$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/da1badaf-a81a-3e30-a837-19d39181a3ec.roa File: da1badaf-a81a-3e30-a837-19d39181a3ec.roa (raw, json) Hash identifier: LHqboCDAu6eQe5VXpx4WaBjm3ur7M23g28JARnBpOSk= Subject key identifier: 1B:CD:AD:41:FF:A3:31:7B:95:A5:02:30:A1:BB:94:0C:AC:25:89:3B Certificate issuer: /CN=d578f033-7588-487c-9d67-16453bc5710a Certificate serial: 010D0C9F4328584B434C5832C5E307108E3C9640 Authority key identifier: 01:EC:38:FE:98:BE:12:4B:D8:6C:E5:E5:D0:83:C2:AB:ED:62:77:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/da1badaf-a81a-3e30-a837-19d39181a3ec.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 14618 IP address blocks: 209.142.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/d578f033-7588-487c-9d67-16453bc5710a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/d578f033-7588-487c-9d67-16453bc5710a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:58:32:c5:e3:07:10:8e:3c:96:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d578f033-7588-487c-9d67-16453bc5710a Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=f9bd1c7d-8612-4a9e-bc2f-d7b3dc0526bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e6:24:ff:1c:34:fa:f0:72:5b:af:36:df:c5: fe:c5:36:fb:4c:95:27:93:4d:8e:92:7f:03:d4:2d: 0c:c0:fc:e8:dd:e4:d2:f6:37:60:06:ea:38:02:34: d9:d1:61:e9:13:b1:6e:03:6e:31:a9:8a:07:77:1e: 8c:7a:ed:11:80:d0:d5:06:4f:f9:d7:12:6d:e6:59: bb:a8:07:e9:98:eb:55:48:e7:0c:34:a0:09:a1:4b: 98:54:ef:33:01:89:a4:13:49:a3:86:ec:7a:dd:8b: 8e:7d:81:68:05:a3:f8:34:47:71:c0:26:9b:c0:ee: 03:37:6d:b6:c4:0a:ea:95:75:10:5e:dd:88:34:48: a1:a7:06:99:84:ac:b9:cd:71:fd:a2:23:4e:58:15: e2:f3:02:a2:ff:7c:22:a9:b4:90:bf:24:ba:70:3c: 2e:ab:69:94:c8:bd:89:5a:49:10:d2:46:b3:3e:de: 5b:ab:03:dc:4e:2f:e3:92:20:83:06:a1:bf:6b:d4: cc:ee:da:41:57:20:fd:5b:e1:5d:4e:57:7c:72:2c: 5b:85:bc:da:13:9b:a8:14:31:dc:83:96:0c:0f:8e: e6:64:5a:dd:32:39:42:42:ed:fc:e0:ee:c1:2f:a4: 15:10:49:1c:53:8c:6b:f5:94:5a:bc:23:4a:20:e5: 93:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CD:AD:41:FF:A3:31:7B:95:A5:02:30:A1:BB:94:0C:AC:25:89:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/da1badaf-a81a-3e30-a837-19d39181a3ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a/d578f033-7588-487c-9d67-16453bc5710a.crl X509v3 Authority Key Identifier: keyid:01:EC:38:FE:98:BE:12:4B:D8:6C:E5:E5:D0:83:C2:AB:ED:62:77:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d578f033-7588-487c-9d67-16453bc5710a.cer sbgp-ipAddrBlock: critical IPv4: 209.142.