$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee7fc778-4674-480a-9c14-36c14d50a857/f03ffe9a-e832-334b-8b0b-6a9a39f0413e.roa File: f03ffe9a-e832-334b-8b0b-6a9a39f0413e.roa (raw, json) Hash identifier: V3pPGqEPyHaqG98Kk/8fXopiL1J0hXqeh2kckxS2B0U= Subject key identifier: 17:43:CF:35:ED:23:50:CE:41:03:F6:DF:8A:0D:F1:BF:FB:34:9A:C6 Certificate issuer: /CN=ee7fc778-4674-480a-9c14-36c14d50a857 Certificate serial: 010D0C9F4328584B609C91046711F701027D5920 Authority key identifier: 17:3E:8F:04:D8:8C:33:B6:4F:10:28:7A:E9:DD:9F:A7:41:32:16:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee7fc778-4674-480a-9c14-36c14d50a857.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee7fc778-4674-480a-9c14-36c14d50a857/f03ffe9a-e832-334b-8b0b-6a9a39f0413e.roa Signing time: Wed 01 Oct 2025 13:00:41 +0000 ROA not before: Wed 01 Oct 2025 13:00:41 +0000 ROA not after: Tue 30 Dec 2025 14:00:41 +0000 asID: 399850 IP address blocks: 209.135.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee7fc778-4674-480a-9c14-36c14d50a857/ee7fc778-4674-480a-9c14-36c14d50a857.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee7fc778-4674-480a-9c14-36c14d50a857/ee7fc778-4674-480a-9c14-36c14d50a857.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee7fc778-4674-480a-9c14-36c14d50a857.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:9c:91:04:67:11:f7:01:02:7d:59:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee7fc778-4674-480a-9c14-36c14d50a857 Validity Not Before: Oct 1 13:00:41 2025 GMT Not After : Dec 30 14:00:41 2025 GMT Subject: CN=f4920799-8acb-495d-9083-c765fa720948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a1:58:ab:52:0c:50:2c:6b:d9:2a:53:e1:aa: 2e:92:ee:d7:46:36:8d:6c:99:00:b8:8a:95:f2:ba: 71:1a:61:d7:59:d7:96:fc:da:c0:48:79:b1:84:73: ba:5f:13:c6:a6:fb:12:49:32:4f:c4:86:00:42:05: 5d:cf:9a:5a:f0:e8:9c:dc:67:1d:b5:67:ca:d0:92: 1e:46:f1:81:12:00:13:53:e6:a0:93:d7:ae:06:0b: f3:0a:e2:49:88:08:d5:c0:4f:36:e2:b7:24:d4:a3: eb:b5:0a:2f:7b:89:6b:c9:15:0f:a9:53:17:8f:12: a0:92:7f:c6:52:9c:a2:27:9d:10:14:e8:5f:9b:12: e7:c9:7f:94:b8:f6:73:c3:26:7f:22:b9:9b:73:0e: bc:8e:95:2e:74:2c:bd:87:4f:7d:2d:46:44:d7:02: 30:d7:bf:24:fc:bc:22:b4:b5:8d:fb:37:74:d4:91: 5d:7a:bf:e2:3e:a6:cb:d0:10:99:70:2c:8b:60:6b: 37:c2:c5:43:94:d3:3d:89:01:0e:5f:76:1b:67:f5: a3:48:80:89:fb:76:52:40:64:64:e2:1d:d5:12:b3: e7:7a:c6:aa:97:b2:94:0e:40:2c:ac:7b:42:10:31: 4c:5e:29:41:63:df:04:f5:5d:c8:8e:18:c1:45:60: 91:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:43:CF:35:ED:23:50:CE:41:03:F6:DF:8A:0D:F1:BF:FB:34:9A:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee7fc778-4674-480a-9c14-36c14d50a857/f03ffe9a-e832-334b-8b0b-6a9a39f0413e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee7fc778-4674-480a-9c14-36c14d50a857/ee7fc778-4674-480a-9c14-36c14d50a857.crl X509v3 Authority Key Identifier: keyid:17:3E:8F:04:D8:8C:33:B6:4F:10:28:7A:E9:DD:9F:A7:41:32:16:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ee7fc778-4674-480a-9c14-36c14d50a857.cer sbgp-ipAddrBlock: critical IPv4: 209.135.190.