$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/9db3e04b-b519-30c1-aeed-6368e2b5e2b8.roa File: 9db3e04b-b519-30c1-aeed-6368e2b5e2b8.roa (raw, json) Hash identifier: /4jkhJPoT+nriRCJWA2Qwb7+J8LL+IDVWNpsxevom80= Subject key identifier: 3A:D9:41:CE:43:77:CA:48:2B:A2:01:33:91:CF:84:13:DF:07:64:D7 Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F4328584B434CAF0AE650BA4C13F93880 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/9db3e04b-b519-30c1-aeed-6368e2b5e2b8.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 5065 IP address blocks: 207.210.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:af:0a:e6:50:ba:4c:13:f9:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=825173c2-b9d7-496e-b466-364d898cd3c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fa:fa:54:38:1c:f2:03:3b:f8:f1:36:2d:14: 8d:59:8d:aa:f7:4e:d6:a7:7a:4b:9b:82:51:1d:e5: 8a:cf:88:04:69:ba:dc:cf:ad:c1:9d:73:30:5f:e0: 3c:b7:ff:9f:8c:d9:33:1e:13:fc:42:eb:c1:4a:c4: 04:19:01:73:70:5d:61:00:29:77:01:52:71:55:47: 78:cf:22:8b:43:4c:fc:28:fa:99:0f:17:52:ee:b0: 92:b8:6b:55:9b:4f:00:f3:1f:b7:7f:5f:61:26:e7: 33:8a:0e:a3:c2:f9:0d:a8:2a:15:ec:0e:77:43:0f: b1:ac:45:2c:36:bd:01:09:9e:61:de:51:ca:91:a9: de:1b:e3:1c:6f:ee:c5:76:e2:63:e9:80:b0:98:3a: 64:25:59:28:7d:2c:09:be:8f:41:83:3b:30:55:ad: 71:d1:f3:25:ee:3f:40:7a:95:9a:ba:3f:fd:f4:f6: b7:93:34:82:6e:94:e1:3c:38:b6:ee:68:af:60:db: c2:2f:45:be:d5:9b:41:f3:1f:42:a2:ba:ae:c1:4b: 2b:2d:ab:8f:86:45:dd:ad:54:1b:db:ff:f3:67:3f: b3:e2:a2:e6:b9:f0:08:3a:0c:f8:f8:b3:ad:0b:a6: b4:00:a3:5f:c5:69:12:1b:31:ed:c4:ce:64:d8:ab: 79:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D9:41:CE:43:77:CA:48:2B:A2:01:33:91:CF:84:13:DF:07:64:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/9db3e04b-b519-30c1-aeed-6368e2b5e2b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 207.210.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:67:be:7d:47:15:eb:07:93:af:b4:ee:49:db:f6:df:f1:7e: 03:4d:ff:5b:f4:ae:75:64:56:9b:43:c4:2b:b4:73:c7:d0:ee: bb:d9:64:7c:45:42:b6:14:d7:6a:f9:6c:c4:d4:14:42:44:ee: e1:0e:75:eb:d9:f4:37:42:72:27:f5:b8:50:b4:ac:f3:e3:29: 07:94:93:69:10:e4:10:44:56:cf:31:58:84:6c:9f:ee:98:73: cd:4c:17:d9:10:8e:3f:7d:b5:d9:98:cc:53:e1:82:0a:4d:ce: 01:bb:8c:35:e3:e2:99:dc:db:b1:40:c7:7e:f6:62:a7:18:68: 0a:7a:43:6b:df:ca:5e:3f:05:f4:fa:46:33:26:57:33:82:d2: dc:a2:18:60:87:dd:e1:19:93:83:bd:09:5a:c2:09:d4:74:7e: fe:c9:e0:17:84:2e:34:65:59:4f:be:c5:b1:a6:08:c7:b1:45: 1b:bc:18:e7:54:43:0a:36:bc:c2:6b:f0:3a:fc:a0:40:d5:1c: 72:c3:7b:6e:3e:cb:b5:37:cf:d5:2f:01:c9:44:c5:a5:40:0e: c2:55:40:89:f0:46:05:1f:c1:e6:86:75:d7:8c:29:a2:d8:8f: 07:50:d9:c6:39:3e:c4:ad:26:a0:03:67:b3:a7:f9:59:28:4f: 13:02:06:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTK8K5lC6TBP5OIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk ODI1MTczYzItYjlkNy00OTZlLWI0NjYtMzY0ZDg5OGNkM2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivr6VDgc8gM7+PE2LRSNWY2q907Wp3pLm4JR HeWKz4gEabrcz63BnXMwX+A8t/+fjNkzHhP8QuvBSsQEGQFzcF1hACl3AVJxVUd4 zyKLQ0z8KPqZDxdS7rCSuGtVm08A8x+3f19hJuczig6jwvkNqCoV7A53Qw+xrEUs Nr0BCZ5h3lHKkaneG+Mcb+7FduJj6YCwmDpkJVkofSwJvo9BgzswVa1x0fMl7j9A epWauj/99Pa3kzSCbpThPDi27mivYNvCL0W+1ZtB8x9CorquwUsrLauPhkXdrVQb 2//zZz+z4qLmufAIOgz4+LOtC6a0AKNfxWkSGzHtxM5k2Kt5mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrZQc5Dd8pIK6IBM5HPhBPfB2TXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvOWRiM2UwNGItYjUxOS0z MGMxLWFlZWQtNjM2OGUyYjVlMmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz9JtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZnvn1HFesHk6+07knb9t/xfgNN/1v0rnVkVptDxCu0c8fQ7rvZZHxF QrYU12r5bMTUFEJE7uEOdevZ9DdCcif1uFC0rPPjKQeUk2kQ5BBEVs8xWIRsn+6Y c81MF9kQjj99tdmYzFPhggpNzgG7jDXj4pnc27FAx372YqcYaAp6Q2vfyl4/BfT6 RjMmVzOC0tyiGGCH3eEZk4O9CVrCCdR0fv7J4BeELjRlWU++xbGmCMexRRu8GOdU Qwo2vMJr8Dr8oEDVHHLDe24+y7U3z9UvAclExaVADsJVQInwRgUfweaGddeMKaLY jwdQ2cY5PsStJqADZ7On+VkoTxMCBjU= -----END CERTIFICATE-----Generated at Sat Oct 11 14:56:33 2025 by rpki-client