$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/d60bda9b-5558-3804-a4dc-7ef1d9647130.roa File: d60bda9b-5558-3804-a4dc-7ef1d9647130.roa (raw, json) Hash identifier: sSk1dL6x4r8Za6qTMpNuGI07PIwXc/ovexxETXfFVSc= Subject key identifier: 4F:4B:60:0A:71:0D:CD:35:8C:7C:FA:DA:8E:71:2C:D0:90:E0:7C:17 Certificate issuer: /CN=945a7f76-bce3-4d85-a81e-c84df8d5197a Certificate serial: 010D0C9F4328584B37149E12B399826A19E96380 Authority key identifier: C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/d60bda9b-5558-3804-a4dc-7ef1d9647130.roa Signing time: Tue 16 Sep 2025 15:58:42 +0000 ROA not before: Tue 16 Sep 2025 15:58:42 +0000 ROA not after: Mon 15 Dec 2025 16:58:42 +0000 asID: 394195 IP address blocks: 209.140.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:37:14:9e:12:b3:99:82:6a:19:e9:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=945a7f76-bce3-4d85-a81e-c84df8d5197a Validity Not Before: Sep 16 15:58:42 2025 GMT Not After : Dec 15 16:58:42 2025 GMT Subject: CN=1472f878-3c50-43e1-aec7-c0c3f991e5af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ed:ca:2b:66:60:92:8a:89:97:cc:45:30:7b: 65:0f:ab:2a:41:c4:15:6f:dd:51:de:cb:95:61:6f: 5f:fc:7b:72:a0:0a:11:a4:6a:25:1e:5e:d1:ee:9a: 93:4a:84:c8:2c:74:74:9f:82:85:3e:07:c4:5a:62: 8b:bb:d8:4c:71:6d:95:0c:1a:b1:df:67:c5:18:7d: 3f:4e:6d:48:d8:ce:56:ca:1a:be:f6:df:87:96:77: b2:d9:3e:fa:3b:34:f2:f4:54:74:38:f3:6b:92:53: 65:aa:61:65:ef:e3:9b:89:5b:ad:00:f2:c5:c9:c7: 9d:ad:20:29:7f:da:7e:82:ab:72:13:d2:f6:22:51: b2:e5:1e:21:d5:e8:18:c2:7c:07:9c:6c:c9:33:d0: 6e:16:a3:31:d1:d5:b4:46:80:91:a7:da:6c:49:2b: 6f:6b:70:6a:fc:49:ec:09:48:cd:b8:c3:fc:a6:4e: d2:76:6a:d9:ff:ce:1d:8b:3a:05:68:66:e5:26:d1: 03:bc:af:fc:08:7e:7d:21:c8:cc:0c:b0:79:53:88: 78:ad:7b:c0:e1:2f:aa:56:7a:1b:0c:64:cb:bd:54: 6b:6c:75:1d:d9:eb:70:77:0f:74:dc:8b:cc:4c:77: de:f0:cf:e5:f2:15:49:65:07:a6:52:7b:dc:d2:52: 3b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:4B:60:0A:71:0D:CD:35:8C:7C:FA:DA:8E:71:2C:D0:90:E0:7C:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/d60bda9b-5558-3804-a4dc-7ef1d9647130.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl X509v3 Authority Key Identifier: keyid:C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer sbgp-ipAddrBlock: critical IPv4: 209.140.