$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/8bc43020-2195-365c-b314-6ccd7e35330b.roa File: 8bc43020-2195-365c-b314-6ccd7e35330b.roa (raw, json) Hash identifier: XmPgMLrhLd67ssIR3UeK12H6eHbD5xaIkVWJ4gZqUmk= Subject key identifier: 8C:B0:56:01:34:D0:92:02:F4:EE:EA:BF:CF:BD:63:AC:36:3D:07:D2 Certificate issuer: /CN=1c17c1d1-7595-477e-aacb-f8ef42c4ba8e Certificate serial: 010D0C9F4328584B5571D57CA20D3CB51749EB00 Authority key identifier: AD:D6:FC:F8:D9:F0:31:D4:52:E0:A9:6D:8F:FB:B1:B3:60:7B:8F:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/8bc43020-2195-365c-b314-6ccd7e35330b.roa Signing time: Sat 27 Sep 2025 13:00:41 +0000 ROA not before: Sat 27 Sep 2025 13:00:41 +0000 ROA not after: Fri 26 Dec 2025 14:00:41 +0000 asID: 14618 IP address blocks: 209.188.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:55:71:d5:7c:a2:0d:3c:b5:17:49:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c17c1d1-7595-477e-aacb-f8ef42c4ba8e Validity Not Before: Sep 27 13:00:41 2025 GMT Not After : Dec 26 14:00:41 2025 GMT Subject: CN=89c7dde9-8130-48c3-a734-383c21f4adfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4b:00:df:6f:28:f6:31:9f:9b:27:db:8a:f5: 57:37:af:f2:e4:78:c3:bc:f2:4e:27:a3:ce:5d:d0: 4b:9b:2f:c6:03:d3:e0:f6:ee:89:fc:b0:a0:96:40: 18:3e:3f:d2:9c:77:f0:49:fa:0b:ea:47:72:76:c3: ce:73:85:16:75:b6:e1:bf:86:3e:aa:b3:54:f6:90: 93:6a:1d:d3:74:c3:91:04:e5:4a:9d:77:7b:c2:9b: d3:e8:3d:14:12:f8:16:04:3c:41:57:99:32:19:d5: 44:40:22:52:cd:d9:f5:df:77:2c:05:60:f5:30:e1: d1:4a:f8:c9:20:cd:54:d5:24:49:fc:fd:4f:d9:90: 08:c5:6e:fe:28:66:2b:8d:27:be:c4:8b:57:ce:24: 2a:bd:74:a2:f8:fb:03:39:79:30:6b:d7:47:30:9c: b0:ea:b9:b4:fc:18:ed:4c:49:f6:a5:36:47:51:cf: 1e:a8:8e:0d:75:62:89:fe:dd:d6:91:f0:53:f4:66: dc:d4:25:b8:1c:a1:8e:9f:15:70:18:23:22:7e:65: 6d:f1:49:c3:6f:f4:95:24:92:bb:91:dd:2a:bd:bb: ef:26:ef:7e:60:ad:c7:82:b6:b3:46:0f:be:5f:82: b1:a6:2f:b5:c9:5b:96:34:39:ba:5c:69:1e:85:82: b5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B0:56:01:34:D0:92:02:F4:EE:EA:BF:CF:BD:63:AC:36:3D:07:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/8bc43020-2195-365c-b314-6ccd7e35330b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.crl X509v3 Authority Key Identifier: keyid:AD:D6:FC:F8:D9:F0:31:D4:52:E0:A9:6D:8F:FB:B1:B3:60:7B:8F:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1c17c1d1-7595-477e-aacb-f8ef42c4ba8e.cer sbgp-ipAddrBlock: critical IPv4: 209.188.