$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/4525d0aa-1b3f-3b6d-bd61-05e3681f767a.roa File: 4525d0aa-1b3f-3b6d-bd61-05e3681f767a.roa (raw, json) Hash identifier: 2hzBS30vcdg47cJxj8p7DTfhK7/uZE0Th00GU1i+ef8= Subject key identifier: 85:3A:2D:37:9D:3F:04:60:2A:C3:5B:B8:55:DA:30:8C:28:35:5E:29 Certificate issuer: /CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663 Certificate serial: 010D0C9F4328584B477C774632AD64B6BB140D00 Authority key identifier: 60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/4525d0aa-1b3f-3b6d-bd61-05e3681f767a.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 8075 IP address blocks: 209.143.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:77:46:32:ad:64:b6:bb:14:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040f4a4a-8f31-47f8-8529-1ecb11a4e663 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=cb48b2de-84b7-4fc2-993f-7975923ba899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9c:df:27:9e:b8:a7:0a:a0:34:09:f4:23:d8: 6a:2b:48:67:e4:7c:63:c9:57:3e:15:07:a9:9f:4b: 92:2e:37:d1:3c:09:f8:08:fa:74:cf:a3:86:25:87: c8:ec:44:39:f2:9c:17:4f:68:ac:c8:d0:e5:85:a0: 89:99:c0:58:db:8b:7b:ba:14:fe:46:07:a2:ac:9d: ac:b6:be:67:59:b3:ed:a9:54:b3:6e:a7:44:c0:25: 62:a6:5a:7c:aa:05:4f:94:45:68:24:a0:bc:76:c4: 6d:3a:fa:ed:a0:90:6e:ea:56:b0:af:f7:c6:4b:c7: bf:1c:02:20:ea:24:0e:9e:8b:91:43:36:ea:8f:2a: a0:ec:fe:ba:33:59:ec:45:c3:c5:9c:95:92:ee:cd: 6d:4e:10:46:72:f1:df:7f:f5:1e:e1:d4:a5:66:9d: 44:a3:93:11:99:17:3a:3a:b0:0a:0f:f1:bc:64:84: 4a:8b:7c:ea:bf:8c:26:84:fd:92:e2:28:8e:7e:3b: 55:57:eb:3f:21:9f:f8:c5:9a:f1:06:ab:4a:75:8d: 4c:e5:a6:2c:7a:a7:91:9e:40:ee:3f:ab:6a:0c:6d: b5:00:80:6a:48:4c:e4:1c:f4:26:ab:81:d7:85:54: df:ef:d0:14:22:5e:ae:7d:1f:8d:61:81:a6:b2:1a: d0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3A:2D:37:9D:3F:04:60:2A:C3:5B:B8:55:DA:30:8C:28:35:5E:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/4525d0aa-1b3f-3b6d-bd61-05e3681f767a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663/040f4a4a-8f31-47f8-8529-1ecb11a4e663.crl X509v3 Authority Key Identifier: keyid:60:1A:F2:84:F2:D5:CD:EF:92:2C:81:59:BE:15:8A:CE:76:31:9D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/040f4a4a-8f31-47f8-8529-1ecb11a4e663.cer sbgp-ipAddrBlock: critical IPv4: 209.143.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:e8:71:cb:66:c8:02:32:80:52:3a:ff:b6:0d:72:31:ea:18: ae:e5:19:df:33:91:0e:2e:72:67:4f:5f:35:dd:4b:e6:16:fb: 35:46:2b:3b:c6:00:b0:8c:a9:47:38:eb:20:c7:58:d5:a6:c5: 2d:6e:a0:c3:3b:f2:68:fe:3f:f3:ad:2e:74:bd:77:06:a0:f2: 9f:dd:c5:2c:c4:b6:a9:d2:36:19:47:64:fc:61:63:69:c8:f5: 7b:7f:bc:5b:4c:33:b2:48:e6:85:0c:e5:fa:98:3b:49:82:9c: 06:a9:e0:87:2a:e7:87:2d:38:37:f5:c3:a0:0d:10:10:ca:26: b0:2b:4d:b4:cb:bd:5a:3f:73:9f:1f:b8:b0:e0:90:5f:51:d2: ed:6c:15:0c:ad:2c:73:2e:fb:09:9c:1f:09:e7:28:77:8b:74: 12:bb:47:b9:ee:cc:df:d8:e1:48:b5:fd:0a:15:60:c2:28:f4: b0:b9:bc:be:ad:ee:45:1e:57:b7:e3:68:45:be:a4:81:52:8b: 95:54:8e:e6:95:a9:a3:49:ca:82:bf:a3:cb:54:ce:4e:e0:e8: 13:27:7c:41:d6:66:95:4c:fb:e8:02:e5:6f:93:c7:76:93:01: 3a:0f:2e:f3:af:2e:3e:1f:19:1f:b4:e7:f4:22:c4:98:f2:78: 60:7c:2a:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfHdGMq1ktrsUDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQwZjRhNGEtOGYzMS00N2Y4LTg1MjktMWVjYjExYTRl NjYzMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk Y2I0OGIyZGUtODRiNy00ZmMyLTk5M2YtNzk3NTkyM2JhODk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpzfJ564pwqgNAn0I9hqK0hn5HxjyVc+FQep n0uSLjfRPAn4CPp0z6OGJYfI7EQ58pwXT2isyNDlhaCJmcBY24t7uhT+RgeirJ2s tr5nWbPtqVSzbqdEwCViplp8qgVPlEVoJKC8dsRtOvrtoJBu6lawr/fGS8e/HAIg 6iQOnouRQzbqjyqg7P66M1nsRcPFnJWS7s1tThBGcvHff/Ue4dSlZp1Eo5MRmRc6 OrAKD/G8ZIRKi3zqv4wmhP2S4iiOfjtVV+s/IZ/4xZrxBqtKdY1M5aYseqeRnkDu P6tqDG21AIBqSEzkHPQmq4HXhVTf79AUIl6ufR+NYYGmshrQ4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIU6LTedPwRgKsNbuFXaMIwoNV4pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBm NGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNiMTFhNGU2NjMvNDUyNWQwYWEtMWIzZi0z YjZkLWJkNjEtMDVlMzY4MWY3NjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDQwZjRhNGEtOGYzMS00N2Y4LTg1 MjktMWVjYjExYTRlNjYzLzA0MGY0YTRhLThmMzEtNDdmOC04NTI5LTFlY2IxMWE0 ZTY2My5jcmwwHwYDVR0jBBgwFoAUYBryhPLVze+SLIFZvhWKznYxnRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNDBmNGE0YS04ZjMxLTQ3ZjgtODUyOS0xZWNi MTFhNGU2NjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y/UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTocctmyAIygFI6/7YNcjHqGK7lGd8zkQ4ucmdPXzXdS+YW+zVGKzvG ALCMqUc46yDHWNWmxS1uoMM78mj+P/OtLnS9dwag8p/dxSzEtqnSNhlHZPxhY2nI 9Xt/vFtMM7JI5oUM5fqYO0mCnAap4Icq54ctODf1w6ANEBDKJrArTbTLvVo/c58f uLDgkF9R0u1sFQytLHMu+wmcHwnnKHeLdBK7R7nuzN/Y4Ui1/QoVYMIo9LC5vL6t 7kUeV7fjaEW+pIFSi5VUjuaVqaNJyoK/o8tUzk7g6BMnfEHWZpVM++gC5W+Tx3aT AToPLvOvLj4fGR+05/QixJjyeGB8KsY= -----END CERTIFICATE-----Generated at Mon Oct 20 02:07:14 2025 by rpki-client