$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/5a8eec55-7f6e-3cab-bfdd-4ee8acec57d6.roa File: 5a8eec55-7f6e-3cab-bfdd-4ee8acec57d6.roa (raw, json) Hash identifier: q4F4dJdv5a0o69k1Y1sJ2YEomrK74oqwzhRv/JvaBNw= Subject key identifier: EE:7A:48:48:B1:36:8C:B7:2F:56:AD:93:B0:B4:ED:63:A7:25:4D:FF Certificate issuer: /CN=1c17c1d1-7595-477e-aacb-f8ef42c4ba8e Certificate serial: 010D0C9F4328584B5571D5691FC3BF3FE87CFF80 Authority key identifier: AD:D6:FC:F8:D9:F0:31:D4:52:E0:A9:6D:8F:FB:B1:B3:60:7B:8F:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/5a8eec55-7f6e-3cab-bfdd-4ee8acec57d6.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 209.188.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:d5:69:1f:c3:bf:3f:e8:7c:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c17c1d1-7595-477e-aacb-f8ef42c4ba8e Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=67f46481-421b-40de-9b1c-4341cb25f4ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4f:68:6f:69:b3:26:fd:9c:3a:e2:fd:ed:36: 7e:d5:8a:6b:fb:51:0a:24:65:ad:8f:32:04:00:52: 8b:ce:e9:ee:61:f1:f8:41:15:02:e8:fb:49:84:f3: 79:95:13:a3:a5:54:2b:60:6e:83:65:9e:00:72:60: 47:05:ed:7a:ce:8c:57:6e:69:91:1d:5c:88:2d:fc: 0a:71:e0:9b:c9:5b:ae:9c:3c:14:ba:4f:13:05:71: c8:39:00:80:db:8c:32:f7:1e:62:6d:f0:ba:53:ac: 38:c9:86:92:ff:ac:07:1f:33:d6:8b:47:6f:b2:29: 01:8d:bd:08:db:4b:cb:2d:bc:1b:eb:97:a1:6a:86: 66:20:a5:41:7e:1f:dd:de:4a:61:59:7c:91:c5:20: f2:2d:c7:73:be:c5:00:28:dd:47:5b:e4:83:36:4a: 6f:d8:c7:9c:7a:cc:00:67:2d:05:82:76:c4:c0:ac: 2e:81:7b:61:c4:5e:19:2d:8c:b2:14:9c:c4:43:d5: cd:57:63:3b:8b:d0:ab:da:bf:58:7d:a6:58:98:d1: aa:9d:8f:32:9e:4a:e6:c4:c7:63:60:83:38:59:69: 48:36:d9:e6:f5:e2:ce:94:6e:1b:5e:2f:18:d4:f4: ed:0f:a6:f3:be:5f:78:8e:61:9b:34:53:45:71:15: c7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:7A:48:48:B1:36:8C:B7:2F:56:AD:93:B0:B4:ED:63:A7:25:4D:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/5a8eec55-7f6e-3cab-bfdd-4ee8acec57d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.crl X509v3 Authority Key Identifier: keyid:AD:D6:FC:F8:D9:F0:31:D4:52:E0:A9:6D:8F:FB:B1:B3:60:7B:8F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.cer sbgp-ipAddrBlock: critical IPv4: 209.188.