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:72:e9:2e:dc:13:88:76:fe:98:b2:46:d8:1a:e1:1e:2c:cc: 4b:11:54:c4:bc:97:c6:32:76:10:25:fe:1b:00:50:f2:f9:a7: a5:f7:56:a2:70:bc:a5:3e:66:d5:13:33:27:d4:51:9d:fe:22: c2:ae:07:40:65:50:be:db:d0:da:84:a0:51:22:ca:05:3d:dc: 25:f5:b1:a6:11:d3:b8:ff:46:70:c7:b7:7a:18:c0:a3:ff:5e: 57:9f:dc:47:c2:4e:c1:99:55:44:75:6e:18:41:d2:59:2a:93: 16:9a:04:1d:19:4e:64:e5:00:76:57:a3:de:16:d6:28:7c:97: 3a:9b:ab:1a:f5:d2:93:4e:24:56:91:4a:b7:0b:53:ee:43:3e: d0:69:28:84:f1:2f:79:b0:95:3b:1b:cb:83:6e:33:53:32:d1: 80:f0:d9:c7:ce:eb:83:a1:5d:44:22:de:33:94:8b:ea:3b:86: 3a:c0:57:2f:9e:80:9f:99:c2:c8:b0:a5:f4:50:f9:42:9a:71: 5a:ab:9a:42:86:3a:9d:2a:91:de:c8:05:69:36:37:14:ab:7c: db:d7:ba:53:17:6f:b2:01:1a:ef:98:3a:7f:82:b1:03:b1:b7: 9b:dc:82:3c:5d:4e:e7:53:12:85:47:9c:8f:1b:9f:e6:b4:ba: 15:a4:6c:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTFgyxeMHEI48lkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU3OGYwMzMtNzU4OC00ODdjLTlkNjctMTY0NTNiYzU3 MTBhMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk ZjliZDFjN2QtODYxMi00YTllLWJjMmYtZDdiM2RjMDUyNmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8eYk/xw0+vByW68238X+xTb7TJUnk02Okn8D 1C0MwPzo3eTS9jdgBuo4AjTZ0WHpE7FuA24xqYoHdx6Meu0RgNDVBk/51xJt5lm7 qAfpmOtVSOcMNKAJoUuYVO8zAYmkE0mjhux63YuOfYFoBaP4NEdxwCabwO4DN222 xArqlXUQXt2INEihpwaZhKy5zXH9oiNOWBXi8wKi/3wiqbSQvyS6cDwuq2mUyL2J WkkQ0kazPt5bqwPcTi/jkiCDBqG/a9TM7tpBVyD9W+FdTld8cixbhbzaE5uoFDHc g5YMD47mZFrdMjlCQu384O7BL6QVEEkcU4xr9ZRavCNKIOWTLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvNrUH/ozF7laUCMKG7lAysJYk7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNTc4 ZjAzMy03NTg4LTQ4N2MtOWQ2Ny0xNjQ1M2JjNTcxMGEvZGExYmFkYWYtYTgxYS0z ZTMwLWE4MzctMTlkMzkxODFhM2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDU3OGYwMzMtNzU4OC00ODdjLTlk NjctMTY0NTNiYzU3MTBhL2Q1NzhmMDMzLTc1ODgtNDg3Yy05ZDY3LTE2NDUzYmM1 NzEwYS5jcmwwHwYDVR0jBBgwFoAUAew4/pi+EkvYbOXl0IPCq+1id4owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNTc4ZjAzMy03NTg4LTQ4N2MtOWQ2Ny0xNjQ1 M2JjNTcxMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9y6S7cE4h2/piyRtga4R4szEsRVMS8l8YydhAl/hsAUPL5p6X3VqJw vKU+ZtUTMyfUUZ3+IsKuB0BlUL7b0NqEoFEiygU93CX1saYR07j/RnDHt3oYwKP/ Xlef3EfCTsGZVUR1bhhB0lkqkxaaBB0ZTmTlAHZXo94W1ih8lzqbqxr10pNOJFaR SrcLU+5DPtBpKITxL3mwlTsby4NuM1My0YDw2cfO64OhXUQi3jOUi+o7hjrAVy+e gJ+ZwsiwpfRQ+UKacVqrmkKGOp0qkd7IBWk2NxSrfNvXulMXb7IBGu+YOn+CsQOx t5vcgjxdTudTEoVHnI8bn+a0uhWkbOU= -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:13 2025 by rpki-client