$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b8e562b5-d648-3596-b35f-5b44e3a0a9b9.roa File: b8e562b5-d648-3596-b35f-5b44e3a0a9b9.roa (raw, json) Hash identifier: NFuKDr9Dy7fJucHbN8H/Eni6ZYxbNYYFOlWA0SQo86I= Subject key identifier: 44:5F:30:45:F0:A7:A1:1F:B0:04:49:2F:5F:E3:5E:F4:56:2A:81:84 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584B1C36D138FDB0516BA3773100 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b8e562b5-d648-3596-b35f-5b44e3a0a9b9.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 393249 IP address blocks: 209.87.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:d1:38:fd:b0:51:6b:a3:77:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=5b9714a7-dadd-4f94-8a50-d506c02d99dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a5:75:aa:ff:fc:4c:2e:bd:5c:04:a9:4d:14: b2:84:42:ac:fb:62:94:8c:ee:7d:92:1b:1d:70:73: 30:82:fc:58:39:50:1b:45:7c:45:1e:9f:ae:b7:4d: 1a:7a:95:2a:87:f6:54:9a:2b:9e:b2:c9:88:07:00: b8:91:f4:e4:3a:10:9b:94:76:e4:82:d0:a8:66:fe: 46:93:32:ec:1d:cb:3b:2a:cc:66:a0:82:60:87:7d: 9f:49:df:6c:e9:4b:3f:6e:6d:c6:a2:1d:33:6c:5b: 69:79:6a:d7:f6:02:fb:4c:43:a4:af:3f:77:27:b7: e4:73:de:c1:30:e0:6c:ba:32:82:b9:e9:85:f2:41: 58:b6:f5:e6:af:f5:ab:75:b9:84:88:05:5f:87:17: 81:8e:23:01:73:ce:7b:9f:04:00:03:31:4b:9a:c1: aa:40:22:2e:4e:4b:79:a9:36:0d:fe:ae:fd:53:ab: e7:ad:a2:19:a1:d9:c3:1a:37:2f:df:51:4c:f1:f6: fa:75:d8:2e:0b:9c:f3:10:05:8d:39:63:84:b2:7c: be:4e:c0:f9:cb:c3:e9:3f:95:8b:45:ff:32:0c:52: 57:7d:40:5e:ea:0f:cc:40:b6:1a:79:27:31:31:3e: 40:d8:9a:ff:5a:0d:15:31:29:e9:79:7b:8c:22:e6: 6c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:5F:30:45:F0:A7:A1:1F:B0:04:49:2F:5F:E3:5E:F4:56:2A:81:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b8e562b5-d648-3596-b35f-5b44e3a0a9b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 209.87.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:99:e9:b3:3f:b6:a9:37:40:40:1b:aa:d5:f3:1c:38:81:c4: 15:cf:d9:42:63:55:5a:44:15:78:bb:c9:06:0b:b5:25:f2:81: 00:04:8d:c8:af:5e:b3:ac:7c:d5:e1:64:8d:48:5b:2a:64:93: c2:6f:94:98:b2:0b:dc:a3:94:09:ff:88:06:60:a5:42:5d:e1: fc:0e:7e:9c:73:12:0c:f3:a0:09:35:9e:bf:2b:5a:26:f2:3c: 7c:70:5b:f3:06:1e:fa:c0:24:5d:f5:9c:22:97:4c:cf:7f:26: 0b:25:45:51:8e:b1:a1:6d:6f:bd:25:30:7a:7f:2c:97:bb:92: e6:a9:78:c3:16:21:b7:b1:5a:e4:3b:d5:9f:57:33:dd:c2:57: a3:7e:98:08:c2:2a:93:37:01:b7:e0:df:73:4a:70:15:4f:14: 04:38:eb:f6:fb:66:75:ab:a3:da:9f:02:54:a5:32:a5:73:44: 4a:dc:d0:63:62:9e:72:50:7a:82:f3:f8:20:ee:55:07:83:51: 8d:ec:1f:e6:3b:6c:19:eb:d7:1e:c3:99:8c:24:54:45:44:b0: 2f:e7:df:dc:1c:21:b0:47:57:7d:68:7a:37:df:55:75:21:04: 67:fd:fd:c3:d3:72:77:86:94:ae:65:99:42:7b:93:ad:bf:bd: 7a:75:71:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNtE4/bBRa6N3MQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk NWI5NzE0YTctZGFkZC00Zjk0LThhNTAtZDUwNmMwMmQ5OWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKV1qv/8TC69XASpTRSyhEKs+2KUjO59khsd cHMwgvxYOVAbRXxFHp+ut00aepUqh/ZUmiuessmIBwC4kfTkOhCblHbkgtCoZv5G kzLsHcs7KsxmoIJgh32fSd9s6Us/bm3Goh0zbFtpeWrX9gL7TEOkrz93J7fkc97B MOBsujKCuemF8kFYtvXmr/WrdbmEiAVfhxeBjiMBc857nwQAAzFLmsGqQCIuTkt5 qTYN/q79U6vnraIZodnDGjcv31FM8fb6ddguC5zzEAWNOWOEsny+TsD5y8PpP5WL Rf8yDFJXfUBe6g/MQLYaeScxMT5A2Jr/Wg0VMSnpeXuMIuZspwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERfMEXwp6EfsARJL1/jXvRWKoGEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvYjhlNTYyYjUtZDY0OC0z NTk2LWIzNWYtNWI0NGUzYTBhOWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VcQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaZ6bM/tqk3QEAbqtXzHDiBxBXP2UJjVVpEFXi7yQYLtSXygQAEjciv XrOsfNXhZI1IWypkk8JvlJiyC9yjlAn/iAZgpUJd4fwOfpxzEgzzoAk1nr8rWiby PHxwW/MGHvrAJF31nCKXTM9/JgslRVGOsaFtb70lMHp/LJe7kuapeMMWIbexWuQ7 1Z9XM93CV6N+mAjCKpM3Abfg33NKcBVPFAQ46/b7ZnWro9qfAlSlMqVzRErc0GNi nnJQeoLz+CDuVQeDUY3sH+Y7bBnr1x7DmYwkVEVEsC/n39wcIbBHV31oejffVXUh BGf9/cPTcneGlK5lmUJ7k62/vXp1cRs= -----END CERTIFICATE-----Generated at Sat Oct 11 11:02:22 2025 by rpki-client