$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/ccd6d991-e499-311e-8c60-a93aedb6187a.roa File: ccd6d991-e499-311e-8c60-a93aedb6187a.roa (raw, json) Hash identifier: oKMw1MvQdIpxx0N4NPpxhlwaw5t4kx78PEMmqtni0e8= Subject key identifier: 9C:CC:76:EA:DE:D4:82:63:1A:99:0B:6B:63:72:3A:2C:E2:A4:55:F5 Certificate issuer: /CN=a278da28-82b3-48fe-bc76-7859a82f5651 Certificate serial: 010D0C9F4328584B22950ABB99B785B1B897B9C0 Authority key identifier: F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/ccd6d991-e499-311e-8c60-a93aedb6187a.roa Signing time: Tue 09 Sep 2025 07:45:29 +0000 ROA not before: Tue 09 Sep 2025 07:45:29 +0000 ROA not after: Mon 08 Dec 2025 08:45:29 +0000 asID: 153526 IP address blocks: 209.209.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:22:95:0a:bb:99:b7:85:b1:b8:97:b9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a278da28-82b3-48fe-bc76-7859a82f5651 Validity Not Before: Sep 9 07:45:29 2025 GMT Not After : Dec 8 08:45:29 2025 GMT Subject: CN=1aaba683-6abc-4c41-845a-87027f5d96b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e3:f2:24:39:1a:b7:46:af:ca:ec:4e:b7:72: 86:67:46:35:45:f0:07:57:83:15:d2:08:c1:39:5e: 0c:86:b8:ff:11:14:f8:13:cc:de:c7:d2:40:92:e8: da:b8:a8:e4:f0:b7:b7:ee:5f:46:af:1d:07:74:72: ba:fb:e9:30:ac:b6:2d:b1:a8:8a:e7:75:f7:fc:c3: 86:f4:fa:eb:47:21:89:bb:ba:65:ce:e1:24:6e:bd: 95:51:95:d8:c5:bc:d2:80:45:cc:23:47:cc:5d:d3: 28:eb:5c:a9:db:ba:84:57:90:06:22:f8:65:0a:10: e8:89:ef:e7:d1:d0:c7:97:3c:63:50:f4:06:66:7c: 39:f1:c8:34:4d:b0:97:37:22:7a:df:58:dc:22:65: 3b:af:4f:dd:ed:5c:c1:0c:c7:43:ba:82:cf:c4:29: d6:40:f6:81:a2:d1:8f:29:cc:40:43:5a:85:ec:49: 1c:73:28:f5:1b:39:c4:74:0e:48:7b:12:42:15:bb: 59:f0:51:be:14:2f:3b:db:16:e3:c1:d3:e6:89:06: 77:66:9c:b7:8c:c8:5c:90:93:c2:47:80:98:3e:e8: 6f:ac:d3:ae:ec:59:57:01:7c:72:32:95:bc:c6:4a: 6f:83:49:c4:f3:99:3d:8b:a9:9e:5a:e6:38:39:cb: a6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CC:76:EA:DE:D4:82:63:1A:99:0B:6B:63:72:3A:2C:E2:A4:55:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/ccd6d991-e499-311e-8c60-a93aedb6187a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.crl X509v3 Authority Key Identifier: keyid:F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer sbgp-ipAddrBlock: critical IPv4: 209.209.