$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4894f3df-aa63-3248-9184-fd1db1926b55.roa File: 4894f3df-aa63-3248-9184-fd1db1926b55.roa (raw, json) Hash identifier: n46/QiHrcS9eRV/uwb6rAaXCzbboVC7wz6dIukec6B4= Subject key identifier: BA:B8:BE:59:48:AA:A6:23:8C:19:F5:E9:DD:C6:A5:D4:C8:F4:A5:EE Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584B87B23F49F5E7FBBF885028C0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4894f3df-aa63-3248-9184-fd1db1926b55.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 199527 IP address blocks: 209.213.196.0/24 maxlen: 24 209.213.198.0/23 maxlen: 24 209.213.204.0/23 maxlen: 24 209.213.208.0/23 maxlen: 24 209.213.210.0/24 maxlen: 24 209.213.212.0/23 maxlen: 24 209.213.214.0/24 maxlen: 24 209.213.218.0/24 maxlen: 24 209.213.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:3f:49:f5:e7:fb:bf:88:50:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=2fef2593-1030-4332-b8e3-7aa4934f6857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:05:7a:51:60:93:cc:6c:1d:83:3f:d0:96:6f: cf:b1:d8:ed:ed:e9:b4:a3:24:49:a6:92:22:90:9c: 3d:3a:0a:bd:80:41:20:d3:c5:9a:e5:6c:fe:94:96: 35:e3:92:e2:b1:5a:d1:12:03:10:60:1e:70:e4:5b: e7:40:21:aa:82:6a:82:16:14:a3:a0:9b:ec:37:a8: f1:7a:ad:18:81:ab:c3:84:ff:b6:db:b2:7c:79:50: 6c:c9:d1:6b:3e:07:b3:de:b2:d7:2e:94:6e:42:d2: 47:7b:89:c4:ad:30:16:6e:f6:56:3e:e0:5a:a7:9c: 71:e0:1e:84:56:51:a9:01:06:e5:c7:2b:ad:0a:28: fa:07:e6:1f:24:94:45:23:11:03:83:78:be:40:d1: 76:bc:66:5b:eb:2a:75:b6:0a:65:22:20:9d:d1:fb: 43:a6:5b:a6:ca:25:d9:d9:de:f1:92:97:71:aa:39: 3e:b2:c0:53:1c:b9:43:9e:38:41:bf:cf:31:d6:fa: b0:50:bb:4d:e8:af:8b:6b:48:c1:d8:50:7d:5a:54: 6d:e0:5a:66:4a:3c:0b:1a:23:41:b1:31:d8:88:62: 22:e7:27:4c:c8:03:30:de:a5:47:94:2b:32:4d:8b: 96:4c:49:cc:6a:0d:6b:29:1e:de:53:a9:57:29:3f: f6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B8:BE:59:48:AA:A6:23:8C:19:F5:E9:DD:C6:A5:D4:C8:F4:A5:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4894f3df-aa63-3248-9184-fd1db1926b55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 209.213.196.0/24 209.213.198.0/23 209.213.204.0/23 209.213.208.0-209.213.210.255 209.213.212.0-209.213.214.255 209.213.218.0/24 209.213.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:12:11:f2:c4:88:ec:b6:b1:b8:8a:1c:56:ee:b6:d3:1a:58: 0e:5c:6b:fa:27:14:0c:8f:13:bc:6c:07:06:04:d4:3d:64:c1: 37:2d:2f:6c:9c:e2:6c:84:e5:01:4a:2f:dd:da:ef:70:29:d6: 18:bc:60:0f:ab:ed:fb:e8:31:ba:a9:23:9c:9c:11:6e:75:9a: 52:a6:ff:d9:ef:01:a1:52:36:32:c8:63:19:4e:19:d7:7b:6b: d5:a4:3f:38:cf:02:b8:29:93:b2:06:20:29:f0:d1:e5:69:76: c5:11:a1:7d:cb:5d:ae:fc:46:4a:07:11:f4:e4:c5:36:1f:25: eb:8a:51:09:b3:ff:9c:2b:23:24:14:60:08:10:4e:4e:dc:26: 77:1a:dc:f6:57:93:41:07:d5:ab:9f:8a:76:88:d3:64:83:ca: 85:43:82:8d:50:ed:fd:a0:85:14:06:2c:1a:d7:94:bb:2c:cc: 69:0f:6d:8c:7f:56:ed:0c:02:bb:33:80:4a:f5:08:9d:d4:be: 4a:5e:6f:6e:76:78:e1:82:48:0f:0b:ef:1d:e9:d3:97:6f:b9: 56:70:9e:27:9b:94:0c:28:65:08:b2:1c:ac:bd:5b:ea:55:6d: bf:08:26:76:ef:6c:ec:f6:0a:cd:35:c6:15:3e:7e:8d:92:2c: 6c:ce:90:26 -----BEGIN CERTIFICATE----- MIIGdzCCBV+gAwIBAgIUAQ0Mn0MoWEuHsj9J9ef7v4hQKMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk MmZlZjI1OTMtMTAzMC00MzMyLWI4ZTMtN2FhNDkzNGY2ODU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgV6UWCTzGwdgz/Qlm/Psdjt7em0oyRJppIi kJw9Ogq9gEEg08Wa5Wz+lJY145LisVrREgMQYB5w5FvnQCGqgmqCFhSjoJvsN6jx eq0YgavDhP+227J8eVBsydFrPgez3rLXLpRuQtJHe4nErTAWbvZWPuBap5xx4B6E VlGpAQblxyutCij6B+YfJJRFIxEDg3i+QNF2vGZb6yp1tgplIiCd0ftDplumyiXZ 2d7xkpdxqjk+ssBTHLlDnjhBv88x1vqwULtN6K+La0jB2FB9WlRt4FpmSjwLGiNB sTHYiGIi5ydMyAMw3qVHlCsyTYuWTEnMag1rKR7eU6lXKT/2PQIDAQABo4IDiTCC A4UwHQYDVR0OBBYEFLq4vllIqqYjjBn16d3GpdTI9KXuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNDg5NGYzZGYtYWE2My0z MjQ4LTkxODQtZmQxZGIxOTI2YjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQA0dXEAwQB 0dXGAwQB0dXMMAwDBATR1dADBADR1dIwDAMEAtHV1AMEANHV1gMEANHV2gMEANHV 3zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQCoEhHyxIjstrG4ihxW7rbTGlgOXGv6JxQMjxO8bAcGBNQ9ZME3 LS9snOJshOUBSi/d2u9wKdYYvGAPq+376DG6qSOcnBFudZpSpv/Z7wGhUjYyyGMZ ThnXe2vVpD84zwK4KZOyBiAp8NHlaXbFEaF9y12u/EZKBxH05MU2HyXrilEJs/+c KyMkFGAIEE5O3CZ3Gtz2V5NBB9Wrn4p2iNNkg8qFQ4KNUO39oIUUBiwa15S7LMxp D22Mf1btDAK7M4BK9Qid1L5KXm9udnjhgkgPC+8d6dOXb7lWcJ4nm5QMKGUIshys vVvqVW2/CCZ272zs9grNNcYVPn6NkixszpAm -----END CERTIFICATE-----Generated at Mon Oct 20 04:47:06 2025 by rpki-client