$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/c0d96dee-6866-34cf-8ad8-b5efbfcac2ae.roa File: c0d96dee-6866-34cf-8ad8-b5efbfcac2ae.roa (raw, json) Hash identifier: 1wC4l0kEQ/bbP19vJRPx9yMgk9d4Qhnb4HmuSndqYd4= Subject key identifier: 6D:F4:E9:5A:3D:46:BC:C3:F8:09:11:AF:D4:02:93:0F:73:46:AB:23 Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Certificate serial: 010D0C9F4328584B715CBC685EBD8F063A536900 Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/c0d96dee-6866-34cf-8ad8-b5efbfcac2ae.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 14618 IP address blocks: 208.71.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:bc:68:5e:bd:8f:06:3a:53:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=c3dc7e27-2c37-4fb7-ba1f-05d55360bea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d4:e4:75:cf:5f:09:9e:c4:fb:70:af:0b:92: f7:37:18:57:eb:a5:e6:74:91:e1:e8:4a:77:dc:49: 3d:98:89:17:9e:88:6c:3e:ef:62:49:03:3e:30:5e: 4f:98:07:49:c1:e8:7f:09:b7:5b:b1:f8:39:49:7f: 36:b7:24:4d:19:8d:b0:b7:f5:5d:0e:d5:0f:e6:60: 4a:25:3e:0a:18:64:84:bd:d3:ea:42:ba:a3:0e:0c: 18:04:20:55:51:f7:bb:e8:a4:e7:19:19:a7:0b:76: 69:2f:be:25:4a:59:73:db:f4:86:9b:5d:17:a8:a3: 2c:5b:52:34:bb:74:af:99:7f:29:9c:6a:0f:3c:09: 53:e3:47:c6:f8:b3:50:a8:e1:f8:58:e1:b7:e9:e9: 92:8d:37:96:cb:4d:c5:4a:bf:3a:32:91:e4:6f:8f: de:ea:14:a3:06:77:fe:b6:cd:60:fd:d6:f3:77:b9: d4:e5:08:0b:be:ad:dc:2f:d0:fd:36:9e:1a:1e:16: 0f:af:76:f9:2b:07:1e:a4:4d:13:12:a3:fa:ec:49: fb:91:8c:84:91:00:8b:f2:e6:f8:88:b0:60:5b:d8: ba:ec:0b:8e:80:fc:93:8a:6b:f0:76:8d:f5:12:bd: ae:ed:20:69:d1:0f:2a:38:49:ac:0e:e1:29:25:a8: 46:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F4:E9:5A:3D:46:BC:C3:F8:09:11:AF:D4:02:93:0F:73:46:AB:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/c0d96dee-6866-34cf-8ad8-b5efbfcac2ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl X509v3 Authority Key Identifier: keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer sbgp-ipAddrBlock: critical IPv4: 208.71.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:2a:89:f2:04:d2:e9:99:01:32:b6:74:76:1d:40:68:b5:46: 0b:15:00:f9:8a:13:8a:d5:b2:5b:da:7a:14:b2:ec:f3:be:a5: d9:51:3c:c7:c8:64:f7:aa:07:64:31:e5:13:3b:57:a0:cf:b1: 9f:b0:f8:91:dd:08:72:ad:ca:2c:bf:15:53:79:28:6a:e0:82: b7:29:79:8f:15:26:d0:b9:26:b8:1c:eb:a3:23:09:7d:5a:31: cb:5b:88:ea:d2:93:35:50:80:9a:51:e1:f4:dc:39:31:a4:fb: 88:ce:f9:ca:69:64:ba:be:8d:42:ac:b8:e4:68:38:1d:09:56: e2:88:7d:4f:3b:1b:86:06:88:05:ca:17:cf:e6:db:03:70:55: 29:58:d4:11:69:9a:ac:41:44:e6:10:9a:44:77:60:e7:06:26: 63:9c:6c:8f:b6:30:4b:3c:7f:12:7f:d4:f9:70:9b:d2:8c:4c: 44:a6:c1:ec:d9:3a:44:38:bf:ee:6e:e9:12:88:fe:2d:8d:7e: 1c:a3:7e:0a:6f:cf:49:ec:95:cb:7e:43:5b:e7:9f:1e:1e:64: 4b:27:fd:c0:7b:b1:52:53:d7:41:48:36:d8:d7:bc:17:10:d0: 37:a7:6d:02:89:a9:9c:fe:5c:29:d3:b4:bf:ab:8d:a4:63:4b: 75:b1:d0:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXLxoXr2PBjpTaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5YTFiYTQtZjAzMy00ZTliLTg5ZTEtOGRmMDczMzc1 YjE3MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YzNkYzdlMjctMmMzNy00ZmI3LWJhMWYtMDVkNTUzNjBiZWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldTkdc9fCZ7E+3CvC5L3NxhX66XmdJHh6Ep3 3Ek9mIkXnohsPu9iSQM+MF5PmAdJweh/Cbdbsfg5SX82tyRNGY2wt/VdDtUP5mBK JT4KGGSEvdPqQrqjDgwYBCBVUfe76KTnGRmnC3ZpL74lSllz2/SGm10XqKMsW1I0 u3SvmX8pnGoPPAlT40fG+LNQqOH4WOG36emSjTeWy03FSr86MpHkb4/e6hSjBnf+ ts1g/dbzd7nU5QgLvq3cL9D9Np4aHhYPr3b5KwcepE0TEqP67En7kYyEkQCL8ub4 iLBgW9i67AuOgPyTimvwdo31Er2u7SBp0Q8qOEmsDuEpJahGbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG306Vo9RrzD+AkRr9QCkw9zRqsjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MDlh MWJhNC1mMDMzLTRlOWItODllMS04ZGYwNzMzNzViMTcvYzBkOTZkZWUtNjg2Ni0z NGNmLThhZDgtYjVlZmJmY2FjMmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTA5YTFiYTQtZjAzMy00ZTliLTg5 ZTEtOGRmMDczMzc1YjE3LzUwOWExYmE0LWYwMzMtNGU5Yi04OWUxLThkZjA3MzM3 NWIxNy5jcmwwHwYDVR0jBBgwFoAUfM1NY/lw+7+G/z74RQ5Pru6ZV4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MDlhMWJhNC1mMDMzLTRlOWItODllMS04ZGYw NzMzNzViMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Ef0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoqifIE0umZATK2dHYdQGi1RgsVAPmKE4rVslvaehSy7PO+pdlRPMfI ZPeqB2Qx5RM7V6DPsZ+w+JHdCHKtyiy/FVN5KGrggrcpeY8VJtC5Jrgc66MjCX1a MctbiOrSkzVQgJpR4fTcOTGk+4jO+cppZLq+jUKsuORoOB0JVuKIfU87G4YGiAXK F8/m2wNwVSlY1BFpmqxBROYQmkR3YOcGJmOcbI+2MEs8fxJ/1Plwm9KMTESmwezZ OkQ4v+5u6RKI/i2Nfhyjfgpvz0nslct+Q1vnnx4eZEsn/cB7sVJT10FINtjXvBcQ 0DenbQKJqZz+XCnTtL+rjaRjS3Wx0DA= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:31 2025 by rpki-client