$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa File: 5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa (raw, json) Hash identifier: vzN+JUuAotLHJdc8rsQBdpHdOI163x8sKIVbaMMBVsY= Subject key identifier: 29:EB:07:24:5A:E1:48:31:E4:96:7E:55:ED:AC:EE:BA:8D:BE:79:D9 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584B4D11D0AAA5FE51D091FCF980 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 36298 IP address blocks: 209.166.148.0/24 maxlen: 24 209.166.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:d0:aa:a5:fe:51:d0:91:fc:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=dd340682-f2b4-462e-9ca2-5a7f989dcf60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e0:b0:e3:fa:68:bf:2a:31:f7:54:5d:ce:59: b0:2e:b7:35:d6:ba:35:0b:64:04:8a:bd:b5:9e:37: 54:fa:0f:e1:92:57:a6:54:1a:a2:77:47:e7:7f:4a: 9d:e1:ec:f7:53:52:3b:0e:f4:4b:fc:fb:0c:f8:ba: f7:62:e5:5c:44:c3:27:5f:96:a6:56:ec:d1:f0:2b: e0:48:2f:9e:16:11:6a:92:10:5c:38:c1:fc:09:a0: c9:3b:de:dd:2c:18:a9:0b:41:fb:c7:ad:af:dc:76: 52:c6:17:bd:dd:78:94:6e:65:6a:9e:59:a3:67:84: 22:b3:dc:53:de:5e:06:e1:40:a0:d9:21:1e:12:88: b7:24:27:c8:f7:44:ee:f7:f4:05:ad:5b:41:7d:29: 20:34:22:10:b2:9c:63:c7:15:08:18:5c:bd:a7:95: 83:bd:3c:af:0a:99:13:bd:4b:6a:89:20:65:08:26: 3e:54:22:21:77:08:5a:2f:91:e0:ff:8c:84:29:bf: e5:b9:4d:e2:e8:fc:d6:ca:89:7d:f4:99:54:45:e4: 2a:53:8b:2b:dc:99:05:2b:b6:97:df:5f:98:3f:a4: 92:36:aa:7e:4f:cd:72:55:ca:2d:bf:c7:14:09:22: 8d:a8:93:1e:31:8d:29:38:72:ed:ad:ca:3d:27:d6: a2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:EB:07:24:5A:E1:48:31:E4:96:7E:55:ED:AC:EE:BA:8D:BE:79:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.166.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:c7:96:0a:7f:73:b5:a1:46:1f:4e:69:9f:1d:eb:3e:99:d9: 84:a0:3a:d3:35:c5:a9:16:f9:e5:9c:ca:83:6f:32:42:9e:9c: b5:dc:bf:7f:66:16:f4:bb:68:6c:2a:c1:88:9b:44:9c:c5:e8: d8:68:ae:b9:8d:63:e6:c3:78:98:a6:3a:6d:05:6e:eb:2f:00: 5b:3c:99:e9:f1:15:fc:42:dd:b5:27:cd:99:15:eb:8b:43:d8: 66:c3:cf:11:76:a4:e4:a2:09:5b:83:e1:e5:cd:f3:f7:ec:0f: 64:ed:13:6d:eb:25:b7:c5:29:0b:2c:e0:ea:7a:0e:ec:43:5b: 87:72:65:ae:60:4f:94:66:41:02:b4:36:ab:f6:11:88:50:dd: 64:da:51:5d:c3:78:28:23:de:cb:a9:a3:d2:7b:2c:ea:3d:d9: 6e:00:33:85:65:60:29:86:c9:a5:2f:62:71:11:7f:e6:1b:5c: d0:34:6d:80:de:0a:5d:c3:e6:42:84:73:57:de:50:ce:ed:9f: 61:93:00:70:39:d9:71:ba:c0:19:50:80:73:ac:8f:a4:b6:2a: f0:97:b8:59:4d:45:65:9a:97:b6:06:0a:64:5e:b5:db:a3:0a: 60:82:b9:41:c6:b3:ed:04:5b:30:56:2e:33:18:c7:70:08:80: 52:89:94:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEdCqpf5R0JH8+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk ZGQzNDA2ODItZjJiNC00NjJlLTljYTItNWE3Zjk4OWRjZjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOCw4/povyox91RdzlmwLrc11ro1C2QEir21 njdU+g/hklemVBqid0fnf0qd4ez3U1I7DvRL/PsM+Lr3YuVcRMMnX5amVuzR8Cvg SC+eFhFqkhBcOMH8CaDJO97dLBipC0H7x62v3HZSxhe93XiUbmVqnlmjZ4Qis9xT 3l4G4UCg2SEeEoi3JCfI90Tu9/QFrVtBfSkgNCIQspxjxxUIGFy9p5WDvTyvCpkT vUtqiSBlCCY+VCIhdwhaL5Hg/4yEKb/luU3i6PzWyol99JlUReQqU4sr3JkFK7aX 31+YP6SSNqp+T81yVcotv8cUCSKNqJMeMY0pOHLtrco9J9aibQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnrByRa4Ugx5JZ+Ve2s7rqNvnnZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvNWNjNGQ2YzEtZWZmMi0z YTQwLTg2MTktNWY2MTZmOGFmMTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0aaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDHlgp/c7WhRh9OaZ8d6z6Z2YSgOtM1xakW+eWcyoNvMkKenLXcv39m FvS7aGwqwYibRJzF6NhorrmNY+bDeJimOm0FbusvAFs8menxFfxC3bUnzZkV64tD 2GbDzxF2pOSiCVuD4eXN8/fsD2TtE23rJbfFKQss4Op6DuxDW4dyZa5gT5RmQQK0 Nqv2EYhQ3WTaUV3DeCgj3supo9J7LOo92W4AM4VlYCmGyaUvYnERf+YbXNA0bYDe Cl3D5kKEc1feUM7tn2GTAHA52XG6wBlQgHOsj6S2KvCXuFlNRWWal7YGCmRetduj CmCCuUHGs+0EWzBWLjMYx3AIgFKJlJo= -----END CERTIFICATE-----Generated at Mon Oct 20 12:39:50 2025 by rpki-client