$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/de5b00f2-cadd-3f54-97b7-032b7ca57259.roa File: de5b00f2-cadd-3f54-97b7-032b7ca57259.roa (raw, json) Hash identifier: A3M+wxboWvyaelW4T5Quc+waFfTNgyzrEvDT4e8ULJk= Subject key identifier: B1:9A:D9:77:7C:19:01:1D:AC:BA:E5:06:4D:BF:F2:4C:14:86:9A:D1 Certificate issuer: /CN=237e8029-86f4-41b0-ab75-535531b02fb3 Certificate serial: 010D0C9F4328584B583C8D0D7266BB03BE8CDDC0 Authority key identifier: F8:32:2A:B4:B0:35:C2:D6:A3:D4:EC:A3:B3:76:1C:14:AE:AB:6B:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/de5b00f2-cadd-3f54-97b7-032b7ca57259.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 30713 IP address blocks: 209.221.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/237e8029-86f4-41b0-ab75-535531b02fb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/237e8029-86f4-41b0-ab75-535531b02fb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:8d:0d:72:66:bb:03:be:8c:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=237e8029-86f4-41b0-ab75-535531b02fb3 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=2f759678-89c9-4c79-9d28-b58f39740c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:86:a6:3b:24:60:74:ee:92:1c:93:34:77:4d: 0c:9c:02:46:08:f6:61:4a:ee:86:5c:12:33:0f:65: 3c:41:17:8a:b5:d6:1d:3f:4e:34:0a:79:aa:74:a9: 45:4f:8e:5c:68:25:b3:df:e9:42:ef:1c:2e:b7:cf: e7:33:2a:43:94:97:76:a7:7b:14:42:e8:a4:33:23: 63:55:86:3b:65:62:62:11:6a:48:6c:69:a0:9b:1f: 8c:d5:f3:ad:19:b0:9c:93:cd:16:a6:84:0f:09:80: 97:ce:66:72:f6:b8:00:5f:a3:5c:f8:0d:25:71:62: bd:b7:40:71:6f:3e:ef:f5:82:45:2e:64:04:df:79: 5a:c3:a2:10:38:92:85:2a:d8:67:7e:da:69:d4:fe: 1a:ad:fc:73:5a:d0:5b:d7:c1:ef:9d:98:d9:b6:bb: 72:52:44:3c:fd:f8:dc:f4:0a:e6:b9:c5:c7:11:46: b6:8b:f0:64:6f:98:71:64:4c:71:6c:d5:b8:84:4a: 34:55:43:2b:bb:da:33:b2:65:9a:09:89:46:35:de: c5:9a:fa:3b:ef:7d:87:8c:1a:82:95:07:a2:76:cf: d7:76:5e:d8:5b:e8:d8:0a:37:04:0f:80:23:0a:e4: 42:c3:0f:bf:48:01:03:0f:fa:dd:76:ca:ed:b9:2e: f3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:9A:D9:77:7C:19:01:1D:AC:BA:E5:06:4D:BF:F2:4C:14:86:9A:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/de5b00f2-cadd-3f54-97b7-032b7ca57259.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/237e8029-86f4-41b0-ab75-535531b02fb3.crl X509v3 Authority Key Identifier: keyid:F8:32:2A:B4:B0:35:C2:D6:A3:D4:EC:A3:B3:76:1C:14:AE:AB:6B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3.cer sbgp-ipAddrBlock: critical IPv4: 209.221.