$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/8a23443d-1ed8-3d80-ac02-bd3df3d8f1b7.roa File: 8a23443d-1ed8-3d80-ac02-bd3df3d8f1b7.roa (raw, json) Hash identifier: /SxBaEpsHWmIhDQBbmgYNHXIL2MYfi95Dgo4fOnUUm8= Subject key identifier: 1F:CC:83:30:78:B1:50:9A:71:6C:3F:EF:B8:4F:39:90:78:A5:98:09 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584B4E770E9314492184F95C1F00 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/8a23443d-1ed8-3d80-ac02-bd3df3d8f1b7.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 400209 IP address blocks: 209.143.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:0e:93:14:49:21:84:f9:5c:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=50b3bade-f1fa-4d80-a12e-8a77f563c04a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:60:1c:8f:f2:b4:3e:5e:27:fd:26:ae:61:a0: a8:b3:e5:87:ee:f5:09:c3:17:97:25:e6:45:28:22: dc:84:ef:93:90:a1:80:21:58:df:5d:e9:4d:ec:59: 2e:51:6f:b1:58:f8:25:88:ee:38:a8:97:c4:4f:d9: 21:39:f1:44:31:7e:93:ea:cc:5e:5f:96:39:51:29: fe:6e:a5:20:3f:4d:0d:20:6e:32:75:b9:bf:38:bb: 6c:29:65:97:e9:8f:cf:f3:af:3b:5a:4f:37:74:b3: c4:7e:95:38:d7:26:4a:18:57:ca:f0:52:d7:70:a5: 96:f5:7d:d0:fc:81:fe:ef:0c:68:9b:5b:18:0d:57: 9c:db:47:04:6e:ea:ac:80:17:61:fe:fc:1f:e4:58: 6b:84:64:fc:77:37:ab:99:14:74:1f:87:1b:96:15: 44:a5:e3:59:52:83:ac:db:78:77:70:40:26:c9:a9: 78:96:4b:f3:4c:8d:bc:f2:cb:c1:94:ce:57:2b:94: df:01:ad:89:fe:3e:b8:4a:d4:5e:b1:50:ed:13:be: 0d:9a:0c:92:30:08:c7:e7:74:33:45:4a:f1:72:a8: 73:f7:ee:80:27:3c:6b:f4:d8:af:65:a5:5a:20:a4: a4:c0:d4:62:d7:cd:88:8b:c1:64:9c:b3:1d:79:92: 42:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:CC:83:30:78:B1:50:9A:71:6C:3F:EF:B8:4F:39:90:78:A5:98:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/8a23443d-1ed8-3d80-ac02-bd3df3d8f1b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.143.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:b7:2d:8f:0d:37:55:95:34:5a:c2:7e:91:ad:9a:93:18:89: 05:e9:b3:e4:ca:b8:23:db:b0:65:35:a4:b7:13:4a:37:a2:6c: f6:2c:0c:c5:cf:19:45:21:24:cb:3a:bd:bb:8a:6f:3c:53:4b: d5:d1:ad:d8:f7:dc:2b:d8:68:83:9a:76:41:64:be:e6:48:1d: de:e8:83:5c:ee:15:d2:84:72:e6:07:e0:89:69:1a:4b:f2:7d: 49:9b:d8:1e:d9:89:58:83:e9:9d:89:83:f2:85:a3:e2:c0:17: 0b:89:f0:f1:77:59:7b:e2:51:4e:06:32:4a:c7:73:92:28:35: 49:49:b3:9a:11:da:67:e2:2f:f3:de:24:7a:58:60:48:93:60: 88:c4:66:3f:38:f4:b5:6f:b8:73:bd:3b:cb:1d:e8:75:1b:e4: 50:70:4d:41:d7:b5:f8:37:89:f8:86:e7:30:63:6a:6c:8c:f1: fd:95:d4:45:5d:bc:de:4d:54:81:bb:21:63:a8:ec:72:a6:5c: 7f:7b:10:89:70:6c:c1:37:35:4a:5c:31:11:64:1a:f8:e8:ca: 02:dc:92:ee:b3:e7:14:aa:b5:ee:90:b0:50:34:b6:80:29:6a: c6:14:77:67:55:2d:ed:8a:00:ca:77:c9:c9:00:1c:95:22:5d: 50:a6:8b:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdw6TFEkhhPlcHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk NTBiM2JhZGUtZjFmYS00ZDgwLWExMmUtOGE3N2Y1NjNjMDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2Acj/K0Pl4n/SauYaCos+WH7vUJwxeXJeZF KCLchO+TkKGAIVjfXelN7FkuUW+xWPgliO44qJfET9khOfFEMX6T6sxeX5Y5USn+ bqUgP00NIG4ydbm/OLtsKWWX6Y/P8687Wk83dLPEfpU41yZKGFfK8FLXcKWW9X3Q /IH+7wxom1sYDVec20cEbuqsgBdh/vwf5FhrhGT8dzermRR0H4cblhVEpeNZUoOs 23h3cEAmyal4lkvzTI288svBlM5XK5TfAa2J/j64StResVDtE74NmgySMAjH53Qz RUrxcqhz9+6AJzxr9NivZaVaIKSkwNRi182Ii8FknLMdeZJCDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/MgzB4sVCacWw/77hPOZB4pZgJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvOGEyMzQ0M2QtMWVkOC0z ZDgwLWFjMDItYmQzZGYzZDhmMWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Y9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGq3LY8NN1WVNFrCfpGtmpMYiQXps+TKuCPbsGU1pLcTSjeibPYsDMXP GUUhJMs6vbuKbzxTS9XRrdj33CvYaIOadkFkvuZIHd7og1zuFdKEcuYH4IlpGkvy fUmb2B7ZiViD6Z2Jg/KFo+LAFwuJ8PF3WXviUU4GMkrHc5IoNUlJs5oR2mfiL/Pe JHpYYEiTYIjEZj849LVvuHO9O8sd6HUb5FBwTUHXtfg3ifiG5zBjamyM8f2V1EVd vN5NVIG7IWOo7HKmXH97EIlwbME3NUpcMRFkGvjoygLcku6z5xSqte6QsFA0toAp asYUd2dVLe2KAMp3yckAHJUiXVCmi3g= -----END CERTIFICATE-----Generated at Tue Oct 21 05:10:44 2025 by rpki-client