$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/b5b2d102-d231-33cf-b28b-1bedc1cd640d.roa File: b5b2d102-d231-33cf-b28b-1bedc1cd640d.roa (raw, json) Hash identifier: lgkrld0YLqN4WbULhyoNiXWK6e96LuTv8FWnTX6076A= Subject key identifier: 09:35:C8:C4:87:A2:D8:EF:30:EF:7F:C7:BF:84:9D:C7:9C:62:AE:93 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584B4E770E801E83448013E7F340 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/b5b2d102-d231-33cf-b28b-1bedc1cd640d.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 397090 IP address blocks: 209.143.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:0e:80:1e:83:44:80:13:e7:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=b422b36b-0fa3-49a7-a1bf-025863273c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ad:06:40:60:a1:bc:2c:7e:9f:86:fa:93:bf: 5f:37:71:65:20:b6:cd:cc:b0:05:ad:bc:92:54:2b: a0:e5:f4:12:71:4d:2e:b4:75:15:56:a7:43:77:ae: df:bc:62:34:ce:12:61:f0:31:94:51:32:31:46:dc: 7e:ff:90:42:52:21:0d:7e:b9:16:97:2f:30:70:36: 03:e9:33:94:28:81:c4:86:ef:30:5b:ba:d9:5e:08: 8f:5e:09:2b:72:35:f0:07:b2:56:09:9f:d2:6c:37: e9:59:f4:4d:92:f7:c8:7e:e4:e9:80:8f:42:a5:39: 00:dc:ce:be:bf:e3:78:98:5a:ff:35:1a:55:a4:e3: 2f:eb:f4:e5:b5:17:30:96:da:2e:a1:98:7f:9b:d1: 26:21:4b:de:0d:b6:d8:e3:70:1c:79:c3:41:c1:93: aa:fe:12:23:78:d3:f0:88:e7:bb:65:96:c0:a4:b7: e6:72:90:03:a0:40:3b:7b:e0:c4:ff:3b:b0:61:9f: 85:74:01:4a:7a:29:a3:57:96:22:70:92:42:4a:4d: b6:f8:e0:93:1e:fa:e5:e1:5b:b7:1b:a7:fc:97:1a: 71:b3:bd:af:0e:82:a2:a1:48:fc:2e:a8:ae:e5:65: f9:3b:2c:01:2b:dd:c0:af:44:1f:70:77:d5:28:d3: 0a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:35:C8:C4:87:A2:D8:EF:30:EF:7F:C7:BF:84:9D:C7:9C:62:AE:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/b5b2d102-d231-33cf-b28b-1bedc1cd640d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.143.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:df:81:83:42:df:0c:83:0b:ca:76:a4:24:81:12:d4:d3:ac: ce:b5:c7:91:6a:4b:1f:db:be:ea:fe:7d:c4:b9:9b:49:fe:9f: e6:96:f6:b7:22:62:72:d9:16:a7:49:6f:9b:1b:65:f6:48:10: c5:86:0f:13:d6:8b:49:e9:cc:56:2c:d7:41:9e:3f:fe:d2:e0: 66:00:46:15:b6:86:d5:0a:c8:21:17:57:c1:c4:f6:67:cf:09: fc:cb:83:c4:20:27:a0:0b:0c:4e:41:e9:d5:1d:aa:3d:96:fb: 77:02:64:7b:0e:a5:af:17:9b:b3:12:a9:52:a5:7c:04:c6:07: 97:d0:cb:dd:9d:a0:78:e4:ce:04:36:4d:1a:57:80:85:2d:01: 14:fd:cd:8c:03:30:d3:bb:8f:f2:32:df:2f:03:b1:91:ca:ac: cd:a1:dd:99:57:72:00:6b:25:4f:38:7a:e7:ec:b4:4e:75:3c: 75:64:28:1e:f9:9d:de:db:17:38:36:14:57:09:96:2a:72:95: ba:a9:2d:e6:cc:42:f0:77:9f:a4:ee:84:21:0a:d8:68:3c:40: 0b:16:a7:fa:58:e0:2b:24:b2:71:37:b8:b6:71:ca:f5:95:57: b9:d2:8e:6c:77:b6:8b:f2:6d:13:de:08:45:25:95:e9:08:0d: 76:57:db:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdw6AHoNEgBPn80AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk YjQyMmIzNmItMGZhMy00OWE3LWExYmYtMDI1ODYzMjczYzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq0GQGChvCx+n4b6k79fN3FlILbNzLAFrbyS VCug5fQScU0utHUVVqdDd67fvGI0zhJh8DGUUTIxRtx+/5BCUiENfrkWly8wcDYD 6TOUKIHEhu8wW7rZXgiPXgkrcjXwB7JWCZ/SbDfpWfRNkvfIfuTpgI9CpTkA3M6+ v+N4mFr/NRpVpOMv6/TltRcwltouoZh/m9EmIUveDbbY43AcecNBwZOq/hIjeNPw iOe7ZZbApLfmcpADoEA7e+DE/zuwYZ+FdAFKeimjV5YicJJCSk22+OCTHvrl4Vu3 G6f8lxpxs72vDoKioUj8Lqiu5WX5OywBK93Ar0QfcHfVKNMK1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAk1yMSHotjvMO9/x7+EncecYq6TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvYjViMmQxMDItZDIzMS0z M2NmLWIyOGItMWJlZGMxY2Q2NDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y9OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbfgYNC3wyDC8p2pCSBEtTTrM61x5FqSx/bvur+fcS5m0n+n+aW9rci YnLZFqdJb5sbZfZIEMWGDxPWi0npzFYs10GeP/7S4GYARhW2htUKyCEXV8HE9mfP CfzLg8QgJ6ALDE5B6dUdqj2W+3cCZHsOpa8Xm7MSqVKlfATGB5fQy92doHjkzgQ2 TRpXgIUtART9zYwDMNO7j/Iy3y8DsZHKrM2h3ZlXcgBrJU84eufstE51PHVkKB75 nd7bFzg2FFcJlipylbqpLebMQvB3n6TuhCEK2Gg8QAsWp/pY4CsksnE3uLZxyvWV V7nSjmx3tovybRPeCEUllekIDXZX284= -----END CERTIFICATE-----Generated at Mon Oct 20 21:58:38 2025 by rpki-client