$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/f9240ec9-7ac0-3caa-aabc-1afd67d8507b.roa File: f9240ec9-7ac0-3caa-aabc-1afd67d8507b.roa (raw, json) Hash identifier: oHfL1CCiXEiJQfBwTEVwf4AW/2ipEMBcqTfsms8oE64= Subject key identifier: F2:B0:25:E4:03:97:2D:1B:BF:EF:58:9C:D6:F0:4F:FA:52:0A:C8:3F Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584B8BE23108126CDF2152553240 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/f9240ec9-7ac0-3caa-aabc-1afd67d8507b.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 203724 IP address blocks: 208.81.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:31:08:12:6c:df:21:52:55:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=600b9eb2-f47b-4f4b-a4f8-1d3f2cf65653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:bb:8c:fb:b9:e9:2c:09:5e:ea:93:ac:8d:d4: ef:dc:b4:2d:e4:05:7e:cf:0b:67:e9:59:f8:f7:3f: f3:da:d7:38:11:84:92:c3:a2:fa:50:1c:eb:df:7d: 54:51:aa:c6:a3:1b:c1:b3:3b:e4:ea:4c:02:e3:c0: 4b:ba:b6:7c:88:7a:2e:5e:46:b6:a0:56:de:e5:ab: 1d:cf:9e:13:cd:a4:36:40:bd:d7:26:04:37:99:16: e5:d5:56:31:93:8b:07:53:bb:13:dd:56:03:3e:62: d3:4b:76:4b:80:8e:59:7f:5a:0a:2b:69:45:8a:32: 87:20:f0:7f:03:cb:3b:03:59:71:65:5e:74:1a:a6: b8:d9:6b:98:76:8a:92:b3:cd:a1:db:2e:cd:f1:bb: fb:4e:02:52:3f:8f:ba:d3:10:77:b0:07:a7:e0:40: 5e:14:43:c1:7d:2c:10:62:9e:42:3d:88:2e:01:ae: 81:b4:d4:a4:27:c0:c4:40:6e:bf:14:52:1e:ff:2a: c5:72:77:41:af:51:1f:2f:ef:56:96:8d:7a:e7:ff: 70:f0:a2:83:c3:04:68:7b:10:3c:dc:cb:d0:c3:42: bb:af:04:f6:06:9c:67:0e:b6:d2:31:73:6b:aa:90: 45:40:4c:23:66:5d:2e:22:da:3d:d5:af:96:d6:7e: ae:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B0:25:E4:03:97:2D:1B:BF:EF:58:9C:D6:F0:4F:FA:52:0A:C8:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/f9240ec9-7ac0-3caa-aabc-1afd67d8507b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 208.81.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:62:47:37:02:29:93:7d:6e:1a:f1:cf:90:ff:2c:84:af:2c: 79:fe:c8:67:64:ae:53:53:e7:bf:b2:68:48:9f:f7:27:66:b6: 65:d9:aa:4b:0e:bf:55:9a:c5:46:9a:7f:8a:3d:ed:ae:57:cc: 54:45:4d:42:2a:f3:44:d8:fa:c2:f5:c7:0f:16:6f:90:38:ae: 5c:0e:e0:73:3d:f0:4d:75:7d:db:c8:f1:d7:25:97:a0:4f:bb: 27:29:4a:d4:77:4b:ba:c0:21:1d:73:63:23:65:7f:89:c0:e7: 9c:81:8f:0c:28:e2:80:80:c0:45:b2:06:7e:4e:81:90:96:3b: 81:39:f5:ef:ea:83:da:91:69:d1:9d:d2:7b:10:ad:01:36:ef: 30:4f:f0:60:29:c7:87:50:bd:46:4e:0b:b5:2b:45:10:2f:e3: bd:0d:68:a0:c7:79:dc:0d:2f:40:ef:f3:6a:79:41:ea:f5:aa: 4f:8d:05:e0:04:dd:79:4a:56:86:36:5d:90:f7:86:3d:cb:4b: 2f:31:0e:6b:86:fc:9f:30:64:79:ac:51:8a:bb:3c:cf:6c:b8: 23:6d:3e:87:49:eb:72:fc:26:be:15:41:cc:7b:b3:1d:27:3e: 7d:5a:16:b6:57:f4:a1:e5:fc:7e:13:32:a7:1e:e6:46:a2:64: 54:37:8b:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4jEIEmzfIVJVMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk NjAwYjllYjItZjQ3Yi00ZjRiLWE0ZjgtMWQzZjJjZjY1NjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7uM+7npLAle6pOsjdTv3LQt5AV+zwtn6Vn4 9z/z2tc4EYSSw6L6UBzr331UUarGoxvBszvk6kwC48BLurZ8iHouXka2oFbe5asd z54TzaQ2QL3XJgQ3mRbl1VYxk4sHU7sT3VYDPmLTS3ZLgI5Zf1oKK2lFijKHIPB/ A8s7A1lxZV50Gqa42WuYdoqSs82h2y7N8bv7TgJSP4+60xB3sAen4EBeFEPBfSwQ Yp5CPYguAa6BtNSkJ8DEQG6/FFIe/yrFcndBr1EfL+9Wlo165/9w8KKDwwRoexA8 3MvQw0K7rwT2BpxnDrbSMXNrqpBFQEwjZl0uIto91a+W1n6u3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKwJeQDly0bv+9YnNbwT/pSCsg/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvZjkyNDBlYzktN2FjMC0z Y2FhLWFhYmMtMWFmZDY3ZDg1MDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FFDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5iRzcCKZN9bhrxz5D/LISvLHn+yGdkrlNT57+yaEif9ydmtmXZqksO v1WaxUaaf4o97a5XzFRFTUIq80TY+sL1xw8Wb5A4rlwO4HM98E11fdvI8dcll6BP uycpStR3S7rAIR1zYyNlf4nA55yBjwwo4oCAwEWyBn5OgZCWO4E59e/qg9qRadGd 0nsQrQE27zBP8GApx4dQvUZOC7UrRRAv470NaKDHedwNL0Dv82p5Qer1qk+NBeAE 3XlKVoY2XZD3hj3LSy8xDmuG/J8wZHmsUYq7PM9suCNtPodJ63L8Jr4VQcx7sx0n Pn1aFrZX9KHl/H4TMqce5kaiZFQ3i9s= -----END CERTIFICATE-----Generated at Mon Oct 20 07:49:59 2025 by rpki-client