$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/b9020da3-8b55-3fc5-80ac-495e2b2e15b4.roa File: b9020da3-8b55-3fc5-80ac-495e2b2e15b4.roa (raw, json) Hash identifier: lsQfufDEkUOH7CCE+y+hllTl6yfIVs6w8OxBKCa8L5k= Subject key identifier: 64:B6:31:60:56:7A:4A:5C:F0:F5:96:EC:06:9B:94:14:63:00:C4:B9 Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F4328584B3DB6FDF46BE772DB5586B780 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/b9020da3-8b55-3fc5-80ac-495e2b2e15b4.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 40509 IP address blocks: 209.71.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b6:fd:f4:6b:e7:72:db:55:86:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=d414ae09-1195-43d8-9933-cb958b3d3b13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d8:ef:7b:3e:2b:0d:e3:81:3e:bd:2d:38:43: d4:c8:62:51:a7:f2:17:b9:7a:10:51:f1:62:cc:43: 80:0e:60:23:6d:a4:98:5d:87:f6:9e:d6:b2:3f:b4: 21:b9:97:85:45:5f:8e:e9:fe:54:27:cc:3f:87:49: 12:38:cf:3e:7f:8c:04:cf:66:8d:1f:5a:f5:c1:ba: 2b:b1:ee:79:9d:29:5d:28:9c:11:64:1d:94:f5:de: 89:0d:17:85:1a:d0:13:87:99:63:e7:1f:97:5d:c3: 3a:4f:5c:08:27:c0:6e:5c:ea:5f:41:e7:50:97:24: 7a:93:68:f5:42:ad:8d:87:51:2b:b0:53:01:64:17: de:48:c0:dd:ce:f6:d1:cf:ff:08:3d:c6:31:17:06: 3e:fb:a7:a9:c6:ed:68:c4:3f:fa:a2:74:a1:05:3e: 53:af:4c:2c:2b:eb:f8:2b:23:07:d5:31:af:ab:3e: b0:5e:50:1e:03:5b:e4:86:73:c1:66:75:6e:a4:99: 95:66:bc:b1:6a:11:b8:31:ba:95:a9:89:a8:1e:e8: 33:ca:36:66:46:7e:d8:4d:38:e8:0b:19:8c:e3:93: b9:0d:20:a9:a5:43:b7:fb:8c:5e:bb:4a:4d:81:50: 3a:09:85:59:79:5a:e4:13:aa:5b:22:61:52:02:14: 61:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B6:31:60:56:7A:4A:5C:F0:F5:96:EC:06:9B:94:14:63:00:C4:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/b9020da3-8b55-3fc5-80ac-495e2b2e15b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 209.71.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:33:5d:90:6a:dd:a1:92:e4:1a:50:e8:c6:ce:f3:47:29:0e: 7c:5d:8f:98:46:4d:bd:38:05:f4:01:b6:32:b1:b3:73:8a:d3: 2c:f7:25:ca:8c:f3:37:81:18:38:10:8c:b0:7b:f4:e1:a2:d6: 41:18:4f:46:37:fc:f2:28:b0:8d:f2:bd:08:24:8d:b1:d8:35: bb:fb:85:86:da:d7:c6:4d:52:b9:65:a8:6e:07:c0:31:8f:c3: e5:49:b5:59:b7:de:2e:f3:57:37:e0:1e:ca:f2:25:61:c1:0b: c8:c7:c2:a4:a9:7d:5b:74:7e:4d:c6:1d:1e:70:58:e1:90:a4: 8c:2b:a7:76:6d:ca:38:41:ff:39:35:8f:5c:0b:b1:e5:c6:70: c0:db:8a:42:75:6b:0e:d5:4f:e3:cb:e5:23:dd:38:63:64:7f: 1a:28:89:19:0a:41:2a:69:fe:c6:43:2b:8b:44:46:86:f0:5c: 05:9a:38:87:b9:55:48:67:9a:c9:0a:5a:9d:f9:a7:fd:35:c1: d3:75:b5:56:98:46:3d:a4:16:bd:fd:85:16:64:0a:c5:a5:51: 6a:3d:5d:55:cf:e3:64:12:c4:bd:68:24:54:65:d6:c9:b1:6b: db:53:10:04:e5:b6:60:11:32:71:c7:bc:ca:83:5f:35:e5:62: b8:5f:31:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9tv30a+dy21WGt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZDQxNGFlMDktMTE5NS00M2Q4LTk5MzMtY2I5NThiM2QzYjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodjvez4rDeOBPr0tOEPUyGJRp/IXuXoQUfFi zEOADmAjbaSYXYf2ntayP7QhuZeFRV+O6f5UJ8w/h0kSOM8+f4wEz2aNH1r1wbor se55nSldKJwRZB2U9d6JDReFGtATh5lj5x+XXcM6T1wIJ8BuXOpfQedQlyR6k2j1 Qq2Nh1ErsFMBZBfeSMDdzvbRz/8IPcYxFwY++6epxu1oxD/6onShBT5Tr0wsK+v4 KyMH1TGvqz6wXlAeA1vkhnPBZnVupJmVZryxahG4MbqVqYmoHugzyjZmRn7YTTjo CxmM45O5DSCppUO3+4xeu0pNgVA6CYVZeVrkE6pbImFSAhRhrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGS2MWBWekpc8PWW7AablBRjAMS5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvYjkwMjBkYTMtOGI1NS0z ZmM1LTgwYWMtNDk1ZTJiMmUxNWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0UdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUzXZBq3aGS5BpQ6MbO80cpDnxdj5hGTb04BfQBtjKxs3OK0yz3JcqM 8zeBGDgQjLB79OGi1kEYT0Y3/PIosI3yvQgkjbHYNbv7hYba18ZNUrllqG4HwDGP w+VJtVm33i7zVzfgHsryJWHBC8jHwqSpfVt0fk3GHR5wWOGQpIwrp3ZtyjhB/zk1 j1wLseXGcMDbikJ1aw7VT+PL5SPdOGNkfxooiRkKQSpp/sZDK4tERobwXAWaOIe5 VUhnmskKWp35p/01wdN1tVaYRj2kFr39hRZkCsWlUWo9XVXP42QSxL1oJFRl1smx a9tTEATltmARMnHHvMqDXzXlYrhfMQE= -----END CERTIFICATE-----Generated at Fri Oct 10 17:53:53 2025 by rpki-client