$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/8c021314-84f0-3f55-a21d-d6278fb7b41a.roa File: 8c021314-84f0-3f55-a21d-d6278fb7b41a.roa (raw, json) Hash identifier: dnddyrKBHm9h8muo5UVlZS8hAF/7aNuBwpUP4l9fCf8= Subject key identifier: DA:9B:43:E8:C3:92:F9:8C:B8:41:66:81:83:72:00:7F:B7:80:68:41 Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584B12716414CDF59AF02437C768 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/8c021314-84f0-3f55-a21d-d6278fb7b41a.roa Signing time: Wed 03 Sep 2025 13:00:41 +0000 ROA not before: Wed 03 Sep 2025 13:00:41 +0000 ROA not after: Tue 02 Dec 2025 14:00:41 +0000 asID: 21947 IP address blocks: 209.137.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:12:71:64:14:cd:f5:9a:f0:24:37:c7:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Sep 3 13:00:41 2025 GMT Not After : Dec 2 14:00:41 2025 GMT Subject: CN=a9bbd554-191a-4f66-bb3c-ea4d0b379236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0c:4d:dd:36:7b:ed:d7:49:e4:98:f0:d9:3e: f7:fe:26:22:7c:a9:55:8d:44:bc:23:cb:6b:f5:7e: 72:a9:36:8a:81:ed:48:f8:d8:a5:0c:69:12:69:f2: a6:1d:25:bd:03:9c:6d:79:7d:c9:22:0d:bf:b5:bf: 98:f3:10:a3:bd:ab:18:85:d0:a1:26:b1:75:62:ab: 6a:12:72:a4:5a:c5:c8:79:ab:46:37:01:c3:86:2b: 9e:90:24:1c:20:7e:71:16:58:6a:00:16:c6:b7:c8: de:95:fc:c8:c5:04:69:0e:41:12:94:cb:b6:06:92: e9:d1:72:bd:3c:4e:d3:17:10:6d:35:2e:8f:f5:04: 3c:36:95:26:4e:24:85:40:67:9e:83:f5:11:a5:5f: 74:bc:c9:35:b7:8e:62:9e:5c:df:8f:70:77:0e:97: 3e:81:6b:ef:d3:6a:c8:3c:29:de:83:37:b6:02:dd: 7a:74:75:05:f4:d4:da:36:86:1b:ff:1c:20:e9:43: 2a:37:ee:c5:19:72:22:1e:9f:47:70:aa:41:aa:4e: 62:e7:6a:49:f3:87:dd:79:d4:85:34:f9:b6:64:e1: ea:8e:00:99:f9:2e:2a:a8:b1:f9:f1:be:32:7f:fb: e4:5a:13:d9:a0:12:c7:70:30:84:96:04:42:8d:d5: 1e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:9B:43:E8:C3:92:F9:8C:B8:41:66:81:83:72:00:7F:B7:80:68:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/8c021314-84f0-3f55-a21d-d6278fb7b41a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 209.137.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:24:2c:f7:08:1b:a1:c8:4d:73:aa:62:7e:e5:2c:16:c8:82: 72:f3:e3:7f:6c:d8:10:fc:5d:b3:57:6b:1f:9b:c7:69:79:95: 41:f7:96:e5:08:b9:04:fb:49:7f:07:80:b1:a8:fa:2b:88:1d: 25:f2:12:df:d3:69:59:32:a9:ee:28:7e:89:82:41:5f:47:60: 35:7e:58:b6:c3:d2:65:6b:56:5a:fe:19:e0:84:b7:a8:02:75: d2:ff:78:74:f2:d4:a3:ea:26:48:b7:57:87:ec:92:dc:ef:2b: 27:fa:8e:94:31:3a:7a:9f:cc:17:12:e0:2c:8a:08:29:b5:c4: 83:66:2d:36:01:0e:55:30:fd:a9:35:bc:43:e9:85:5e:ca:36: cf:b4:66:02:2c:df:5d:a9:dc:32:1d:2d:d1:21:15:1a:84:fa: e8:7a:15:95:29:57:8d:71:4a:d6:fa:a6:55:cc:7f:61:ef:64: 6a:95:11:f5:0a:b7:82:01:b7:93:6f:e6:0c:79:ef:85:72:e4: 86:b2:ff:3c:92:db:75:5e:be:c3:93:ae:ce:f2:c5:71:7a:d6: 01:07:52:dc:f7:89:5a:26:38:eb:67:54:dd:e1:2a:77:30:82: 31:22:81:31:01:7e:d1:b4:0c:b4:91:9b:15:21:76:d9:3c:84: 45:2a:8a:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsScWQUzfWa8CQ3x2gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI1MDkwMzEzMDA0MVoXDTI1MTIwMjE0MDA0MVowLzEtMCsGA1UEAxMk YTliYmQ1NTQtMTkxYS00ZjY2LWJiM2MtZWE0ZDBiMzc5MjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAxN3TZ77ddJ5Jjw2T73/iYifKlVjUS8I8tr 9X5yqTaKge1I+NilDGkSafKmHSW9A5xteX3JIg2/tb+Y8xCjvasYhdChJrF1Yqtq EnKkWsXIeatGNwHDhiuekCQcIH5xFlhqABbGt8jelfzIxQRpDkESlMu2BpLp0XK9 PE7TFxBtNS6P9QQ8NpUmTiSFQGeeg/URpV90vMk1t45inlzfj3B3Dpc+gWvv02rI PCnegze2At16dHUF9NTaNoYb/xwg6UMqN+7FGXIiHp9HcKpBqk5i52pJ84fdedSF NPm2ZOHqjgCZ+S4qqLH58b4yf/vkWhPZoBLHcDCElgRCjdUeEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqbQ+jDkvmMuEFmgYNyAH+3gGhBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvOGMwMjEzMTQtODRmMC0z ZjU1LWEyMWQtZDYyNzhmYjdiNDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0YngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEkLPcIG6HITXOqYn7lLBbIgnLz439s2BD8XbNXax+bx2l5lUH3luUI uQT7SX8HgLGo+iuIHSXyEt/TaVkyqe4ofomCQV9HYDV+WLbD0mVrVlr+GeCEt6gC ddL/eHTy1KPqJki3V4fsktzvKyf6jpQxOnqfzBcS4CyKCCm1xINmLTYBDlUw/ak1 vEPphV7KNs+0ZgIs312p3DIdLdEhFRqE+uh6FZUpV41xStb6plXMf2HvZGqVEfUK t4IBt5Nv5gx574Vy5Iay/zyS23VevsOTrs7yxXF61gEHUtz3iVomOOtnVN3hKncw gjEigTEBftG0DLSRmxUhdtk8hEUqinM= -----END CERTIFICATE-----Generated at Fri Oct 10 17:49:26 2025 by rpki-client