$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/af04d1ea-2b61-30e8-9a48-0300a4f75436.roa File: af04d1ea-2b61-30e8-9a48-0300a4f75436.roa (raw, json) Hash identifier: 0zulc+HYSX3Y9BfWJrpBTap39tVKZmUnkqm3S3FAyfk= Subject key identifier: 8F:44:E6:50:6C:39:54:76:4F:76:88:7A:E1:5E:8D:E9:2A:05:56:9E Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584B477C96EBE71005444A4D9D80 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/af04d1ea-2b61-30e8-9a48-0300a4f75436.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 10753 IP address blocks: 209.211.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:96:eb:e7:10:05:44:4a:4d:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=db5652ff-9f0b-43ba-8164-9a6dffea50f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4b:55:fa:ac:6e:c1:23:c1:2b:31:87:8d:f1: 7f:08:c3:04:85:83:74:ba:42:4c:bf:ce:57:5c:55: 46:8d:21:70:85:ce:04:9c:da:f6:4a:56:da:3f:4f: f6:f2:4a:bd:ab:a1:a6:d4:71:cf:6f:1e:3a:9d:e1: 0e:5a:77:56:96:4e:8a:dc:74:f9:0c:16:91:e5:ea: 85:e4:39:8d:60:25:89:c8:86:e2:e2:66:38:02:1a: 96:3b:3a:d1:71:f3:d1:0b:3d:22:dc:d1:cc:b4:b6: 10:08:d6:f4:5f:ce:3d:a8:50:aa:79:6c:37:ad:54: 2d:db:83:95:1c:3b:9c:ad:a6:5d:ec:c9:7f:2a:58: 1b:88:98:6a:97:85:df:8a:a3:b5:4c:6b:64:00:3d: c2:a3:38:a6:2a:da:21:09:23:5f:5c:01:ba:8a:a9: cf:61:c4:fa:ad:e7:d8:68:d6:58:fd:ca:7d:b9:6f: b6:f9:f9:4f:41:19:db:60:a7:d8:21:1e:55:a0:72: 45:90:7f:39:c0:e5:ba:6f:20:8d:af:2b:77:67:4c: 6b:64:53:36:51:b4:c7:0b:42:f7:6e:2c:0d:30:09: 33:1d:70:e8:53:b9:99:e3:36:f6:98:66:4b:4e:57: 3e:cc:96:21:b1:ab:b4:97:e4:03:c5:ee:71:72:ca: 46:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:44:E6:50:6C:39:54:76:4F:76:88:7A:E1:5E:8D:E9:2A:05:56:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/af04d1ea-2b61-30e8-9a48-0300a4f75436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 209.211.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:b5:c9:fc:ca:17:11:f6:f9:d6:d2:09:b7:e1:2f:d3:9f:d8: 41:1c:3b:15:c5:46:54:5f:1d:bf:f8:d3:91:37:1d:b4:f0:b0: 03:17:4d:1f:be:6f:6f:e3:79:92:35:1e:7b:43:94:df:06:c4: 8a:b0:5e:9a:d3:9e:20:e1:46:16:d7:af:e9:14:6b:25:3e:dc: 0a:d0:02:a5:67:8c:9a:32:e7:bd:0b:91:38:61:c7:ed:f3:a9: 93:02:37:25:1f:d8:30:2c:a1:e8:74:46:de:26:31:e0:61:1f: 35:2f:fb:67:14:c5:2c:88:54:e3:5c:c7:39:d8:65:9d:9d:db: a5:30:f9:b7:58:89:93:26:15:3b:23:49:fd:83:28:73:26:68: 30:80:a4:bf:b9:cf:9f:dd:ac:c3:1a:59:a5:c0:ee:11:b0:86: 83:c2:79:f1:38:cf:9e:64:a8:9c:ff:98:72:00:34:86:19:e1: 4d:1d:69:f8:36:3c:4b:af:66:72:09:75:99:9d:b8:2f:c5:8d: bb:5c:6e:ce:c1:cc:8c:00:73:1c:6c:ce:65:20:46:d0:6e:f6: 3c:18:0f:c3:a2:ba:6e:f9:e0:66:b9:eb:c2:d7:a3:ba:87:0d: 28:62:7c:31:ea:3b:d0:d8:90:68:7d:41:e2:72:92:8e:d4:c7: 18:c1:de:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfJbr5xAFREpNnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk ZGI1NjUyZmYtOWYwYi00M2JhLTgxNjQtOWE2ZGZmZWE1MGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEtV+qxuwSPBKzGHjfF/CMMEhYN0ukJMv85X XFVGjSFwhc4EnNr2SlbaP0/28kq9q6Gm1HHPbx46neEOWndWlk6K3HT5DBaR5eqF 5DmNYCWJyIbi4mY4AhqWOzrRcfPRCz0i3NHMtLYQCNb0X849qFCqeWw3rVQt24OV HDucraZd7Ml/KlgbiJhql4XfiqO1TGtkAD3CozimKtohCSNfXAG6iqnPYcT6refY aNZY/cp9uW+2+flPQRnbYKfYIR5VoHJFkH85wOW6byCNryt3Z0xrZFM2UbTHC0L3 biwNMAkzHXDoU7mZ4zb2mGZLTlc+zJYhsau0l+QDxe5xcspGVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9E5lBsOVR2T3aIeuFejekqBVaeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvYWYwNGQxZWEtMmI2MS0z MGU4LTlhNDgtMDMwMGE0Zjc1NDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dPNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKm1yfzKFxH2+dbSCbfhL9Of2EEcOxXFRlRfHb/405E3HbTwsAMXTR++ b2/jeZI1HntDlN8GxIqwXprTniDhRhbXr+kUayU+3ArQAqVnjJoy570LkThhx+3z qZMCNyUf2DAsoeh0Rt4mMeBhHzUv+2cUxSyIVONcxznYZZ2d26Uw+bdYiZMmFTsj Sf2DKHMmaDCApL+5z5/drMMaWaXA7hGwhoPCefE4z55kqJz/mHIANIYZ4U0dafg2 PEuvZnIJdZmduC/Fjbtcbs7BzIwAcxxszmUgRtBu9jwYD8Oium754Ga568LXo7qH DShifDHqO9DYkGh9QeJyko7UxxjB3u4= -----END CERTIFICATE-----Generated at Sat Oct 11 11:33:26 2025 by rpki-client