$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/c9602d06-8bc6-3bbe-95ba-a304efa8de8b.roa File: c9602d06-8bc6-3bbe-95ba-a304efa8de8b.roa (raw, json) Hash identifier: rJL9IqFsseI0L0l0FosK1g9rJfICIHyxsCDMq7Vkr8k= Subject key identifier: DB:A0:77:98:54:EB:DE:B5:EE:2D:00:FF:EA:E5:6D:8E:DD:12:74:0C Certificate issuer: /CN=4a1bda30-5045-4ded-bf47-7fd03a594092 Certificate serial: 010D0C9F4328584B95A794D95F03033188526340 Authority key identifier: 83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/c9602d06-8bc6-3bbe-95ba-a304efa8de8b.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7169 IP address blocks: 209.166.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:94:d9:5f:03:03:31:88:52:63:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a1bda30-5045-4ded-bf47-7fd03a594092 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=f5ebb217-9cdb-4814-b5fd-9b3fece1659e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e0:74:11:75:33:4c:54:4a:4f:88:81:5f:6a: d5:39:cd:21:f4:78:ba:39:10:e0:f6:73:03:fb:ad: 62:42:c9:93:41:73:15:d9:88:e1:8d:e0:31:fa:3b: 05:8b:3c:57:c8:21:fa:6c:39:2b:a9:60:97:cf:2a: db:1e:6d:92:6b:c2:0f:a1:26:2d:b1:a5:5a:96:19: ef:fd:21:ef:76:ba:28:47:6a:05:20:30:c5:8c:c3: 07:db:55:d3:0f:7f:03:83:db:10:54:70:f5:22:53: 81:da:9e:f6:b1:47:05:b7:ce:68:95:95:c5:e8:aa: 4f:b7:a4:39:60:54:14:1c:67:1d:4a:0d:29:a5:34: 4f:d3:ae:46:0d:70:ae:d4:3f:c7:e5:e7:ba:9f:76: b8:c9:af:8f:9f:4a:00:7f:20:ea:6d:42:bc:a9:e5: ad:1a:ad:d0:f4:32:13:d2:a8:76:29:cb:55:04:45: 4c:50:4e:23:72:74:e3:ee:54:d8:37:42:75:b6:15: 46:e6:ad:b7:98:eb:98:f9:da:66:f0:44:0d:c8:9b: 89:ff:d0:36:33:7e:fc:37:8d:76:fb:48:f7:9f:82: 7d:84:09:5c:97:14:62:d4:89:45:6b:94:01:d0:68: 28:f9:a3:f9:0c:33:38:3e:e6:79:45:d0:f9:16:9d: ce:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A0:77:98:54:EB:DE:B5:EE:2D:00:FF:EA:E5:6D:8E:DD:12:74:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/c9602d06-8bc6-3bbe-95ba-a304efa8de8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092/4a1bda30-5045-4ded-bf47-7fd03a594092.crl X509v3 Authority Key Identifier: keyid:83:D5:89:B1:86:42:51:89:C7:5B:ED:F1:4D:E1:13:2C:88:89:A1:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4a1bda30-5045-4ded-bf47-7fd03a594092.cer sbgp-ipAddrBlock: critical IPv4: 209.166.