$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/c8effb7c-3ff5-367a-9768-2bfe031beb26.roa File: c8effb7c-3ff5-367a-9768-2bfe031beb26.roa (raw, json) Hash identifier: 9Jr2XyjB8ZYLmyLxk5qahu/SNx9Yw2PowASo0kWu0eQ= Subject key identifier: 8D:0F:67:E2:F9:98:E7:A3:A6:AB:AF:C9:0B:12:59:77:8D:69:01:52 Certificate issuer: /CN=f4f85718-cda0-442f-9727-709a536e1e27 Certificate serial: 010D0C9F4328584B8EACC3E64A0FD9A10086EA40 Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/c8effb7c-3ff5-367a-9768-2bfe031beb26.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 6639 IP address blocks: 209.27.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:c3:e6:4a:0f:d9:a1:00:86:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=504cf2ea-46b1-41e5-87cf-8c9ee48c99e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:89:55:17:b3:d7:3d:04:50:7b:de:9f:d3:61: d2:36:7c:1d:20:8d:2d:b4:c4:0b:3f:21:b6:84:4b: cd:e3:e6:32:4b:4b:74:46:ad:ff:c5:49:02:60:11: 09:1f:8a:71:62:3a:1d:cf:70:d0:6c:15:72:4a:14: bc:a6:0e:f2:d1:f8:6b:33:52:ed:bd:37:1d:df:02: 53:35:b9:cc:aa:df:da:2a:73:93:a1:ac:60:10:bf: 49:68:d3:e1:42:bd:c0:77:0e:c7:e9:bf:26:c0:0c: 67:cf:e5:a7:df:13:a0:36:02:23:5e:db:a5:3a:ff: 5a:16:91:33:ef:16:92:3c:41:20:35:8d:c2:1e:87: 88:7d:aa:57:da:3d:76:a4:60:b8:ed:a2:cb:b0:f3: ca:09:be:ba:a8:fc:38:db:bf:61:70:2d:71:32:b6: 7f:0a:71:09:3a:4e:df:3f:06:95:73:5b:5a:1c:db: 96:03:30:ac:8a:89:3e:c9:c1:ce:43:d3:5a:ef:71: ea:c6:d9:45:e5:b4:41:28:a5:22:0a:e5:34:8e:81: 66:4c:f5:8d:08:4a:83:27:62:6f:fc:c5:c1:99:20: 32:be:15:87:8d:36:90:cf:7a:46:6d:e9:ab:1c:66: 3b:67:b7:33:a2:d5:85:df:73:49:ef:94:98:46:85: 19:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0F:67:E2:F9:98:E7:A3:A6:AB:AF:C9:0B:12:59:77:8D:69:01:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/c8effb7c-3ff5-367a-9768-2bfe031beb26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl X509v3 Authority Key Identifier: keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer sbgp-ipAddrBlock: critical IPv4: 209.27.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:e4:92:6e:0b:df:10:a1:bb:6d:84:4b:9c:90:3d:60:fd:54: 04:23:3b:8a:45:c3:be:3c:e1:27:ba:43:25:80:bc:36:38:1e: 35:14:84:fc:b0:11:6d:0f:a4:6e:7f:76:17:6d:17:9c:ca:f8: 54:9d:23:2b:0f:fa:2a:8a:c7:18:6a:06:01:da:f1:85:a1:b4: e4:8a:c3:18:68:1b:1e:59:1e:12:c8:aa:24:72:16:9b:e3:f3: 96:cd:36:34:a5:db:40:d1:85:5f:e7:4f:b9:7a:2e:5c:a1:5c: 5a:e6:cf:ca:18:42:12:d5:cf:2a:03:a3:eb:5e:c4:99:84:69: b4:db:bb:22:f8:3c:0b:f9:63:13:3a:be:e1:35:c5:bc:a4:06: 08:05:2e:66:2e:df:77:31:a3:f9:6b:d9:02:d1:ed:df:b0:03: e4:e8:45:e0:12:3c:a9:6f:5c:83:a3:3e:23:0b:d9:77:d9:96: 21:19:89:84:fc:85:a7:ed:5c:cb:78:b6:90:da:6c:29:87:06: 1a:79:06:e5:64:5b:5d:0f:8c:fb:c3:ea:ac:ef:be:12:e0:32: a1:3b:b2:a2:f4:e9:58:a7:be:a5:01:5f:56:47:59:6f:a3:63: 5e:ef:45:f4:05:59:4f:1c:1f:f1:2b:fc:40:44:6e:2d:68:c4: 26:61:de:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrMPmSg/ZoQCG6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRmODU3MTgtY2RhMC00NDJmLTk3MjctNzA5YTUzNmUx ZTI3MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk NTA0Y2YyZWEtNDZiMS00MWU1LTg3Y2YtOGM5ZWU0OGM5OWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYlVF7PXPQRQe96f02HSNnwdII0ttMQLPyG2 hEvN4+YyS0t0Rq3/xUkCYBEJH4pxYjodz3DQbBVyShS8pg7y0fhrM1LtvTcd3wJT NbnMqt/aKnOToaxgEL9JaNPhQr3Adw7H6b8mwAxnz+Wn3xOgNgIjXtulOv9aFpEz 7xaSPEEgNY3CHoeIfapX2j12pGC47aLLsPPKCb66qPw4279hcC1xMrZ/CnEJOk7f PwaVc1taHNuWAzCsiok+ycHOQ9Na73HqxtlF5bRBKKUiCuU0joFmTPWNCEqDJ2Jv /MXBmSAyvhWHjTaQz3pGbemrHGY7Z7czotWF33NJ75SYRoUZ0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0PZ+L5mOejpquvyQsSWXeNaQFSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4 NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlhNTM2ZTFlMjcvYzhlZmZiN2MtM2ZmNS0z NjdhLTk3NjgtMmJmZTAzMWJlYjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjRmODU3MTgtY2RhMC00NDJmLTk3 MjctNzA5YTUzNmUxZTI3L2Y0Zjg1NzE4LWNkYTAtNDQyZi05NzI3LTcwOWE1MzZl MWUyNy5jcmwwHwYDVR0jBBgwFoAUa2/guyMG6CGl/y1Pb59cNa87Qn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlh NTM2ZTFlMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Rs8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHkkm4L3xChu22ES5yQPWD9VAQjO4pFw7484Se6QyWAvDY4HjUUhPyw EW0PpG5/dhdtF5zK+FSdIysP+iqKxxhqBgHa8YWhtOSKwxhoGx5ZHhLIqiRyFpvj 85bNNjSl20DRhV/nT7l6LlyhXFrmz8oYQhLVzyoDo+texJmEabTbuyL4PAv5YxM6 vuE1xbykBggFLmYu33cxo/lr2QLR7d+wA+ToReASPKlvXIOjPiML2XfZliEZiYT8 haftXMt4tpDabCmHBhp5BuVkW10PjPvD6qzvvhLgMqE7sqL06VinvqUBX1ZHWW+j Y17vRfQFWU8cH/Er/EBEbi1oxCZh3i0= -----END CERTIFICATE-----Generated at Mon Oct 20 20:18:19 2025 by rpki-client