$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/db8f199a-62c8-36d3-a41d-64390cd86118.roa File: db8f199a-62c8-36d3-a41d-64390cd86118.roa (raw, json) Hash identifier: tCKAme3Gmw68PNBJegZY+guC9HYlHBgGPaSQiob+h6g= Subject key identifier: 61:4C:D6:1E:59:0D:EC:52:B1:87:10:1F:AE:E8:E8:39:61:69:31:C5 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584B44B1BDAFA643705D58C3CCC0 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/db8f199a-62c8-36d3-a41d-64390cd86118.roa Signing time: Sun 21 Sep 2025 13:00:42 +0000 ROA not before: Sun 21 Sep 2025 13:00:42 +0000 ROA not after: Sat 20 Dec 2025 14:00:42 +0000 asID: 11233 IP address blocks: 209.237.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:b1:bd:af:a6:43:70:5d:58:c3:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Sep 21 13:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=75a0df84-199f-44c7-a432-2006080f6929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5a:0d:f5:32:0e:bc:4c:0b:97:23:fd:63:79: ff:12:b1:fe:3b:f9:45:4d:1d:f4:ac:4c:a3:7e:9b: 5d:db:cf:14:d0:36:c1:a0:75:fd:76:6f:f3:d8:2b: 27:d0:22:63:fb:7c:ae:62:9f:cd:10:62:e8:44:ca: 86:32:85:9d:6b:8a:f5:db:a6:f9:39:9d:49:0d:eb: 7b:58:d2:9d:8d:e6:f7:d3:18:65:3e:72:f8:a9:87: 3a:eb:7a:72:13:7e:24:72:91:43:67:7c:34:6e:e7: 90:ae:6e:ff:a9:8d:cb:d9:82:bd:e4:e1:85:c4:8f: d9:2d:20:d8:2b:65:0f:e0:1e:93:7c:1d:a4:ac:9b: 2b:29:67:bf:0c:5c:fd:fe:0f:6e:fb:e8:2f:18:af: 29:87:67:3c:a3:a8:b7:3f:38:3f:7d:d2:02:99:44: 78:c6:e6:68:99:49:a3:60:cf:ca:4c:f6:4d:68:91: a2:4f:16:5b:b6:8b:58:ac:66:3e:4e:f9:bf:db:68: 4f:32:62:80:55:ef:88:bf:bc:a7:2f:bf:c5:d4:2f: 35:13:c3:16:cf:aa:db:10:ab:58:77:b8:6e:d1:02: 45:69:93:09:4f:d5:d8:cb:d6:fd:54:5e:a4:e8:fa: dc:23:2e:d9:af:df:8a:9e:67:25:d8:d3:60:f4:f6: 19:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4C:D6:1E:59:0D:EC:52:B1:87:10:1F:AE:E8:E8:39:61:69:31:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/db8f199a-62c8-36d3-a41d-64390cd86118.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:61:10:94:94:05:f0:4d:03:c8:51:20:66:94:06:4a:36:1e: 56:9f:8d:eb:50:5b:f6:a7:68:c9:41:da:0d:fd:95:da:0e:a1: c9:30:3a:db:9d:1f:3c:a1:f0:b1:64:f2:54:0c:98:bf:cf:b5: d0:94:e5:15:d1:fd:c4:b0:48:f1:8a:8f:da:9a:c9:31:0b:44: 7b:da:c4:f6:0b:91:53:e4:0b:97:90:4c:69:f9:d8:d8:ac:ee: 63:e9:b7:99:65:8f:67:5d:e8:ad:3d:db:b7:44:2b:09:fa:37: f1:c2:bf:68:0a:e5:f8:d2:44:75:bf:7b:3a:88:c5:f3:25:1b: d2:e8:14:65:18:1a:8e:a4:33:b5:f0:6b:52:19:ff:99:46:d5: 07:1f:e2:61:2d:ee:1b:f1:15:0c:cb:ff:8c:2f:04:53:01:d1: 57:1b:51:e5:c1:c6:a6:4b:93:6d:5e:25:bd:eb:f0:44:7a:60: f5:63:68:fa:4d:4e:76:37:e5:26:50:18:bc:d6:88:f7:d9:02: 9f:91:8e:a8:dc:9d:3f:5b:ce:ee:db:a9:a2:9e:65:b0:e2:53: 8e:dd:c9:3d:36:9e:20:05:d3:2c:91:55:f9:eb:a5:d9:38:41: 32:44:b8:bd:5c:3e:c8:ff:6d:da:99:e8:80:df:76:4c:7c:99: 3f:0f:0b:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEsb2vpkNwXVjDzMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk NzVhMGRmODQtMTk5Zi00NGM3LWE0MzItMjAwNjA4MGY2OTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiloN9TIOvEwLlyP9Y3n/ErH+O/lFTR30rEyj fptd288U0DbBoHX9dm/z2Csn0CJj+3yuYp/NEGLoRMqGMoWda4r126b5OZ1JDet7 WNKdjeb30xhlPnL4qYc663pyE34kcpFDZ3w0bueQrm7/qY3L2YK95OGFxI/ZLSDY K2UP4B6TfB2krJsrKWe/DFz9/g9u++gvGK8ph2c8o6i3Pzg/fdICmUR4xuZomUmj YM/KTPZNaJGiTxZbtotYrGY+Tvm/22hPMmKAVe+Iv7ynL7/F1C81E8MWz6rbEKtY d7hu0QJFaZMJT9XYy9b9VF6k6PrcIy7Zr9+Knmcl2NNg9PYZXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFM1h5ZDexSsYcQH67o6DlhaTHFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvZGI4ZjE5OWEtNjJjOC0z NmQzLWE0MWQtNjQzOTBjZDg2MTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNhEJSUBfBNA8hRIGaUBko2HlafjetQW/anaMlB2g39ldoOockwOtud Hzyh8LFk8lQMmL/PtdCU5RXR/cSwSPGKj9qayTELRHvaxPYLkVPkC5eQTGn52Nis 7mPpt5llj2dd6K0927dEKwn6N/HCv2gK5fjSRHW/ezqIxfMlG9LoFGUYGo6kM7Xw a1IZ/5lG1Qcf4mEt7hvxFQzL/4wvBFMB0VcbUeXBxqZLk21eJb3r8ER6YPVjaPpN TnY35SZQGLzWiPfZAp+RjqjcnT9bzu7bqaKeZbDiU47dyT02niAF0yyRVfnrpdk4 QTJEuL1cPsj/bdqZ6IDfdkx8mT8PC9w= -----END CERTIFICATE-----Generated at Tue Oct 21 00:01:19 2025 by rpki-client