$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/ae2663db-f58b-3f90-9758-cb93c52b55eb.roa File: ae2663db-f58b-3f90-9758-cb93c52b55eb.roa (raw, json) Hash identifier: UA2C6iyrPsqBWqy6As5B93PfYIm8DdWjfjJIdAz4arc= Subject key identifier: 14:E2:AD:57:30:8C:3D:1C:4F:69:C1:D1:5D:F7:83:C2:EF:CA:4E:63 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584B758C98C939A670A52ACDF780 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/ae2663db-f58b-3f90-9758-cb93c52b55eb.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 55246 IP address blocks: 209.237.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:98:c9:39:a6:70:a5:2a:cd:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=aa59ebf8-6047-4cb4-8c0f-e9b956b0347a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7b:44:cd:f3:f2:5b:36:0f:d0:a9:98:9c:eb: 82:43:d7:27:6c:f3:2c:97:d7:c8:6e:ee:6e:a6:fc: c6:21:ca:3e:e2:2f:80:2b:d6:b6:cb:ff:6d:4b:6f: 29:8c:8b:11:e0:2c:13:ec:96:7a:95:05:64:8a:16: 94:59:81:41:03:36:d1:2d:e4:4d:69:52:e9:06:77: f3:c1:ed:d7:72:5c:2e:38:a1:13:55:b1:54:4b:e3: 03:da:33:75:80:69:b5:b3:b3:4b:02:13:9f:e8:ef: f4:63:42:fc:e7:aa:42:dc:1b:5e:80:10:df:89:5a: 17:03:db:2b:60:23:2b:eb:2d:14:a9:3f:65:d9:ea: 8b:17:98:f4:dd:f4:e5:79:9f:c3:b2:11:99:f7:9f: 3d:24:d1:27:e2:f2:3e:e2:3e:a2:55:85:f1:d8:35: e5:dc:7f:69:c5:ee:95:55:10:bb:44:95:85:54:2f: 49:7b:65:5a:9a:bb:58:67:50:58:b2:28:57:e0:27: ad:6a:2e:30:ea:d2:88:77:41:85:84:9b:08:76:05: 61:fa:a8:34:74:91:90:99:11:15:47:92:78:92:14: 1a:0b:ce:67:53:8d:24:d0:01:72:98:3e:76:18:7c: 28:5a:f2:8d:36:30:52:2d:2d:35:5f:d3:d0:f0:53: e9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E2:AD:57:30:8C:3D:1C:4F:69:C1:D1:5D:F7:83:C2:EF:CA:4E:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/ae2663db-f58b-3f90-9758-cb93c52b55eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:2d:f3:1c:97:b8:54:a5:bf:ff:e8:44:05:a6:4e:10:fe:0b: b6:e0:ee:1f:1c:08:62:dd:f6:50:7d:f2:a6:25:c1:89:89:ea: 9c:a4:c7:ab:68:64:a6:e6:af:0b:26:0a:40:c2:94:10:60:be: a6:de:28:99:60:1e:7b:01:32:46:df:58:d2:24:b6:cc:64:1d: 65:44:c0:96:3f:79:04:03:bd:78:e5:88:b3:95:12:0e:a5:d4: ef:9f:d2:65:89:56:17:06:24:01:a7:81:0c:3f:50:8f:90:f9: fd:2d:b3:cf:4c:18:c1:b1:78:5f:aa:1b:e5:e5:cf:7d:d5:fc: 73:b6:10:d4:73:f0:4e:f9:de:b1:3a:2e:3c:6a:76:a6:48:43: bf:d8:1c:52:01:35:7d:7f:eb:65:a4:09:1f:a0:7a:9d:e2:d3: 67:ab:b4:e1:28:e9:c8:8d:16:5a:76:06:e6:5c:cd:98:76:ad: b8:3b:b0:01:97:1d:d6:b3:1d:a6:06:ed:6e:0d:00:d9:69:d1: cd:a2:bb:06:9c:82:81:9c:c3:24:dd:2d:70:2d:0d:20:f6:ac: c9:16:3e:9c:3d:54:b4:ce:be:83:9d:d3:51:89:04:f8:2e:ef: a5:ae:22:fa:df:dc:28:88:e4:01:6e:e7:b4:ca:a9:cd:d2:7e: cb:79:f6:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jJjJOaZwpSrN94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk YWE1OWViZjgtNjA0Ny00Y2I0LThjMGYtZTliOTU2YjAzNDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3tEzfPyWzYP0KmYnOuCQ9cnbPMsl9fIbu5u pvzGIco+4i+AK9a2y/9tS28pjIsR4CwT7JZ6lQVkihaUWYFBAzbRLeRNaVLpBnfz we3XclwuOKETVbFUS+MD2jN1gGm1s7NLAhOf6O/0Y0L856pC3BtegBDfiVoXA9sr YCMr6y0UqT9l2eqLF5j03fTleZ/DshGZ9589JNEn4vI+4j6iVYXx2DXl3H9pxe6V VRC7RJWFVC9Je2VamrtYZ1BYsihX4Cetai4w6tKId0GFhJsIdgVh+qg0dJGQmREV R5J4khQaC85nU40k0AFymD52GHwoWvKNNjBSLS01X9PQ8FPpbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTirVcwjD0cT2nB0V33g8Lvyk5jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvYWUyNjYzZGItZjU4Yi0z ZjkwLTk3NTgtY2I5M2M1MmI1NWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAt8xyXuFSlv//oRAWmThD+C7bg7h8cCGLd9lB98qYlwYmJ6pykx6to ZKbmrwsmCkDClBBgvqbeKJlgHnsBMkbfWNIktsxkHWVEwJY/eQQDvXjliLOVEg6l 1O+f0mWJVhcGJAGngQw/UI+Q+f0ts89MGMGxeF+qG+Xlz33V/HO2ENRz8E753rE6 LjxqdqZIQ7/YHFIBNX1/62WkCR+gep3i02ertOEo6ciNFlp2BuZczZh2rbg7sAGX HdazHaYG7W4NANlp0c2iuwacgoGcwyTdLXAtDSD2rMkWPpw9VLTOvoOd01GJBPgu 76WuIvrf3CiI5AFu57TKqc3Sfst59js= -----END CERTIFICATE-----Generated at Tue Oct 21 02:28:29 2025 by rpki-client