$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/a9452a88-6ebc-3d4c-8810-c191bce079bd.roa File: a9452a88-6ebc-3d4c-8810-c191bce079bd.roa (raw, json) Hash identifier: 0f9MgLLBFrUXfgaHdpWW58cn8Fo6I2OousXqdfMhr6w= Subject key identifier: 4B:0A:9F:25:91:69:6C:01:83:73:4A:CA:03:6C:F8:9D:B3:8D:56:D4 Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Certificate serial: 010D0C9F4328584B84E77C63C7971460EA458994 Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/a9452a88-6ebc-3d4c-8810-c191bce079bd.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 14618 IP address blocks: 209.169.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:7c:63:c7:97:14:60:ea:45:89:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=f50821cc-c10d-4510-9a87-9fda9e877f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:43:45:4c:a8:44:b7:cc:aa:3f:6f:94:f4:98: 83:a1:ca:52:1e:c5:51:a9:b1:34:23:41:7d:2e:bb: c1:b8:05:a1:64:0a:f2:60:b0:e1:84:53:14:d9:64: 98:6b:33:a5:fc:67:76:de:d4:d1:4e:16:c6:5e:81: 38:7e:85:a8:ef:ee:65:7c:14:43:84:c3:c9:0f:48: f8:0d:e5:17:2d:57:e8:88:ec:bb:c1:8c:99:69:be: eb:43:4e:cf:e1:e8:56:21:a0:de:44:9b:b7:8b:dd: c3:12:18:ba:a4:a6:8c:3b:c7:e2:b6:d9:9c:af:59: bc:ff:55:95:45:85:ad:12:ea:24:55:90:65:80:6e: e2:2d:dc:be:27:a9:51:ed:75:8a:a2:85:bd:b8:28: b2:69:08:5d:fe:27:4f:93:b0:ac:64:6d:09:fb:aa: 88:25:1f:dd:00:d2:b0:ae:c2:96:d1:4b:28:04:4a: c3:e4:43:24:f6:a0:38:3f:11:b1:47:12:c7:55:cd: 43:dc:58:27:f5:9c:b7:2c:2d:b1:64:72:07:b7:9f: fe:cd:e8:ef:60:48:dd:d0:da:78:28:5a:ca:6e:b4: a0:99:da:14:9a:09:ed:30:cc:a3:f2:f2:b5:cb:88: 89:7e:64:46:11:ad:98:11:d3:97:22:2e:f8:9d:eb: 56:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:0A:9F:25:91:69:6C:01:83:73:4A:CA:03:6C:F8:9D:B3:8D:56:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/a9452a88-6ebc-3d4c-8810-c191bce079bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl X509v3 Authority Key Identifier: keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer sbgp-ipAddrBlock: critical IPv4: 209.169.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:b1:89:af:be:e3:69:20:e7:bc:5e:d8:e4:cf:4b:54:e0:c3: d4:87:17:4f:26:94:55:cc:ea:5e:05:7e:74:90:80:fb:f9:fb: 3a:68:ea:ca:38:f7:4a:47:30:68:4c:d6:43:5f:f4:e3:22:c7: 88:a5:15:4f:61:8c:54:8d:f5:bd:52:0d:fd:a3:c8:f7:c6:97: 19:02:3b:ca:38:57:c5:b8:97:fc:33:9a:9b:e8:f4:f6:ed:36: 78:a3:ee:32:4b:6f:6b:11:07:34:04:37:a5:d0:98:f3:01:81: 11:64:9f:fb:cf:d4:dc:06:e7:d0:a5:3c:d6:65:57:4e:d6:e1: bf:f1:a3:dc:76:cc:f9:b1:9e:a4:7d:09:8a:82:a4:7a:cf:d9: 12:86:3b:25:64:fb:a9:00:16:8a:a3:c0:51:62:2c:4f:27:60: 18:12:dc:1f:2c:c4:bb:41:00:5e:79:93:d5:b2:52:7e:4b:74: 7f:84:87:01:43:f3:0b:d6:0d:5b:04:b6:3b:5c:8f:2c:54:6a: ba:61:8d:b7:c8:eb:b8:36:d6:9b:08:f3:fb:47:51:b5:84:50: a8:cc:5f:d0:b9:23:a4:44:7f:cc:ff:f5:9c:d1:06:02:0e:e0: 77:f3:af:5f:5e:7a:de:35:e1:5e:6a:a6:6d:d7:54:86:46:22: f1:3b:3c:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53xjx5cUYOpFiZQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw MjhiMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ZjUwODIxY2MtYzEwZC00NTEwLTlhODctOWZkYTllODc3ZjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikNFTKhEt8yqP2+U9JiDocpSHsVRqbE0I0F9 LrvBuAWhZAryYLDhhFMU2WSYazOl/Gd23tTRThbGXoE4foWo7+5lfBRDhMPJD0j4 DeUXLVfoiOy7wYyZab7rQ07P4ehWIaDeRJu3i93DEhi6pKaMO8fittmcr1m8/1WV RYWtEuokVZBlgG7iLdy+J6lR7XWKooW9uCiyaQhd/idPk7CsZG0J+6qIJR/dANKw rsKW0UsoBErD5EMk9qA4PxGxRxLHVc1D3Fgn9Zy3LC2xZHIHt5/+zejvYEjd0Np4 KFrKbrSgmdoUmgntMMyj8vK1y4iJfmRGEa2YEdOXIi74netWSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsKnyWRaWwBg3NKygNs+J2zjVbUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvYTk0NTJhODgtNmViYy0z ZDRjLTg4MTAtYzE5MWJjZTA3OWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0 NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0anpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOxia++42kg57xe2OTPS1Tgw9SHF08mlFXM6l4FfnSQgPv5+zpo6so4 90pHMGhM1kNf9OMix4ilFU9hjFSN9b1SDf2jyPfGlxkCO8o4V8W4l/wzmpvo9Pbt Nnij7jJLb2sRBzQEN6XQmPMBgRFkn/vP1NwG59ClPNZlV07W4b/xo9x2zPmxnqR9 CYqCpHrP2RKGOyVk+6kAFoqjwFFiLE8nYBgS3B8sxLtBAF55k9WyUn5LdH+EhwFD 8wvWDVsEtjtcjyxUarphjbfI67g21psI8/tHUbWEUKjMX9C5I6REf8z/9ZzRBgIO 4Hfzr19eet414V5qpm3XVIZGIvE7PAA= -----END CERTIFICATE-----Generated at Mon Oct 20 04:04:37 2025 by rpki-client