$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/05224f4f-29f9-328d-ad4a-db204fafa300.roa File: 05224f4f-29f9-328d-ad4a-db204fafa300.roa (raw, json) Hash identifier: 6KddCjxBZSPCYZYNOY+aZOEx5WVmT7Jg0IDCNZ0utM4= Subject key identifier: 9C:3B:8B:61:0D:3A:06:13:EB:B1:89:5C:D6:3B:9B:5D:5B:68:FD:35 Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F4328584B8EACD7057ABE3CF71BA31500 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/05224f4f-29f9-328d-ad4a-db204fafa300.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 7782 IP address blocks: 209.112.128.0/18 maxlen: 18 209.112.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:d7:05:7a:be:3c:f7:1b:a3:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=a2a9ca04-8cff-4b49-8e3f-74f27e39aced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:62:78:11:17:87:81:70:ed:0f:85:41:63:68: 42:a3:9f:48:49:2b:70:46:36:5a:37:66:4e:34:9b: 24:30:9b:fa:75:61:0e:c2:86:f0:9e:09:7f:84:57: e5:0a:ea:9b:7a:e8:03:0e:ff:9d:42:91:07:02:47: 53:65:88:dc:9b:1a:4a:2f:55:8d:6f:c6:43:43:61: 7a:62:ca:c6:ee:f5:b0:da:a2:6f:8f:44:79:21:f5: 19:84:b7:e6:22:ed:d9:7e:62:b0:4d:b0:32:de:7b: 73:fa:e0:ac:12:c1:73:54:a6:a9:3a:2b:83:ef:7c: af:18:be:6b:26:e8:71:41:6b:c8:d7:d9:22:7b:a1: 51:99:30:c6:bb:d0:3e:1d:51:72:e8:3c:9c:ef:5c: 0f:ea:91:ed:13:3e:5b:f9:f5:6b:20:c0:b5:46:9c: cc:9f:4c:80:3c:16:e5:43:59:ef:07:eb:0a:32:94: 08:67:a7:27:b4:cc:fb:ee:4f:28:12:23:67:ed:b3: d3:57:f8:2c:94:6e:97:d7:91:0e:16:19:84:e3:0d: e3:0c:ae:a9:ab:30:eb:7b:5b:a2:2d:ec:ed:e5:59: 87:fa:56:07:26:9b:11:7d:ed:2d:02:3f:52:8e:45: 70:cf:fc:d2:5b:40:30:a7:98:38:48:95:79:7c:95: 2e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3B:8B:61:0D:3A:06:13:EB:B1:89:5C:D6:3B:9B:5D:5B:68:FD:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/05224f4f-29f9-328d-ad4a-db204fafa300.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 209.112.128.0-209.112.223.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:55:cf:cc:63:32:6e:f4:a5:6e:9e:b9:52:41:6e:cb:17:c1: cf:18:3d:4a:13:4d:09:2a:4d:ff:0f:be:4f:ec:f4:58:a5:88: 85:e8:af:72:92:b7:2d:c6:99:d8:26:ce:57:57:a6:eb:ed:2d: da:4c:ec:ad:b5:46:eb:90:a0:3f:b4:6e:f6:b4:b1:cd:f7:19: bb:16:d5:fa:03:07:69:b2:71:e3:ac:c5:5a:c2:77:f1:c1:4b: ea:85:86:c5:7e:7b:f1:52:7a:aa:29:c1:82:2d:43:26:59:79: 41:53:bb:ea:8b:fc:73:0d:80:35:e8:6a:d8:53:e7:ae:da:da: 2d:03:69:9e:c3:f2:fe:4f:e3:87:16:5e:9a:df:80:40:cc:5c: 71:f8:04:4e:1e:fd:cf:41:a4:ac:6b:f6:db:d2:21:0a:03:51: 12:b0:c6:68:02:4b:ac:ab:4e:62:09:df:c2:00:2c:69:1b:16: 17:04:84:f2:c5:d3:b0:ad:0c:4a:d2:46:34:5f:e2:c0:48:ad: 2f:ae:ce:01:81:e5:07:8b:39:8e:19:1d:d6:e0:99:d8:c8:8a: 7a:68:ca:47:ac:d2:48:6d:b3:64:e5:77:dc:df:ef:09:05:13: e1:d1:63:65:0b:13:98:a2:6a:79:a4:36:b2:4a:54:3d:ea:34: 44:29:50:a8 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEuOrNcFer489xujFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk YTJhOWNhMDQtOGNmZi00YjQ5LThlM2YtNzRmMjdlMzlhY2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WJ4EReHgXDtD4VBY2hCo59ISStwRjZaN2ZO NJskMJv6dWEOwobwngl/hFflCuqbeugDDv+dQpEHAkdTZYjcmxpKL1WNb8ZDQ2F6 YsrG7vWw2qJvj0R5IfUZhLfmIu3ZfmKwTbAy3ntz+uCsEsFzVKapOiuD73yvGL5r JuhxQWvI19kie6FRmTDGu9A+HVFy6Dyc71wP6pHtEz5b+fVrIMC1RpzMn0yAPBbl Q1nvB+sKMpQIZ6cntMz77k8oEiNn7bPTV/gslG6X15EOFhmE4w3jDK6pqzDre1ui Lezt5VmH+lYHJpsRfe0tAj9SjkVwz/zSW0Awp5g4SJV5fJUuZwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFJw7i2ENOgYT67GJXNY7m11baP01MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvMDUyMjRmNGYtMjlmOS0z MjhkLWFkNGEtZGIyMDRmYWZhMzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAfRcIAD BAXRcMAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAfVXPzGMybvSlbp65UkFuyxfBzxg9ShNNCSpN/w++T+z0 WKWIheivcpK3LcaZ2CbOV1em6+0t2kzsrbVG65CgP7Ru9rSxzfcZuxbV+gMHabJx 46zFWsJ38cFL6oWGxX578VJ6qinBgi1DJll5QVO76ov8cw2ANehq2FPnrtraLQNp nsPy/k/jhxZemt+AQMxccfgETh79z0GkrGv229IhCgNRErDGaAJLrKtOYgnfwgAs aRsWFwSE8sXTsK0MStJGNF/iwEitL67OAYHlB4s5jhkd1uCZ2MiKemjKR6zSSG2z ZOV33N/vCQUT4dFjZQsTmKJqeaQ2skpUPeo0RClQqA== -----END CERTIFICATE-----Generated at Mon Oct 20 17:48:11 2025 by rpki-client