$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/04220d33-aa94-3e2f-968e-e384d2bf91b3.roa File: 04220d33-aa94-3e2f-968e-e384d2bf91b3.roa (raw, json) Hash identifier: slyqH8FNjKbXqgBM9CyYsEJi81p/1+maycgOqDUtYUY= Subject key identifier: D9:A5:51:50:3E:C5:D6:42:EF:09:63:33:AD:5A:8B:94:F7:EC:84:58 Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Certificate serial: 010D0C9F4328584B0CDC0C162915394E71832600 Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/04220d33-aa94-3e2f-968e-e384d2bf91b3.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 16509 IP address blocks: 208.71.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:0c:16:29:15:39:4e:71:83:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=7fa509fe-5bbf-4065-9468-9c49d9910f1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c1:de:02:b5:eb:c6:af:ca:36:5e:35:24:e8: 18:a7:3e:f3:21:39:96:f4:14:9a:24:ba:1c:28:f0: 7e:f4:d4:94:34:39:08:50:47:7e:77:f4:ab:41:29: 21:ba:ea:8e:a3:d9:3a:07:1f:db:9b:06:ac:63:f8: 8a:90:e9:95:1e:d9:a1:b1:26:78:aa:16:5f:57:8c: fe:72:7e:3b:54:95:70:c8:d8:25:b5:d9:62:c2:15: 9d:2f:ef:ec:4b:73:62:a6:0c:3a:8d:ca:97:4a:ac: 99:8a:64:24:cb:b9:56:26:0c:ce:a5:63:29:2b:48: 16:bd:97:c9:f9:12:df:32:d4:f1:8b:b3:39:90:0f: 05:a9:10:91:8f:bc:cb:08:db:0c:53:5d:51:8a:8c: ea:94:ad:40:66:33:35:b8:b0:58:18:78:49:3e:33: fe:35:c3:3a:4d:d6:ba:2d:ef:a9:d5:85:e3:e0:4c: 56:c2:75:28:af:ea:8b:d8:8e:84:58:32:15:e4:76: 9f:df:9f:73:d0:c9:b3:3a:08:9e:fb:17:c9:f8:3b: db:4e:0d:a3:a9:1c:71:0f:24:50:eb:01:b8:77:d6: 80:94:dc:7a:a7:8a:82:c0:d1:64:ec:f1:2b:76:86: b4:5e:a8:bb:0c:2e:37:3f:2d:b1:58:39:70:54:13: 32:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A5:51:50:3E:C5:D6:42:EF:09:63:33:AD:5A:8B:94:F7:EC:84:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/04220d33-aa94-3e2f-968e-e384d2bf91b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl X509v3 Authority Key Identifier: keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer sbgp-ipAddrBlock: critical IPv4: 208.71.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:a8:f9:c6:67:e4:35:52:0e:7b:7a:c6:8e:31:86:d0:29:90: e5:cd:dd:18:64:a7:19:d5:c3:33:76:43:7f:ba:80:28:c3:e9: bd:f9:d3:93:5e:09:25:4e:35:6f:ae:eb:e7:b2:08:27:35:66: a0:a0:03:27:ca:79:6b:6c:cb:c5:4b:09:18:06:4c:a8:b0:34: 6f:5b:03:ba:29:c4:c6:95:d5:33:54:1b:79:78:e8:58:69:95: 18:c5:5c:62:2b:f3:7a:f7:ac:08:dc:0e:9c:31:a8:c4:bc:19: 7c:9b:f6:76:c8:65:b1:a9:ce:8f:b0:eb:fa:42:30:e4:12:f6: 06:3d:7c:fa:95:56:09:73:c5:a0:41:44:99:14:d9:3c:22:17: 1d:b0:75:9e:a8:76:a3:26:bf:11:aa:0f:2d:c8:7a:fe:f9:8c: 4d:ea:8e:d6:ca:3c:e0:e0:9f:84:24:e3:af:1f:8e:1e:5f:7d: 9e:ca:ba:5c:d4:14:36:d2:ff:34:f0:a4:d7:1f:d2:c3:68:9b: b9:70:65:b2:74:9c:4a:a1:33:4d:e1:37:28:d2:bc:f0:c1:22: 81:96:4d:72:36:a7:50:7f:80:e5:3e:1e:cb:52:34:94:53:84: 8d:93:72:7d:09:16:b2:7d:a8:85:21:85:51:fe:17:b6:10:46: 60:ee:37:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3AwWKRU5TnGDJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5YTFiYTQtZjAzMy00ZTliLTg5ZTEtOGRmMDczMzc1 YjE3MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk N2ZhNTA5ZmUtNWJiZi00MDY1LTk0NjgtOWM0OWQ5OTEwZjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMHeArXrxq/KNl41JOgYpz7zITmW9BSaJLoc KPB+9NSUNDkIUEd+d/SrQSkhuuqOo9k6Bx/bmwasY/iKkOmVHtmhsSZ4qhZfV4z+ cn47VJVwyNgltdliwhWdL+/sS3Nipgw6jcqXSqyZimQky7lWJgzOpWMpK0gWvZfJ +RLfMtTxi7M5kA8FqRCRj7zLCNsMU11RiozqlK1AZjM1uLBYGHhJPjP+NcM6Tda6 Le+p1YXj4ExWwnUor+qL2I6EWDIV5Haf359z0MmzOgie+xfJ+DvbTg2jqRxxDyRQ 6wG4d9aAlNx6p4qCwNFk7PErdoa0Xqi7DC43Py2xWDlwVBMydwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmlUVA+xdZC7wljM61ai5T37IRYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MDlh MWJhNC1mMDMzLTRlOWItODllMS04ZGYwNzMzNzViMTcvMDQyMjBkMzMtYWE5NC0z ZTJmLTk2OGUtZTM4NGQyYmY5MWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTA5YTFiYTQtZjAzMy00ZTliLTg5 ZTEtOGRmMDczMzc1YjE3LzUwOWExYmE0LWYwMzMtNGU5Yi04OWUxLThkZjA3MzM3 NWIxNy5jcmwwHwYDVR0jBBgwFoAUfM1NY/lw+7+G/z74RQ5Pru6ZV4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MDlhMWJhNC1mMDMzLTRlOWItODllMS04ZGYw NzMzNzViMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Ef1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyo+cZn5DVSDnt6xo4xhtApkOXN3RhkpxnVwzN2Q3+6gCjD6b3505Ne CSVONW+u6+eyCCc1ZqCgAyfKeWtsy8VLCRgGTKiwNG9bA7opxMaV1TNUG3l46Fhp lRjFXGIr83r3rAjcDpwxqMS8GXyb9nbIZbGpzo+w6/pCMOQS9gY9fPqVVglzxaBB RJkU2TwiFx2wdZ6odqMmvxGqDy3Iev75jE3qjtbKPODgn4Qk468fjh5ffZ7KulzU FDbS/zTwpNcf0sNom7lwZbJ0nEqhM03hNyjSvPDBIoGWTXI2p1B/gOU+HstSNJRT hI2Tcn0JFrJ9qIUhhVH+F7YQRmDuN1U= -----END CERTIFICATE-----Generated at Wed Oct 8 23:13:40 2025 by rpki-client