$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/929941d8-be63-3be5-89d7-62a997289367.roa File: 929941d8-be63-3be5-89d7-62a997289367.roa (raw, json) Hash identifier: Lfs9NBCGIgLvDTSG9sCSMgE0GdQlEVCBkf0n11hBlD0= Subject key identifier: 73:3B:59:4A:0C:81:E1:C2:96:A2:81:D6:FC:DA:F5:AE:2D:FD:8D:FA Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Certificate serial: 010D0C9F4328584B715CBC55EDCE41ECA55C6540 Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/929941d8-be63-3be5-89d7-62a997289367.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 14618 IP address blocks: 208.71.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:bc:55:ed:ce:41:ec:a5:5c:65:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=7cd1fc09-6a02-4cb3-b165-88885e4c407c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a4:02:f9:ec:77:f0:e5:c4:ff:4e:ec:47:b6: 3d:e2:5f:53:79:cf:f2:a8:b8:35:b1:c7:f3:51:0b: 21:9b:82:5b:b2:b6:eb:ed:d1:a5:4b:f0:8f:ab:92: 1f:c9:35:65:20:36:20:9c:7a:d7:57:3f:e3:2a:ca: 2d:c9:3b:9e:f3:57:2e:fc:f9:6a:fb:c4:9e:5c:99: c1:7c:b2:b6:4a:bf:ca:41:55:28:56:d1:dc:a9:f1: 0d:9d:39:c3:54:dc:80:f0:df:2f:86:76:c5:4f:7b: a9:1d:13:f1:2a:05:d0:68:8f:81:59:68:a1:25:68: 52:bb:09:0e:87:e7:63:d2:26:6b:82:f3:f1:8a:34: 6c:f6:32:dc:ee:18:b9:a4:52:69:58:83:0a:15:ee: b7:ee:b9:30:c7:c5:c2:97:bb:58:fb:f3:a2:07:4a: 02:62:ec:fd:ab:c2:71:a9:d8:80:58:aa:be:ac:8c: 4d:aa:5e:33:a7:7c:1b:48:d8:3c:96:c8:41:13:03: 35:c5:9b:15:0e:53:67:2c:72:17:ff:aa:d0:38:fe: 07:f8:29:58:61:c0:c3:1e:6d:12:72:e3:03:f7:16: ff:02:62:33:d4:a0:ce:7c:59:7e:18:e6:07:7e:c2: dc:06:a0:47:e3:ea:af:26:00:99:81:8c:bb:72:15: 7d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:3B:59:4A:0C:81:E1:C2:96:A2:81:D6:FC:DA:F5:AE:2D:FD:8D:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/929941d8-be63-3be5-89d7-62a997289367.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl X509v3 Authority Key Identifier: keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer sbgp-ipAddrBlock: critical IPv4: 208.71.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:ca:f3:3a:07:8a:0f:e6:4b:99:fc:33:be:c2:99:d9:a5:13: ad:6d:1c:0b:87:61:fe:6a:35:36:9f:e5:d0:38:3b:b5:8e:33: 4c:5f:84:66:74:71:75:b0:ce:08:c4:11:f8:ea:9d:e0:7a:4f: 99:3f:49:3b:82:30:db:8e:5c:07:e7:88:2b:60:36:9b:54:f1: 5c:e9:a9:2a:81:a7:95:10:a0:a2:75:29:2f:07:76:25:ed:e6: be:1d:2d:bd:b8:e0:5b:81:b3:e9:87:01:e6:3c:b4:c7:45:74: c0:57:7d:cc:6e:cc:e0:c4:b4:49:de:e2:d6:bb:ec:26:c3:4e: d7:48:4a:e7:20:3b:83:20:0c:d5:e7:4b:19:a3:46:72:7f:e9: e5:fd:1a:cf:3c:c5:11:75:0b:5c:16:45:a4:05:ad:94:e9:50: 64:58:39:e5:cd:a9:fe:33:df:50:52:d2:ae:36:44:89:98:d4: 03:01:9c:1c:a6:70:18:90:a5:43:e5:af:36:a1:b7:d9:b1:0f: 9a:06:75:4f:7c:83:31:18:34:37:5c:eb:32:28:43:69:b0:e5: fd:a2:99:e0:77:e7:3c:46:54:66:33:25:06:c5:78:89:81:2b: a1:9e:7c:f5:cc:29:0b:72:97:bc:e2:60:6f:99:ae:1a:94:be: 78:f7:88:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXLxV7c5B7KVcZUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5YTFiYTQtZjAzMy00ZTliLTg5ZTEtOGRmMDczMzc1 YjE3MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk N2NkMWZjMDktNmEwMi00Y2IzLWIxNjUtODg4ODVlNGM0MDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKQC+ex38OXE/07sR7Y94l9Tec/yqLg1scfz UQshm4Jbsrbr7dGlS/CPq5IfyTVlIDYgnHrXVz/jKsotyTue81cu/Plq+8SeXJnB fLK2Sr/KQVUoVtHcqfENnTnDVNyA8N8vhnbFT3upHRPxKgXQaI+BWWihJWhSuwkO h+dj0iZrgvPxijRs9jLc7hi5pFJpWIMKFe637rkwx8XCl7tY+/OiB0oCYuz9q8Jx qdiAWKq+rIxNql4zp3wbSNg8lshBEwM1xZsVDlNnLHIX/6rQOP4H+ClYYcDDHm0S cuMD9xb/AmIz1KDOfFl+GOYHfsLcBqBH4+qvJgCZgYy7chV9uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHM7WUoMgeHClqKB1vza9a4t/Y36MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MDlh MWJhNC1mMDMzLTRlOWItODllMS04ZGYwNzMzNzViMTcvOTI5OTQxZDgtYmU2My0z YmU1LTg5ZDctNjJhOTk3Mjg5MzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTA5YTFiYTQtZjAzMy00ZTliLTg5 ZTEtOGRmMDczMzc1YjE3LzUwOWExYmE0LWYwMzMtNGU5Yi04OWUxLThkZjA3MzM3 NWIxNy5jcmwwHwYDVR0jBBgwFoAUfM1NY/lw+7+G/z74RQ5Pru6ZV4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MDlhMWJhNC1mMDMzLTRlOWItODllMS04ZGYw NzMzNzViMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EfyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzK8zoHig/mS5n8M77CmdmlE61tHAuHYf5qNTaf5dA4O7WOM0xfhGZ0 cXWwzgjEEfjqneB6T5k/STuCMNuOXAfniCtgNptU8VzpqSqBp5UQoKJ1KS8HdiXt 5r4dLb244FuBs+mHAeY8tMdFdMBXfcxuzODEtEne4ta77CbDTtdISucgO4MgDNXn SxmjRnJ/6eX9Gs88xRF1C1wWRaQFrZTpUGRYOeXNqf4z31BS0q42RImY1AMBnBym cBiQpUPlrzaht9mxD5oGdU98gzEYNDdc6zIoQ2mw5f2imeB35zxGVGYzJQbFeImB K6GefPXMKQtyl7ziYG+ZrhqUvnj3iMU= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:50 2025 by rpki-client