$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/8cd9bb4a-ed14-375c-aa14-4200b366035f.roa File: 8cd9bb4a-ed14-375c-aa14-4200b366035f.roa (raw, json) Hash identifier: 6xPQoy+3RJZHk07FqonGbwUeOGzC42+QPp65jJlW+hw= Subject key identifier: 57:B2:13:24:48:AC:CC:DE:05:41:E7:5E:D9:B3:85:A0:6A:CC:C5:D9 Certificate issuer: /CN=4f8ec25d-932a-4dd4-8f83-f1da049068ec Certificate serial: 010D0C9F4328584B1F0169770F52CBA2078AD4E0 Authority key identifier: 31:C5:E0:9D:A7:42:17:EF:27:47:7E:8E:A5:29:8D:3F:33:F2:E5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/8cd9bb4a-ed14-375c-aa14-4200b366035f.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 209.127.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:69:77:0f:52:cb:a2:07:8a:d4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8ec25d-932a-4dd4-8f83-f1da049068ec Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=f0406859-5a5e-40c7-9694-77d267368232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7f:c1:b7:08:19:02:30:2c:12:07:ae:8f:9c: b9:e0:fa:ff:bc:58:2f:39:09:bf:ca:49:a1:6a:b3: 1b:33:df:f1:1e:0d:0e:a1:b3:69:8e:03:96:1e:31: 9a:c5:51:58:57:c2:46:27:da:c3:a9:d6:4e:f7:6f: 4b:95:91:c0:73:86:e9:0f:39:4f:3c:14:7e:09:d1: 52:fc:fa:bd:33:4b:8d:57:5e:47:22:3a:be:83:7b: fd:4d:33:0b:0e:18:f6:4f:48:6e:34:76:6b:64:23: 63:5d:a5:46:87:6e:f2:08:ae:f3:ec:9e:6e:7a:35: d5:3a:91:75:b3:bd:90:d0:12:d6:62:aa:46:fe:75: ac:c3:a2:9b:33:f9:9d:a8:67:f6:78:9a:cf:18:6d: d3:ce:6a:7c:8c:39:b3:8b:f4:57:16:8e:18:f8:94: 39:f7:8e:8d:eb:47:41:69:4d:60:46:52:9b:43:90: 3b:bc:f4:49:b8:71:77:10:26:89:93:a9:91:4f:f4: 21:b0:4a:bc:37:38:86:e0:72:eb:99:9e:8c:1f:68: b2:ab:09:6b:dc:f6:58:3b:00:cc:86:5b:09:2d:88: 4c:f1:f7:a6:62:ce:97:bc:6a:65:a7:3f:b9:bc:e6: a7:b7:7a:7f:e5:9f:1a:ae:d1:3a:a3:f7:70:60:82: 33:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B2:13:24:48:AC:CC:DE:05:41:E7:5E:D9:B3:85:A0:6A:CC:C5:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/8cd9bb4a-ed14-375c-aa14-4200b366035f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.crl X509v3 Authority Key Identifier: keyid:31:C5:E0:9D:A7:42:17:EF:27:47:7E:8E:A5:29:8D:3F:33:F2:E5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer sbgp-ipAddrBlock: critical IPv4: 209.127.