$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4/753e0d19-e85d-3108-ab40-64ca9efff508.roa File: 753e0d19-e85d-3108-ab40-64ca9efff508.roa (raw, json) Hash identifier: lXSbsCyw9DJ0PAZUHUaFX4fasnxPjp/Ac+bPnydBozI= Subject key identifier: 16:F2:B3:78:28:D8:CF:BF:2A:F2:9A:2A:44:B6:19:AD:7A:73:46:C6 Certificate issuer: /CN=b18afa70-561d-4db9-a167-25cd94a409b4 Certificate serial: 010D0C9F4328584B534B08D99F393221CE7AF280 Authority key identifier: 8A:F3:37:52:DB:E5:86:3D:18:07:F9:62:64:D1:45:C6:FB:A1:D3:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4/753e0d19-e85d-3108-ab40-64ca9efff508.roa Signing time: Fri 26 Sep 2025 18:30:59 +0000 ROA not before: Fri 26 Sep 2025 18:30:59 +0000 ROA not after: Thu 25 Dec 2025 19:30:59 +0000 asID: 402020 IP address blocks: 209.127.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4/b18afa70-561d-4db9-a167-25cd94a409b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4/b18afa70-561d-4db9-a167-25cd94a409b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:53:4b:08:d9:9f:39:32:21:ce:7a:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b18afa70-561d-4db9-a167-25cd94a409b4 Validity Not Before: Sep 26 18:30:59 2025 GMT Not After : Dec 25 19:30:59 2025 GMT Subject: CN=44c35c68-712a-4e3a-95c6-ada1f074a28c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:74:3e:37:c2:64:a4:5c:16:c3:17:9a:9c:fc: 5a:a2:8d:94:87:a4:4d:9b:05:52:a8:c2:f3:95:57: 1f:2e:14:41:29:a3:a9:ce:89:64:1d:e2:0e:ca:cc: 5f:9d:0a:2b:aa:af:ab:59:31:e9:0a:c8:1f:ad:54: a2:77:e8:28:10:42:d1:16:9e:73:76:9e:d9:7d:de: c3:4f:d1:ea:02:85:3f:13:0e:d0:71:6e:10:35:a1: 16:00:df:33:fe:d4:7a:27:26:55:c8:0d:f3:2a:43: 6d:7a:5a:d9:d6:30:67:1b:f3:87:77:3a:65:1b:04: 5c:a3:60:e5:93:8a:4a:9b:e6:2a:63:19:04:d6:69: 1b:97:58:2e:c3:8d:5e:54:a3:f5:3d:fd:c1:6a:94: 7f:0d:d9:3a:e9:d9:b8:1e:f5:6e:29:2a:a9:da:09: b4:c0:a8:56:b2:6d:fe:f3:9b:c1:9b:d4:cf:0c:23: 3c:a6:c1:aa:01:c1:68:0c:42:44:37:84:c1:d3:c8: e5:5f:f9:6e:48:0e:99:0a:5c:53:aa:ad:33:e1:cf: 2b:b1:a4:b0:ea:f5:b4:88:cf:15:c6:59:44:43:5d: d5:49:f2:ea:0a:70:43:42:eb:43:c8:1c:21:2f:69: 52:ea:90:39:80:f2:3e:31:ac:51:e3:e2:71:38:86: 09:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F2:B3:78:28:D8:CF:BF:2A:F2:9A:2A:44:B6:19:AD:7A:73:46:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4/753e0d19-e85d-3108-ab40-64ca9efff508.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4/b18afa70-561d-4db9-a167-25cd94a409b4.crl X509v3 Authority Key Identifier: keyid:8A:F3:37:52:DB:E5:86:3D:18:07:F9:62:64:D1:45:C6:FB:A1:D3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4.cer sbgp-ipAddrBlock: critical IPv4: 209.127.