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:ab:88:03:67:0c:cb:5c:7b:41:76:95:5e:f9:71:70:08:64: 20:d9:94:b3:80:75:24:38:e9:a8:b4:dd:7b:52:fa:aa:e2:d5: 75:06:d4:e4:3e:8f:e4:b9:27:9a:96:82:dc:46:4a:20:65:5d: aa:7d:29:cd:48:c8:22:8d:ad:11:3b:96:44:22:ed:9e:ee:5a: f5:81:eb:89:9c:9a:53:06:65:86:90:17:ee:79:f7:a1:03:c0: fb:29:f7:b6:53:cc:d7:1c:a5:62:75:90:c6:9b:7b:43:3f:70: 56:b9:2f:1b:07:6a:7d:cc:32:af:16:37:8a:37:a4:c3:7f:1f: b8:12:b7:7d:e1:48:99:41:19:96:b4:6b:cd:ae:4e:7f:b3:85: bb:bf:d1:2d:db:34:e3:d3:fa:94:0c:98:b1:8b:4a:b1:f7:8b: 40:94:07:68:c4:fb:41:8e:89:61:69:e4:0a:ef:e5:7c:4a:20: ca:8f:b8:0e:9b:e5:e2:23:35:16:17:bd:69:47:13:3f:cd:77: 9c:c6:77:9a:1e:e6:c3:27:b3:83:c4:09:a3:22:fc:bc:9d:9c: bf:3e:50:0b:cf:1d:1a:1b:6a:f9:71:92:09:6d:25:2f:3f:f4: 45:4f:f6:cc:d0:98:e4:ba:6b:22:f1:ad:0c:9f:71:71:6d:87: 0f:dc:93:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPI0Ncma7A76M3cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjM3ZTgwMjktODZmNC00MWIwLWFiNzUtNTM1NTMxYjAy ZmIzMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MmY3NTk2NzgtODljOS00Yzc5LTlkMjgtYjU4ZjM5NzQwYzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYamOyRgdO6SHJM0d00MnAJGCPZhSu6GXBIz D2U8QReKtdYdP040CnmqdKlFT45caCWz3+lC7xwut8/nMypDlJd2p3sUQuikMyNj VYY7ZWJiEWpIbGmgmx+M1fOtGbCck80WpoQPCYCXzmZy9rgAX6Nc+A0lcWK9t0Bx bz7v9YJFLmQE33law6IQOJKFKthnftpp1P4arfxzWtBb18HvnZjZtrtyUkQ8/fjc 9ArmucXHEUa2i/Bkb5hxZExxbNW4hEo0VUMru9ozsmWaCYlGNd7Fmvo7732HjBqC lQeids/Xdl7YW+jYCjcED4AjCuRCww+/SAEDD/rddsrtuS7zCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGa2Xd8GQEdrLrlBk2/8kwUhprRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMzdl ODAyOS04NmY0LTQxYjAtYWI3NS01MzU1MzFiMDJmYjMvZGU1YjAwZjItY2FkZC0z ZjU0LTk3YjctMDMyYjdjYTU3MjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjM3ZTgwMjktODZmNC00MWIwLWFi NzUtNTM1NTMxYjAyZmIzLzIzN2U4MDI5LTg2ZjQtNDFiMC1hYjc1LTUzNTUzMWIw MmZiMy5jcmwwHwYDVR0jBBgwFoAU+DIqtLA1wtaj1Oyjs3YcFK6ra3MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMzdlODAyOS04NmY0LTQxYjAtYWI3NS01MzU1 MzFiMDJmYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0d1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGriANnDMtce0F2lV75cXAIZCDZlLOAdSQ46ai03XtS+qri1XUG1OQ+ j+S5J5qWgtxGSiBlXap9Kc1IyCKNrRE7lkQi7Z7uWvWB64mcmlMGZYaQF+5596ED wPsp97ZTzNccpWJ1kMabe0M/cFa5LxsHan3MMq8WN4o3pMN/H7gSt33hSJlBGZa0 a82uTn+zhbu/0S3bNOPT+pQMmLGLSrH3i0CUB2jE+0GOiWFp5Arv5XxKIMqPuA6b 5eIjNRYXvWlHEz/Nd5zGd5oe5sMns4PECaMi/LydnL8+UAvPHRobavlxkgltJS8/ 9EVP9szQmOS6ayLxrQyfcXFthw/ck/I= -----END CERTIFICATE-----Generated at Fri Oct 10 03:57:06 2025 by rpki-client