$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/f880db5b-e47b-395f-bff3-27346670e7a5.roa File: f880db5b-e47b-395f-bff3-27346670e7a5.roa (raw, json) Hash identifier: TzO/ngUCbarDQ4q/bLysW2qwT0dyfvaRM3z0ookTJH8= Subject key identifier: A6:3E:DC:97:88:73:5C:36:F2:15:79:94:7B:13:98:2D:C9:90:46:69 Certificate issuer: /CN=09fe46b0-7034-4d7b-a746-7a70f788c3f5 Certificate serial: 010D0C9F4328584B3DB6FA62F6EAECC0AF699F00 Authority key identifier: 2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/f880db5b-e47b-395f-bff3-27346670e7a5.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 209.127.216.0/24 maxlen: 24 209.188.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b6:fa:62:f6:ea:ec:c0:af:69:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09fe46b0-7034-4d7b-a746-7a70f788c3f5 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=34d6dbe9-13fb-485a-ad44-1310317f54e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:bd:6e:54:c1:a9:98:38:3e:d1:47:02:41:78: 41:7f:5b:f8:56:f5:a3:61:d6:b0:46:44:ab:c3:6d: 55:e5:0b:43:85:94:1e:b8:2a:0c:da:a6:49:f5:f6: 80:4b:5a:11:50:a3:b4:cd:59:aa:19:c9:65:d2:49: e6:24:5d:5b:26:39:38:41:69:0b:4b:9f:1d:1d:0e: a3:bd:f7:4a:ba:3e:da:fd:7b:48:14:8b:c3:e4:8e: 2c:fb:a2:2c:01:a4:4f:78:09:8e:e8:f2:02:07:bd: 79:27:e2:3e:cc:f0:16:e8:6d:d7:31:68:c9:1b:c2: d6:84:ff:ac:f9:5b:b0:fd:17:09:24:f0:e3:9d:21: cb:8d:d7:b5:4b:ad:c0:4c:e2:56:12:ba:f0:1e:bd: 00:9a:39:1b:20:92:f2:95:eb:9e:3c:f0:2c:1b:7a: 2b:bf:5e:ac:2f:a8:f0:13:56:ed:df:d9:63:f6:9a: 1d:03:b8:1a:cb:76:39:a6:51:01:58:70:bf:f5:27: df:2e:94:18:8a:32:c2:5f:c8:1c:ec:e4:da:3d:3f: 48:05:b8:08:5b:52:c8:a6:cd:ae:ae:80:54:22:73: e3:ea:b6:21:8d:cc:1e:1a:f6:b0:60:f5:94:db:19: a8:b8:73:9a:c5:fe:26:53:7f:99:cf:9d:7e:34:ef: c0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3E:DC:97:88:73:5C:36:F2:15:79:94:7B:13:98:2D:C9:90:46:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/f880db5b-e47b-395f-bff3-27346670e7a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.crl X509v3 Authority Key Identifier: keyid:2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer sbgp-ipAddrBlock: critical IPv4: 209.127.216.0/24 209.188.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:08:b1:9f:c5:a4:ba:ea:26:21:c6:1d:54:d5:3c:df:d1:c2: 55:a0:a3:4b:08:9e:d4:e7:8e:9d:09:98:79:df:f8:fc:dd:37: 76:1b:be:2e:b5:84:1d:2f:30:71:35:43:24:96:38:22:25:d4: c6:18:ad:4c:f0:d6:35:f6:13:61:ff:e8:27:ea:a7:ed:4d:89: 60:3d:5e:e1:72:6e:66:56:4c:8d:c8:5b:f8:13:5e:01:82:13: 5f:32:5a:af:36:63:77:df:dc:6d:f9:3d:7d:aa:56:7c:56:a2: 40:a4:53:1a:45:0d:cb:9a:90:f6:fa:58:fb:52:24:e5:88:5f: 5d:0e:95:c6:43:87:9e:e5:da:e6:26:c3:d6:31:81:1a:d2:f1: f0:ab:ba:84:fa:31:3c:2d:1e:3f:2f:94:9c:8e:f8:e6:a7:52: ec:c8:43:83:11:76:c7:b3:bf:04:65:02:a7:08:f0:72:8b:85: a5:bb:e0:fe:93:17:43:22:04:79:c9:42:cc:01:97:26:03:1d: 77:0a:f0:80:da:09:e8:02:ba:92:9b:23:d7:dd:cc:00:bf:07: 14:06:b4:00:47:c9:7a:d3:7f:31:81:44:68:63:44:b7:44:9e: 31:71:2d:25:b2:6e:69:f7:04:5c:2a:6e:7a:69:b8:71:c2:44: 19:b6:53:34 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEs9tvpi9urswK9pnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlmZTQ2YjAtNzAzNC00ZDdiLWE3NDYtN2E3MGY3ODhj M2Y1MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MzRkNmRiZTktMTNmYi00ODVhLWFkNDQtMTMxMDMxN2Y1NGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi71uVMGpmDg+0UcCQXhBf1v4VvWjYdawRkSr w21V5QtDhZQeuCoM2qZJ9faAS1oRUKO0zVmqGcll0knmJF1bJjk4QWkLS58dHQ6j vfdKuj7a/XtIFIvD5I4s+6IsAaRPeAmO6PICB715J+I+zPAW6G3XMWjJG8LWhP+s +Vuw/RcJJPDjnSHLjde1S63ATOJWErrwHr0AmjkbIJLyleuePPAsG3orv16sL6jw E1bt39lj9podA7gay3Y5plEBWHC/9SffLpQYijLCX8gc7OTaPT9IBbgIW1LIps2u roBUInPj6rYhjcweGvawYPWU2xmouHOaxf4mU3+Zz51+NO/AUQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKY+3JeIc1w28hV5lHsTmC3JkEZpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wOWZl NDZiMC03MDM0LTRkN2ItYTc0Ni03YTcwZjc4OGMzZjUvZjg4MGRiNWItZTQ3Yi0z OTVmLWJmZjMtMjczNDY2NzBlN2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDlmZTQ2YjAtNzAzNC00ZDdiLWE3 NDYtN2E3MGY3ODhjM2Y1LzA5ZmU0NmIwLTcwMzQtNGQ3Yi1hNzQ2LTdhNzBmNzg4 YzNmNS5jcmwwHwYDVR0jBBgwFoAUKlIbdd2p7j6R7Mtvp8LrPeq8OEswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wOWZlNDZiMC03MDM0LTRkN2ItYTc0Ni03YTcw Zjc4OGMzZjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA0X/YAwQA 0bxtMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGEIsZ/FpLrqJiHGHVTVPN/RwlWgo0sIntTnjp0JmHnf+Pzd N3Ybvi61hB0vMHE1QySWOCIl1MYYrUzw1jX2E2H/6Cfqp+1NiWA9XuFybmZWTI3I W/gTXgGCE18yWq82Y3ff3G35PX2qVnxWokCkUxpFDcuakPb6WPtSJOWIX10OlcZD h57l2uYmw9YxgRrS8fCruoT6MTwtHj8vlJyO+OanUuzIQ4MRdsezvwRlAqcI8HKL haW74P6TF0MiBHnJQswBlyYDHXcK8IDaCegCupKbI9fdzAC/BxQGtABHyXrTfzGB RGhjRLdEnjFxLSWybmn3BFwqbnppuHHCRBm2UzQ= -----END CERTIFICATE-----Generated at Sat Oct 11 02:26:26 2025 by rpki-client