f: 80:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:03:EF:C2:5B:2D:40:A7:43:C7:B9:A3:1C:E1:D8:45:58:8A:F8:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/149f19f9-ddf2-32e1-9d07-a184289910a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:77:e8:d9:d8:30:51:bf:ed:dc:c7:ae:30:1e:d5:61:df:46: f8:02:9f:55:5d:f4:9c:db:ce:9a:d2:b1:fa:70:0e:33:25:76: 25:b7:ca:e1:9c:f8:46:11:a5:af:15:98:11:16:f8:05:4f:9e: db:70:c7:8d:51:7b:8e:6f:ec:a2:cf:95:d8:40:12:30:81:5a: 7e:61:c6:ca:3c:5e:a2:03:88:38:95:3e:be:82:9d:ef:69:ef: 2a:dc:81:db:1d:d3:b5:d8:78:52:5a:26:56:74:2f:77:a0:39: 93:b3:0c:e9:e3:f5:e9:ba:a7:8a:40:80:0d:94:ea:c9:84:02: 58:03:58:30:7e:b4:8f:d0:ae:f7:64:11:c4:45:09:01:57:81: 0e:74:b8:ca:2b:21:d3:e2:87:92:35:a2:e9:fa:94:f7:37:41: 25:1a:04:cf:23:fb:bf:02:1b:2c:18:96:15:d3:52:3b:ab:25: c3:66:0a:c0:59:14:21:20:f4:7d:78:50:bf:e6:92:84:1a:e7: c3:c2:a3:69:ae:50:91:6d:f7:1f:ee:36:78:66:2b:d0:be:8e: 6a:ec:8f:50:9b:9b:a9:b7:0d:c5:01:c7:d7:93:3e:96:79:c3: 85:41:fa:58:d8:63:2d:9d:4c:c2:fe:90:81:f7:09:8a:02:52: 36:39:57:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLa6DrKsSRTshEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk ZDU3NGM0OWItYWNiMy00ZTc0LTk5YzYtNWE4ZTliZTY1YTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri1R4/SwE8tIUdtFNG3Sju/saCtJLi+v+Y8o Te4ntPXujfDSsowoMLqSe+Qsjvpw1FoVQ7xnIenBJJncUHc8kNxWjfl71xouMgk1 vTSIgWg08K08HhSm+PstdzXGqRVhHQTwOq9EcYj7gCbPR95lGZNGDLMRv+1hifyD bTN781oPgOy9Tygj7KXS8VbDVbg3MUu6sx6qWAhff/JE4uumWYp/v9kC/ODQtTUZ ilmwJ3XKZy350oXsRltvC+4MDbgGyZ3Huaf6roKe+qk8jT/SQSvFLQ7BHahlsg1L SvKcGX2YCsSKU4nM3v/vu9rVupNKBwmktAFJ/9oRp20KCE+AUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUD78JbLUCnQ8e5oxzh2EVYivhJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvMTQ5ZjE5ZjktZGRmMi0z MmUxLTlkMDctYTE4NDI4OTkxMGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABN36NnYMFG/7dzHrjAe1WHfRvgCn1Vd9JzbzprSsfpwDjMldiW3yuGc +EYRpa8VmBEW+AVPnttwx41Re45v7KLPldhAEjCBWn5hxso8XqIDiDiVPr6Cne9p 7yrcgdsd07XYeFJaJlZ0L3egOZOzDOnj9em6p4pAgA2U6smEAlgDWDB+tI/Qrvdk EcRFCQFXgQ50uMorIdPih5I1oun6lPc3QSUaBM8j+78CGywYlhXTUjurJcNmCsBZ FCEg9H14UL/mkoQa58PCo2muUJFt9x/uNnhmK9C+jmrsj1Cbm6m3DcUBx9eTPpZ5 w4VB+ljYYy2dTML+kIH3CYoCUjY5V4M= -----END CERTIFICATE-----Generated at Mon Oct 20 20:35:29 2025 by rpki-client