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:44:ab:65:d3:ad:d0:25:56:8d:1f:49:13:9a:b6:10:c4:d5: b4:aa:3e:cf:06:56:b2:9e:05:87:d4:2c:9a:b0:c9:ac:7f:40: fb:19:67:fc:76:6f:9a:e5:64:b2:e4:af:67:f2:68:47:8d:1d: 87:cd:fb:33:58:ab:94:a4:bf:e8:52:fa:1c:4b:36:47:d6:b9: 09:33:05:04:73:65:3f:67:af:f1:c1:78:27:c7:50:2d:b3:74: 84:7f:dc:c0:cd:fd:9a:b7:f2:80:c9:5f:af:a2:18:96:a4:a7: 67:dd:49:73:2f:d8:5f:86:83:ca:db:ce:6c:fb:76:1f:f1:23: 1d:74:25:48:b2:f3:f9:0e:27:17:21:d8:09:ba:4b:70:2c:40: 40:e0:5a:0f:2b:a4:10:35:69:a0:23:4e:69:60:2e:bd:ea:83: be:a8:b9:18:ed:da:27:aa:34:e0:8e:07:4b:aa:50:0f:9a:a0: a0:7f:a5:ab:93:e3:30:81:f7:86:c3:58:b9:83:1a:64:88:12: 27:08:59:a2:ef:2f:19:27:2b:06:a4:03:6f:9a:5b:3a:80:e8: 11:c1:3c:3c:f3:c4:5f:0f:6c:5e:d4:af:4e:16:c7:0f:20:c4: e3:fb:d5:42:86:4a:10:33:9b:d9:b9:eb:6f:af:4e:0e:56:d8: 3d:41:3b:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtVcdV8og08tRdJ6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWMxN2MxZDEtNzU5NS00NzdlLWFhY2ItZjhlZjQyYzRi YThlMB4XDTI1MDkyNzEzMDA0MVoXDTI1MTIyNjE0MDA0MVowLzEtMCsGA1UEAxMk ODljN2RkZTktODEzMC00OGMzLWE3MzQtMzgzYzIxZjRhZGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0sA328o9jGfmyfbivVXN6/y5HjDvPJOJ6PO XdBLmy/GA9Pg9u6J/LCglkAYPj/SnHfwSfoL6kdydsPOc4UWdbbhv4Y+qrNU9pCT ah3TdMORBOVKnXd7wpvT6D0UEvgWBDxBV5kyGdVEQCJSzdn133csBWD1MOHRSvjJ IM1U1SRJ/P1P2ZAIxW7+KGYrjSe+xItXziQqvXSi+PsDOXkwa9dHMJyw6rm0/Bjt TEn2pTZHUc8eqI4NdWKJ/t3WkfBT9Gbc1CW4HKGOnxVwGCMifmVt8UnDb/SVJJK7 kd0qvbvvJu9+YK3HgrazRg++X4Kxpi+1yVuWNDm6XGkehYK11wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIywVgE00JIC9O7qv8+9Y6w2PQfSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYzE3 YzFkMS03NTk1LTQ3N2UtYWFjYi1mOGVmNDJjNGJhOGUvOGJjNDMwMjAtMjE5NS0z NjVjLWIzMTQtNmNjZDdlMzUzMzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWMxN2MxZDEtNzU5NS00NzdlLWFh Y2ItZjhlZjQyYzRiYThlLzFjMTdjMWQxLTc1OTUtNDc3ZS1hYWNiLWY4ZWY0MmM0 YmE4ZS5jcmwwHwYDVR0jBBgwFoAUrdb8+NnwMdRS4Kltj/uxs2B7j14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYzE3YzFkMS03NTk1LTQ3N2UtYWFjYi1mOGVm NDJjNGJhOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bxlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhEq2XTrdAlVo0fSROathDE1bSqPs8GVrKeBYfULJqwyax/QPsZZ/x2 b5rlZLLkr2fyaEeNHYfN+zNYq5Skv+hS+hxLNkfWuQkzBQRzZT9nr/HBeCfHUC2z dIR/3MDN/Zq38oDJX6+iGJakp2fdSXMv2F+Gg8rbzmz7dh/xIx10JUiy8/kOJxch 2Am6S3AsQEDgWg8rpBA1aaAjTmlgLr3qg76ouRjt2ieqNOCOB0uqUA+aoKB/pauT 4zCB94bDWLmDGmSIEicIWaLvLxknKwakA2+aWzqA6BHBPDzzxF8PbF7Ur04Wxw8g xOP71UKGShAzm9m562+vTg5W2D1BO0I= -----END CERTIFICATE-----Generated at Mon Oct 20 02:15:16 2025 by rpki-client