$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/caf36522-3c75-3856-9c0d-2b2152da2226.roa File: caf36522-3c75-3856-9c0d-2b2152da2226.roa (raw, json) Hash identifier: exBvHOo+Q4SEUWv/oPEUXC14kIx4zOzN3Nj8iYMpTVY= Subject key identifier: D3:64:D3:1B:33:DB:6F:01:A1:29:FE:7F:A2:47:F2:3D:9B:A0:06:0C Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584B61AE3D0D4AD46B2444F55660 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/caf36522-3c75-3856-9c0d-2b2152da2226.roa Signing time: Wed 01 Oct 2025 22:12:11 +0000 ROA not before: Wed 01 Oct 2025 22:12:11 +0000 ROA not after: Tue 30 Dec 2025 23:12:11 +0000 asID: 834 IP address blocks: 209.178.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:61:ae:3d:0d:4a:d4:6b:24:44:f5:56:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Oct 1 22:12:11 2025 GMT Not After : Dec 30 23:12:11 2025 GMT Subject: CN=e2394e68-b890-4289-b90b-abbc1331180b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:25:96:91:76:64:39:b1:a5:fb:d7:62:b1:d0: a7:31:6a:f0:84:f7:c8:e0:f2:77:b6:ee:e3:48:28: bb:e9:f1:03:2a:ae:71:88:6d:79:34:8e:bc:85:68: 52:7a:ed:59:32:35:a7:f0:0a:25:19:cb:ce:87:b1: 36:7e:a1:ef:08:c8:93:f0:af:9e:3e:ab:b3:44:01: f1:3b:6a:26:cd:10:20:e0:5b:e8:75:98:11:a5:14: 3e:ae:e5:47:cd:9d:45:14:b9:77:e3:3e:d5:45:85: af:bb:f6:bd:38:9a:34:49:30:e3:29:16:7d:96:a8: 49:48:59:9c:aa:1d:ff:20:35:94:ff:39:ea:d6:67: 4a:16:00:52:f5:6b:de:cf:0e:ec:a5:26:ca:9f:5c: 5e:e9:c3:48:55:53:4b:75:dc:b3:45:9a:b4:0e:be: 03:e3:88:ae:95:4e:07:a3:87:b7:25:38:0b:bf:a9: 4b:32:5c:92:b8:9e:f4:16:f3:d5:47:a2:c2:78:40: 33:f7:d8:ba:f6:58:c9:ce:ce:e9:75:5b:17:c7:e6: e3:0d:10:dd:ef:e3:03:a8:e8:10:02:cb:0d:ea:b3: ca:91:a4:0a:a9:db:f8:93:68:40:dc:88:d2:11:3c: 54:fd:d7:57:b7:54:3f:1e:d9:79:f6:81:6a:85:03: 65:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:64:D3:1B:33:DB:6F:01:A1:29:FE:7F:A2:47:F2:3D:9B:A0:06:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/caf36522-3c75-3856-9c0d-2b2152da2226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 209.178.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:61:82:61:1e:0c:a6:ff:80:dd:63:c1:7e:7d:62:f0:22:01: 5d:79:49:76:a5:aa:af:5d:43:5b:8c:82:87:05:77:bc:2e:69: a5:e6:5c:e1:c7:50:51:35:df:5f:20:9c:46:60:8e:d0:e0:d0: cc:bb:12:5e:5f:64:27:ab:b5:00:d4:ba:61:8c:75:81:62:96: 60:cb:c1:db:47:b0:ba:84:69:45:8b:14:7e:0c:a1:f9:f8:12: f7:d1:7f:d6:45:74:0c:a9:a3:d6:6e:6d:f7:8e:13:e6:b8:97: 46:58:43:76:2a:b1:69:a0:b3:59:aa:fc:d9:9b:ac:11:83:95: 46:97:04:2d:42:b0:e9:87:ec:d6:5d:b5:38:2d:c5:db:f1:b9: 4a:46:9c:53:d9:c5:35:a6:9e:2c:3a:95:0b:3c:75:47:ee:59: 43:a1:21:91:dc:d1:c4:4d:df:1c:f7:33:b8:a9:76:85:2e:a0: ef:15:84:b0:89:f2:72:30:01:70:f0:6f:ff:03:cb:07:36:32: 10:32:1b:ac:74:4d:d3:31:4e:e1:0f:c3:20:91:58:16:cb:9f: 46:b2:08:c3:92:df:e3:7d:00:81:1c:6b:2d:02:a4:c2:15:e3: bb:55:92:3e:55:30:46:a6:5f:b5:b2:6b:e2:87:10:ca:56:bd: 41:dd:b5:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEthrj0NStRrJET1VmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MTAwMTIyMTIxMVoXDTI1MTIzMDIzMTIxMVowLzEtMCsGA1UEAxMk ZTIzOTRlNjgtYjg5MC00Mjg5LWI5MGItYWJiYzEzMzExODBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviWWkXZkObGl+9disdCnMWrwhPfI4PJ3tu7j SCi76fEDKq5xiG15NI68hWhSeu1ZMjWn8AolGcvOh7E2fqHvCMiT8K+ePquzRAHx O2omzRAg4FvodZgRpRQ+ruVHzZ1FFLl34z7VRYWvu/a9OJo0STDjKRZ9lqhJSFmc qh3/IDWU/znq1mdKFgBS9Wvezw7spSbKn1xe6cNIVVNLddyzRZq0Dr4D44iulU4H o4e3JTgLv6lLMlySuJ70FvPVR6LCeEAz99i69ljJzs7pdVsXx+bjDRDd7+MDqOgQ AssN6rPKkaQKqdv4k2hA3IjSETxU/ddXt1Q/Htl59oFqhQNlBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNk0xsz228BoSn+f6JH8j2boAYMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvY2FmMzY1MjItM2M3NS0z ODU2LTljMGQtMmIyMTUyZGEyMjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bLpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNhgmEeDKb/gN1jwX59YvAiAV15SXalqq9dQ1uMgocFd7wuaaXmXOHH UFE1318gnEZgjtDg0My7El5fZCertQDUumGMdYFilmDLwdtHsLqEaUWLFH4Mofn4 EvfRf9ZFdAypo9ZubfeOE+a4l0ZYQ3YqsWmgs1mq/NmbrBGDlUaXBC1CsOmH7NZd tTgtxdvxuUpGnFPZxTWmniw6lQs8dUfuWUOhIZHc0cRN3xz3M7ipdoUuoO8VhLCJ 8nIwAXDwb/8Dywc2MhAyG6x0TdMxTuEPwyCRWBbLn0ayCMOS3+N9AIEcay0CpMIV 47tVkj5VMEamX7Wya+KHEMpWvUHdtds= -----END CERTIFICATE-----Generated at Fri Oct 10 21:29:54 2025 by rpki-client