$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/5eb71375-e3f4-3d05-866f-106cadeb78c8.roa File: 5eb71375-e3f4-3d05-866f-106cadeb78c8.roa (raw, json) Hash identifier: lx0TyD3CrCroSONAxhxSroOADIDk+6cD5qtnmPAWTdI= Subject key identifier: 1D:FC:A2:4C:DE:18:9C:6A:E6:A7:45:90:3A:62:EA:A4:A0:6E:D1:2E Certificate issuer: /CN=ae67d891-3b16-4302-bf8b-4adb69436dbe Certificate serial: 010D0C9F4328584B1806D448C7398A822AEA75E8 Authority key identifier: A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/5eb71375-e3f4-3d05-866f-106cadeb78c8.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 26831 IP address blocks: 209.124.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:d4:48:c7:39:8a:82:2a:ea:75:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae67d891-3b16-4302-bf8b-4adb69436dbe Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=a8bae3c6-2977-44d2-9d40-d88d6283bb85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:76:d5:59:96:87:35:6d:97:88:03:10:d7:33: 9b:28:e6:82:06:2f:9d:9c:06:bb:4d:65:fc:34:1d: 7b:0e:a7:7f:b6:98:7a:f5:17:c3:c5:c1:10:a1:98: ec:41:02:c6:24:05:c9:d9:94:0a:4b:a4:8c:5d:e0: c6:1c:67:91:1b:8f:bc:b8:2f:e7:6e:eb:c8:7e:77: e3:a7:76:b9:e3:91:c8:a1:fd:b7:71:16:03:27:04: b3:ba:c1:6b:18:dd:38:67:2e:20:00:bc:89:bf:ac: f6:9a:1b:71:47:f1:75:09:90:d7:e7:3f:d2:78:63: ec:34:e9:ec:8e:61:82:a2:7f:6e:04:8c:3e:7f:26: 21:7c:c3:1f:35:b5:58:dc:60:28:d9:ea:3d:1d:77: ff:c2:65:d4:c7:0a:ad:a6:4b:12:5e:fd:9a:a6:b9: 60:0f:f7:d8:75:60:c3:a1:48:6f:ff:a8:11:be:c5: 8a:ec:02:4d:1a:4c:57:66:34:c4:f0:57:f9:0f:89: 06:39:31:71:56:57:64:54:a4:04:36:af:e2:c2:70: 71:fa:dc:e2:5e:07:db:0c:c3:84:9f:d4:67:23:6c: ff:68:91:aa:ff:59:c7:d2:fa:94:c1:a9:73:41:f0: ff:4a:e1:7e:fd:cf:39:50:f3:2a:15:84:e2:c9:ab: 8f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:FC:A2:4C:DE:18:9C:6A:E6:A7:45:90:3A:62:EA:A4:A0:6E:D1:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/5eb71375-e3f4-3d05-866f-106cadeb78c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl X509v3 Authority Key Identifier: keyid:A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer sbgp-ipAddrBlock: critical IPv4: 209.124.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:f9:88:7f:05:07:65:f6:f3:06:33:ec:22:a3:e1:f3:4d:b2: 28:c9:99:92:ee:90:6b:05:d3:7c:fa:95:f1:b1:93:87:3b:fe: 26:c3:0f:0b:b5:2b:1d:af:a9:27:9f:d2:20:87:bb:6d:8b:e9: 56:98:e7:78:cb:4b:8e:d0:63:f8:9f:7c:a6:ed:f8:c5:5b:4a: 62:9f:a0:fb:7e:9c:c6:8b:1c:38:1c:ef:1c:3b:7e:28:3f:9f: 2e:81:ae:bb:2a:22:54:d1:9c:34:91:89:95:26:a5:55:e1:14: bb:cf:8f:1d:ff:dc:09:c2:88:81:cb:a3:f9:83:b0:b7:d7:b6: 48:b9:f1:be:09:b4:67:9b:01:fd:2f:ca:54:b2:1d:36:c3:ee: 63:4c:4c:b6:24:2f:8d:c1:8a:59:fe:9e:3d:44:20:2c:0b:f3: 8f:8c:84:32:b6:27:cb:bb:b3:4b:90:8f:a5:55:d8:cc:c7:ac: 0b:6d:ff:df:35:a7:fe:35:5c:91:ae:92:a7:fb:96:10:44:73: 43:ff:d0:f9:3d:5f:95:18:0e:a2:a1:97:8e:7c:e5:dd:3e:c2: f8:7f:18:b2:ce:7d:b0:43:3b:17:ac:2c:75:a4:e6:ff:fc:13: a7:76:70:f5:9d:dc:f0:a4:d4:a1:47:37:e6:3b:e3:57:0d:40: fd:21:34:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBtRIxzmKgirqdegwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU2N2Q4OTEtM2IxNi00MzAyLWJmOGItNGFkYjY5NDM2 ZGJlMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk YThiYWUzYzYtMjk3Ny00NGQyLTlkNDAtZDg4ZDYyODNiYjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnbVWZaHNW2XiAMQ1zObKOaCBi+dnAa7TWX8 NB17Dqd/tph69RfDxcEQoZjsQQLGJAXJ2ZQKS6SMXeDGHGeRG4+8uC/nbuvIfnfj p3a545HIof23cRYDJwSzusFrGN04Zy4gALyJv6z2mhtxR/F1CZDX5z/SeGPsNOns jmGCon9uBIw+fyYhfMMfNbVY3GAo2eo9HXf/wmXUxwqtpksSXv2aprlgD/fYdWDD oUhv/6gRvsWK7AJNGkxXZjTE8Ff5D4kGOTFxVldkVKQENq/iwnBx+tziXgfbDMOE n9RnI2z/aJGq/1nH0vqUwalzQfD/SuF+/c85UPMqFYTiyauPlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB38okzeGJxq5qdFkDpi6qSgbtEuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hZTY3 ZDg5MS0zYjE2LTQzMDItYmY4Yi00YWRiNjk0MzZkYmUvNWViNzEzNzUtZTNmNC0z ZDA1LTg2NmYtMTA2Y2FkZWI3OGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWU2N2Q4OTEtM2IxNi00MzAyLWJm OGItNGFkYjY5NDM2ZGJlL2FlNjdkODkxLTNiMTYtNDMwMi1iZjhiLTRhZGI2OTQz NmRiZS5jcmwwHwYDVR0jBBgwFoAUqQTSjf5p6pOv5FCHULU1zbydkCgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hZTY3ZDg5MS0zYjE2LTQzMDItYmY4Yi00YWRi Njk0MzZkYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0XycMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA75iH8FB2X28wYz7CKj4fNNsijJmZLukGsF03z6lfGxk4c7/ibDDwu1 Kx2vqSef0iCHu22L6VaY53jLS47QY/iffKbt+MVbSmKfoPt+nMaLHDgc7xw7fig/ ny6BrrsqIlTRnDSRiZUmpVXhFLvPjx3/3AnCiIHLo/mDsLfXtki58b4JtGebAf0v ylSyHTbD7mNMTLYkL43Biln+nj1EICwL84+MhDK2J8u7s0uQj6VV2MzHrAtt/981 p/41XJGukqf7lhBEc0P/0Pk9X5UYDqKhl4585d0+wvh/GLLOfbBDOxesLHWk5v/8 E6d2cPWd3PCk1KFHN+Y741cNQP0hNAk= -----END CERTIFICATE-----Generated at Fri Oct 10 23:49:26 2025 by rpki-client