$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b/e86b2bcd-e0c6-3540-9739-11e9823e2f3a.roa File: e86b2bcd-e0c6-3540-9739-11e9823e2f3a.roa (raw, json) Hash identifier: KZ6XIQysLL9nIEGDFXDBc3w9LFs11gpKXeV+dJj2DTQ= Subject key identifier: 53:51:88:14:31:BF:82:9E:B4:07:8C:4A:C6:9B:08:49:5C:B6:55:D2 Certificate issuer: /CN=25d7d3fc-8bab-49db-bccd-5054dcd6f19b Certificate serial: 010D0C9F4328584B2A1B0F85574EF680D42A9DD0 Authority key identifier: 4D:24:2B:65:21:DB:48:BF:86:5D:B8:81:7F:30:5C:5D:07:93:C0:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b/e86b2bcd-e0c6-3540-9739-11e9823e2f3a.roa Signing time: Fri 12 Sep 2025 00:26:10 +0000 ROA not before: Fri 12 Sep 2025 00:26:10 +0000 ROA not after: Thu 11 Dec 2025 01:26:10 +0000 asID: 8075 IP address blocks: 209.94.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b/25d7d3fc-8bab-49db-bccd-5054dcd6f19b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b/25d7d3fc-8bab-49db-bccd-5054dcd6f19b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:1b:0f:85:57:4e:f6:80:d4:2a:9d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25d7d3fc-8bab-49db-bccd-5054dcd6f19b Validity Not Before: Sep 12 00:26:10 2025 GMT Not After : Dec 11 01:26:10 2025 GMT Subject: CN=8baa7428-93e9-4c27-a5e0-7e2276d35d1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c6:b1:95:47:c9:41:6a:76:42:ac:ba:b2:fc: b6:93:a3:6a:cf:aa:70:a0:5a:96:65:d4:21:4f:19: 5c:10:fb:8a:d7:09:94:3f:f5:e3:55:0d:70:db:f0: 54:cf:d7:9c:38:1b:66:25:fc:93:ca:ad:d2:1e:68: 7b:49:10:8b:72:b3:1d:2b:d5:95:db:ff:67:34:f5: b3:c6:47:47:d2:22:09:05:57:4a:b9:ea:33:db:b8: 90:c9:0c:03:22:33:88:3f:aa:b1:4b:1a:e2:4d:5a: 84:5e:f7:4f:d9:5a:fb:b9:31:90:f9:44:1c:a7:ce: 60:96:0b:b5:d6:4d:f3:10:51:0a:50:1a:dd:59:73: d5:81:f3:17:7b:1a:fe:b5:fb:4b:03:a0:aa:ba:3f: 5c:01:7b:9e:44:c4:3d:8e:76:13:85:f1:b9:0d:32: e1:f6:5e:72:1e:6b:51:aa:27:a6:29:27:78:98:fe: 81:52:de:02:da:f7:d5:c3:83:94:01:00:25:9a:42: c6:17:39:04:f4:7e:9a:b6:71:e9:8a:b9:b2:09:fc: 81:db:7a:09:85:2f:83:e6:18:2f:2b:1d:e1:d3:02: 5e:ce:26:a7:20:4a:6a:2c:af:73:4b:53:da:c5:ec: 59:b6:62:01:67:9b:a5:c0:cd:16:ce:d5:fa:e5:ec: fd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:51:88:14:31:BF:82:9E:B4:07:8C:4A:C6:9B:08:49:5C:B6:55:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b/e86b2bcd-e0c6-3540-9739-11e9823e2f3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b/25d7d3fc-8bab-49db-bccd-5054dcd6f19b.crl X509v3 Authority Key Identifier: keyid:4D:24:2B:65:21:DB:48:BF:86:5D:B8:81:7F:30:5C:5D:07:93:C0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b.cer sbgp-ipAddrBlock: critical IPv4: 209.94.