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:d6:c2:ac:73:4d:b6:79:80:ac:a2:73:3b:cb:3c:70:89:3c: 23:2c:d4:83:15:26:1f:bc:1a:64:81:e7:bf:8a:02:ef:0d:b1: a8:55:b1:97:3b:d6:a0:60:5b:45:fc:81:80:63:00:0d:81:00: 0c:df:21:66:be:ee:0e:09:af:87:16:e6:98:1a:de:a3:15:84: 1b:c3:3b:c9:0d:60:70:ee:e9:25:99:9b:a5:d6:6f:72:ef:cd: c7:3c:dc:12:d2:42:7c:3f:6d:54:f4:47:84:17:d3:9f:03:54: 23:96:41:52:dd:bf:e8:2c:29:e2:ae:79:36:5f:ee:ca:99:a0: 3d:75:86:56:03:1e:5a:c3:44:db:f7:23:77:66:08:5c:7e:0a: 45:a9:4e:57:ee:81:9b:26:e9:30:95:d8:74:2f:e6:a8:17:f6: 08:43:3f:d8:90:d2:04:df:ca:64:db:9c:4a:72:0c:96:47:81: a2:0c:d3:16:04:ef:2d:53:a6:e7:16:32:6c:ad:d2:25:42:e3: b6:ff:a2:c1:c2:4c:10:d3:35:21:7f:81:d4:38:d5:14:7f:d9: 54:e3:61:87:57:44:f7:6b:fa:d1:50:0c:02:41:5a:78:cb:49: 7d:fc:4f:0a:3c:1e:14:71:60:b6:36:c0:2a:0f:94:1e:21:b1: ea:85:e4:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtgnJEEZxH3AQJ9WSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU3ZmM3NzgtNDY3NC00ODBhLTljMTQtMzZjMTRkNTBh ODU3MB4XDTI1MTAwMTEzMDA0MVoXDTI1MTIzMDE0MDA0MVowLzEtMCsGA1UEAxMk ZjQ5MjA3OTktOGFjYi00OTVkLTkwODMtYzc2NWZhNzIwOTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6FYq1IMUCxr2SpT4aouku7XRjaNbJkAuIqV 8rpxGmHXWdeW/NrASHmxhHO6XxPGpvsSSTJPxIYAQgVdz5pa8Oic3GcdtWfK0JIe RvGBEgATU+agk9euBgvzCuJJiAjVwE824rck1KPrtQove4lryRUPqVMXjxKgkn/G UpyiJ50QFOhfmxLnyX+UuPZzwyZ/Irmbcw68jpUudCy9h099LUZE1wIw178k/Lwi tLWN+zd01JFder/iPqbL0BCZcCyLYGs3wsVDlNM9iQEOX3YbZ/WjSICJ+3ZSQGRk 4h3VErPnesaql7KUDkAsrHtCEDFMXilBY98E9V3IjhjBRWCRFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdDzzXtI1DOQQP234oN8b/7NJrGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lZTdm Yzc3OC00Njc0LTQ4MGEtOWMxNC0zNmMxNGQ1MGE4NTcvZjAzZmZlOWEtZTgzMi0z MzRiLThiMGItNmE5YTM5ZjA0MTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZWU3ZmM3NzgtNDY3NC00ODBhLTlj MTQtMzZjMTRkNTBhODU3L2VlN2ZjNzc4LTQ2NzQtNDgwYS05YzE0LTM2YzE0ZDUw YTg1Ny5jcmwwHwYDVR0jBBgwFoAUFz6PBNiMM7ZPECh66d2fp0EyFngwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lZTdmYzc3OC00Njc0LTQ4MGEtOWMxNC0zNmMx NGQ1MGE4NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Ye+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7WwqxzTbZ5gKyiczvLPHCJPCMs1IMVJh+8GmSB57+KAu8NsahVsZc7 1qBgW0X8gYBjAA2BAAzfIWa+7g4Jr4cW5pga3qMVhBvDO8kNYHDu6SWZm6XWb3Lv zcc83BLSQnw/bVT0R4QX058DVCOWQVLdv+gsKeKueTZf7sqZoD11hlYDHlrDRNv3 I3dmCFx+CkWpTlfugZsm6TCV2HQv5qgX9ghDP9iQ0gTfymTbnEpyDJZHgaIM0xYE 7y1TpucWMmyt0iVC47b/osHCTBDTNSF/gdQ41RR/2VTjYYdXRPdr+tFQDAJBWnjL SX38Two8HhRxYLY2wCoPlB4hseqF5Bk= -----END CERTIFICATE-----Generated at Mon Oct 20 15:11:05 2025 by rpki-client