$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/a97005e9-e003-39a1-ac11-057c0532cc43.roa File: a97005e9-e003-39a1-ac11-057c0532cc43.roa (raw, json) Hash identifier: fv6Sz0n5A+DWMvjIGKNlaF40VpG0Nkh+ZZ+0Dky5XGs= Subject key identifier: 15:61:2F:E2:F5:8E:F3:65:BE:C5:08:DB:CC:C4:E2:49:E3:2B:7F:0B Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584B477C7EC310804B0C31B1A980 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/a97005e9-e003-39a1-ac11-057c0532cc43.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 18889 IP address blocks: 209.211.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:7e:c3:10:80:4b:0c:31:b1:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=65cafe33-aac7-4f16-afee-3388b6f7257e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b7:6d:4e:35:c6:c0:aa:09:73:0d:71:65:3e: b6:4b:70:6d:c7:ef:52:27:f3:da:29:a5:ed:a5:61: 84:d9:02:94:8e:c5:b8:ae:09:af:a1:49:a4:0a:d8: 31:67:9e:cd:64:22:39:8a:c3:61:74:73:ac:ab:3c: 95:af:b2:f9:e9:fe:aa:eb:91:68:53:18:a7:94:1a: c9:d2:69:99:f3:51:5d:52:35:ad:da:20:f0:23:26: aa:6b:74:63:3a:d6:89:44:b8:2d:05:06:ad:bd:ee: 38:80:7d:d8:54:3c:a0:dd:ed:fa:0f:7a:dd:d8:63: fb:86:cb:1f:84:5c:7d:57:bc:ba:8a:43:26:97:ab: 2f:e5:8d:4c:a0:23:5a:e9:8d:01:b1:8e:aa:ed:74: 52:81:c8:fc:bf:16:0b:2d:18:a2:cd:a2:e2:31:cc: ab:b4:23:19:9d:75:26:8b:16:22:b3:38:90:3b:88: d1:45:53:5a:d1:d3:ed:d1:9b:78:ae:cf:c4:5c:0e: e8:52:f8:ae:82:49:48:b3:cf:a6:f0:49:ee:fb:f8: 3e:fd:74:5c:d9:d2:8b:d4:b6:71:3a:0b:12:dc:d5: 87:22:2a:d5:e5:bb:f8:c6:00:a8:c5:c1:6b:85:7e: c7:3c:7f:29:64:fe:08:9e:d2:b9:ef:ae:44:bf:e8: af:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:61:2F:E2:F5:8E:F3:65:BE:C5:08:DB:CC:C4:E2:49:E3:2B:7F:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/a97005e9-e003-39a1-ac11-057c0532cc43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 209.211.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:0f:5b:3e:1a:17:87:f7:8a:92:ea:c6:d5:e8:6e:65:87:42: 48:c2:9f:a3:fb:18:29:ec:14:99:5d:bc:47:73:cc:93:e7:5d: 0c:58:45:f6:90:47:9a:5e:3b:46:50:e5:ce:c9:9f:0c:85:eb: f4:cf:84:e7:77:c8:d5:dd:0b:ac:d6:ef:4f:b2:c5:a0:20:a6: 6a:f0:d0:f6:89:28:b9:ef:28:7b:43:79:c4:1b:3d:d1:7a:84: f5:f4:b1:0b:f8:16:03:7b:96:9e:6c:78:03:da:6e:f1:45:59: de:74:6c:8c:9a:e6:50:37:db:63:b7:26:68:35:15:7b:19:44: 46:0b:74:b5:1e:77:bf:21:4b:e6:c1:78:59:f9:98:20:bf:a4: 94:77:d5:6e:6f:c6:a9:92:26:23:fc:69:56:6c:a9:65:cf:73: f6:f5:7e:cd:da:de:1b:04:ae:c1:2b:37:92:f0:9c:96:9d:2e: 59:91:94:2b:5c:ca:28:28:08:e5:1f:1e:39:bc:ee:70:43:e5: 5e:68:84:fd:d3:a4:4c:44:aa:e8:5c:50:2e:c3:d9:f2:91:e8: 83:0e:5b:ee:0c:46:57:9c:81:4d:a5:5a:90:e6:b5:0b:34:78: 46:bc:86:5f:e4:97:04:b3:d6:57:80:47:ca:e2:ce:4d:fb:f6: d4:4b:ac:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfH7DEIBLDDGxqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk NjVjYWZlMzMtYWFjNy00ZjE2LWFmZWUtMzM4OGI2ZjcyNTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrdtTjXGwKoJcw1xZT62S3Btx+9SJ/PaKaXt pWGE2QKUjsW4rgmvoUmkCtgxZ57NZCI5isNhdHOsqzyVr7L56f6q65FoUxinlBrJ 0mmZ81FdUjWt2iDwIyaqa3RjOtaJRLgtBQatve44gH3YVDyg3e36D3rd2GP7hssf hFx9V7y6ikMml6sv5Y1MoCNa6Y0BsY6q7XRSgcj8vxYLLRiizaLiMcyrtCMZnXUm ixYisziQO4jRRVNa0dPt0Zt4rs/EXA7oUviugklIs8+m8Enu+/g+/XRc2dKL1LZx OgsS3NWHIirV5bv4xgCoxcFrhX7HPH8pZP4IntK5765Ev+ivewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVhL+L1jvNlvsUI28zE4knjK38LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvYTk3MDA1ZTktZTAwMy0z OWExLWFjMTEtMDU3YzA1MzJjYzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dN8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgPWz4aF4f3ipLqxtXobmWHQkjCn6P7GCnsFJldvEdzzJPnXQxYRfaQ R5peO0ZQ5c7JnwyF6/TPhOd3yNXdC6zW70+yxaAgpmrw0PaJKLnvKHtDecQbPdF6 hPX0sQv4FgN7lp5seAPabvFFWd50bIya5lA322O3Jmg1FXsZREYLdLUed78hS+bB eFn5mCC/pJR31W5vxqmSJiP8aVZsqWXPc/b1fs3a3hsErsErN5LwnJadLlmRlCtc yigoCOUfHjm87nBD5V5ohP3TpExEquhcUC7D2fKR6IMOW+4MRlecgU2lWpDmtQs0 eEa8hl/klwSz1leAR8rizk379tRLrJo= -----END CERTIFICATE-----Generated at Sat Oct 11 11:33:27 2025 by rpki-client