$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/00d48a25-0292-390b-8771-b64ad9beccdb.roa File: 00d48a25-0292-390b-8771-b64ad9beccdb.roa (raw, json) Hash identifier: ZCqec76pLW7ocFIv2PSn1YPKU2Me9bbaxmxH2jX34Ok= Subject key identifier: 7B:2F:FB:80:18:CF:48:AF:B9:39:94:17:0C:63:DF:F6:2A:0B:94:9C Certificate issuer: /CN=a91fff12-f74d-4a80-9a5d-f225534bc527 Certificate serial: 010D0C9F4328584B76F257D7E3D33D67AB693900 Authority key identifier: 02:B8:42:01:E2:A4:2E:85:E9:E4:88:63:7D:3A:92:9E:0F:C1:C4:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/00d48a25-0292-390b-8771-b64ad9beccdb.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 46595 IP address blocks: 209.169.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/a91fff12-f74d-4a80-9a5d-f225534bc527.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/a91fff12-f74d-4a80-9a5d-f225534bc527.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:57:d7:e3:d3:3d:67:ab:69:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a91fff12-f74d-4a80-9a5d-f225534bc527 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=8267a7e3-46cc-4a90-b886-a72d4cc3dc71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5a:86:a8:b2:18:2b:ef:21:31:d5:13:f3:3f: 0f:15:03:c1:57:55:19:8c:27:56:14:03:5b:f8:7a: 03:d2:5e:a6:22:c6:e4:7f:61:2a:06:4f:d5:5f:95: 5f:4f:82:f9:64:ef:68:8d:2a:c4:84:19:47:f4:0a: 38:98:95:7d:7c:c6:1c:16:e7:d8:17:76:38:88:1d: 0b:00:f4:08:ff:b5:91:bd:a0:8d:1c:a0:fa:8c:8f: 7d:93:46:43:d2:5b:63:96:60:eb:27:eb:fb:10:bf: d1:e6:3b:06:41:55:22:55:eb:ba:c8:61:44:75:60: 49:c7:8c:8f:ce:d9:e2:69:22:85:03:80:a1:45:ba: 70:f3:0d:9a:d8:2c:51:3c:f6:d0:49:78:6d:44:79: a4:f5:e2:e4:df:e5:78:a1:52:7f:b6:69:12:4e:56: 1f:1c:50:ca:19:66:95:a0:b8:f2:6b:01:84:8c:9a: f5:c5:c9:e8:08:c3:30:70:b3:bf:cc:38:a8:aa:d6: 5d:0b:fb:ec:4f:96:81:ed:50:1e:b4:03:e5:69:bc: e5:1d:21:46:f1:93:43:bb:a5:3c:cb:27:74:f8:ad: d9:92:64:7e:d8:af:95:02:6d:70:52:eb:60:cd:a5: 13:db:98:0e:1f:12:d6:0e:aa:48:d9:b7:36:d4:d4: 61:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:2F:FB:80:18:CF:48:AF:B9:39:94:17:0C:63:DF:F6:2A:0B:94:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/00d48a25-0292-390b-8771-b64ad9beccdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/a91fff12-f74d-4a80-9a5d-f225534bc527.crl X509v3 Authority Key Identifier: keyid:02:B8:42:01:E2:A4:2E:85:E9:E4:88:63:7D:3A:92:9E:0F:C1:C4:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer sbgp-ipAddrBlock: critical IPv4: 209.169.