$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/0f3429d8-5625-3217-85c2-015e0b8aaf0e.roa File: 0f3429d8-5625-3217-85c2-015e0b8aaf0e.roa (raw, json) Hash identifier: G05OC2N1B94YPE2+6k8Oie8xvMvL1QsyqAn4vhR6t1U= Subject key identifier: 1E:C6:D5:93:CF:3F:16:28:9C:E5:8C:5F:9A:82:FD:DC:7C:AD:37:D0 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584B4DE3EF2C9A873E8D7E3D9B80 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/0f3429d8-5625-3217-85c2-015e0b8aaf0e.roa Signing time: Wed 24 Sep 2025 20:04:12 +0000 ROA not before: Wed 24 Sep 2025 20:04:12 +0000 ROA not after: Tue 23 Dec 2025 21:04:12 +0000 asID: 834 IP address blocks: 209.51.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:e3:ef:2c:9a:87:3e:8d:7e:3d:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Sep 24 20:04:12 2025 GMT Not After : Dec 23 21:04:12 2025 GMT Subject: CN=0dac1357-4300-4160-823a-145e0445467a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d9:49:81:ca:e7:d9:d0:41:c7:a7:81:81:c1: 24:1c:0c:c2:d0:23:e0:fe:94:65:44:8c:b2:06:21: a9:44:aa:72:c6:6f:29:13:80:22:53:81:3b:f2:c5: 50:94:b0:bd:af:1c:66:f1:aa:54:dd:06:1e:ec:f5: f2:b3:07:09:0d:97:fb:80:25:f8:e8:2d:a8:e4:ce: cf:d2:69:cf:f8:bb:ca:95:cf:1d:7c:57:ce:c2:46: 7a:ce:b7:69:1b:27:f7:93:a8:fc:1b:4e:63:63:28: 36:bc:ec:1d:23:83:32:7c:15:d3:68:68:0d:be:64: 9d:03:be:ff:f1:bf:63:03:e0:0c:de:ad:ef:50:24: 8f:b0:e2:2c:aa:fe:62:6f:9b:22:05:ac:e7:54:ad: 3b:f2:dc:a0:52:0e:af:70:97:12:b8:ea:c8:ac:26: 28:69:a3:80:53:a0:f2:6b:77:fc:a7:f0:57:88:48: 0f:c1:d3:c9:3e:12:20:f5:bc:a0:89:ca:00:78:fb: 02:af:a8:6d:8c:55:5e:df:c7:89:35:f8:51:20:15: 56:e2:d4:95:f5:90:af:a7:af:58:e2:7a:7f:e1:01: b8:92:a5:29:48:f5:d0:50:1a:9d:5b:d9:d1:6b:25: 22:5c:87:2c:99:a4:9a:d0:50:21:d9:ef:04:7c:b1: b3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C6:D5:93:CF:3F:16:28:9C:E5:8C:5F:9A:82:FD:DC:7C:AD:37:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/0f3429d8-5625-3217-85c2-015e0b8aaf0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 209.51.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:60:94:7f:b7:82:82:44:1c:9e:e0:76:7b:0d:ae:aa:f4:b5: 8c:ea:81:16:16:26:d2:60:64:8a:46:c5:8e:3c:af:a5:9e:81: d2:c2:55:30:f7:43:d3:16:f0:92:65:56:40:be:84:6e:e4:13: f8:90:93:45:d0:58:6d:03:36:33:43:9c:8d:59:d8:ed:c2:83: a7:1a:a1:98:67:86:01:4c:67:8f:c8:92:2c:94:b7:74:33:84: 68:c2:a7:8b:3b:33:5d:e9:ff:92:9f:47:06:b6:37:da:e9:79: fd:0e:d0:c6:54:6b:0c:24:30:97:bb:d5:b2:fd:03:a5:16:39: 25:46:fa:ee:7f:5d:41:68:8a:fb:23:fc:89:26:4a:d8:cb:34: 2d:b7:82:37:c6:e8:14:eb:99:04:b2:da:06:6a:10:46:ee:98: ca:52:84:ba:5a:ce:46:79:0d:5c:a9:d6:b4:c4:8f:30:cc:f0: d6:fb:95:b1:6e:31:f0:61:d1:89:83:c4:27:e0:ef:b4:ce:5d: 9b:90:24:ce:d6:14:ad:13:ca:4d:dc:5c:23:a6:46:fe:77:67: 02:87:15:cb:55:d6:ce:2b:a1:4d:de:f5:6e:06:28:ab:be:48: e4:5b:ef:d1:36:11:a6:78:c1:4a:63:90:25:f0:6c:0f:da:c4: f7:f5:2f:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtN4+8smoc+jX49m4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDkyNDIwMDQxMloXDTI1MTIyMzIxMDQxMlowLzEtMCsGA1UEAxMk MGRhYzEzNTctNDMwMC00MTYwLTgyM2EtMTQ1ZTA0NDU0NjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9lJgcrn2dBBx6eBgcEkHAzC0CPg/pRlRIyy BiGpRKpyxm8pE4AiU4E78sVQlLC9rxxm8apU3QYe7PXyswcJDZf7gCX46C2o5M7P 0mnP+LvKlc8dfFfOwkZ6zrdpGyf3k6j8G05jYyg2vOwdI4MyfBXTaGgNvmSdA77/ 8b9jA+AM3q3vUCSPsOIsqv5ib5siBaznVK078tygUg6vcJcSuOrIrCYoaaOAU6Dy a3f8p/BXiEgPwdPJPhIg9bygicoAePsCr6htjFVe38eJNfhRIBVW4tSV9ZCvp69Y 4np/4QG4kqUpSPXQUBqdW9nRayUiXIcsmaSa0FAh2e8EfLGzEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7G1ZPPPxYonOWMX5qC/dx8rTfQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvMGYzNDI5ZDgtNTYyNS0z MjE3LTg1YzItMDE1ZTBiOGFhZjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TOWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZglH+3goJEHJ7gdnsNrqr0tYzqgRYWJtJgZIpGxY48r6WegdLCVTD3 Q9MW8JJlVkC+hG7kE/iQk0XQWG0DNjNDnI1Z2O3Cg6caoZhnhgFMZ4/IkiyUt3Qz hGjCp4s7M13p/5KfRwa2N9rpef0O0MZUawwkMJe71bL9A6UWOSVG+u5/XUFoivsj /IkmStjLNC23gjfG6BTrmQSy2gZqEEbumMpShLpazkZ5DVyp1rTEjzDM8Nb7lbFu MfBh0YmDxCfg77TOXZuQJM7WFK0Tyk3cXCOmRv53ZwKHFctV1s4roU3e9W4GKKu+ SORb79E2EaZ4wUpjkCXwbA/axPf1L/s= -----END CERTIFICATE-----Generated at Sat Oct 11 14:50:24 2025 by rpki-client