$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/a98302e0-6fdd-34c6-ae18-5ecfece042af.roa File: a98302e0-6fdd-34c6-ae18-5ecfece042af.roa (raw, json) Hash identifier: qKIZ54HASo3tCWhu7pxqh1NdNfkUe1scuxGnErrQL4c= Subject key identifier: 28:2B:7A:BD:79:3C:65:4C:06:E5:0E:E5:CE:1B:33:35:86:47:1E:50 Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F4328584B8EACCA142604F34179795100 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/a98302e0-6fdd-34c6-ae18-5ecfece042af.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 7782 IP address blocks: 204.17.139.0/24 maxlen: 24 204.17.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:ca:14:26:04:f3:41:79:79:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=91f1f298-3dd3-40be-b226-5569529a6b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2b:e7:f3:46:d8:52:fe:7b:5f:7d:4c:0a:53: 76:22:bf:aa:ed:8a:fe:4a:dc:65:e4:ee:f9:60:a3: b6:e7:66:d0:70:4c:2c:13:11:36:66:34:db:7e:51: 76:4c:49:e8:d1:39:14:4f:0f:63:88:53:b9:75:01: db:b4:80:17:ae:3d:1a:45:72:aa:68:17:1b:e0:e6: 0a:a6:5a:90:73:fa:3a:73:0f:a2:a7:4f:36:c9:28: e3:a3:6e:24:e3:e7:c8:77:81:13:e2:04:21:aa:c9: b2:c0:e7:18:93:79:58:7d:20:91:ef:e9:85:5c:47: af:0f:eb:4a:c4:f9:a6:24:87:b1:aa:2e:56:14:c1: 5d:d9:d9:e8:09:1c:3e:07:9c:31:70:66:1a:6d:d2: a2:e3:27:50:af:b9:95:38:59:74:d3:bf:ad:39:e2: 01:c1:3b:9f:22:77:1c:03:66:2f:fb:45:08:f6:65: 8a:89:15:4d:40:dc:35:b4:48:fa:c1:0b:23:69:5f: 9f:fe:2e:69:80:96:cb:aa:ea:b1:a6:fb:c0:73:5e: cc:06:49:56:50:7f:1c:fa:00:7a:5f:de:bb:30:b1: fb:8f:52:03:d2:be:23:4e:3b:5d:6c:4d:c3:b2:ab: 7c:b4:2c:c3:22:ee:c9:77:19:52:b5:73:5a:88:82: ea:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2B:7A:BD:79:3C:65:4C:06:E5:0E:E5:CE:1B:33:35:86:47:1E:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/a98302e0-6fdd-34c6-ae18-5ecfece042af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 204.17.139.0-204.17.140.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:48:dd:41:13:ad:6b:3a:77:36:de:45:e7:d1:64:cf:94:40: f9:f3:9a:fe:a8:d8:c0:57:ec:47:c2:86:3f:92:1d:d1:fb:f3: ab:9a:9e:20:20:e9:37:99:72:80:5a:8a:19:81:0b:d2:2d:9e: 48:17:92:1a:66:22:d5:19:3a:cc:53:c2:a2:04:f6:f8:52:2f: 5e:6e:ff:b1:b6:b3:5a:51:ee:ad:1a:6d:8a:df:9f:f3:91:e4: 81:9d:1d:15:d8:ed:ea:89:26:c1:08:ea:d9:26:b5:5f:68:dd: 91:22:f9:4b:62:79:7b:00:71:13:ea:a1:f4:f7:ad:92:d4:c2: f6:ec:2e:b5:4e:ce:0b:a4:89:c0:ce:f4:6f:05:be:18:ab:d9: 23:69:bd:44:6c:ba:b8:1a:69:f1:d4:79:0a:17:8d:ef:5b:ad: d3:ff:b6:31:c5:15:6e:18:30:03:af:6d:fb:a2:b3:08:ea:79: b2:c6:ef:b1:62:d4:ca:87:78:2a:51:d8:89:e9:55:a9:b9:43: cd:19:26:e1:c6:4a:c7:1a:55:1c:7e:da:5c:da:5f:9f:4c:23: aa:0c:5a:48:58:fb:63:28:96:ac:2c:bc:f2:e0:a1:63:29:92: 1b:2f:e6:76:de:18:26:63:27:ec:2b:5d:ec:57:e3:df:3d:a0: 63:f1:a9:d1 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEuOrMoUJgTzQXl5UQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk OTFmMWYyOTgtM2RkMy00MGJlLWIyMjYtNTU2OTUyOWE2YjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmivn80bYUv57X31MClN2Ir+q7Yr+Stxl5O75 YKO252bQcEwsExE2ZjTbflF2TEno0TkUTw9jiFO5dQHbtIAXrj0aRXKqaBcb4OYK plqQc/o6cw+ip082ySjjo24k4+fId4ET4gQhqsmywOcYk3lYfSCR7+mFXEevD+tK xPmmJIexqi5WFMFd2dnoCRw+B5wxcGYabdKi4ydQr7mVOFl007+tOeIBwTufIncc A2Yv+0UI9mWKiRVNQNw1tEj6wQsjaV+f/i5pgJbLquqxpvvAc17MBklWUH8c+gB6 X967MLH7j1ID0r4jTjtdbE3Dsqt8tCzDIu7JdxlStXNaiILquwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFCgrer15PGVMBuUO5c4bMzWGRx5QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvYTk4MzAyZTAtNmZkZC0z NGM2LWFlMTgtNWVjZmVjZTA0MmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADMEYsD BADMEYwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAeEjdQROtazp3Nt5F59Fkz5RA+fOa/qjYwFfsR8KGP5Id 0fvzq5qeICDpN5lygFqKGYEL0i2eSBeSGmYi1Rk6zFPCogT2+FIvXm7/sbazWlHu rRptit+f85HkgZ0dFdjt6okmwQjq2Sa1X2jdkSL5S2J5ewBxE+qh9PetktTC9uwu tU7OC6SJwM70bwW+GKvZI2m9RGy6uBpp8dR5CheN71ut0/+2McUVbhgwA69t+6Kz COp5ssbvsWLUyod4KlHYielVqblDzRkm4cZKxxpVHH7aXNpfn0wjqgxaSFj7YyiW rCy88uChYymSGy/mdt4YJmMn7Ctd7Ffj3z2gY/Gp0Q== -----END CERTIFICATE-----Generated at Mon Oct 20 13:56:05 2025 by rpki-client