$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/17ca897d-f383-3f1b-bf22-e3cd1afc8618.roa File: 17ca897d-f383-3f1b-bf22-e3cd1afc8618.roa (raw, json) Hash identifier: DTcm9mKWrvu9R2sCg+S5+67ApCO19aYE5DxkOR9mn/Y= Subject key identifier: 84:9B:91:58:A3:1C:0D:DA:A3:9B:22:BF:E2:C8:35:E9:97:FD:02:52 Certificate issuer: /CN=9e36a683-142b-41cd-932c-e115603de431 Certificate serial: 010D0C9F4328584B84E7777DEE2C2736D25A9100 Authority key identifier: 5B:80:E2:B1:A5:A1:53:32:EC:8B:61:F2:F9:99:5D:66:E3:D0:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/17ca897d-f383-3f1b-bf22-e3cd1afc8618.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16509 IP address blocks: 209.163.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/9e36a683-142b-41cd-932c-e115603de431.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/9e36a683-142b-41cd-932c-e115603de431.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:77:7d:ee:2c:27:36:d2:5a:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e36a683-142b-41cd-932c-e115603de431 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=e2c9714a-193d-4933-8f4b-15b3a78a6cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1d:72:93:0d:e1:b5:74:d8:fd:42:8a:e5:9b: 75:2b:2d:fd:e3:73:6f:c6:60:e8:99:93:a3:cb:67: bd:81:ef:af:da:13:18:ec:bb:02:8f:9b:77:80:fb: 68:cb:69:6c:ae:ad:35:d8:08:86:ff:66:83:61:32: 88:8b:ed:2c:33:6e:71:73:a8:88:ed:3e:1a:19:7b: 1c:b6:f4:79:79:44:4d:fa:cc:60:b5:b0:a5:59:41: a4:31:c6:93:af:be:85:d6:38:8b:fc:f4:b4:b2:93: 0a:dc:86:98:01:09:38:ee:21:5b:1e:b2:3d:0e:99: 97:49:0d:09:5f:4c:bb:d7:c7:4f:94:cf:cf:3d:0d: d7:6d:8b:24:8c:8a:5f:69:78:a9:d3:02:8a:42:d4: b1:82:55:8f:d7:5b:9c:e5:63:97:69:c8:92:0a:95: 43:a5:0e:0f:6e:58:1e:50:ac:f1:02:08:48:ff:28: 82:ab:8f:b6:ee:b1:19:31:ca:b4:75:8a:4a:43:93: d3:7f:09:34:62:79:bc:61:af:76:d5:00:46:0e:3e: 1b:29:9a:79:2d:1e:d8:94:71:91:af:07:ec:94:09: 15:9e:97:3f:4b:c3:22:3d:ba:a1:20:d1:ae:05:73: 98:34:6c:40:d1:f4:c3:a4:08:90:06:9c:57:b3:1e: 46:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:9B:91:58:A3:1C:0D:DA:A3:9B:22:BF:E2:C8:35:E9:97:FD:02:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/17ca897d-f383-3f1b-bf22-e3cd1afc8618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431/9e36a683-142b-41cd-932c-e115603de431.crl X509v3 Authority Key Identifier: keyid:5B:80:E2:B1:A5:A1:53:32:EC:8B:61:F2:F9:99:5D:66:E3:D0:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9e36a683-142b-41cd-932c-e115603de431.cer sbgp-ipAddrBlock: critical IPv4: 209.163.