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:db:a1:cc:36:a5:92:c3:0b:f0:10:21:6e:81:9d:88:9a:63: 63:40:e4:f1:61:19:a0:ba:ca:be:b4:89:6a:ef:a9:49:47:9a: 27:46:1d:45:96:b5:3a:7c:41:ef:a7:a0:13:9c:04:7e:ac:26: c0:3e:30:28:be:20:5d:bf:d8:56:24:a9:44:a7:46:fe:67:85: 2d:9f:67:13:a1:9b:ea:40:f4:8d:9b:0d:14:11:2f:49:04:e1: 8d:b2:c1:1a:a1:93:16:20:12:5d:59:4a:a9:95:b5:9a:43:9d: df:1b:ae:52:60:a6:60:2b:99:13:61:51:10:b3:69:56:70:f4: fd:57:08:34:82:8a:cc:de:95:b4:85:7e:26:fd:61:bb:70:bf: ae:e4:d1:8c:dd:c3:47:2b:3a:18:2c:9d:4f:94:66:52:68:e7: 05:88:be:89:72:95:50:d1:da:30:eb:3b:81:84:22:38:05:ad: c3:52:06:85:b1:f7:95:93:13:80:26:2c:c1:94:12:ff:82:5b: 7f:90:5d:bd:d3:46:9d:1d:46:14:35:f3:ee:12:fe:e0:cd:09: be:56:c2:f6:23:6f:ef:27:22:6b:f3:e3:ee:61:49:af:12:ae: 02:10:e5:99:6e:85:e6:11:ec:ed:23:ef:ec:a4:65:a1:10:0e: cf:f3:dd:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtTSwjZnzkyIc568oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjE4YWZhNzAtNTYxZC00ZGI5LWExNjctMjVjZDk0YTQw OWI0MB4XDTI1MDkyNjE4MzA1OVoXDTI1MTIyNTE5MzA1OVowLzEtMCsGA1UEAxMk NDRjMzVjNjgtNzEyYS00ZTNhLTk1YzYtYWRhMWYwNzRhMjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnQ+N8JkpFwWwxeanPxaoo2Uh6RNmwVSqMLz lVcfLhRBKaOpzolkHeIOysxfnQorqq+rWTHpCsgfrVSid+goEELRFp5zdp7Zfd7D T9HqAoU/Ew7QcW4QNaEWAN8z/tR6JyZVyA3zKkNtelrZ1jBnG/OHdzplGwRco2Dl k4pKm+YqYxkE1mkbl1guw41eVKP1Pf3BapR/Ddk66dm4HvVuKSqp2gm0wKhWsm3+ 85vBm9TPDCM8psGqAcFoDEJEN4TB08jlX/luSA6ZClxTqq0z4c8rsaSw6vW0iM8V xllEQ13VSfLqCnBDQutDyBwhL2lS6pA5gPI+MaxR4+JxOIYJKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbys3go2M+/KvKaKkS2Ga16c0bGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iMThh ZmE3MC01NjFkLTRkYjktYTE2Ny0yNWNkOTRhNDA5YjQvNzUzZTBkMTktZTg1ZC0z MTA4LWFiNDAtNjRjYTllZmZmNTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYjE4YWZhNzAtNTYxZC00ZGI5LWEx NjctMjVjZDk0YTQwOWI0L2IxOGFmYTcwLTU2MWQtNGRiOS1hMTY3LTI1Y2Q5NGE0 MDliNC5jcmwwHwYDVR0jBBgwFoAUivM3Utvlhj0YB/liZNFFxvuh00swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iMThhZmE3MC01NjFkLTRkYjktYTE2Ny0yNWNk OTRhNDA5YjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0X/ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDbocw2pZLDC/AQIW6BnYiaY2NA5PFhGaC6yr60iWrvqUlHmidGHUWW tTp8Qe+noBOcBH6sJsA+MCi+IF2/2FYkqUSnRv5nhS2fZxOhm+pA9I2bDRQRL0kE 4Y2ywRqhkxYgEl1ZSqmVtZpDnd8brlJgpmArmRNhURCzaVZw9P1XCDSCiszelbSF fib9Ybtwv67k0Yzdw0crOhgsnU+UZlJo5wWIvolylVDR2jDrO4GEIjgFrcNSBoWx 95WTE4AmLMGUEv+CW3+QXb3TRp0dRhQ18+4S/uDNCb5WwvYjb+8nImvz4+5hSa8S rgIQ5ZluheYR7O0j7+ykZaEQDs/z3VA= -----END CERTIFICATE-----Generated at Mon Oct 20 19:53:54 2025 by rpki-client