$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e89af54f-c2c4-33af-9b3f-df8464bb9ec7.roa File: e89af54f-c2c4-33af-9b3f-df8464bb9ec7.roa (raw, json) Hash identifier: WTWeajZeARMSPleGBopav8awffD0wtlsLJOZrnr1P/M= Subject key identifier: 04:12:4C:10:10:F9:79:6B:2A:B2:67:9E:1A:BF:25:C6:77:D8:98:2B Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584B477C78DDDBCBF87315551A00 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e89af54f-c2c4-33af-9b3f-df8464bb9ec7.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 54196 IP address blocks: 209.211.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:78:dd:db:cb:f8:73:15:55:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=1a38413b-fab2-4839-9092-45e36ee007d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6e:24:dd:4d:18:07:50:2a:cb:aa:c8:7c:29: 78:6a:60:5f:e5:4e:05:e7:15:29:aa:e1:08:d8:f1: bd:8e:c2:bd:39:ee:e2:53:4a:ef:5c:67:ce:2c:c1: 26:2f:5c:3e:47:a2:be:9b:a5:e0:3b:fe:81:c0:5f: 4f:97:13:fc:eb:17:79:da:9b:f4:33:86:a1:b1:2a: fe:17:ed:92:32:46:aa:73:36:cb:a2:54:97:fa:3f: 67:b2:a6:57:96:d8:96:f8:7e:ee:fe:de:1f:6c:21: 2b:d7:af:f9:95:67:39:46:f9:97:31:da:00:e5:a3: 3b:5c:3c:a5:ea:d3:73:2d:07:11:09:7b:46:0c:f1: 51:a1:ae:07:8e:b5:8a:4b:96:8d:a1:eb:e6:64:2b: bd:32:4e:3e:ad:26:c9:5e:ca:11:ec:f3:75:31:73: 7a:2c:39:4e:ad:4b:05:4f:2b:0c:ca:c9:c2:f2:0b: 69:89:70:a0:d8:6a:61:2d:2d:4b:6d:8c:02:fd:77: 41:c7:ff:e9:bc:2a:41:f7:50:42:d2:8e:40:28:9b: a0:73:d4:f2:ae:94:b6:1e:56:7b:71:4b:ac:b7:60: a6:8c:a0:c9:73:bb:e5:3f:a5:eb:f2:6a:5f:09:cb: bb:3b:d7:98:79:95:cf:93:45:18:9d:35:ed:6a:83: 10:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:12:4C:10:10:F9:79:6B:2A:B2:67:9E:1A:BF:25:C6:77:D8:98:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e89af54f-c2c4-33af-9b3f-df8464bb9ec7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 209.211.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:aa:ce:74:b4:10:46:7b:33:f2:e2:61:08:19:85:2e:56:23: 3d:b6:f4:78:20:c5:a5:70:c1:2a:5f:47:3d:8d:4d:6b:0d:42: 88:e7:19:c2:84:a9:6c:dc:01:fa:74:e2:3a:71:c8:b1:03:00: 45:02:63:33:e3:80:99:e3:27:af:b1:8c:ee:e2:97:80:3c:e4: 70:7a:39:50:c9:17:b0:43:57:e7:e3:08:e4:16:2a:aa:92:82: b7:ec:d5:49:4d:d3:bb:6b:6a:ae:4c:19:3a:18:05:13:6d:c6: 04:1e:80:f6:be:3e:0b:cb:f4:3d:98:b2:ef:76:fb:10:3b:d2: 2d:55:e1:6b:34:ea:42:38:1a:c9:6f:78:3a:39:c5:dc:6d:93: 43:ea:a8:0a:ba:82:e9:74:0b:eb:6e:65:3a:05:eb:5c:d9:33: 81:4c:13:c2:01:67:24:cb:56:a4:e3:cc:67:16:56:50:ef:ec: 8c:00:6b:3c:01:e1:d2:77:67:1d:e5:50:87:f3:db:c3:ca:35: 6f:3d:78:7b:ae:6c:70:0d:76:2f:70:ef:19:4d:20:9a:f5:29: 61:52:64:8f:db:72:b8:71:c8:3d:c3:e4:a7:ab:c4:61:1a:51: fd:c1:2f:3a:62:bd:56:79:a6:ee:81:93:1d:b8:69:f0:65:35: 4b:df:db:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfHjd28v4cxVVGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk MWEzODQxM2ItZmFiMi00ODM5LTkwOTItNDVlMzZlZTAwN2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm4k3U0YB1Aqy6rIfCl4amBf5U4F5xUpquEI 2PG9jsK9Oe7iU0rvXGfOLMEmL1w+R6K+m6XgO/6BwF9PlxP86xd52pv0M4ahsSr+ F+2SMkaqczbLolSX+j9nsqZXltiW+H7u/t4fbCEr16/5lWc5RvmXMdoA5aM7XDyl 6tNzLQcRCXtGDPFRoa4HjrWKS5aNoevmZCu9Mk4+rSbJXsoR7PN1MXN6LDlOrUsF TysMysnC8gtpiXCg2GphLS1LbYwC/XdBx//pvCpB91BC0o5AKJugc9TyrpS2HlZ7 cUust2CmjKDJc7vlP6Xr8mpfCcu7O9eYeZXPk0UYnTXtaoMQ3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQSTBAQ+XlrKrJnnhq/JcZ32JgrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvZTg5YWY1NGYtYzJjNC0z M2FmLTliM2YtZGY4NDY0YmI5ZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dMcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKiqznS0EEZ7M/LiYQgZhS5WIz229HggxaVwwSpfRz2NTWsNQojnGcKE qWzcAfp04jpxyLEDAEUCYzPjgJnjJ6+xjO7il4A85HB6OVDJF7BDV+fjCOQWKqqS grfs1UlN07traq5MGToYBRNtxgQegPa+PgvL9D2Ysu92+xA70i1V4Ws06kI4Gslv eDo5xdxtk0PqqAq6gul0C+tuZToF61zZM4FME8IBZyTLVqTjzGcWVlDv7IwAazwB 4dJ3Zx3lUIfz28PKNW89eHuubHANdi9w7xlNIJr1KWFSZI/bcrhxyD3D5KerxGEa Uf3BLzpivVZ5pu6Bkx24afBlNUvf27U= -----END CERTIFICATE-----Generated at Sat Oct 11 11:30:28 2025 by rpki-client