$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/52215577-a591-3e62-b438-ff08b1bba9ec.roa File: 52215577-a591-3e62-b438-ff08b1bba9ec.roa (raw, json) Hash identifier: rJv6aQUOf1WkMVM9MiN9/D0IjY1DbnZkTk0uWj1fK6g= Subject key identifier: 57:D5:90:31:02:E9:19:E6:DA:FF:2C:FF:2B:7D:02:5C:F4:3A:93:A3 Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F4328584B8EACD71A1861350684CF3E80 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/52215577-a591-3e62-b438-ff08b1bba9ec.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 7782 IP address blocks: 209.193.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:d7:1a:18:61:35:06:84:cf:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=5b626ddb-cd4e-422f-951d-25eb859de54c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f7:4a:9a:5f:c5:b8:48:b8:2e:de:03:33:2d: 00:45:66:21:56:b2:eb:9d:10:2f:84:be:0d:00:c1: 94:5a:57:5e:de:68:44:04:08:05:01:7a:4c:93:30: 1b:b6:89:0e:17:93:8a:c7:d1:0f:7b:e4:40:c9:9e: 52:d6:e6:58:53:4a:a1:69:b7:af:ed:ea:22:a5:ae: d6:7b:5e:dd:b9:50:ae:f3:ab:77:9c:c4:9d:31:95: d5:f9:d7:92:a0:c8:9a:e6:f6:30:6e:b1:59:59:34: 15:ab:c3:54:a7:4f:24:71:02:3c:94:d1:b5:ed:60: f1:72:30:65:9d:13:a8:b1:ec:89:97:ab:28:34:97: 53:0b:a0:01:8b:b3:d1:a7:93:f2:2f:db:3a:f7:8d: cb:bc:24:da:12:ea:0b:9f:2d:6b:b6:6e:db:d0:77: 2c:c3:81:e9:a1:e5:d5:23:62:19:a4:9a:6d:03:76: d5:1b:7b:09:4d:ad:cc:84:b3:a6:0f:28:22:bc:c5: ac:a3:7e:7f:b8:d3:b8:b2:f5:db:15:c1:21:03:30: 78:a7:5b:51:9b:c2:aa:62:9f:cb:5f:1a:ff:be:60: 0a:86:7a:18:47:11:92:40:e4:92:1c:66:37:05:f1: 14:56:16:33:41:07:dc:14:9b:7e:50:b0:a9:19:77: 5d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D5:90:31:02:E9:19:E6:DA:FF:2C:FF:2B:7D:02:5C:F4:3A:93:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/52215577-a591-3e62-b438-ff08b1bba9ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 209.193.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:eb:72:9a:2b:0e:59:43:1a:47:6e:17:14:07:2e:bc:66:6f: 9d:66:15:df:27:26:52:69:f0:a3:4c:39:82:96:7e:19:06:66: fa:66:d3:9b:21:a2:4d:13:22:83:1f:cc:86:05:bb:fd:7c:43: ea:2d:29:96:f4:8f:3f:2d:21:c7:1d:77:a5:86:dc:e8:16:f0: c1:4a:83:5a:f2:fa:68:f4:51:6a:95:b4:e7:a4:df:2d:8e:74: 67:2e:ff:9b:85:4a:15:a7:0a:d4:ae:bb:41:3b:9e:c8:fd:8f: e1:8c:00:fe:94:e7:3e:dd:39:4b:e6:b5:26:d2:80:7a:0f:6c: ae:45:18:dd:41:01:fb:1c:c5:74:cc:9f:bb:8f:09:e5:40:9a: 17:5f:bc:b9:ff:04:c7:0a:57:92:68:74:3a:84:15:cc:76:24: 1d:36:73:db:fa:c2:94:c2:cb:aa:5e:88:ee:0a:22:70:2f:2d: 0d:fe:64:d9:ca:b2:0e:b8:eb:11:40:8f:b2:1e:df:3e:68:41: 7a:da:22:bf:fd:52:ed:bc:08:b3:da:9f:a9:d0:24:1f:e2:f2: 9f:9d:73:3b:18:eb:b0:d3:1b:e6:ae:eb:06:62:4b:23:9c:66: 54:2a:4e:dd:69:cf:aa:7d:db:d8:9e:1b:5c:51:e4:26:43:ce: 1e:ed:98:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrNcaGGE1BoTPPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk NWI2MjZkZGItY2Q0ZS00MjJmLTk1MWQtMjVlYjg1OWRlNTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvdKml/FuEi4Lt4DMy0ARWYhVrLrnRAvhL4N AMGUWlde3mhEBAgFAXpMkzAbtokOF5OKx9EPe+RAyZ5S1uZYU0qhabev7eoipa7W e17duVCu86t3nMSdMZXV+deSoMia5vYwbrFZWTQVq8NUp08kcQI8lNG17WDxcjBl nROoseyJl6soNJdTC6ABi7PRp5PyL9s6943LvCTaEuoLny1rtm7b0Hcsw4HpoeXV I2IZpJptA3bVG3sJTa3MhLOmDygivMWso35/uNO4svXbFcEhAzB4p1tRm8KqYp/L Xxr/vmAKhnoYRxGSQOSSHGY3BfEUVhYzQQfcFJt+ULCpGXddxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfVkDEC6Rnm2v8s/yt9Alz0OpOjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvNTIyMTU1NzctYTU5MS0z ZTYyLWI0MzgtZmYwOGIxYmJhOWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0cEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfrcporDllDGkduFxQHLrxmb51mFd8nJlJp8KNMOYKWfhkGZvpm05sh ok0TIoMfzIYFu/18Q+otKZb0jz8tIccdd6WG3OgW8MFKg1ry+mj0UWqVtOek3y2O dGcu/5uFShWnCtSuu0E7nsj9j+GMAP6U5z7dOUvmtSbSgHoPbK5FGN1BAfscxXTM n7uPCeVAmhdfvLn/BMcKV5JodDqEFcx2JB02c9v6wpTCy6peiO4KInAvLQ3+ZNnK sg646xFAj7Ie3z5oQXraIr/9Uu28CLPan6nQJB/i8p+dczsY67DTG+au6wZiSyOc ZlQqTt1pz6p929ieG1xR5CZDzh7tmIQ= -----END CERTIFICATE-----Generated at Mon Oct 20 13:54:40 2025 by rpki-client