$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/0a2d5461-dab2-3bd7-bbae-4cff0f986bf8.roa File: 0a2d5461-dab2-3bd7-bbae-4cff0f986bf8.roa (raw, json) Hash identifier: 8Hcq+guwejW61s6StKBrjqVOizFgm8NFsE/qoljVcq4= Subject key identifier: 09:01:E7:F9:05:A2:D9:D4:95:93:47:04:F6:A4:0E:09:96:43:68:00 Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584B0FA6C4BA5E695328EF096340 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/0a2d5461-dab2-3bd7-bbae-4cff0f986bf8.roa Signing time: Tue 02 Sep 2025 13:00:42 +0000 ROA not before: Tue 02 Sep 2025 13:00:42 +0000 ROA not after: Mon 01 Dec 2025 14:00:42 +0000 asID: 21947 IP address blocks: 209.200.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:a6:c4:ba:5e:69:53:28:ef:09:63:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Sep 2 13:00:42 2025 GMT Not After : Dec 1 14:00:42 2025 GMT Subject: CN=d59f91b6-ee7b-4235-9a9f-6e10f98ec921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b2:c4:fd:5e:67:b3:17:77:8b:01:5a:1f:39: 9e:8d:6f:3a:42:2d:56:ad:1b:26:c7:6c:78:ae:a3: e8:3a:c5:6a:93:ff:95:6a:c6:f5:ee:3f:ee:c2:bc: 14:75:43:59:0f:e1:b4:60:5e:94:72:e6:92:db:c9: 63:cc:05:dc:2d:29:50:4e:0f:59:06:80:c6:bc:f7: 79:6d:58:d4:5b:4f:2f:a6:1d:33:cd:85:29:63:12: ba:48:08:81:ee:f6:26:e7:41:47:5a:09:c8:79:5a: d9:87:81:fd:04:21:f0:cd:d9:d6:32:99:21:ca:b4: df:28:4f:d3:c5:fb:ba:48:49:37:65:9b:b9:67:f5: 77:86:26:99:b7:76:f2:1d:33:77:14:be:49:c2:40: 9a:8e:22:4f:88:39:25:69:c5:cc:37:85:76:6f:02: ea:74:eb:5e:e3:9d:26:f2:87:36:fc:67:52:0b:45: 24:93:38:d0:ca:94:e3:25:3e:60:a8:64:02:61:74: db:06:4d:c1:b0:3c:7c:4b:b9:35:84:df:e2:65:68: c2:86:be:9e:c0:6c:ce:05:99:97:5c:07:41:3c:a5: 8d:bb:f6:e6:32:81:10:f2:6a:40:77:ba:be:80:f8: 6e:e4:5c:46:70:54:40:4d:7c:01:ca:cf:c3:cd:3c: e4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:01:E7:F9:05:A2:D9:D4:95:93:47:04:F6:A4:0E:09:96:43:68:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/0a2d5461-dab2-3bd7-bbae-4cff0f986bf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 209.200.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:84:3d:f6:24:5f:cf:bb:f5:f6:84:bb:35:31:06:5f:02:dd: 22:ad:b8:54:b0:06:89:70:08:d7:06:88:ec:78:6a:40:29:ff: 18:17:54:a8:1c:e2:87:e5:18:ce:23:c7:b8:c6:89:56:f2:5a: 5d:61:32:1b:50:f5:d1:a3:f1:0b:5d:37:d3:61:08:22:46:b9: 01:82:25:00:ff:0d:b1:76:1c:05:ab:27:e7:3c:9c:3e:02:dd: 9b:06:e6:4e:bc:64:b0:81:fd:fa:70:98:90:9a:5d:6c:f5:90: 78:e6:33:45:51:48:16:08:5d:59:03:6f:56:b8:46:27:a7:76: c3:42:d2:36:a8:11:83:79:32:99:fa:05:1b:38:51:54:9b:88: f3:8b:35:7f:de:a0:d7:63:79:f9:9b:6e:aa:1d:e5:8c:8f:b1: 70:0a:fa:96:df:f5:27:8f:88:de:bd:ee:b4:4b:50:8f:0d:9b: a8:e7:8c:e9:7e:c8:ea:ae:d5:70:dd:aa:f7:29:e8:ec:f6:b8: 4f:46:d5:43:21:3e:c0:d8:ad:e8:a9:c1:d3:7a:90:0b:1f:51: d1:6f:d7:8a:33:ab:7e:76:28:2e:48:dd:3a:e8:c1:ca:0f:16: 45:04:6e:ab:6d:89:f5:16:eb:ad:ad:10:66:6f:82:63:dd:0d: af:65:c7:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsPpsS6XmlTKO8JY0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI1MDkwMjEzMDA0MloXDTI1MTIwMTE0MDA0MlowLzEtMCsGA1UEAxMk ZDU5ZjkxYjYtZWU3Yi00MjM1LTlhOWYtNmUxMGY5OGVjOTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbLE/V5nsxd3iwFaHzmejW86Qi1WrRsmx2x4 rqPoOsVqk/+Vasb17j/uwrwUdUNZD+G0YF6UcuaS28ljzAXcLSlQTg9ZBoDGvPd5 bVjUW08vph0zzYUpYxK6SAiB7vYm50FHWgnIeVrZh4H9BCHwzdnWMpkhyrTfKE/T xfu6SEk3ZZu5Z/V3hiaZt3byHTN3FL5JwkCajiJPiDklacXMN4V2bwLqdOte450m 8oc2/GdSC0UkkzjQypTjJT5gqGQCYXTbBk3BsDx8S7k1hN/iZWjChr6ewGzOBZmX XAdBPKWNu/bmMoEQ8mpAd7q+gPhu5FxGcFRATXwBys/DzTzkGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkB5/kFotnUlZNHBPakDgmWQ2gAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvMGEyZDU0NjEtZGFiMi0z YmQ3LWJiYWUtNGNmZjBmOTg2YmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0cjAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWEPfYkX8+79faEuzUxBl8C3SKtuFSwBolwCNcGiOx4akAp/xgXVKgc 4oflGM4jx7jGiVbyWl1hMhtQ9dGj8QtdN9NhCCJGuQGCJQD/DbF2HAWrJ+c8nD4C 3ZsG5k68ZLCB/fpwmJCaXWz1kHjmM0VRSBYIXVkDb1a4RiendsNC0jaoEYN5Mpn6 BRs4UVSbiPOLNX/eoNdjefmbbqod5YyPsXAK+pbf9SePiN697rRLUI8Nm6jnjOl+ yOqu1XDdqvcp6Oz2uE9G1UMhPsDYreipwdN6kAsfUdFv14ozq352KC5I3TrowcoP FkUEbqttifUW662tEGZvgmPdDa9lxz0= -----END CERTIFICATE-----Generated at Mon Oct 20 13:54:38 2025 by rpki-client