$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/a7e9bf17-b1e9-3e79-a7c6-a16f57b2d08a.roa File: a7e9bf17-b1e9-3e79-a7c6-a16f57b2d08a.roa (raw, json) Hash identifier: Gr0cONDj/zSTS6LxPhdtrIcZkJF2NYwXPSMHpNO9WcY= Subject key identifier: 41:91:9F:C1:5B:C5:AE:CC:74:CD:C7:61:6D:ED:F6:8F:98:B2:D2:0D Certificate issuer: /CN=ae67d891-3b16-4302-bf8b-4adb69436dbe Certificate serial: 010D0C9F4328584B4BAC5B4C0A73C26CD335B200 Authority key identifier: A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/a7e9bf17-b1e9-3e79-a7c6-a16f57b2d08a.roa Signing time: Wed 24 Sep 2025 01:00:31 +0000 ROA not before: Wed 24 Sep 2025 01:00:31 +0000 ROA not after: Tue 23 Dec 2025 02:00:31 +0000 asID: 26831 IP address blocks: 209.124.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:ac:5b:4c:0a:73:c2:6c:d3:35:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae67d891-3b16-4302-bf8b-4adb69436dbe Validity Not Before: Sep 24 01:00:31 2025 GMT Not After : Dec 23 02:00:31 2025 GMT Subject: CN=489ae23f-3d68-49d7-9015-6c272516dd66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8d:16:a7:d0:89:d6:ec:e3:cd:48:63:74:67: 5f:66:54:18:ee:e1:5a:9f:90:28:ef:8e:9c:b2:b7: 01:26:d7:7a:e8:fd:1c:10:37:d5:82:b3:c2:76:97: c5:64:32:51:49:55:04:07:43:5b:5b:2b:e7:d6:85: e4:a0:67:78:1e:16:26:cf:ab:3f:f9:bc:a4:a5:e4: ed:f7:5c:0c:d6:3b:29:41:74:42:fd:9e:d4:fd:15: fa:a1:84:d1:74:56:e1:57:76:b6:38:9f:0a:a2:95: dc:87:76:95:a4:83:26:41:b8:6b:6d:4f:3a:87:21: 0a:ec:52:0b:3d:41:b2:51:6a:f5:56:2a:91:88:25: 50:ae:b5:10:a0:f2:5c:8a:1f:8c:01:99:1b:92:d4: 2b:7a:70:16:4e:cf:89:b0:4a:6e:36:04:58:8e:0b: ce:b1:7e:7b:bd:1c:90:6a:07:2a:86:f4:8e:9f:b7: 1a:93:cb:83:8b:64:71:e2:b5:b3:97:89:b8:b6:2a: 47:7a:14:4f:e5:3e:02:88:01:82:39:8f:a6:16:52: 7a:c7:f3:30:59:51:49:ef:e8:9e:d7:0c:22:bd:8c: 9a:7d:4a:ce:1e:1c:86:d0:8b:3a:7a:73:b6:d5:75: 0b:a4:49:c7:99:29:6d:55:46:9a:63:13:07:5d:3b: c4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:91:9F:C1:5B:C5:AE:CC:74:CD:C7:61:6D:ED:F6:8F:98:B2:D2:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/a7e9bf17-b1e9-3e79-a7c6-a16f57b2d08a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl X509v3 Authority Key Identifier: keyid:A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer sbgp-ipAddrBlock: critical IPv4: 209.124.