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:9b:da:6f:aa:5c:ba:b4:f6:3f:9f:1e:ae:73:21:63:d4:a9: 97:57:13:84:76:32:e9:ee:df:64:cc:82:0b:e3:88:fd:31:f2: 45:5d:f5:76:51:dd:53:6c:0f:cd:1f:7b:6a:21:ca:ce:e7:f5: 72:82:17:e4:40:80:4f:e4:28:83:40:a8:98:d5:d4:3c:d7:28: 34:c4:fb:5f:77:a3:d6:75:59:2b:9c:ef:1f:a7:be:81:80:d9: 97:f7:8f:4d:dd:fc:6d:82:3d:9f:d8:0f:6f:52:1a:f0:54:77: c1:ee:35:a7:3a:81:e8:34:7a:b5:2b:f0:da:c2:13:2b:2a:5f: d8:53:3a:4d:c2:bb:3e:ad:9e:6e:84:a4:e6:f4:75:0d:36:1d: 50:c6:50:74:7f:5b:1f:9d:f1:30:18:80:04:7f:07:f8:9f:0c: d2:53:d9:17:0d:97:87:f3:10:ef:77:5c:b6:a7:9e:2d:2b:55: 26:19:af:7b:4e:97:ee:10:4a:05:23:75:2a:80:e9:2b:78:16: f5:c3:d0:f4:58:6f:e6:17:31:6c:03:10:d3:1c:89:49:b0:f9: f1:66:98:2f:73:8d:b9:83:3a:40:ad:c2:cc:91:b2:e3:69:c4: bd:a8:aa:47:8e:5d:4d:96:d2:75:83:4b:df:34:46:ad:b9:8e: a0:f0:61:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAWl3D1LLogeK1OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY4ZWMyNWQtOTMyYS00ZGQ0LThmODMtZjFkYTA0OTA2 OGVjMB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZjA0MDY4NTktNWE1ZS00MGM3LTk2OTQtNzdkMjY3MzY4MjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkH/BtwgZAjAsEgeuj5y54Pr/vFgvOQm/ykmh arMbM9/xHg0OobNpjgOWHjGaxVFYV8JGJ9rDqdZO929LlZHAc4bpDzlPPBR+CdFS /Pq9M0uNV15HIjq+g3v9TTMLDhj2T0huNHZrZCNjXaVGh27yCK7z7J5uejXVOpF1 s72Q0BLWYqpG/nWsw6KbM/mdqGf2eJrPGG3Tzmp8jDmzi/RXFo4Y+JQ5946N60dB aU1gRlKbQ5A7vPRJuHF3ECaJk6mRT/QhsEq8NziG4HLrmZ6MH2iyqwlr3PZYOwDM hlsJLYhM8femYs6XvGplpz+5vOant3p/5Z8artE6o/dwYIIzYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFeyEyRIrMzeBUHnXtmzhaBqzMXZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80Zjhl YzI1ZC05MzJhLTRkZDQtOGY4My1mMWRhMDQ5MDY4ZWMvOGNkOWJiNGEtZWQxNC0z NzVjLWFhMTQtNDIwMGIzNjYwMzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGY4ZWMyNWQtOTMyYS00ZGQ0LThm ODMtZjFkYTA0OTA2OGVjLzRmOGVjMjVkLTkzMmEtNGRkNC04ZjgzLWYxZGEwNDkw NjhlYy5jcmwwHwYDVR0jBBgwFoAUMcXgnadCF+8nR36OpSmNPzPy5U0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZjhlYzI1ZC05MzJhLTRkZDQtOGY4My1mMWRh MDQ5MDY4ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0X/pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHab2m+qXLq09j+fHq5zIWPUqZdXE4R2Munu32TMggvjiP0x8kVd9XZR 3VNsD80fe2ohys7n9XKCF+RAgE/kKINAqJjV1DzXKDTE+193o9Z1WSuc7x+nvoGA 2Zf3j03d/G2CPZ/YD29SGvBUd8HuNac6geg0erUr8NrCEysqX9hTOk3Cuz6tnm6E pOb0dQ02HVDGUHR/Wx+d8TAYgAR/B/ifDNJT2RcNl4fzEO93XLanni0rVSYZr3tO l+4QSgUjdSqA6St4FvXD0PRYb+YXMWwDENMciUmw+fFmmC9zjbmDOkCtwsyRsuNp xL2oqkeOXU2W0nWDS980Rq25jqDwYec= -----END CERTIFICATE-----Generated at Sat Oct 11 04:29:43 2025 by rpki-client