$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d457298-219e-3e90-89b1-52e86145a151.roa File: 0d457298-219e-3e90-89b1-52e86145a151.roa (raw, json) Hash identifier: AFGE7nQ1Za5LWL5f5C41qMSAvMMwK6OUdBxgzOngWhk= Subject key identifier: E3:ED:4E:C1:EC:52:75:9E:22:F8:8C:C3:A4:23:E4:4B:F2:3F:15:B9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B4D11DBD275062C4493CE6000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d457298-219e-3e90-89b1-52e86145a151.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 32787 IP address blocks: 209.200.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:db:d2:75:06:2c:44:93:ce:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=9efb31f4-e098-4d2f-a978-bc949e714702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:10:62:7e:8d:97:1b:72:3b:05:cc:ed:40:45: 88:7b:53:a6:14:05:d9:ee:d3:b5:80:9c:0d:82:83: dd:57:3a:ce:ee:d9:78:ca:1e:34:40:95:44:d7:7b: a8:f4:38:7a:10:55:9d:cf:03:17:36:61:a4:76:59: a2:c7:68:5c:b4:cb:ca:e6:03:da:5c:4f:66:13:90: 6d:aa:0c:4e:55:ec:70:3a:04:ee:e7:1a:4f:30:2b: a4:71:63:4a:8c:2a:cf:42:6f:3b:e2:7c:06:56:f2: c8:a0:3c:20:5d:8c:29:35:56:b7:c9:a2:d0:10:e7: a9:42:0b:9f:9e:0e:a2:fc:ef:c8:d5:82:96:32:bf: 5d:69:32:a0:0a:af:a4:35:18:9a:fe:aa:4f:eb:91: 07:d4:22:6a:e7:a3:ac:29:f1:7d:8a:13:0d:5c:8f: 48:80:5c:3b:97:33:6a:11:9a:ba:cf:6b:4f:ac:f2: 36:fc:f0:7e:a9:71:89:71:ed:ab:ca:2c:c0:d7:af: f8:05:6b:89:b6:0f:fc:e9:3c:34:e8:d3:38:13:4b: c7:2e:42:15:2b:92:c2:b7:67:d9:08:8a:8a:a1:b0: d0:af:e7:55:8f:aa:af:30:9c:fa:11:1f:0f:c1:c0: 42:18:2d:3b:49:cc:45:7b:80:2e:19:8d:21:3f:68: 98:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:ED:4E:C1:EC:52:75:9E:22:F8:8C:C3:A4:23:E4:4B:F2:3F:15:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0d457298-219e-3e90-89b1-52e86145a151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:a1:0d:ef:f3:74:9b:6f:23:6f:82:2a:ed:10:20:df:5f:ef: f2:8f:48:31:ad:1c:05:85:a1:b4:80:38:dd:3e:64:ab:ad:18: e9:cd:93:ff:67:55:5d:c2:5f:24:03:6e:67:5f:ca:03:0f:ba: 14:ae:50:c9:f3:3a:61:e9:cc:55:2a:47:68:e5:c8:8d:35:52: 5c:ed:6f:4d:d1:30:8d:d3:27:63:2f:e4:06:34:81:7a:64:f1: 5a:0d:21:cf:d5:4a:fe:03:f1:db:a2:90:de:c7:ab:44:7d:c3: 97:8c:f9:b7:dc:59:1f:ca:a3:c4:f3:97:64:0b:1d:88:15:6f: 9e:35:f7:17:cd:30:db:7a:8e:6d:03:65:0e:e4:4c:07:46:a4: cc:f1:e5:d8:93:aa:71:ab:17:cd:7b:79:c6:fd:70:dd:e5:6b: 93:cb:70:ab:3f:b6:0d:9a:2c:84:3e:3a:86:a4:a1:d2:4f:bc: 1e:7d:9d:24:f5:63:8c:87:a6:ac:0f:3f:36:41:22:3f:e9:88: 79:bf:1c:9d:58:2f:4c:c9:06:4f:57:12:fb:32:84:b4:2b:19: d7:03:be:90:1f:41:45:3b:1d:39:3d:4f:a9:0c:12:9b:5b:a0: 8f:55:b9:c5:ec:99:8d:1e:66:65:4e:bc:d3:a6:96:93:5e:38: d5:30:41:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEdvSdQYsRJPOYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk OWVmYjMxZjQtZTA5OC00ZDJmLWE5NzgtYmM5NDllNzE0NzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxBifo2XG3I7BcztQEWIe1OmFAXZ7tO1gJwN goPdVzrO7tl4yh40QJVE13uo9Dh6EFWdzwMXNmGkdlmix2hctMvK5gPaXE9mE5Bt qgxOVexwOgTu5xpPMCukcWNKjCrPQm874nwGVvLIoDwgXYwpNVa3yaLQEOepQguf ng6i/O/I1YKWMr9daTKgCq+kNRia/qpP65EH1CJq56OsKfF9ihMNXI9IgFw7lzNq EZq6z2tPrPI2/PB+qXGJce2ryizA16/4BWuJtg/86Tw06NM4E0vHLkIVK5LCt2fZ CIqKobDQr+dVj6qvMJz6ER8PwcBCGC07ScxFe4AuGY0hP2iYLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPtTsHsUnWeIviMw6Qj5EvyPxW5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGQ0NTcyOTgtMjE5ZS0z ZTkwLTg5YjEtNTJlODYxNDVhMTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cirMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByhDe/zdJtvI2+CKu0QIN9f7/KPSDGtHAWFobSAON0+ZKutGOnNk/9n VV3CXyQDbmdfygMPuhSuUMnzOmHpzFUqR2jlyI01Ulztb03RMI3TJ2Mv5AY0gXpk 8VoNIc/VSv4D8duikN7Hq0R9w5eM+bfcWR/Ko8Tzl2QLHYgVb5419xfNMNt6jm0D ZQ7kTAdGpMzx5diTqnGrF817ecb9cN3la5PLcKs/tg2aLIQ+OoakodJPvB59nST1 Y4yHpqwPPzZBIj/piHm/HJ1YL0zJBk9XEvsyhLQrGdcDvpAfQUU7HTk9T6kMEptb oI9VucXsmY0eZmVOvNOmlpNeONUwQXE= -----END CERTIFICATE-----Generated at Mon Oct 20 02:12:45 2025 by rpki-client