$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/d9010bb7-b127-300d-8f26-9f8325848a6d.roa File: d9010bb7-b127-300d-8f26-9f8325848a6d.roa (raw, json) Hash identifier: GkbFobK+UM/Hf6Rx0OzxMaZnS2HCEEangVcVWWdgN84= Subject key identifier: 4B:E7:FA:25:A0:87:6B:78:7E:50:7A:4C:BF:9A:A3:A4:ED:06:2D:A7 Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Certificate serial: 010D0C9F4328584B715CBC45B09526342409F380 Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/d9010bb7-b127-300d-8f26-9f8325848a6d.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 16509 IP address blocks: 208.71.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:bc:45:b0:95:26:34:24:09:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=a4b134bc-0480-48a9-9968-544037a0a92a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e9:46:46:27:d6:3c:4f:2b:08:91:d2:47:b8: 95:af:a2:88:14:0f:31:05:af:04:30:db:f9:cb:9b: 22:34:df:97:0c:d6:50:b3:40:01:5c:ef:b5:5a:3f: 8d:ed:96:bf:0d:41:87:6b:ba:e4:b0:39:21:9f:43: 15:56:29:b4:7f:2b:e9:39:47:de:80:05:3d:42:08: 69:02:3a:e5:a5:a2:4d:5f:69:f3:58:be:9b:50:d9: 06:fc:2c:df:ed:62:e4:2a:fe:2b:eb:68:3b:55:42: 62:53:27:0f:ce:47:58:ea:4b:2c:6d:48:6c:4b:6c: 3e:6f:34:77:d3:c1:29:22:c8:4d:f1:52:70:49:f1: 80:9b:2f:c0:5c:bd:ea:ef:59:e6:5f:11:17:8f:dd: db:a2:5c:04:71:38:fc:36:f8:28:e8:c1:53:07:2a: 83:14:f8:0e:ae:42:8c:27:ca:94:85:fd:0a:cb:73: a5:df:15:b3:16:63:df:6d:f8:d1:64:ec:c5:2d:8e: 18:97:38:a7:03:e4:1e:81:44:a9:13:65:0c:75:ea: 5f:ca:34:a7:79:18:9b:be:7b:e5:ed:b0:bd:c2:a0: 29:e3:a7:28:41:f0:80:53:b5:54:36:33:fb:0b:21: fc:d8:4f:6f:21:90:f8:2d:b2:f2:73:85:5b:d6:2c: ea:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E7:FA:25:A0:87:6B:78:7E:50:7A:4C:BF:9A:A3:A4:ED:06:2D:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/d9010bb7-b127-300d-8f26-9f8325848a6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl X509v3 Authority Key Identifier: keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer sbgp-ipAddrBlock: critical IPv4: 208.71.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:5b:cb:cb:ab:f6:22:20:87:77:10:c0:39:13:3f:64:60:f3: 5b:44:34:09:d6:d4:33:63:42:ab:0a:d1:47:0d:43:58:00:d8: 8b:ed:1e:68:a6:4b:a8:5e:64:72:32:da:b4:8c:52:1c:7b:46: f8:db:2c:9a:6b:af:e8:36:c0:79:64:2b:8f:40:69:43:16:69: fc:ef:6a:5b:45:de:f3:47:3c:a2:91:43:b1:f3:1e:ab:b8:70: c8:61:4c:57:44:4d:22:de:d9:d9:9f:89:8c:d4:69:3d:94:b8: b4:59:ae:d8:af:16:b5:69:7d:2c:b1:53:3e:be:7c:ae:d5:36: 66:64:82:44:8b:a9:9e:21:fa:05:44:5c:fa:1d:da:1f:b3:68: b1:4d:84:ba:bb:83:4c:04:24:95:03:de:af:38:a0:f0:cf:cf: 1e:5a:03:77:b0:6f:77:a3:7b:a0:2a:22:e5:9a:91:90:43:b0: 24:76:ac:37:3e:06:20:2f:06:59:72:9f:0f:1e:a7:7e:fb:bf: b1:60:3f:79:82:3e:51:8c:16:69:16:8e:7b:dd:11:c9:71:06: b9:0a:0c:32:86:8e:19:67:9e:96:a6:5c:32:60:47:b7:47:5b: 8e:7c:e9:a1:ff:e4:f4:f9:79:81:1d:c5:2d:43:50:19:35:f4: fa:d7:fe:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXLxFsJUmNCQJ84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5YTFiYTQtZjAzMy00ZTliLTg5ZTEtOGRmMDczMzc1 YjE3MB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YTRiMTM0YmMtMDQ4MC00OGE5LTk5NjgtNTQ0MDM3YTBhOTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmulGRifWPE8rCJHSR7iVr6KIFA8xBa8EMNv5 y5siNN+XDNZQs0ABXO+1Wj+N7Za/DUGHa7rksDkhn0MVVim0fyvpOUfegAU9Qghp AjrlpaJNX2nzWL6bUNkG/Czf7WLkKv4r62g7VUJiUycPzkdY6kssbUhsS2w+bzR3 08EpIshN8VJwSfGAmy/AXL3q71nmXxEXj93bolwEcTj8Nvgo6MFTByqDFPgOrkKM J8qUhf0Ky3Ol3xWzFmPfbfjRZOzFLY4YlzinA+QegUSpE2UMdepfyjSneRibvnvl 7bC9wqAp46coQfCAU7VUNjP7CyH82E9vIZD4LbLyc4Vb1izquwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvn+iWgh2t4flB6TL+ao6TtBi2nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MDlh MWJhNC1mMDMzLTRlOWItODllMS04ZGYwNzMzNzViMTcvZDkwMTBiYjctYjEyNy0z MDBkLThmMjYtOWY4MzI1ODQ4YTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTA5YTFiYTQtZjAzMy00ZTliLTg5 ZTEtOGRmMDczMzc1YjE3LzUwOWExYmE0LWYwMzMtNGU5Yi04OWUxLThkZjA3MzM3 NWIxNy5jcmwwHwYDVR0jBBgwFoAUfM1NY/lw+7+G/z74RQ5Pru6ZV4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MDlhMWJhNC1mMDMzLTRlOWItODllMS04ZGYw NzMzNzViMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EfyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANby8ur9iIgh3cQwDkTP2Rg81tENAnW1DNjQqsK0UcNQ1gA2IvtHmim S6heZHIy2rSMUhx7RvjbLJprr+g2wHlkK49AaUMWafzvaltF3vNHPKKRQ7HzHqu4 cMhhTFdETSLe2dmfiYzUaT2UuLRZrtivFrVpfSyxUz6+fK7VNmZkgkSLqZ4h+gVE XPod2h+zaLFNhLq7g0wEJJUD3q84oPDPzx5aA3ewb3eje6AqIuWakZBDsCR2rDc+ BiAvBllynw8ep377v7FgP3mCPlGMFmkWjnvdEclxBrkKDDKGjhlnnpamXDJgR7dH W4586aH/5PT5eYEdxS1DUBk19PrX/oQ= -----END CERTIFICATE-----Generated at Wed Oct 8 23:12:08 2025 by rpki-client