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:f3:da:9a:d5:9f:fc:ca:dc:1d:aa:2c:b6:6f:ea:1e:82:9d: 94:86:b7:ca:9e:cd:19:d1:b7:fb:a8:49:e9:21:0a:d4:49:4e: 4d:53:bc:46:27:8a:b4:3d:04:fb:cb:61:81:ef:28:47:f6:02: dd:f9:f3:95:6b:75:a9:e6:5d:c6:18:06:ae:47:eb:84:e0:bb: a8:9c:a8:8e:e7:4d:46:8c:26:cc:c2:8a:e1:cd:2f:42:ae:0b: ee:36:aa:85:31:3c:30:cb:9f:b5:f2:0c:11:59:70:64:e3:42: 02:b4:09:92:2a:3d:36:b3:0e:24:ab:43:70:81:3b:7c:00:40: 42:43:b2:01:3c:bb:07:c0:e7:5b:36:6c:2e:49:50:58:53:7a: 93:20:09:ce:0b:87:22:90:fe:38:9b:7e:95:e5:cd:67:6f:cd: 61:fd:08:d6:70:4c:44:77:a0:c5:02:59:68:95:29:91:9f:8d: a7:c3:a7:42:3f:a3:ba:a8:7f:19:6f:77:dc:f1:4b:94:0a:87: bc:9f:b8:17:0d:50:0d:b0:a1:49:21:65:f2:17:85:5c:fa:04: 6e:81:2c:c0:51:8f:20:21:3d:60:4f:d7:f4:b7:55:95:ad:48: ef:54:c4:37:d8:a8:5f:50:36:d9:0b:2c:92:b8:cb:fc:d2:16: d8:f2:66:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqGw+FV072gNQqndAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVkN2QzZmMtOGJhYi00OWRiLWJjY2QtNTA1NGRjZDZm MTliMB4XDTI1MDkxMjAwMjYxMFoXDTI1MTIxMTAxMjYxMFowLzEtMCsGA1UEAxMk OGJhYTc0MjgtOTNlOS00YzI3LWE1ZTAtN2UyMjc2ZDM1ZDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsaxlUfJQWp2Qqy6svy2k6Nqz6pwoFqWZdQh TxlcEPuK1wmUP/XjVQ1w2/BUz9ecOBtmJfyTyq3SHmh7SRCLcrMdK9WV2/9nNPWz xkdH0iIJBVdKueoz27iQyQwDIjOIP6qxSxriTVqEXvdP2Vr7uTGQ+UQcp85glgu1 1k3zEFEKUBrdWXPVgfMXexr+tftLA6Cquj9cAXueRMQ9jnYThfG5DTLh9l5yHmtR qiemKSd4mP6BUt4C2vfVw4OUAQAlmkLGFzkE9H6atnHpirmyCfyB23oJhS+D5hgv Kx3h0wJezianIEpqLK9zS1PaxexZtmIBZ5ulwM0WztX65ez9LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNRiBQxv4KetAeMSsabCElctlXSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yNWQ3 ZDNmYy04YmFiLTQ5ZGItYmNjZC01MDU0ZGNkNmYxOWIvZTg2YjJiY2QtZTBjNi0z NTQwLTk3MzktMTFlOTgyM2UyZjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjVkN2QzZmMtOGJhYi00OWRiLWJj Y2QtNTA1NGRjZDZmMTliLzI1ZDdkM2ZjLThiYWItNDlkYi1iY2NkLTUwNTRkY2Q2 ZjE5Yi5jcmwwHwYDVR0jBBgwFoAUTSQrZSHbSL+GXbiBfzBcXQeTwGUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yNWQ3ZDNmYy04YmFiLTQ5ZGItYmNjZC01MDU0 ZGNkNmYxOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0V5RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnz2prVn/zK3B2qLLZv6h6CnZSGt8qezRnRt/uoSekhCtRJTk1TvEYn irQ9BPvLYYHvKEf2At3585VrdanmXcYYBq5H64Tgu6icqI7nTUaMJszCiuHNL0Ku C+42qoUxPDDLn7XyDBFZcGTjQgK0CZIqPTazDiSrQ3CBO3wAQEJDsgE8uwfA51s2 bC5JUFhTepMgCc4LhyKQ/jibfpXlzWdvzWH9CNZwTER3oMUCWWiVKZGfjafDp0I/ o7qofxlvd9zxS5QKh7yfuBcNUA2woUkhZfIXhVz6BG6BLMBRjyAhPWBP1/S3VZWt SO9UxDfYqF9QNtkLLJK4y/zSFtjyZrs= -----END CERTIFICATE-----Generated at Fri Oct 10 22:12:39 2025 by rpki-client