$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/2b93d2a9-8779-3d10-9e6f-ddb702dc8e09.roa File: 2b93d2a9-8779-3d10-9e6f-ddb702dc8e09.roa (raw, json) Hash identifier: 0dB5oPai+02BmF5goMXlNm+xYIEEoj0NOnOArvNokXg= Subject key identifier: 50:17:40:B4:0F:B5:49:76:DD:C8:70:87:16:6C:6C:9D:AD:BC:C4:E5 Certificate issuer: /CN=895b91dd-3a1f-46e8-88e9-1a06a1c88756 Certificate serial: 010D0C9F4328584B1D9C281DBAC25F4EFC9C5200 Authority key identifier: 8B:A3:70:CC:C8:96:6C:14:AB:9C:B7:BF:2E:DB:F1:66:BF:63:A8:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/2b93d2a9-8779-3d10-9e6f-ddb702dc8e09.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 53486 IP address blocks: 209.35.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:28:1d:ba:c2:5f:4e:fc:9c:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=895b91dd-3a1f-46e8-88e9-1a06a1c88756 Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=f9362dde-9ff1-4c8a-a49c-7c357aa8c2eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5e:a0:f4:b9:3c:27:71:cb:ab:42:df:70:e8: 20:63:b4:c8:07:2e:fb:84:e3:49:34:8d:ac:09:78: e8:1f:3f:7d:71:25:4a:a9:bf:d2:35:49:6a:bb:e0: 80:db:88:f4:d2:11:5f:7e:be:1e:7c:37:ae:53:f4: 45:60:fb:6f:05:93:11:eb:d7:34:5a:25:94:f5:b1: c0:f5:d8:e8:b1:2f:20:37:ab:78:3c:83:33:b7:9c: f5:4d:3d:18:67:85:be:f6:b9:9e:6f:3a:f2:2e:f6: ee:99:2c:dd:d3:c9:4e:8f:5d:53:cc:33:12:98:3c: 57:b7:8c:29:ad:07:00:3d:e0:55:08:e5:54:ba:55: 53:09:fc:03:a1:4a:4d:cd:05:23:dc:31:b6:33:50: 88:a8:8d:7d:5b:db:56:91:11:98:8e:33:91:c3:82: 8c:f6:b3:01:a0:dc:a6:c9:6b:5f:f4:51:63:57:b2: af:4c:2a:3d:17:c0:59:dc:8d:1c:27:9e:ee:0c:aa: 5f:0e:c9:4a:b9:dd:b0:72:6c:fd:8d:1a:26:c5:65: 78:fb:4d:81:54:ab:0e:e0:10:fa:0a:70:d2:28:eb: e9:4b:99:ec:26:8a:46:de:5c:73:12:d8:42:1c:36: ec:1d:eb:14:1e:e5:c4:b0:bd:a6:d9:f0:50:d7:d4: 1c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:17:40:B4:0F:B5:49:76:DD:C8:70:87:16:6C:6C:9D:AD:BC:C4:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/2b93d2a9-8779-3d10-9e6f-ddb702dc8e09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756/895b91dd-3a1f-46e8-88e9-1a06a1c88756.crl X509v3 Authority Key Identifier: keyid:8B:A3:70:CC:C8:96:6C:14:AB:9C:B7:BF:2E:DB:F1:66:BF:63:A8:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/895b91dd-3a1f-46e8-88e9-1a06a1c88756.cer sbgp-ipAddrBlock: critical IPv4: 209.35.