$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/888b4e53-c390-3724-b441-2f69dabf74f6.roa File: 888b4e53-c390-3724-b441-2f69dabf74f6.roa (raw, json) Hash identifier: Z+b6xAn8jC6QElSMy+cP/AJnGEbhnpc+GE/H/SS2l4E= Subject key identifier: 92:15:8F:87:8D:A8:65:33:84:C9:75:87:AB:A4:A0:00:24:AA:80:AD Certificate issuer: /CN=05ec8359-4ede-4036-8702-23e5dd37a9ba Certificate serial: 010D0C9F4328584B047C07B23D4C976776C5BB80 Authority key identifier: 36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/888b4e53-c390-3724-b441-2f69dabf74f6.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 21859 IP address blocks: 209.97.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:07:b2:3d:4c:97:67:76:c5:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05ec8359-4ede-4036-8702-23e5dd37a9ba Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=3c9506d8-d9a8-4897-99a6-34cfd7421904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a0:54:c0:c0:eb:46:23:c0:3e:95:de:44:7a: 8e:e7:f4:6b:92:97:fc:f4:e0:20:52:4f:8a:eb:1d: 8e:54:55:09:77:f7:45:e7:47:ae:31:46:74:d3:52: b9:f6:71:6a:c8:1f:3c:ea:5e:13:44:5b:52:d8:e8: 7f:fd:ea:2b:d0:12:32:5a:5e:83:18:3b:ad:05:e8: b9:af:ac:75:49:73:6f:89:99:45:57:50:f1:ed:69: bb:95:56:ef:8f:f9:6c:9a:0e:07:4b:cf:ca:d5:78: d7:24:58:65:09:bd:65:bf:0d:a3:e2:8c:cf:0a:fe: 5b:aa:96:72:55:ba:2d:91:2f:20:d0:ee:0a:eb:d7: c6:6a:d7:14:bf:49:88:b9:c9:dd:bd:2c:9a:2c:ec: a7:82:e6:c7:70:d6:5b:d3:bf:b5:52:62:d2:31:ba: 94:97:27:f2:0a:d8:32:66:a3:92:21:16:3c:3e:82: f3:56:f2:da:57:5e:e3:f1:f0:7c:15:ff:ac:de:fd: f1:f1:0b:36:88:dc:34:4a:d2:1a:0c:6c:5c:41:5b: b8:2d:c8:de:af:d8:bf:0c:f1:ac:06:0d:74:60:d1: 8d:12:4e:1b:e7:94:b5:fb:ef:0d:21:ac:b4:ec:1b: 2c:cc:93:47:08:7b:79:ea:91:b1:34:b8:f2:34:76: 1b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:15:8F:87:8D:A8:65:33:84:C9:75:87:AB:A4:A0:00:24:AA:80:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/888b4e53-c390-3724-b441-2f69dabf74f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.crl X509v3 Authority Key Identifier: keyid:36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer sbgp-ipAddrBlock: critical IPv4: 209.97.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:67:a0:63:a9:02:73:c3:a1:21:66:27:f8:d7:a6:22:1b:7a: 3d:46:d0:49:09:6f:b1:70:2e:df:f8:83:11:a7:f5:21:0c:71: 83:84:10:e6:31:28:3c:59:ad:c1:9d:43:9b:53:5a:7c:e2:5f: 7c:90:23:08:e2:17:9a:5f:a7:14:b9:59:91:ee:f0:fd:9b:18: fd:e7:8f:2d:e6:83:69:1f:b4:f4:48:fa:ad:39:bf:9b:a6:54: 08:7b:f8:0a:b4:15:72:3a:30:53:0c:69:5f:2b:d2:10:35:a4: 7f:56:dd:a0:50:9b:06:ad:b0:6a:0f:d3:d9:a1:63:50:5a:54: 84:49:60:7f:d7:2c:aa:56:51:9c:65:75:b5:7e:47:01:04:46: fb:0d:35:ef:45:68:c0:db:c5:7b:49:43:dd:1c:6d:e8:0d:43: ab:80:7f:ed:21:e6:e7:bf:cb:b3:b0:9c:39:34:ca:6a:2c:ee: c5:2e:f8:df:bb:af:53:01:31:d4:66:02:6c:be:d8:85:3d:29: 9c:28:3e:ae:a0:64:a6:00:39:09:0b:a0:f1:30:f9:1f:7c:b0: f4:1a:3a:d4:65:76:fc:6d:21:7b:cb:63:e3:8c:84:98:cd:45: 42:48:fc:fb:ba:3e:c0:ba:41:ef:6e:6e:a0:a4:e8:76:b8:d6: 68:36:f1:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfAeyPUyXZ3bFu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDVlYzgzNTktNGVkZS00MDM2LTg3MDItMjNlNWRkMzdh OWJhMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk M2M5NTA2ZDgtZDlhOC00ODk3LTk5YTYtMzRjZmQ3NDIxOTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqBUwMDrRiPAPpXeRHqO5/Rrkpf89OAgUk+K 6x2OVFUJd/dF50euMUZ001K59nFqyB886l4TRFtS2Oh//eor0BIyWl6DGDutBei5 r6x1SXNviZlFV1Dx7Wm7lVbvj/lsmg4HS8/K1XjXJFhlCb1lvw2j4ozPCv5bqpZy VbotkS8g0O4K69fGatcUv0mIucndvSyaLOyngubHcNZb07+1UmLSMbqUlyfyCtgy ZqOSIRY8PoLzVvLaV17j8fB8Ff+s3v3x8Qs2iNw0StIaDGxcQVu4Lcjer9i/DPGs Bg10YNGNEk4b55S1++8NIay07BsszJNHCHt56pGxNLjyNHYbgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIVj4eNqGUzhMl1h6ukoAAkqoCtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wNWVj ODM1OS00ZWRlLTQwMzYtODcwMi0yM2U1ZGQzN2E5YmEvODg4YjRlNTMtYzM5MC0z NzI0LWI0NDEtMmY2OWRhYmY3NGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDVlYzgzNTktNGVkZS00MDM2LTg3 MDItMjNlNWRkMzdhOWJhLzA1ZWM4MzU5LTRlZGUtNDAzNi04NzAyLTIzZTVkZDM3 YTliYS5jcmwwHwYDVR0jBBgwFoAUNgroAyQrusZ1eDIsFKW5XRFaAJAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wNWVjODM1OS00ZWRlLTQwMzYtODcwMi0yM2U1 ZGQzN2E5YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WHaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1noGOpAnPDoSFmJ/jXpiIbej1G0EkJb7FwLt/4gxGn9SEMcYOEEOYx KDxZrcGdQ5tTWnziX3yQIwjiF5pfpxS5WZHu8P2bGP3njy3mg2kftPRI+q05v5um VAh7+Aq0FXI6MFMMaV8r0hA1pH9W3aBQmwatsGoP09mhY1BaVIRJYH/XLKpWUZxl dbV+RwEERvsNNe9FaMDbxXtJQ90cbegNQ6uAf+0h5ue/y7OwnDk0ymos7sUu+N+7 r1MBMdRmAmy+2IU9KZwoPq6gZKYAOQkLoPEw+R98sPQaOtRldvxtIXvLY+OMhJjN RUJI/Pu6PsC6Qe9ubqCk6Ha41mg28TM= -----END CERTIFICATE-----Generated at Sat Oct 11 15:58:36 2025 by rpki-client