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:ac:3d:32:a4:20:ca:77:67:1a:0f:98:9c:99:83:95:55:7f: 68:bd:b7:59:85:55:3a:46:13:35:d3:c0:82:ce:b9:99:f3:9e: bc:80:40:98:af:11:e2:b1:a5:fd:b8:6e:ec:7d:84:43:05:d5: c6:8a:d3:6b:cc:51:74:52:f0:a2:1e:af:d0:74:32:b4:a6:0b: 61:51:22:46:58:03:dd:f5:ae:57:2b:a8:17:ef:1e:6b:ac:b3: d9:60:28:89:11:0d:71:2e:cd:bf:e0:90:0d:02:13:d6:a9:f9: 5d:20:ff:c1:70:29:fa:15:e7:a7:73:bc:77:b6:4e:b0:c2:49: 19:d1:38:8f:20:f8:c6:46:32:80:fa:3f:dd:1e:43:05:a5:81: e3:b2:8c:ee:f5:3f:51:0b:16:c0:a0:75:3d:41:5b:06:7a:28: 99:93:57:42:f5:5d:6b:b5:77:29:63:07:47:f8:6c:d9:82:63: c3:47:bf:a9:58:07:03:27:75:cf:f5:d2:50:90:77:84:7c:90: b2:ca:02:dc:f5:2d:9a:88:8b:c8:bd:01:a3:72:1d:31:fa:63: 28:a7:81:14:bf:44:dc:50:63:eb:0d:4a:fb:e3:0b:2e:e4:f7: 54:b1:4f:13:23:37:64:2f:dd:6b:0a:a0:82:13:c8:9a:50:c6: a7:82:5a:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtLrFtMCnPCbNM1sgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU2N2Q4OTEtM2IxNi00MzAyLWJmOGItNGFkYjY5NDM2 ZGJlMB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk NDg5YWUyM2YtM2Q2OC00OWQ3LTkwMTUtNmMyNzI1MTZkZDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA040Wp9CJ1uzjzUhjdGdfZlQY7uFan5Ao746c srcBJtd66P0cEDfVgrPCdpfFZDJRSVUEB0NbWyvn1oXkoGd4HhYmz6s/+bykpeTt 91wM1jspQXRC/Z7U/RX6oYTRdFbhV3a2OJ8KopXch3aVpIMmQbhrbU86hyEK7FIL PUGyUWr1ViqRiCVQrrUQoPJcih+MAZkbktQrenAWTs+JsEpuNgRYjgvOsX57vRyQ agcqhvSOn7cak8uDi2Rx4rWzl4m4tipHehRP5T4CiAGCOY+mFlJ6x/MwWVFJ7+ie 1wwivYyafUrOHhyG0Is6enO21XULpEnHmSltVUaaYxMHXTvE3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGRn8Fbxa7MdM3HYW3t9o+YstINMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hZTY3 ZDg5MS0zYjE2LTQzMDItYmY4Yi00YWRiNjk0MzZkYmUvYTdlOWJmMTctYjFlOS0z ZTc5LWE3YzYtYTE2ZjU3YjJkMDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWU2N2Q4OTEtM2IxNi00MzAyLWJm OGItNGFkYjY5NDM2ZGJlL2FlNjdkODkxLTNiMTYtNDMwMi1iZjhiLTRhZGI2OTQz NmRiZS5jcmwwHwYDVR0jBBgwFoAUqQTSjf5p6pOv5FCHULU1zbydkCgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hZTY3ZDg5MS0zYjE2LTQzMDItYmY4Yi00YWRi Njk0MzZkYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XyNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJisPTKkIMp3ZxoPmJyZg5VVf2i9t1mFVTpGEzXTwILOuZnznryAQJiv EeKxpf24bux9hEMF1caK02vMUXRS8KIer9B0MrSmC2FRIkZYA931rlcrqBfvHmus s9lgKIkRDXEuzb/gkA0CE9ap+V0g/8FwKfoV56dzvHe2TrDCSRnROI8g+MZGMoD6 P90eQwWlgeOyjO71P1ELFsCgdT1BWwZ6KJmTV0L1XWu1dyljB0f4bNmCY8NHv6lY BwMndc/10lCQd4R8kLLKAtz1LZqIi8i9AaNyHTH6YyingRS/RNxQY+sNSvvjCy7k 91SxTxMjN2Qv3WsKoIITyJpQxqeCWrY= -----END CERTIFICATE-----Generated at Fri Oct 10 21:30:12 2025 by rpki-client