$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/b4bd7628-38af-312d-b5f4-9ac5f494b7c5.roa File: b4bd7628-38af-312d-b5f4-9ac5f494b7c5.roa (raw, json) Hash identifier: 6OaMW3pNxckM9QWu0D/r91e/1LjnVAd49xWmPDyrbXo= Subject key identifier: CB:9F:F7:73:99:22:2A:34:D8:C9:26:12:28:E3:35:14:AE:1B:98:3A Certificate issuer: /CN=09440a93-986f-41da-8723-7b67f81bdbce Certificate serial: 010D0C9F4328584B6164C9C629CCFA3A5D314C80 Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/b4bd7628-38af-312d-b5f4-9ac5f494b7c5.roa Signing time: Wed 01 Oct 2025 19:44:11 +0000 ROA not before: Wed 01 Oct 2025 19:44:11 +0000 ROA not after: Tue 30 Dec 2025 20:44:11 +0000 asID: 19901 IP address blocks: 208.160.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:61:64:c9:c6:29:cc:fa:3a:5d:31:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce Validity Not Before: Oct 1 19:44:11 2025 GMT Not After : Dec 30 20:44:11 2025 GMT Subject: CN=07a9b2cf-dd6e-4fff-9c0e-30095f55112a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:22:bc:37:b3:58:52:39:9f:a1:02:1e:08:65: ad:8d:96:f7:f5:27:af:78:8f:b9:2c:20:70:c9:f3: 69:f4:43:75:a0:51:41:da:6c:5e:3a:c1:97:82:e4: 3a:37:98:ec:e8:01:d6:8e:a3:ba:6f:e7:19:24:5c: b4:33:e6:bc:02:83:e6:72:ba:cb:e1:d9:76:0f:44: 05:9b:e0:62:66:89:ce:0c:f4:e4:c6:b4:b3:8e:f1: e9:38:2a:58:55:5d:5e:7e:1e:fd:f2:2f:ec:f8:ea: 9a:fd:7a:be:9e:50:e9:4c:72:5e:96:06:98:3d:04: e4:70:d1:eb:07:53:66:ac:83:a2:93:7e:cb:73:82: e4:bf:51:4d:71:b4:7b:80:0e:6f:9c:e7:5c:ce:e6: 33:78:b8:d6:00:36:60:4d:4e:90:13:8f:ae:c0:49: 2d:29:41:c3:ee:77:4c:33:df:11:c9:0f:59:c6:16: 5d:a5:37:13:a0:28:45:ac:70:97:be:8f:3e:39:0a: c6:35:eb:c2:53:58:fd:68:bf:d3:62:e4:9b:e9:57: 8f:de:0d:f6:b6:dd:8a:1a:3c:37:bc:c4:f4:98:35: b6:13:e9:b2:cf:e3:89:c6:ef:67:f2:05:58:71:18: 6f:8b:3d:00:33:0e:a2:e5:bd:cd:8f:ff:b8:47:78: 12:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:9F:F7:73:99:22:2A:34:D8:C9:26:12:28:E3:35:14:AE:1B:98:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/b4bd7628-38af-312d-b5f4-9ac5f494b7c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl X509v3 Authority Key Identifier: keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer sbgp-ipAddrBlock: critical IPv4: 208.160.