$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/fa29edd3-f830-34f2-b449-cdb32d15da01.roa File: fa29edd3-f830-34f2-b449-cdb32d15da01.roa (raw, json) Hash identifier: 7Ql+sz4VFRR/IURW990Ut/8DoyEphIqNom3xxOSSqVk= Subject key identifier: D1:2B:CB:36:D2:43:F4:B0:29:F5:07:D7:54:B2:39:BA:64:24:5E:A8 Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Certificate serial: 010D0C9F4328584B84E779A6545F2AC913AD4EC0 Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/fa29edd3-f830-34f2-b449-cdb32d15da01.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16509 IP address blocks: 209.169.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:79:a6:54:5f:2a:c9:13:ad:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=892ce590-a73e-4cf9-832c-10fc5e0159e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b9:60:85:77:3a:bd:f6:56:ae:f2:da:d1:e1: 22:10:37:38:d4:4c:e8:38:33:a9:ad:29:c8:4f:2e: 69:0d:15:c3:69:ca:ae:b5:d6:80:1f:af:93:a2:25: c6:da:87:d7:5e:14:e7:f3:c9:32:60:99:ce:aa:5a: ce:a2:7f:b8:47:df:13:d7:6b:90:a7:1b:73:e7:fb: 67:b2:dc:e5:f5:d9:4c:a7:e7:65:aa:99:13:1d:04: 2b:e5:d9:85:ce:5e:d5:24:1b:90:be:15:11:6b:8b: 6a:0f:b3:ed:97:3a:be:3d:d1:e8:f5:38:de:1a:0e: ad:db:87:b3:81:27:2c:05:9c:a0:92:31:8e:32:06: 3b:bf:a6:85:4a:6e:9d:36:01:90:7c:7b:96:7a:9c: 59:d9:42:81:3c:c9:ad:55:e3:4e:45:4a:9a:4d:f9: 36:fa:7d:33:ed:a9:aa:36:a9:71:05:9e:66:75:60: 2c:17:8b:f4:c4:37:e7:a5:3a:0f:86:28:64:7d:a9: 4c:60:e1:3c:b1:9d:4d:0f:9c:27:b1:80:41:47:46: fd:40:1a:e3:82:c1:ee:c0:c7:d1:49:2d:fb:d7:b4: 3d:f6:36:d1:e9:76:44:79:7b:3a:59:1c:0a:c7:b8: ea:89:f3:df:6c:6e:0b:5b:5b:a6:f8:c8:0e:e1:f9: 87:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:2B:CB:36:D2:43:F4:B0:29:F5:07:D7:54:B2:39:BA:64:24:5E:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/fa29edd3-f830-34f2-b449-cdb32d15da01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl X509v3 Authority Key Identifier: keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer sbgp-ipAddrBlock: critical IPv4: 209.169.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:03:bf:45:f3:d9:e4:41:65:12:05:bb:2a:cb:83:41:15:a2: 7e:1f:1f:23:f6:41:59:4b:f0:25:43:41:9a:64:ca:bd:cd:9e: 34:9d:9c:21:68:da:fb:a5:9f:f3:00:1c:fa:d7:0e:35:11:37: a3:dc:e9:7c:ba:04:5d:c1:90:a7:c9:36:18:10:d0:32:7f:98: 97:14:95:16:b6:ec:7e:58:9d:3c:83:67:f5:ab:4d:bd:b0:90: f4:af:b1:88:9b:f0:ec:de:51:96:97:9b:ed:dd:89:99:26:f3: f1:fb:a1:05:6b:c7:7d:e8:a6:9f:c5:60:1a:6f:aa:7e:d1:f2: 6b:ff:70:53:e7:b8:99:d1:84:9f:b8:0e:2c:69:95:03:29:30: 9f:9b:25:f3:f4:71:6c:a2:c6:e9:cc:c6:78:f0:9f:83:f9:a1: d1:97:c5:f4:b9:f4:fd:7a:ad:b4:8c:06:b7:16:8e:5d:98:d8: 90:ca:04:47:85:de:92:ed:00:37:4e:56:a4:0d:bb:fb:c9:d7: a6:15:82:f0:4a:3c:93:cd:51:55:77:d5:4c:a0:fd:73:33:65: 93:23:bd:73:8f:41:b4:26:41:ad:d6:25:37:bb:db:8c:83:47: 46:fd:f6:99:db:62:59:b1:b5:5f:06:75:41:b6:4f:c7:b0:64: c3:e9:ed:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53mmVF8qyROtTsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw MjhiMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ODkyY2U1OTAtYTczZS00Y2Y5LTgzMmMtMTBmYzVlMDE1OWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsblghXc6vfZWrvLa0eEiEDc41EzoODOprSnI Ty5pDRXDacqutdaAH6+ToiXG2ofXXhTn88kyYJnOqlrOon+4R98T12uQpxtz5/tn stzl9dlMp+dlqpkTHQQr5dmFzl7VJBuQvhURa4tqD7Ptlzq+PdHo9TjeGg6t24ez gScsBZygkjGOMgY7v6aFSm6dNgGQfHuWepxZ2UKBPMmtVeNORUqaTfk2+n0z7amq NqlxBZ5mdWAsF4v0xDfnpToPhihkfalMYOE8sZ1ND5wnsYBBR0b9QBrjgsHuwMfR SS3717Q99jbR6XZEeXs6WRwKx7jqifPfbG4LW1um+MgO4fmHFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEryzbSQ/SwKfUH11SyObpkJF6oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvZmEyOWVkZDMtZjgzMC0z NGYyLWI0NDktY2RiMzJkMTVkYTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0 NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0anyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQDv0Xz2eRBZRIFuyrLg0EVon4fHyP2QVlL8CVDQZpkyr3NnjSdnCFo 2vuln/MAHPrXDjURN6Pc6Xy6BF3BkKfJNhgQ0DJ/mJcUlRa27H5YnTyDZ/WrTb2w kPSvsYib8OzeUZaXm+3diZkm8/H7oQVrx33opp/FYBpvqn7R8mv/cFPnuJnRhJ+4 DixplQMpMJ+bJfP0cWyixunMxnjwn4P5odGXxfS59P16rbSMBrcWjl2Y2JDKBEeF 3pLtADdOVqQNu/vJ16YVgvBKPJPNUVV31Uyg/XMzZZMjvXOPQbQmQa3WJTe724yD R0b99pnbYlmxtV8GdUG2T8ewZMPp7U4= -----END CERTIFICATE-----Generated at Mon Oct 20 12:57:13 2025 by rpki-client