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:5b:7a:e0:03:ea:ac:8b:bd:17:71:32:0b:90:47:a5:7a:94: 69:66:ca:f9:58:60:bb:df:e1:b5:75:c6:6e:be:52:08:69:06: 07:44:c3:09:91:9a:30:08:c7:50:6e:9e:17:85:4c:ae:5e:3d: 76:fe:fc:b1:94:a8:2c:9d:bc:d0:aa:3a:b2:12:13:65:e1:b1: 19:9d:00:23:33:ce:67:4a:60:f9:f6:de:e1:42:4f:44:8e:7a: 74:7f:13:98:6e:01:9a:c2:5a:39:09:a7:c6:06:93:57:01:01: 4f:89:b9:8e:eb:e4:ea:d3:7f:b4:33:1c:48:bd:a4:6a:9e:97: 82:b6:e8:0b:a4:a6:69:35:4f:fc:55:ce:39:1c:2c:c7:01:f6: 7c:a9:a5:2f:a1:23:90:a0:31:28:9a:5c:59:be:9f:fa:f2:f2: b0:ce:35:64:67:99:f5:78:96:e8:f2:05:0c:41:3d:f1:44:43: 00:4e:84:d3:cd:29:89:30:d7:1a:7a:ba:57:5b:37:5f:59:ae: 84:09:cf:e4:5f:4a:26:3c:e8:e1:6f:da:ce:ee:ce:7f:f7:b2: b1:d8:4f:e8:58:e6:a3:0d:8a:0c:06:33:3b:c4:3d:b5:a0:59: b9:3e:bf:57:6a:03:79:c4:6e:ce:4e:e7:79:8d:dc:a5:34:07: fb:ed:12:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5TZXwMDMYhSY0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGExYmRhMzAtNTA0NS00ZGVkLWJmNDctN2ZkMDNhNTk0 MDkyMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZjVlYmIyMTctOWNkYi00ODE0LWI1ZmQtOWIzZmVjZTE2NTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOB0EXUzTFRKT4iBX2rVOc0h9Hi6ORDg9nMD +61iQsmTQXMV2YjhjeAx+jsFizxXyCH6bDkrqWCXzyrbHm2Sa8IPoSYtsaValhnv /SHvdrooR2oFIDDFjMMH21XTD38Dg9sQVHD1IlOB2p72sUcFt85olZXF6KpPt6Q5 YFQUHGcdSg0ppTRP065GDXCu1D/H5ee6n3a4ya+Pn0oAfyDqbUK8qeWtGq3Q9DIT 0qh2KctVBEVMUE4jcnTj7lTYN0J1thVG5q23mOuY+dpm8EQNyJuJ/9A2M378N412 +0j3n4J9hAlclxRi1IlFa5QB0Ggo+aP5DDM4PuZ5RdD5Fp3OkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNugd5hU69617i0A/+rlbY7dEnQMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YTFi ZGEzMC01MDQ1LTRkZWQtYmY0Ny03ZmQwM2E1OTQwOTIvYzk2MDJkMDYtOGJjNi0z YmJlLTk1YmEtYTMwNGVmYThkZThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGExYmRhMzAtNTA0NS00ZGVkLWJm NDctN2ZkMDNhNTk0MDkyLzRhMWJkYTMwLTUwNDUtNGRlZC1iZjQ3LTdmZDAzYTU5 NDA5Mi5jcmwwHwYDVR0jBBgwFoAUg9WJsYZCUYnHW+3xTeETLIiJodYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YTFiZGEzMC01MDQ1LTRkZWQtYmY0Ny03ZmQw M2E1OTQwOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0abAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALBbeuAD6qyLvRdxMguQR6V6lGlmyvlYYLvf4bV1xm6+UghpBgdEwwmR mjAIx1BunheFTK5ePXb+/LGUqCydvNCqOrISE2XhsRmdACMzzmdKYPn23uFCT0SO enR/E5huAZrCWjkJp8YGk1cBAU+JuY7r5OrTf7QzHEi9pGqel4K26Aukpmk1T/xV zjkcLMcB9nyppS+hI5CgMSiaXFm+n/ry8rDONWRnmfV4lujyBQxBPfFEQwBOhNPN KYkw1xp6uldbN19ZroQJz+RfSiY86OFv2s7uzn/3srHYT+hY5qMNigwGMzvEPbWg Wbk+v1dqA3nEbs5O53mN3KU0B/vtEjE= -----END CERTIFICATE-----Generated at Mon Oct 20 15:59:01 2025 by rpki-client