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:e5:d2:44:c5:bc:c3:4b:9f:7a:f7:06:a4:a1:d5:89:2d:c6: 3e:20:aa:10:57:8f:60:f7:78:1c:fe:78:34:50:7c:48:03:08: 5e:cc:06:0d:6a:68:85:67:f7:46:25:f7:58:9a:20:e7:62:66: d0:a2:1b:e7:1d:ae:1d:15:5e:a1:80:0f:13:cc:97:04:68:26: 27:02:cb:82:77:db:b5:17:89:fb:0b:1b:b7:b6:c5:2a:59:ea: b2:17:9c:b6:f1:04:ac:d0:81:09:6b:49:09:56:42:37:19:c8: ed:ba:f4:77:96:1c:99:e6:46:fe:37:92:d8:a0:56:13:c2:94: 41:9a:9c:3a:de:83:8f:7d:94:b1:99:75:e2:e0:58:de:d0:73: 6c:20:ad:d6:76:98:9a:7c:93:ef:8a:73:4c:12:8f:f4:1e:c9: 3d:9f:5e:21:49:60:6d:69:ff:15:d8:ae:be:c2:93:c0:e8:60: 33:29:11:4f:2b:d5:1b:ca:5e:6d:c7:0d:b0:50:08:2c:ad:4b: 02:b1:7a:a9:dc:e2:5e:da:af:08:13:a7:de:36:27:01:9a:ee: 5b:b9:f8:4b:bb:43:5a:24:de:ea:8e:56:39:33:a3:8a:16:d1: 3b:36:df:8e:ca:01:f6:30:7f:d5:48:3e:f6:23:fc:cb:d4:15: 6f:0c:72:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs3FJ4Ss5mCahnpY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1YTdmNzYtYmNlMy00ZDg1LWE4MWUtYzg0ZGY4ZDUx OTdhMB4XDTI1MDkxNjE1NTg0MloXDTI1MTIxNTE2NTg0MlowLzEtMCsGA1UEAxMk MTQ3MmY4NzgtM2M1MC00M2UxLWFlYzctYzBjM2Y5OTFlNWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju3KK2ZgkoqJl8xFMHtlD6sqQcQVb91R3suV YW9f/HtyoAoRpGolHl7R7pqTSoTILHR0n4KFPgfEWmKLu9hMcW2VDBqx32fFGH0/ Tm1I2M5Wyhq+9t+Hlney2T76OzTy9FR0OPNrklNlqmFl7+ObiVutAPLFycedrSAp f9p+gqtyE9L2IlGy5R4h1egYwnwHnGzJM9BuFqMx0dW0RoCRp9psSStva3Bq/Ens CUjNuMP8pk7SdmrZ/84dizoFaGblJtEDvK/8CH59IcjMDLB5U4h4rXvA4S+qVnob DGTLvVRrbHUd2etwdw903IvMTHfe8M/l8hVJZQemUnvc0lI7IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9LYApxDc01jHz62o5xLNCQ4HwXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NDVh N2Y3Ni1iY2UzLTRkODUtYTgxZS1jODRkZjhkNTE5N2EvZDYwYmRhOWItNTU1OC0z ODA0LWE0ZGMtN2VmMWQ5NjQ3MTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTQ1YTdmNzYtYmNlMy00ZDg1LWE4 MWUtYzg0ZGY4ZDUxOTdhLzk0NWE3Zjc2LWJjZTMtNGQ4NS1hODFlLWM4NGRmOGQ1 MTk3YS5jcmwwHwYDVR0jBBgwFoAUycbekH+3MjHBmmelTWkcFSB9dfAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NDVhN2Y3Ni1iY2UzLTRkODUtYTgxZS1jODRk ZjhkNTE5N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YwDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjl0kTFvMNLn3r3BqSh1Yktxj4gqhBXj2D3eBz+eDRQfEgDCF7MBg1q aIVn90Yl91iaIOdiZtCiG+cdrh0VXqGADxPMlwRoJicCy4J327UXifsLG7e2xSpZ 6rIXnLbxBKzQgQlrSQlWQjcZyO269HeWHJnmRv43ktigVhPClEGanDreg499lLGZ deLgWN7Qc2wgrdZ2mJp8k++Kc0wSj/QeyT2fXiFJYG1p/xXYrr7Ck8DoYDMpEU8r 1RvKXm3HDbBQCCytSwKxeqnc4l7arwgTp942JwGa7lu5+Eu7Q1ok3uqOVjkzo4oW 0Ts2347KAfYwf9VIPvYj/MvUFW8Mchc= -----END CERTIFICATE-----Generated at Mon Oct 20 21:11:18 2025 by rpki-client