$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/e14e9812-67c6-3d91-835b-4bf6037ab3dc.roa File: e14e9812-67c6-3d91-835b-4bf6037ab3dc.roa (raw, json) Hash identifier: KyK6ZW436Pyfiqu4r1NFidULxtri1LGlWEjxAz5htg0= Subject key identifier: 9B:D2:7D:22:FD:45:A2:4A:A4:97:20:C8:3A:FA:32:F9:69:9A:FB:D2 Certificate issuer: /CN=de519df3-4594-450e-ac51-a7e085408381 Certificate serial: 010D0C9F4328584B66320B7ADD9C6D2304B1DD80 Authority key identifier: 59:9E:4A:47:1E:32:A7:28:11:04:CA:48:15:8C:D4:18:2D:B0:B9:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/e14e9812-67c6-3d91-835b-4bf6037ab3dc.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 9304 IP address blocks: 209.205.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/de519df3-4594-450e-ac51-a7e085408381.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/de519df3-4594-450e-ac51-a7e085408381.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:0b:7a:dd:9c:6d:23:04:b1:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de519df3-4594-450e-ac51-a7e085408381 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=3158833b-d327-4117-a14b-fa37b6fc7215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:be:fc:e7:53:76:52:a1:1d:84:f2:08:d3:55: f2:03:15:d5:c3:7a:dc:90:8e:ad:d2:d7:57:20:d4: 5c:e1:66:57:05:a5:1f:3e:19:5e:79:50:1d:c8:e6: 1f:ef:cc:f6:4b:03:fa:8c:a8:6c:58:cb:48:a7:d6: 57:e3:ca:d0:9e:92:f9:6e:88:08:a0:02:aa:7c:aa: 27:f6:05:ea:76:66:fe:63:3e:13:68:e9:1f:1e:5b: 23:19:b9:c9:5a:d4:ee:5d:13:97:8d:5a:2d:fe:90: d3:5f:cc:42:f0:c5:37:f4:56:72:38:06:04:67:a5: 14:c1:3a:64:ae:24:cf:40:b0:d6:4b:fa:80:3a:6d: da:6a:8e:2d:ab:56:15:90:f0:df:fa:34:61:87:9f: d9:07:a5:bc:b5:67:74:87:a1:c7:07:18:9e:29:17: 9b:0a:4f:55:49:35:f3:31:6f:a7:ca:a8:c1:62:36: 17:18:19:b1:3f:87:b9:c4:5f:16:f2:5e:b9:e6:96: 32:1e:d4:09:59:8a:56:c2:bf:4e:8e:99:d9:53:17: b0:96:bf:6a:8a:2d:f2:76:6e:c9:1f:3d:d1:d5:2b: 3f:3e:a0:7c:1a:39:4c:85:a3:90:ee:76:af:39:ee: 5a:33:37:01:62:a4:48:3c:3e:6b:3d:e5:d3:bd:9e: f1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D2:7D:22:FD:45:A2:4A:A4:97:20:C8:3A:FA:32:F9:69:9A:FB:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/e14e9812-67c6-3d91-835b-4bf6037ab3dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/de519df3-4594-450e-ac51-a7e085408381.crl X509v3 Authority Key Identifier: keyid:59:9E:4A:47:1E:32:A7:28:11:04:CA:48:15:8C:D4:18:2D:B0:B9:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381.cer sbgp-ipAddrBlock: critical IPv4: 209.205.