$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/bb1281d1-e460-37d2-86c6-7963176a95b0.roa File: bb1281d1-e460-37d2-86c6-7963176a95b0.roa (raw, json) Hash identifier: e6Nv1uQ/2i4bKGHk2fVO+z8cdpp52KP3lJ6/E57LdEY= Subject key identifier: 2E:CC:36:68:3F:34:19:0A:0F:C0:C4:DA:FC:69:F7:40:56:F4:9B:28 Certificate issuer: /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3 Certificate serial: 010D0C9F4328584B0746C59B3507ADB80147BC00 Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/bb1281d1-e460-37d2-86c6-7963176a95b0.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 984 IP address blocks: 209.142.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:c5:9b:35:07:ad:b8:01:47:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=3517fcd1-3250-4438-ac9a-dfe753cb7ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8e:cf:b7:86:28:d0:b5:49:49:a9:9b:5d:30: 3c:d7:7e:9a:4a:4e:df:f5:ed:1b:1b:5e:ca:ad:05: e5:ff:de:cd:27:f4:08:88:e7:34:37:8a:67:24:9c: af:15:3c:f7:08:47:e4:1c:37:21:82:96:0e:03:1b: 0e:b7:13:1e:d5:83:ff:bb:7f:a1:97:9a:8a:52:15: 8c:c8:4c:51:d1:e0:cb:5e:3c:33:95:06:61:30:ea: 94:2d:1b:23:c8:08:2c:04:a7:93:2c:12:53:cb:06: fc:aa:1b:10:ab:82:90:d3:ee:9c:9d:a2:ef:03:eb: 7e:12:8a:fb:75:f2:4a:c3:08:5a:76:c1:96:c7:50: 86:12:92:74:07:cf:41:19:68:c5:fe:dc:95:7a:f6: 56:57:b2:36:63:f7:39:b4:e6:33:10:96:1c:44:19: 06:af:62:2d:0b:a5:ca:a8:e9:f1:8a:a4:ce:b7:e4: c7:76:bf:79:2a:4d:e7:3d:5b:f3:19:66:22:5b:70: 64:28:8f:f9:59:6f:9a:ba:31:21:a0:7c:2b:84:e8: b9:69:af:2e:79:55:6a:5b:88:34:e9:da:65:73:38: 24:50:04:f7:4a:49:67:62:17:4d:45:69:b0:1e:85: ad:4e:30:bc:86:65:7a:e7:ea:ff:f0:ad:9b:95:d8: a6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CC:36:68:3F:34:19:0A:0F:C0:C4:DA:FC:69:F7:40:56:F4:9B:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/bb1281d1-e460-37d2-86c6-7963176a95b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl X509v3 Authority Key Identifier: keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer sbgp-ipAddrBlock: critical IPv4: 209.142.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:86:d6:55:97:d6:67:62:cd:93:22:0a:35:30:a9:c9:b8:df: f3:b8:e6:22:49:9e:90:08:8a:20:fb:bd:56:69:1d:dc:15:7c: f2:61:1e:df:78:8f:bd:4e:ce:34:97:fc:3a:25:5a:2e:63:80: db:d5:ce:10:99:0a:9d:9c:36:3f:b9:d9:eb:6e:64:60:ab:da: 96:1e:db:c5:4b:83:8d:6a:49:e8:f3:33:31:c9:a6:cf:48:84: 6f:2e:f7:1f:d9:6b:f1:67:b6:e8:19:19:6a:68:9e:68:46:c5: 42:67:1e:f6:d4:38:3d:d4:ac:c8:57:65:18:56:d0:bb:5f:21: 3f:1b:57:7a:57:35:37:c7:c4:91:53:1a:bf:eb:47:4e:ab:1b: fe:d6:90:48:3a:b6:8d:73:91:05:d8:7c:82:64:c4:26:78:f0: 05:b3:f6:89:f1:55:b3:24:ff:c5:f0:18:d4:be:0a:1d:f9:2d: a3:0e:bf:fd:43:5d:da:f8:c9:f6:a1:eb:a4:c6:5c:cd:42:b0: ac:53:ed:e4:94:83:20:e6:bc:f5:b4:a1:58:cc:de:75:70:af: 8f:cc:a3:fe:c3:a2:c0:59:ba:ab:0a:e9:bb:c1:13:c0:e2:f1: ec:1d:72:54:0c:37:40:83:bb:12:25:dc:b6:10:23:ae:8f:0a: 88:08:c4:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRsWbNQetuAFHvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzNjMzhhN2QtMmI1Yy00MzJjLTlkYTAtNzliY2Y5Njc4 MGMzMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk MzUxN2ZjZDEtMzI1MC00NDM4LWFjOWEtZGZlNzUzY2I3YWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh47Pt4Yo0LVJSambXTA8136aSk7f9e0bG17K rQXl/97NJ/QIiOc0N4pnJJyvFTz3CEfkHDchgpYOAxsOtxMe1YP/u3+hl5qKUhWM yExR0eDLXjwzlQZhMOqULRsjyAgsBKeTLBJTywb8qhsQq4KQ0+6cnaLvA+t+Eor7 dfJKwwhadsGWx1CGEpJ0B89BGWjF/tyVevZWV7I2Y/c5tOYzEJYcRBkGr2ItC6XK qOnxiqTOt+THdr95Kk3nPVvzGWYiW3BkKI/5WW+aujEhoHwrhOi5aa8ueVVqW4g0 6dplczgkUAT3SklnYhdNRWmwHoWtTjC8hmV65+r/8K2bldimAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7MNmg/NBkKD8DE2vxp90BW9JsoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83M2Mz OGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJjZjk2NzgwYzMvYmIxMjgxZDEtZTQ2MC0z N2QyLTg2YzYtNzk2MzE3NmE5NWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzNjMzhhN2QtMmI1Yy00MzJjLTlk YTAtNzliY2Y5Njc4MGMzLzczYzM4YTdkLTJiNWMtNDMyYy05ZGEwLTc5YmNmOTY3 ODBjMy5jcmwwHwYDVR0jBBgwFoAUkm0CVqEdKJlOuyyRi5298DR4zDEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83M2MzOGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJj Zjk2NzgwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y5nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKG1lWX1mdizZMiCjUwqcm43/O45iJJnpAIiiD7vVZpHdwVfPJhHt94 j71OzjSX/DolWi5jgNvVzhCZCp2cNj+52etuZGCr2pYe28VLg41qSejzMzHJps9I hG8u9x/Za/FntugZGWponmhGxUJnHvbUOD3UrMhXZRhW0LtfIT8bV3pXNTfHxJFT Gr/rR06rG/7WkEg6to1zkQXYfIJkxCZ48AWz9onxVbMk/8XwGNS+Ch35LaMOv/1D Xdr4yfah66TGXM1CsKxT7eSUgyDmvPW0oVjM3nVwr4/Mo/7DosBZuqsK6bvBE8Di 8ewdclQMN0CDuxIl3LYQI66PCogIxJQ= -----END CERTIFICATE-----Generated at Fri Oct 10 22:12:32 2025 by rpki-client