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:5b:d5:76:fd:54:85:89:7f:12:e6:61:34:5d:e4:f3:e6:da: b9:59:2c:c2:68:d1:7b:24:40:c0:cc:8c:da:30:52:73:75:0a: 93:2c:58:20:c7:dc:4b:15:a0:50:37:af:5a:62:50:1f:59:0f: a3:d0:a7:fc:7f:a7:15:3f:33:cd:a1:69:ef:8c:21:db:0d:58: 62:86:33:af:2a:74:3a:32:a0:ca:a6:f5:93:df:f9:9e:df:d5: 3b:a8:db:d3:d2:d4:82:1a:e1:ea:f8:92:85:af:f3:97:9d:4a: 65:21:61:79:c4:52:40:38:0a:ec:e1:40:a1:94:66:1b:9e:7c: c5:67:a8:bf:32:7e:e0:c1:20:5a:45:10:5b:9f:78:de:69:3d: 14:dd:87:d7:49:1a:75:84:84:4b:ca:b1:23:df:6a:ee:c6:89: 72:95:a7:c5:b2:34:d2:7a:00:63:22:4c:a6:12:35:2a:a4:a5: 19:ca:5c:b6:92:4b:0d:d0:d5:0c:9f:b7:71:22:93:eb:5f:88: 31:e3:ff:b9:73:52:d6:a1:74:53:e8:55:0f:71:0f:ea:4f:cf: e4:dc:7a:69:d4:19:98:55:24:88:41:f4:bb:f0:06:30:8c:a9: 8a:fa:fb:21:6f:54:ae:70:0a:02:19:ca:88:49:f4:c8:0f:90: 8b:55:bf:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28lfX49M9Z6tpOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTkxZmZmMTItZjc0ZC00YTgwLTlhNWQtZjIyNTUzNGJj NTI3MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ODI2N2E3ZTMtNDZjYy00YTkwLWI4ODYtYTcyZDRjYzNkYzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlqGqLIYK+8hMdUT8z8PFQPBV1UZjCdWFANb +HoD0l6mIsbkf2EqBk/VX5VfT4L5ZO9ojSrEhBlH9Ao4mJV9fMYcFufYF3Y4iB0L APQI/7WRvaCNHKD6jI99k0ZD0ltjlmDrJ+v7EL/R5jsGQVUiVeu6yGFEdWBJx4yP ztniaSKFA4ChRbpw8w2a2CxRPPbQSXhtRHmk9eLk3+V4oVJ/tmkSTlYfHFDKGWaV oLjyawGEjJr1xcnoCMMwcLO/zDioqtZdC/vsT5aB7VAetAPlabzlHSFG8ZNDu6U8 yyd0+K3ZkmR+2K+VAm1wUutgzaUT25gOHxLWDqpI2bc21NRhKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHsv+4AYz0ivuTmUFwxj3/YqC5ScMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hOTFm ZmYxMi1mNzRkLTRhODAtOWE1ZC1mMjI1NTM0YmM1MjcvMDBkNDhhMjUtMDI5Mi0z OTBiLTg3NzEtYjY0YWQ5YmVjY2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTkxZmZmMTItZjc0ZC00YTgwLTlh NWQtZjIyNTUzNGJjNTI3L2E5MWZmZjEyLWY3NGQtNGE4MC05YTVkLWYyMjU1MzRi YzUyNy5jcmwwHwYDVR0jBBgwFoAUArhCAeKkLoXp5IhjfTqSng/BxOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hOTFmZmYxMi1mNzRkLTRhODAtOWE1ZC1mMjI1 NTM0YmM1MjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0akAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtb1Xb9VIWJfxLmYTRd5PPm2rlZLMJo0XskQMDMjNowUnN1CpMsWCDH 3EsVoFA3r1piUB9ZD6PQp/x/pxU/M82hae+MIdsNWGKGM68qdDoyoMqm9ZPf+Z7f 1Tuo29PS1IIa4er4koWv85edSmUhYXnEUkA4CuzhQKGUZhuefMVnqL8yfuDBIFpF EFufeN5pPRTdh9dJGnWEhEvKsSPfau7GiXKVp8WyNNJ6AGMiTKYSNSqkpRnKXLaS Sw3Q1Qyft3Eik+tfiDHj/7lzUtahdFPoVQ9xD+pPz+TcemnUGZhVJIhB9LvwBjCM qYr6+yFvVK5wCgIZyohJ9MgPkItVv+0= -----END CERTIFICATE-----Generated at Sat Oct 11 07:46:27 2025 by rpki-client