$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/b433dc83-eb3e-38ae-816e-34c81daffaa8.roa File: b433dc83-eb3e-38ae-816e-34c81daffaa8.roa (raw, json) Hash identifier: /n7wTRVQDQpbprwkN8d6DnbHkhapOLPcsXJfeYdtI4s= Subject key identifier: 23:C9:89:6F:52:79:F7:20:24:72:2C:CE:24:22:5B:F4:AE:94:FD:BB Certificate issuer: /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3 Certificate serial: 010D0C9F4328584B4D11C789A0CF0C304AC392D0 Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/b433dc83-eb3e-38ae-816e-34c81daffaa8.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 36829 IP address blocks: 209.142.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:c7:89:a0:cf:0c:30:4a:c3:92:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=364e2aed-eb74-4a25-ac73-3003a5cada2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:22:b9:90:3f:91:50:85:5b:68:ba:d4:da:31: bd:84:f4:3f:d7:08:b0:a1:89:d9:fa:eb:f9:93:e9: ad:7a:70:8e:67:8f:cb:43:54:07:37:1a:c5:c6:d2: 09:f2:3f:58:c9:1b:77:f2:4b:c9:6d:30:c6:0c:2d: 76:eb:90:22:37:97:b6:e1:ff:0d:d5:da:40:e5:36: e2:bd:f3:69:86:40:84:5e:7f:07:71:f7:00:27:95: 88:bb:b7:36:70:43:db:a4:1b:f7:f7:41:33:bd:49: c5:e2:e7:43:fa:e6:94:da:b9:52:86:20:0a:8f:cc: c5:25:91:ad:41:53:4e:d8:48:05:09:43:85:11:6c: 63:63:3c:4b:db:cd:8d:51:ef:c8:a6:7f:ed:5a:c0: fe:01:05:72:ec:0d:62:70:4f:37:20:a9:1f:c9:91: 6c:a1:5b:b7:ce:f5:0a:aa:d8:cd:fd:f1:45:3b:ae: dd:fa:c0:48:bb:a5:39:ca:e1:44:73:ac:f7:e8:35: 0a:b9:a8:eb:7e:63:3b:91:20:c8:c3:2a:f5:92:41: 73:da:a2:98:77:50:a1:34:52:b9:e6:6e:02:b5:9a: c2:f6:b9:16:41:71:78:ab:e7:68:f0:fd:ea:91:ac: 04:d9:d5:b6:65:c4:c1:e3:fa:94:88:03:db:ac:57: 88:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C9:89:6F:52:79:F7:20:24:72:2C:CE:24:22:5B:F4:AE:94:FD:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/b433dc83-eb3e-38ae-816e-34c81daffaa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl X509v3 Authority Key Identifier: keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer sbgp-ipAddrBlock: critical IPv4: 209.142.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:70:8a:cb:13:17:30:1e:da:76:f3:36:05:0d:90:6c:aa:f0: 4d:e5:ad:ad:44:1a:37:46:a4:4c:89:b1:e9:9b:ca:22:68:9c: 5f:07:58:ca:05:f0:1c:ca:98:9d:40:6d:79:b8:96:2e:cc:bb: aa:99:24:d0:69:2a:2b:9f:32:31:56:96:62:10:02:bb:91:e8: f6:80:b8:a5:01:91:92:4b:a9:fd:e8:b2:c9:b9:78:1c:37:a6: b7:25:bd:d7:a3:ea:f7:3a:08:18:3a:d9:31:47:f7:7e:9d:bd: a3:47:5c:7f:f2:10:f5:2b:53:f0:55:ac:8c:8e:8f:0c:fb:b4: 8a:e3:84:55:8d:5d:b3:0d:b3:ba:20:a4:ec:ec:63:51:f6:a7: 90:a3:b2:a6:3a:0a:16:a9:7d:bd:3e:ba:60:66:2c:51:34:10: cf:37:b7:eb:dc:8b:b2:f7:ee:4a:57:ed:93:9d:4a:91:3b:48: f5:0d:3f:91:4c:5d:57:2f:a4:d4:a5:c7:fe:5f:c0:ac:46:ce: e3:89:f4:99:f0:92:04:dc:2d:52:51:4c:4f:89:da:cf:b9:82: be:6c:81:82:30:c6:99:1e:76:a0:d1:4c:f0:15:32:88:eb:87: 92:21:62:8a:e6:5d:db:5a:d7:f1:37:5e:41:80:bb:c1:7d:9d: 5d:08:53:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEceJoM8MMErDktAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjMzhhN2QtMmI1Yy00MzJjLTlkYTAtNzliY2Y5Njc4 MGMzMB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk MzY0ZTJhZWQtZWI3NC00YTI1LWFjNzMtMzAwM2E1Y2FkYTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCK5kD+RUIVbaLrU2jG9hPQ/1wiwoYnZ+uv5 k+mtenCOZ4/LQ1QHNxrFxtIJ8j9YyRt38kvJbTDGDC1265AiN5e24f8N1dpA5Tbi vfNphkCEXn8HcfcAJ5WIu7c2cEPbpBv390EzvUnF4udD+uaU2rlShiAKj8zFJZGt QVNO2EgFCUOFEWxjYzxL282NUe/Ipn/tWsD+AQVy7A1icE83IKkfyZFsoVu3zvUK qtjN/fFFO67d+sBIu6U5yuFEc6z36DUKuajrfmM7kSDIwyr1kkFz2qKYd1ChNFK5 5m4CtZrC9rkWQXF4q+do8P3qkawE2dW2ZcTB4/qUiAPbrFeIbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPJiW9SefcgJHIsziQiW/SulP27MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83M2Mz OGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJjZjk2NzgwYzMvYjQzM2RjODMtZWIzZS0z OGFlLTgxNmUtMzRjODFkYWZmYWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzNjMzhhN2QtMmI1Yy00MzJjLTlk YTAtNzliY2Y5Njc4MGMzLzczYzM4YTdkLTJiNWMtNDMyYy05ZGEwLTc5YmNmOTY3 ODBjMy5jcmwwHwYDVR0jBBgwFoAUkm0CVqEdKJlOuyyRi5298DR4zDEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83M2MzOGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJj Zjk2NzgwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y5lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5wissTFzAe2nbzNgUNkGyq8E3lra1EGjdGpEyJsembyiJonF8HWMoF 8BzKmJ1AbXm4li7Mu6qZJNBpKiufMjFWlmIQAruR6PaAuKUBkZJLqf3ossm5eBw3 prclvdej6vc6CBg62TFH936dvaNHXH/yEPUrU/BVrIyOjwz7tIrjhFWNXbMNs7og pOzsY1H2p5CjsqY6Chapfb0+umBmLFE0EM83t+vci7L37kpX7ZOdSpE7SPUNP5FM XVcvpNSlx/5fwKxGzuOJ9JnwkgTcLVJRTE+J2s+5gr5sgYIwxpkedqDRTPAVMojr h5IhYormXdta1/E3XkGAu8F9nV0IU70= -----END CERTIFICATE-----Generated at Fri Oct 10 22:12:38 2025 by rpki-client