$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/f5b47b0d-b1e3-32b0-a1be-eec7ff16e9f5.roa File: f5b47b0d-b1e3-32b0-a1be-eec7ff16e9f5.roa (raw, json) Hash identifier: Jc/HkIDyyiUDeCFOoPQP4DuQ4onVt/9E5ydu4ckuBVQ= Subject key identifier: AD:6A:94:3B:0C:AA:40:A1:B2:BA:30:94:DF:2C:6D:32:B2:4A:50:5F Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584B1C36D0C244F91C923978A580 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/f5b47b0d-b1e3-32b0-a1be-eec7ff16e9f5.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 393249 IP address blocks: 206.87.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:d0:c2:44:f9:1c:92:39:78:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=f2e28ee3-14c8-4193-9c0a-f267c759a1f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:25:f6:cb:e8:6f:15:51:00:02:0a:3b:eb:52: d3:df:7a:0e:17:08:52:34:44:e0:67:04:4a:d3:a6: 9d:12:21:0a:72:33:e7:bf:ee:8e:d0:de:95:51:09: 02:7f:19:32:b1:cb:9d:f2:54:d5:9a:ea:4f:f5:77: ca:eb:b5:cf:4a:e0:fa:58:39:84:78:44:5a:23:55: 19:c2:22:a4:e0:72:80:46:d5:94:89:6a:c2:6f:08: f6:1d:62:90:90:57:94:6c:0a:75:ee:ff:ad:12:b1: 9c:16:b3:e7:2d:d2:b4:28:48:26:51:ca:ee:e5:bf: a0:97:18:a7:90:78:96:1e:fa:19:1a:f2:81:ff:66: fc:6c:fd:0b:80:85:f5:6c:b3:1c:e0:87:ed:e0:45: 20:c2:dc:04:b8:ea:3c:2d:56:e3:43:95:2f:1e:98: f0:89:79:4d:41:37:62:3b:53:21:64:18:19:07:a0: 6e:43:3b:6b:0e:6f:f4:65:e6:6d:41:2d:39:d0:7e: be:ac:40:4e:a4:27:57:26:76:13:3d:03:57:08:80: 56:36:dd:95:f8:d2:34:ca:ce:52:c5:68:29:b6:77: 3a:4d:22:96:0d:c7:33:06:ac:a1:59:63:c9:0e:74: 12:dc:ce:fe:91:7b:c3:ee:1e:73:63:98:fd:09:c4: ff:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:6A:94:3B:0C:AA:40:A1:B2:BA:30:94:DF:2C:6D:32:B2:4A:50:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/f5b47b0d-b1e3-32b0-a1be-eec7ff16e9f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 206.87.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:70:c6:ff:d5:6b:5c:47:e1:98:ab:3c:15:25:d2:72:e2:77: ed:62:d4:4f:1b:64:67:a3:6a:e8:22:23:0f:9b:28:e2:ef:87: a8:97:51:45:c8:65:e9:34:6c:06:38:6e:38:81:12:74:6c:96: 49:fa:14:1e:5c:89:32:cc:d9:76:cf:66:4e:7e:7b:3d:00:de: e4:55:6f:3b:73:09:4f:d6:ba:3c:4d:5b:a3:aa:7b:21:03:f0: 86:58:7b:f5:6d:ec:ae:02:59:58:c5:65:f2:66:f9:01:f2:57: 12:3a:61:c5:c2:fd:a0:34:f2:29:e5:fd:0c:c5:59:c9:9c:2c: 32:b3:00:26:36:b8:82:d5:c8:50:49:c5:d6:9a:62:db:67:08: 2a:7b:8d:d9:3c:c9:fa:80:69:b2:50:07:90:6f:03:f1:9a:9e: 06:18:c1:1b:70:cd:25:0a:e5:a0:c5:1c:35:1f:50:a1:97:d2: 8a:56:dc:09:80:c2:5f:74:09:16:be:b4:63:15:f6:a9:6e:38: 2d:cc:88:43:64:f4:a7:07:fe:48:aa:ed:a1:a8:9e:d7:ef:f3: 43:f3:09:84:b0:6c:d2:c8:2f:38:68:af:cd:f5:ec:74:d6:56: 8f:0d:d5:71:1c:3d:17:e4:ff:96:8f:e8:52:a8:76:2a:83:95: bb:8e:72:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNtDCRPkckjl4pYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk ZjJlMjhlZTMtMTRjOC00MTkzLTljMGEtZjI2N2M3NTlhMWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iX2y+hvFVEAAgo761LT33oOFwhSNETgZwRK 06adEiEKcjPnv+6O0N6VUQkCfxkyscud8lTVmupP9XfK67XPSuD6WDmEeERaI1UZ wiKk4HKARtWUiWrCbwj2HWKQkFeUbAp17v+tErGcFrPnLdK0KEgmUcru5b+glxin kHiWHvoZGvKB/2b8bP0LgIX1bLMc4Ift4EUgwtwEuOo8LVbjQ5UvHpjwiXlNQTdi O1MhZBgZB6BuQztrDm/0ZeZtQS050H6+rEBOpCdXJnYTPQNXCIBWNt2V+NI0ys5S xWgptnc6TSKWDcczBqyhWWPJDnQS3M7+kXvD7h5zY5j9CcT/QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1qlDsMqkChsrowlN8sbTKySlBfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvZjViNDdiMGQtYjFlMy0z MmIwLWExYmUtZWVjN2ZmMTZlOWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzlfAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9wxv/Va1xH4ZirPBUl0nLid+1i1E8bZGejaugiIw+bKOLvh6iXUUXI Zek0bAY4bjiBEnRslkn6FB5ciTLM2XbPZk5+ez0A3uRVbztzCU/WujxNW6OqeyED 8IZYe/Vt7K4CWVjFZfJm+QHyVxI6YcXC/aA08inl/QzFWcmcLDKzACY2uILVyFBJ xdaaYttnCCp7jdk8yfqAabJQB5BvA/GangYYwRtwzSUK5aDFHDUfUKGX0opW3AmA wl90CRa+tGMV9qluOC3MiENk9KcH/kiq7aGontfv80PzCYSwbNLILzhor8317HTW Vo8N1XEcPRfk/5aP6FKodiqDlbuOckc= -----END CERTIFICATE-----Generated at Sat Oct 11 11:05:33 2025 by rpki-client