$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/ab4c49e6-70a7-364a-859e-9e88bba251d9.roa File: ab4c49e6-70a7-364a-859e-9e88bba251d9.roa (raw, json) Hash identifier: icJI3NEJ5eWulgNIRjr7Ul2PvazKUaAPRto86u+9nKg= Subject key identifier: C3:80:B0:3E:DB:B5:77:60:69:35:95:5E:70:2A:5E:F3:AC:72:33:B7 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584B4D11D0F944C7B80F14C3AB00 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/ab4c49e6-70a7-364a-859e-9e88bba251d9.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 54518 IP address blocks: 209.143.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:d0:f9:44:c7:b8:0f:14:c3:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=0f526888-d56e-434f-b4ba-d3cf3f7742d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:20:ca:fd:de:40:45:85:36:74:bc:06:68:3c: e0:45:bd:0d:60:bf:ad:ff:e0:ef:34:b4:b6:de:62: dc:89:a8:0b:7d:cc:03:a1:68:f9:b8:39:89:e1:dd: 38:ab:e1:d2:20:5f:34:5d:55:40:89:eb:bd:c2:b4: 36:c5:bf:17:f5:a8:da:46:4e:08:db:16:54:83:d7: 9a:d0:b3:d9:cb:e5:ce:f6:59:f9:0d:f1:d7:91:d6: 4f:bc:04:b4:df:4a:cd:37:07:62:b6:73:15:a6:05: e9:17:75:2e:15:92:a4:37:af:2b:35:fb:ee:43:c3: 07:a3:61:af:e9:4b:6a:dc:a5:1e:d0:94:f8:07:32: d6:f6:ce:08:5d:cf:c0:4d:ce:cd:3c:14:1e:8f:61: 76:c6:d6:98:f0:dd:22:d1:c0:b0:aa:7c:51:71:0a: 0e:c8:56:39:ae:ce:99:0c:86:07:62:34:b4:1a:c8: 18:7c:60:6c:9b:9d:3c:79:cf:c2:d8:f3:ad:0b:9b: 4f:eb:84:22:03:1a:05:cb:4f:c1:9f:53:85:9f:9d: 10:af:af:66:8b:0b:43:74:d3:6e:7c:60:2f:d2:f7: 46:ff:ca:40:d2:0f:c8:c3:cd:11:bb:42:56:52:ab: 4e:10:29:bc:ab:c1:3a:0d:6f:e4:4b:8b:2b:d9:3e: 8a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:80:B0:3E:DB:B5:77:60:69:35:95:5E:70:2A:5E:F3:AC:72:33:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/ab4c49e6-70a7-364a-859e-9e88bba251d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.143.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:cc:39:a5:25:3b:9d:93:07:82:aa:2a:c5:06:f6:8f:08:b2: f6:31:8d:0a:39:13:03:37:d3:b9:98:be:86:32:e7:c6:97:44: d7:b0:37:c5:97:f1:20:04:f8:92:e9:a7:a3:06:92:6e:2a:f7: 8a:9b:6a:ab:9e:db:3a:81:35:67:5d:d2:f2:e8:da:48:92:0d: 15:6a:1b:98:a0:fd:d7:50:db:0e:ca:e2:e4:f6:3f:71:bb:53: 73:e2:8f:cf:53:44:43:9f:2d:13:b2:e6:85:e3:64:c5:79:d1: 3d:51:50:7e:2b:b2:c5:67:1e:32:82:5e:71:40:85:86:1b:c6: f7:3b:63:02:f8:6c:d9:d1:16:52:ce:1b:d4:ab:85:17:77:ab: 55:95:6b:35:ff:2d:df:2b:19:b7:3b:49:ac:f1:d2:85:14:e1: aa:1a:c2:da:e1:fb:0c:d9:42:26:24:08:8a:db:da:19:9a:14: 08:51:97:17:03:0b:32:89:ab:60:20:a4:0e:59:11:8f:f8:d1: 62:67:f9:1d:35:93:d3:95:a7:fa:a9:d1:6f:f2:ad:d7:c5:bb: 18:fe:82:4d:3c:41:a9:e3:af:c7:6c:9c:21:9d:53:08:d3:be: ae:a4:24:74:4b:56:4f:cd:1b:79:2b:f8:3e:96:6f:d8:db:9e: 98:a6:b4:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEdD5RMe4DxTDqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk MGY1MjY4ODgtZDU2ZS00MzRmLWI0YmEtZDNjZjNmNzc0MmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyDK/d5ARYU2dLwGaDzgRb0NYL+t/+DvNLS2 3mLciagLfcwDoWj5uDmJ4d04q+HSIF80XVVAieu9wrQ2xb8X9ajaRk4I2xZUg9ea 0LPZy+XO9ln5DfHXkdZPvAS030rNNwditnMVpgXpF3UuFZKkN68rNfvuQ8MHo2Gv 6Utq3KUe0JT4BzLW9s4IXc/ATc7NPBQej2F2xtaY8N0i0cCwqnxRcQoOyFY5rs6Z DIYHYjS0GsgYfGBsm508ec/C2POtC5tP64QiAxoFy0/Bn1OFn50Qr69miwtDdNNu fGAv0vdG/8pA0g/Iw80Ru0JWUqtOECm8q8E6DW/kS4sr2T6KEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOAsD7btXdgaTWVXnAqXvOscjO3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvYWI0YzQ5ZTYtNzBhNy0z NjRhLTg1OWUtOWU4OGJiYTI1MWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y9KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfMOaUlO52TB4KqKsUG9o8IsvYxjQo5EwM307mYvoYy58aXRNewN8WX 8SAE+JLpp6MGkm4q94qbaque2zqBNWdd0vLo2kiSDRVqG5ig/ddQ2w7K4uT2P3G7 U3Pij89TREOfLROy5oXjZMV50T1RUH4rssVnHjKCXnFAhYYbxvc7YwL4bNnRFlLO G9SrhRd3q1WVazX/Ld8rGbc7Sazx0oUU4aoawtrh+wzZQiYkCIrb2hmaFAhRlxcD CzKJq2AgpA5ZEY/40WJn+R01k9OVp/qp0W/yrdfFuxj+gk08Qanjr8dsnCGdUwjT vq6kJHRLVk/NG3kr+D6Wb9jbnpimtF0= -----END CERTIFICATE-----Generated at Mon Oct 20 21:58:50 2025 by rpki-client