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:15:e0:04:56:f3:6d:ae:ac:ae:aa:b8:be:c3:66:80:5f:96: ac:c9:41:f9:a4:91:71:16:40:f3:5d:ae:71:d1:81:25:b3:bb: a6:6e:a9:21:64:81:ee:11:5a:e9:b5:d6:e2:ba:ea:cd:d9:3f: 68:8b:47:91:84:25:d4:cf:71:54:66:14:71:a0:cb:dd:ee:88: b5:af:58:a9:5e:a2:29:79:7c:e0:80:00:60:6c:e2:f3:11:46: 5a:c5:02:5f:44:15:e4:66:9a:9a:38:38:32:2c:fa:48:d5:1c: e6:22:9b:c5:2d:27:2a:49:8c:16:7f:a3:08:de:ba:21:44:60: 28:30:9e:17:dc:51:c0:ba:50:02:a7:c7:76:6a:ef:95:f3:23: cc:9a:cc:37:b6:7e:5d:a9:5d:01:79:38:1d:25:c3:b8:13:8e: 7d:59:1c:49:7c:d0:cf:58:93:e9:4d:e3:46:71:5b:02:58:6b: 27:1a:d6:6b:6a:05:41:aa:7e:ee:03:0e:e2:23:75:27:a3:9c: d3:97:8e:1d:a7:a2:fa:03:c2:35:e2:b9:56:7a:cc:47:22:8c: 62:4c:88:04:69:01:87:ff:7a:ea:2c:d4:93:83:12:c0:d4:6c: f0:46:3b:d0:18:7f:f2:f8:68:c1:98:f4:95:3e:bf:4b:41:f8: 77:0d:c0:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVcdVpH8O/P+h8/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWMxN2MxZDEtNzU5NS00NzdlLWFhY2ItZjhlZjQyYzRi YThlMB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk NjdmNDY0ODEtNDIxYi00MGRlLTliMWMtNDM0MWNiMjVmNGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU9ob2mzJv2cOuL97TZ+1Ypr+1EKJGWtjzIE AFKLzunuYfH4QRUC6PtJhPN5lROjpVQrYG6DZZ4AcmBHBe16zoxXbmmRHVyILfwK ceCbyVuunDwUuk8TBXHIOQCA24wy9x5ibfC6U6w4yYaS/6wHHzPWi0dvsikBjb0I 20vLLbwb65ehaoZmIKVBfh/d3kphWXyRxSDyLcdzvsUAKN1HW+SDNkpv2MeceswA Zy0FgnbEwKwugXthxF4ZLYyyFJzEQ9XNV2M7i9Cr2r9YfaZYmNGqnY8ynkrmxMdj YIM4WWlINtnm9eLOlG4bXi8Y1PTtD6bzvl94jmGbNFNFcRXH4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO56SEixNoy3L1atk7C07WOnJU3/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYzE3 YzFkMS03NTk1LTQ3N2UtYWFjYi1mOGVmNDJjNGJhOGUvNWE4ZWVjNTUtN2Y2ZS0z Y2FiLWJmZGQtNGVlOGFjZWM1N2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWMxN2MxZDEtNzU5NS00NzdlLWFh Y2ItZjhlZjQyYzRiYThlLzFjMTdjMWQxLTc1OTUtNDc3ZS1hYWNiLWY4ZWY0MmM0 YmE4ZS5jcmwwHwYDVR0jBBgwFoAUrdb8+NnwMdRS4Kltj/uxs2B7j14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYzE3YzFkMS03NTk1LTQ3N2UtYWFjYi1mOGVm NDJjNGJhOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bxlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIV4ARW822urK6quL7DZoBflqzJQfmkkXEWQPNdrnHRgSWzu6ZuqSFk ge4RWum11uK66s3ZP2iLR5GEJdTPcVRmFHGgy93uiLWvWKleoil5fOCAAGBs4vMR RlrFAl9EFeRmmpo4ODIs+kjVHOYim8UtJypJjBZ/owjeuiFEYCgwnhfcUcC6UAKn x3Zq75XzI8yazDe2fl2pXQF5OB0lw7gTjn1ZHEl80M9Yk+lN40ZxWwJYayca1mtq BUGqfu4DDuIjdSejnNOXjh2novoDwjXiuVZ6zEcijGJMiARpAYf/euos1JODEsDU bPBGO9AYf/L4aMGY9JU+v0tB+HcNwFw= -----END CERTIFICATE-----Generated at Mon Oct 20 18:16:27 2025 by rpki-client