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:62:e2:d7:91:33:cb:fb:f0:2f:47:ff:2f:bb:11:f2:32:b7: 3e:9e:e9:49:7a:44:27:ae:d5:0b:9a:c3:8b:5c:b0:28:b9:e0: 2d:36:c8:c9:04:07:c9:fa:35:62:6b:40:11:c5:b3:e5:85:c7: e5:aa:ce:9b:7d:54:59:54:75:41:b0:93:c8:58:94:e1:29:c7: 1b:43:9e:9c:43:a9:34:88:73:0a:83:d3:9f:e8:4e:3b:50:ea: 00:d7:9b:f2:a9:e5:d6:05:4a:b4:b5:1d:d2:9e:37:a0:14:d8: 40:b5:b0:66:ce:cd:27:10:a4:fb:a3:14:37:e4:4b:e9:a7:13: a2:93:f6:39:38:73:8c:6b:2e:f4:01:5e:95:b9:40:9a:e3:eb: d2:40:54:39:46:48:ff:9f:f5:12:ae:08:0f:a2:16:48:5b:b2: 3d:26:0e:4d:ec:5d:97:d7:7c:c9:03:d6:1d:54:94:36:b9:f5: 62:c5:16:65:92:10:20:5a:89:1a:29:b5:b8:bd:37:46:a0:c7: 6e:f0:b9:84:d1:12:cf:bc:59:41:f3:39:ca:37:fe:9f:be:3c: 50:9b:78:72:1a:ae:8c:aa:e6:c2:d0:e3:21:57:f9:f6:37:36: 7d:02:f0:92:12:59:cc:73:3d:db:22:54:57:e3:0e:ea:c5:45: d5:66:36:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnCgdusJfTvycUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODk1YjkxZGQtM2ExZi00NmU4LTg4ZTktMWEwNmExYzg4 NzU2MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk ZjkzNjJkZGUtOWZmMS00YzhhLWE0OWMtN2MzNTdhYThjMmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF6g9Lk8J3HLq0LfcOggY7TIBy77hONJNI2s CXjoHz99cSVKqb/SNUlqu+CA24j00hFffr4efDeuU/RFYPtvBZMR69c0WiWU9bHA 9djosS8gN6t4PIMzt5z1TT0YZ4W+9rmebzryLvbumSzd08lOj11TzDMSmDxXt4wp rQcAPeBVCOVUulVTCfwDoUpNzQUj3DG2M1CIqI19W9tWkRGYjjORw4KM9rMBoNym yWtf9FFjV7KvTCo9F8BZ3I0cJ57uDKpfDslKud2wcmz9jRomxWV4+02BVKsO4BD6 CnDSKOvpS5nsJopG3lxzEthCHDbsHesUHuXEsL2m2fBQ19QcSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAXQLQPtUl23chwhxZsbJ2tvMTlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84OTVi OTFkZC0zYTFmLTQ2ZTgtODhlOS0xYTA2YTFjODg3NTYvMmI5M2QyYTktODc3OS0z ZDEwLTllNmYtZGRiNzAyZGM4ZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODk1YjkxZGQtM2ExZi00NmU4LTg4 ZTktMWEwNmExYzg4NzU2Lzg5NWI5MWRkLTNhMWYtNDZlOC04OGU5LTFhMDZhMWM4 ODc1Ni5jcmwwHwYDVR0jBBgwFoAUi6NwzMiWbBSrnLe/LtvxZr9jqMUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84OTViOTFkZC0zYTFmLTQ2ZTgtODhlOS0xYTA2 YTFjODg3NTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0SMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhi4teRM8v78C9H/y+7EfIytz6e6Ul6RCeu1Quaw4tcsCi54C02yMkE B8n6NWJrQBHFs+WFx+Wqzpt9VFlUdUGwk8hYlOEpxxtDnpxDqTSIcwqD05/oTjtQ 6gDXm/Kp5dYFSrS1HdKeN6AU2EC1sGbOzScQpPujFDfkS+mnE6KT9jk4c4xrLvQB XpW5QJrj69JAVDlGSP+f9RKuCA+iFkhbsj0mDk3sXZfXfMkD1h1UlDa59WLFFmWS ECBaiRoptbi9N0agx27wuYTREs+8WUHzOco3/p++PFCbeHIaroyq5sLQ4yFX+fY3 Nn0C8JISWcxzPdsiVFfjDurFRdVmNmI= -----END CERTIFICATE-----Generated at Fri Oct 10 22:12:45 2025 by rpki-client