$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4e676a00-dad3-3ddc-a5c2-e12299dbc680.roa File: 4e676a00-dad3-3ddc-a5c2-e12299dbc680.roa (raw, json) Hash identifier: ceH3lqoLkQnZcwFiPvIgQ24QvxnGSO2YFfS+Gt9PoWc= Subject key identifier: 04:98:23:CE:E7:8B:8D:63:F3:41:51:B6:D9:4F:0F:92:31:31:A4:84 Certificate issuer: /CN=4a1bda30-5045-4ded-bf47-7fd03a594092 Certificate serial: 010D0C9F4328584B80B75436731685C11C7A0680 Authority key identifier: 83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4e676a00-dad3-3ddc-a5c2-e12299dbc680.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 7029 IP address blocks: 209.166.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:54:36:73:16:85:c1:1c:7a:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a1bda30-5045-4ded-bf47-7fd03a594092 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=e29f4557-5e11-40ab-bb47-803712b79383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:35:bb:64:30:43:e0:8e:7e:e3:3c:5a:81:ba: 07:0e:6d:9e:a0:e2:bb:dd:9f:c0:e7:99:5b:da:72: c3:1a:3b:95:54:10:1b:df:f6:25:02:aa:50:32:6b: c3:3e:a1:b1:09:84:8f:54:e5:2c:9d:42:9d:06:ec: 47:cd:d4:4b:78:c5:2e:67:59:5d:33:7c:b3:22:b0: 17:d2:c1:89:7e:04:ea:2a:f8:53:67:77:96:ff:62: da:5e:90:95:44:1a:01:18:3f:92:8a:8b:09:de:cb: e7:bb:74:a0:1c:89:52:53:36:4c:37:6d:e6:a8:19: 7b:43:ea:58:8c:d4:71:3b:31:56:29:72:95:b3:f1: da:5a:71:39:b6:6b:47:60:fc:3b:c0:a9:f2:06:0a: 9b:aa:6e:8e:bf:02:a4:6b:ca:48:84:31:67:f8:47: e6:60:f7:ea:91:df:f3:ec:e1:4a:28:7c:f1:a5:6d: b3:6d:eb:43:37:43:04:83:7b:0b:1f:ab:f1:c4:e5: 29:1c:14:72:8e:6e:c8:ed:8d:fc:e7:76:de:a2:3c: 77:35:3e:e6:18:32:21:40:a7:6a:a4:23:d8:08:22: 02:48:44:59:0a:7e:95:73:64:57:bf:70:64:e2:fc: 8e:06:f6:6a:45:12:d0:9a:4f:6e:70:0d:02:97:5c: ee:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:98:23:CE:E7:8B:8D:63:F3:41:51:B6:D9:4F:0F:92:31:31:A4:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4e676a00-dad3-3ddc-a5c2-e12299dbc680.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl X509v3 Authority Key Identifier: keyid:83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer sbgp-ipAddrBlock: critical IPv4: 209.166.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:ff:40:b1:51:0e:cd:96:fa:e9:81:c3:87:94:a4:91:45:2b: eb:47:4e:f9:ef:d0:38:56:c2:38:bd:bd:d5:9a:ac:b8:0b:a7: 39:7c:1d:33:3d:a8:63:bd:17:4a:99:bf:06:25:e3:ef:79:8e: 36:1d:69:f2:f0:12:05:de:c7:36:4e:76:69:45:24:94:53:29: 7f:f6:45:99:63:0d:9e:27:5c:f4:4e:7e:a1:12:c9:16:3b:8d: 9e:c6:b1:e8:37:dc:76:8b:cf:e0:09:4b:00:b7:e1:96:f8:4d: 50:75:e8:34:05:f2:10:23:4f:d3:1b:59:9f:0f:38:80:ee:90: ff:32:71:2e:70:40:15:c8:8a:fb:4c:72:2c:cd:09:15:52:f8: 98:bb:08:2d:ab:db:dd:20:54:e0:d3:1d:ff:6a:c7:fe:33:b8: ca:9a:38:f1:1e:d5:3f:58:d1:eb:46:e6:95:29:16:9b:72:27: 61:84:37:f5:b7:d8:0f:45:39:df:d4:21:d9:e4:d6:15:07:ca: 17:19:c8:cc:c6:f5:f5:04:6d:e5:8c:6c:68:f0:c8:22:c3:6d: 6c:ca:27:bd:3e:65:3f:ff:f2:3d:ca:7d:a7:f3:d2:9a:4b:7b: da:29:35:e5:75:11:ca:35:09:be:b7:f4:f8:09:20:4c:72:95: 5d:82:99:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt1Q2cxaFwRx6BoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGExYmRhMzAtNTA0NS00ZGVkLWJmNDctN2ZkMDNhNTk0 MDkyMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk ZTI5ZjQ1NTctNWUxMS00MGFiLWJiNDctODAzNzEyYjc5MzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizW7ZDBD4I5+4zxagboHDm2eoOK73Z/A55lb 2nLDGjuVVBAb3/YlAqpQMmvDPqGxCYSPVOUsnUKdBuxHzdRLeMUuZ1ldM3yzIrAX 0sGJfgTqKvhTZ3eW/2LaXpCVRBoBGD+SiosJ3svnu3SgHIlSUzZMN23mqBl7Q+pY jNRxOzFWKXKVs/HaWnE5tmtHYPw7wKnyBgqbqm6OvwKka8pIhDFn+EfmYPfqkd/z 7OFKKHzxpW2zbetDN0MEg3sLH6vxxOUpHBRyjm7I7Y3853beojx3NT7mGDIhQKdq pCPYCCICSERZCn6Vc2RXv3Bk4vyOBvZqRRLQmk9ucA0Cl1zuQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASYI87ni41j80FRttlPD5IxMaSEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YTFi ZGEzMC01MDQ1LTRkZWQtYmY0Ny03ZmQwM2E1OTQwOTIvNGU2NzZhMDAtZGFkMy0z ZGRjLWE1YzItZTEyMjk5ZGJjNjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGExYmRhMzAtNTA0NS00ZGVkLWJm NDctN2ZkMDNhNTk0MDkyLzRhMWJkYTMwLTUwNDUtNGRlZC1iZjQ3LTdmZDAzYTU5 NDA5Mi5jcmwwHwYDVR0jBBgwFoAUg9WJsYZCUYnHW+3xTeETLIiJodYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YTFiZGEzMC01MDQ1LTRkZWQtYmY0Ny03ZmQw M2E1OTQwOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0abAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALP/QLFRDs2W+umBw4eUpJFFK+tHTvnv0DhWwji9vdWarLgLpzl8HTM9 qGO9F0qZvwYl4+95jjYdafLwEgXexzZOdmlFJJRTKX/2RZljDZ4nXPROfqESyRY7 jZ7Gseg33HaLz+AJSwC34Zb4TVB16DQF8hAjT9MbWZ8POIDukP8ycS5wQBXIivtM cizNCRVS+Ji7CC2r290gVODTHf9qx/4zuMqaOPEe1T9Y0etG5pUpFptyJ2GEN/W3 2A9FOd/UIdnk1hUHyhcZyMzG9fUEbeWMbGjwyCLDbWzKJ70+ZT//8j3Kfafz0ppL e9opNeV1Eco1Cb639PgJIExylV2Cmc4= -----END CERTIFICATE-----Generated at Mon Oct 20 10:23:20 2025 by rpki-client