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:b0:d1:21:07:9b:d4:cc:5d:20:21:f8:aa:99:27:5a:dc:ca: 4e:5b:5c:4e:9a:ad:b0:64:5f:aa:0a:91:f4:e9:2d:e9:92:7d: 69:12:51:fe:45:20:75:f3:6d:b2:c7:21:81:87:58:8c:6d:63: b9:9e:00:b1:8a:f6:3d:17:2b:03:88:b5:4f:55:fe:06:fe:f2: ab:02:f0:75:4d:51:73:2c:0e:32:c4:27:92:9f:df:10:6f:4c: 7a:be:cb:86:3c:6c:b3:76:9f:a6:1f:b8:d0:f8:3b:75:4a:3f: 3a:05:f9:31:f1:37:81:5f:c2:72:6a:98:36:4a:9b:ea:4a:50: 20:3b:d3:54:23:34:c1:b2:a5:f9:a3:ba:d6:ec:83:86:c2:ce: e0:18:2c:fb:65:c7:44:e6:55:1a:26:c2:aa:4d:36:4d:d7:9a: 9c:49:e5:be:84:53:6c:0b:2f:23:f4:00:71:b4:f7:e2:b5:d8: 12:f5:35:88:f9:fc:a4:9c:c3:ec:0e:f4:05:68:2d:73:32:d9: c5:65:c4:35:ca:e3:45:9d:0b:47:1e:eb:01:0b:b1:8f:cb:76: d7:85:3f:68:74:d1:d9:c4:a3:6b:10:86:79:9c:fa:09:84:73: 1a:0b:7d:ec:c7:30:69:a7:b6:a0:8e:fd:39:c9:96:3b:98:48: e7:9d:23:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMgt63ZxtIwSx3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU1MTlkZjMtNDU5NC00NTBlLWFjNTEtYTdlMDg1NDA4 MzgxMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk MzE1ODgzM2ItZDMyNy00MTE3LWExNGItZmEzN2I2ZmM3MjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur7851N2UqEdhPII01XyAxXVw3rckI6t0tdX INRc4WZXBaUfPhleeVAdyOYf78z2SwP6jKhsWMtIp9ZX48rQnpL5bogIoAKqfKon 9gXqdmb+Yz4TaOkfHlsjGbnJWtTuXROXjVot/pDTX8xC8MU39FZyOAYEZ6UUwTpk riTPQLDWS/qAOm3aao4tq1YVkPDf+jRhh5/ZB6W8tWd0h6HHBxieKRebCk9VSTXz MW+nyqjBYjYXGBmxP4e5xF8W8l655pYyHtQJWYpWwr9OjpnZUxewlr9qii3ydm7J Hz3R1Ss/PqB8GjlMhaOQ7navOe5aMzcBYqRIPD5rPeXTvZ7x4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvSfSL9RaJKpJcgyDr6MvlpmvvSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kZTUx OWRmMy00NTk0LTQ1MGUtYWM1MS1hN2UwODU0MDgzODEvZTE0ZTk4MTItNjdjNi0z ZDkxLTgzNWItNGJmNjAzN2FiM2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZGU1MTlkZjMtNDU5NC00NTBlLWFj NTEtYTdlMDg1NDA4MzgxL2RlNTE5ZGYzLTQ1OTQtNDUwZS1hYzUxLWE3ZTA4NTQw ODM4MS5jcmwwHwYDVR0jBBgwFoAUWZ5KRx4ypygRBMpIFYzUGC2wuRwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kZTUxOWRmMy00NTk0LTQ1MGUtYWM1MS1hN2Uw ODU0MDgzODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0c3oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJKw0SEHm9TMXSAh+KqZJ1rcyk5bXE6arbBkX6oKkfTpLemSfWkSUf5F IHXzbbLHIYGHWIxtY7meALGK9j0XKwOItU9V/gb+8qsC8HVNUXMsDjLEJ5Kf3xBv THq+y4Y8bLN2n6YfuND4O3VKPzoF+THxN4FfwnJqmDZKm+pKUCA701QjNMGypfmj utbsg4bCzuAYLPtlx0TmVRomwqpNNk3XmpxJ5b6EU2wLLyP0AHG09+K12BL1NYj5 /KScw+wO9AVoLXMy2cVlxDXK40WdC0ce6wELsY/LdteFP2h00dnEo2sQhnmc+gmE cxoLfezHMGmntqCO/TnJljuYSOedI5I= -----END CERTIFICATE-----Generated at Mon Oct 20 21:24:59 2025 by rpki-client