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:7f:00:ae:a7:aa:fd:a1:e1:68:3f:a5:a4:a9:bf:d3:08:57: 54:97:46:0e:d0:02:46:eb:86:7a:66:85:66:6c:52:78:67:d0: b4:77:92:17:22:3e:08:24:e9:35:9e:cc:9e:7a:c9:0d:e5:fb: 16:e9:89:da:2e:8d:3d:eb:eb:5f:24:1d:63:42:b1:ac:56:a1: f0:e9:4e:30:32:4e:8c:66:44:68:db:11:36:8c:c3:72:00:62: 08:e3:46:ee:57:20:96:a1:20:1c:93:31:4b:57:2c:58:e6:f5: 62:5f:dd:3b:33:80:cb:96:2d:66:ce:28:e1:18:f8:2b:e7:ca: 9e:5b:82:59:ac:c1:00:9c:95:2d:02:4e:78:ab:5d:d1:77:32: 75:92:f3:2c:96:78:f0:5a:c0:27:9a:d0:cf:52:45:d0:50:ac: 63:35:12:28:54:99:53:67:9d:3b:d5:2f:4e:0e:88:48:8a:c7: 91:3e:0e:f0:72:0d:63:31:52:73:2f:83:b7:f0:ee:a2:3d:da: 03:1b:e7:72:00:c8:c1:e1:e6:b5:39:48:cf:a7:6d:7b:00:a0: 23:b0:7c:68:c0:a8:96:8e:3a:f4:63:13:f0:7a:43:03:40:0f: 5d:a2:c8:23:d1:89:b3:cf:27:bc:b4:c4:69:4e:6e:64:c0:1e: cb:21:6e:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53d97iwnNtJakQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWUzNmE2ODMtMTQyYi00MWNkLTkzMmMtZTExNTYwM2Rl NDMxMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ZTJjOTcxNGEtMTkzZC00OTMzLThmNGItMTViM2E3OGE2Y2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxh1ykw3htXTY/UKK5Zt1Ky3943NvxmDomZOj y2e9ge+v2hMY7LsCj5t3gPtoy2lsrq012AiG/2aDYTKIi+0sM25xc6iI7T4aGXsc tvR5eURN+sxgtbClWUGkMcaTr76F1jiL/PS0spMK3IaYAQk47iFbHrI9DpmXSQ0J X0y718dPlM/PPQ3XbYskjIpfaXip0wKKQtSxglWP11uc5WOXaciSCpVDpQ4Pblge UKzxAghI/yiCq4+27rEZMcq0dYpKQ5PTfwk0Ynm8Ya921QBGDj4bKZp5LR7YlHGR rwfslAkVnpc/S8MiPbqhINGuBXOYNGxA0fTDpAiQBpxXsx5GiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISbkVijHA3ao5siv+LINemX/QJSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZTM2 YTY4My0xNDJiLTQxY2QtOTMyYy1lMTE1NjAzZGU0MzEvMTdjYTg5N2QtZjM4My0z ZjFiLWJmMjItZTNjZDFhZmM4NjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWUzNmE2ODMtMTQyYi00MWNkLTkz MmMtZTExNTYwM2RlNDMxLzllMzZhNjgzLTE0MmItNDFjZC05MzJjLWUxMTU2MDNk ZTQzMS5jcmwwHwYDVR0jBBgwFoAUW4DisaWhUzLsi2Hy+ZldZuPQAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZTM2YTY4My0xNDJiLTQxY2QtOTMyYy1lMTE1 NjAzZGU0MzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADd/AK6nqv2h4Wg/paSpv9MIV1SXRg7QAkbrhnpmhWZsUnhn0LR3khci Pggk6TWezJ56yQ3l+xbpidoujT3r618kHWNCsaxWofDpTjAyToxmRGjbETaMw3IA YgjjRu5XIJahIByTMUtXLFjm9WJf3TszgMuWLWbOKOEY+Cvnyp5bglmswQCclS0C TnirXdF3MnWS8yyWePBawCea0M9SRdBQrGM1EihUmVNnnTvVL04OiEiKx5E+DvBy DWMxUnMvg7fw7qI92gMb53IAyMHh5rU5SM+nbXsAoCOwfGjAqJaOOvRjE/B6QwNA D12iyCPRibPPJ7y0xGlObmTAHsshbgs= -----END CERTIFICATE-----Generated at Mon Oct 20 18:15:52 2025 by rpki-client