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:98:72:ce:ba:41:17:d4:88:f8:ca:2a:ed:d1:c8:e6:0b:c8: 88:0e:14:4b:7e:f1:84:09:6e:8d:02:57:22:9e:7b:9d:24:f2: a6:ce:1f:27:8d:dd:4d:12:2e:48:b8:a2:51:49:37:47:aa:ad: e9:cb:c8:e1:6c:db:87:7b:0f:08:5e:29:61:09:3e:2d:d8:9f: e1:68:36:49:50:ff:7a:aa:f2:9c:a5:3a:95:cb:ba:9f:9a:a0: 42:42:a2:a9:a1:da:c8:e0:cf:2b:f5:96:9d:b1:c5:7f:a7:97: 04:60:3d:45:9a:c9:64:f8:a1:b6:5c:06:9d:c2:b4:87:0e:88: b8:63:1c:38:55:0a:09:9b:d6:55:27:57:9b:36:57:ff:45:39: 55:22:65:92:ef:db:c6:34:2b:d7:6a:13:45:0f:69:a7:de:7e: f1:01:4e:db:08:9d:d8:28:62:f2:49:ff:ea:c2:84:35:09:50: 14:80:4b:e2:2a:67:f2:b0:b8:b9:8a:d6:af:b8:a6:a4:50:95: 87:a8:20:50:bd:f6:92:ac:13:78:2e:e3:37:cc:15:67:07:87: 84:7c:73:4f:45:16:22:c1:b1:3f:0a:a2:80:26:7f:73:5f:24: 2c:05:02:04:df:69:3b:83:df:b3:20:88:42:52:ef:d0:4a:0f: 6a:93:f1:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsilQq7mbeFsbiXucAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI3OGRhMjgtODJiMy00OGZlLWJjNzYtNzg1OWE4MmY1 NjUxMB4XDTI1MDkwOTA3NDUyOVoXDTI1MTIwODA4NDUyOVowLzEtMCsGA1UEAxMk MWFhYmE2ODMtNmFiYy00YzQxLTg0NWEtODcwMjdmNWQ5NmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOPyJDkat0avyuxOt3KGZ0Y1RfAHV4MV0gjB OV4Mhrj/ERT4E8zex9JAkujauKjk8Le37l9Grx0HdHK6++kwrLYtsaiK53X3/MOG 9PrrRyGJu7plzuEkbr2VUZXYxbzSgEXMI0fMXdMo61yp27qEV5AGIvhlChDoie/n 0dDHlzxjUPQGZnw58cg0TbCXNyJ631jcImU7r0/d7VzBDMdDuoLPxCnWQPaBotGP KcxAQ1qF7Ekccyj1GznEdA5IexJCFbtZ8FG+FC872xbjwdPmiQZ3Zpy3jMhckJPC R4CYPuhvrNOu7FlXAXxyMpW8xkpvg0nE85k9i6meWuY4OcumTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzMdure1IJjGpkLa2NyOizipFX1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMjc4 ZGEyOC04MmIzLTQ4ZmUtYmM3Ni03ODU5YTgyZjU2NTEvY2NkNmQ5OTEtZTQ5OS0z MTFlLThjNjAtYTkzYWVkYjYxODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTI3OGRhMjgtODJiMy00OGZlLWJj NzYtNzg1OWE4MmY1NjUxL2EyNzhkYTI4LTgyYjMtNDhmZS1iYzc2LTc4NTlhODJm NTY1MS5jcmwwHwYDVR0jBBgwFoAU9ipjPl1+gQsD5F/PfySWru+jWRkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMjc4ZGEyOC04MmIzLTQ4ZmUtYmM3Ni03ODU5 YTgyZjU2NTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dFXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCYcs66QRfUiPjKKu3RyOYLyIgOFEt+8YQJbo0CVyKee50k8qbOHyeN 3U0SLki4olFJN0eqrenLyOFs24d7DwheKWEJPi3Yn+FoNklQ/3qq8pylOpXLup+a oEJCoqmh2sjgzyv1lp2xxX+nlwRgPUWayWT4obZcBp3CtIcOiLhjHDhVCgmb1lUn V5s2V/9FOVUiZZLv28Y0K9dqE0UPaafefvEBTtsIndgoYvJJ/+rChDUJUBSAS+Iq Z/KwuLmK1q+4pqRQlYeoIFC99pKsE3gu4zfMFWcHh4R8c09FFiLBsT8KooAmf3Nf JCwFAgTfaTuD37MgiEJS79BKD2qT8Xg= -----END CERTIFICATE-----Generated at Fri Oct 10 21:29:59 2025 by rpki-client