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:69:93:59:d0:85:e8:76:77:50:a3:c9:4f:f6:1b:18:49:35: d4:57:43:d3:8f:38:74:61:c3:85:cd:f7:18:3d:d2:57:5a:52: 97:84:45:b7:44:43:17:4c:d8:eb:41:04:ea:ea:e0:ab:a4:cb: 34:77:02:64:4b:af:55:ae:57:50:1a:2b:1c:99:72:cc:08:cb: b9:e5:57:c9:f8:25:af:a6:c3:6b:98:a8:93:3d:97:eb:f8:3b: c1:ad:6e:45:b0:f4:dd:78:88:7f:0e:12:b5:7b:78:5d:77:cd: ca:de:e3:d8:4c:36:fa:3f:63:2a:59:e0:ae:bc:83:e6:c3:02: 08:b5:07:34:38:33:3f:e4:fd:72:89:2a:b5:b2:1a:d3:02:46: a1:94:3e:8f:a7:df:1f:5c:13:66:ce:47:ee:51:0b:88:78:32: 72:e3:c2:a4:c6:dc:7d:1f:9c:da:9b:a5:e7:e4:a2:58:c1:80: 4e:8f:32:5b:7c:cc:58:78:48:7b:e4:df:a3:c9:92:0c:76:ce: f1:21:8f:c4:df:b6:bd:a7:ff:87:58:cc:09:37:e5:72:6f:00: 95:0b:5a:9f:8c:a2:0f:84:55:b6:89:6a:7c:59:58:ca:aa:7e: ca:dd:1e:c6:fb:92:10:c0:31:39:1e:34:c5:ec:0d:71:5d:bf: ec:be:c7:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEthZMnGKcz6Ol0xTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDk0NDBhOTMtOTg2Zi00MWRhLTg3MjMtN2I2N2Y4MWJk YmNlMB4XDTI1MTAwMTE5NDQxMVoXDTI1MTIzMDIwNDQxMVowLzEtMCsGA1UEAxMk MDdhOWIyY2YtZGQ2ZS00ZmZmLTljMGUtMzAwOTVmNTUxMTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSK8N7NYUjmfoQIeCGWtjZb39SeveI+5LCBw yfNp9EN1oFFB2mxeOsGXguQ6N5js6AHWjqO6b+cZJFy0M+a8AoPmcrrL4dl2D0QF m+BiZonODPTkxrSzjvHpOCpYVV1efh798i/s+Oqa/Xq+nlDpTHJelgaYPQTkcNHr B1NmrIOik37Lc4Lkv1FNcbR7gA5vnOdczuYzeLjWADZgTU6QE4+uwEktKUHD7ndM M98RyQ9ZxhZdpTcToChFrHCXvo8+OQrGNevCU1j9aL/TYuSb6VeP3g32tt2KGjw3 vMT0mDW2E+myz+OJxu9n8gVYcRhviz0AMw6i5b3Nj/+4R3gSqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMuf93OZIio02MkmEijjNRSuG5g6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0 MGE5My05ODZmLTQxZGEtODcyMy03YjY3ZjgxYmRiY2UvYjRiZDc2MjgtMzhhZi0z MTJkLWI1ZjQtOWFjNWY0OTRiN2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDk0NDBhOTMtOTg2Zi00MWRhLTg3 MjMtN2I2N2Y4MWJkYmNlLzA5NDQwYTkzLTk4NmYtNDFkYS04NzIzLTdiNjdmODFi ZGJjZS5jcmwwHwYDVR0jBBgwFoAUSEuB66mWlz+y3uneit7pXEIwQ4MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0MGE5My05ODZmLTQxZGEtODcyMy03YjY3 ZjgxYmRiY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0KDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRpk1nQheh2d1CjyU/2GxhJNdRXQ9OPOHRhw4XN9xg90ldaUpeERbdE QxdM2OtBBOrq4KukyzR3AmRLr1WuV1AaKxyZcswIy7nlV8n4Ja+mw2uYqJM9l+v4 O8GtbkWw9N14iH8OErV7eF13zcre49hMNvo/YypZ4K68g+bDAgi1BzQ4Mz/k/XKJ KrWyGtMCRqGUPo+n3x9cE2bOR+5RC4h4MnLjwqTG3H0fnNqbpefkoljBgE6PMlt8 zFh4SHvk36PJkgx2zvEhj8Tftr2n/4dYzAk35XJvAJULWp+Mog+EVbaJanxZWMqq fsrdHsb7khDAMTkeNMXsDXFdv+y+x0E= -----END CERTIFICATE-----Generated at Fri Oct 10 20:57:37 2025 by rpki-client