$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/3bea70d0-cd2b-3f74-9092-e64b62f6da56.roa File: 3bea70d0-cd2b-3f74-9092-e64b62f6da56.roa (raw, json) Hash identifier: EntQUZzO79lS9hFjpuiD5ttKWFLTI+JFRAulFcXa/+A= Subject key identifier: 54:23:21:2D:1C:4D:C4:F9:2A:84:BC:2B:F8:D6:3B:BF:4E:EC:6C:7B Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Certificate serial: 010D0C9F4328584B4D11C8B8B573003624CFD100 Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/3bea70d0-cd2b-3f74-9092-e64b62f6da56.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 209.169.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:c8:b8:b5:73:00:36:24:cf:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=9747c8ce-2ad7-48c7-a549-570201f535f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c2:c6:a7:62:53:3f:3f:7d:50:cf:9a:1b:dd: 0d:97:39:12:b3:ae:fb:04:d6:4b:41:66:af:f1:a1: 33:62:d3:4d:a8:da:33:ab:50:cc:d6:7c:92:14:7f: 41:1d:5b:53:a0:34:4f:f9:ea:5a:76:85:e1:1a:5e: 1f:06:e3:b5:96:4e:10:f1:5c:d7:8d:b4:59:03:b2: ee:00:7b:85:d7:94:4c:6e:30:54:88:69:2a:49:97: 23:7c:20:be:0d:83:9c:8d:1d:eb:76:b4:e7:5f:ff: ca:c6:9c:d1:1e:4b:ee:57:31:78:31:7c:2b:e6:32: 2b:e1:04:4f:85:e5:ad:0d:59:6c:f7:8f:50:75:c8: 02:98:81:5b:92:36:bc:a9:3d:e2:38:9f:93:9f:d8: e3:69:42:ca:34:88:e2:56:15:ac:e9:03:10:bc:78: 91:d9:de:f6:3b:bd:68:a0:77:25:6d:bc:89:90:52: 91:22:1b:d7:cd:99:e8:33:21:7a:f3:43:6f:8a:77: 43:68:e0:55:24:f8:e3:44:45:13:88:bf:7a:df:aa: 59:2b:49:6f:7e:2b:1c:3c:d9:f8:06:59:f1:e0:d6: 88:9e:8f:59:d6:3b:63:e7:a8:76:d0:41:5e:fd:83: 6a:97:cd:33:ea:9e:04:af:6e:45:31:e7:6e:bd:48: f1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:23:21:2D:1C:4D:C4:F9:2A:84:BC:2B:F8:D6:3B:BF:4E:EC:6C:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/3bea70d0-cd2b-3f74-9092-e64b62f6da56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl X509v3 Authority Key Identifier: keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer sbgp-ipAddrBlock: critical IPv4: 209.169.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:1b:de:e0:83:d6:9d:2c:99:6b:1c:9f:5b:d4:dc:a4:f5:5c: 1a:81:06:93:07:fe:e1:59:1b:9c:be:37:1b:a3:8e:67:f7:7b: e5:61:4d:05:a3:4d:4b:cc:dc:51:9e:88:72:f3:21:21:d9:5c: fd:ba:be:81:3e:40:fa:ee:49:01:9e:fd:74:42:ac:e5:da:58: 05:03:99:1d:80:9e:07:88:e3:27:ba:5c:53:b1:c0:13:e7:d3: d9:d4:69:ec:46:cc:9b:a5:7f:79:32:b4:bf:e8:24:ff:1b:a7: a0:7c:04:17:d0:91:2a:07:88:b0:1b:e3:e4:9c:38:2a:f9:49: fd:c3:1c:58:11:b2:9c:5b:3d:f5:84:93:74:17:76:b6:4a:53: f1:55:81:6d:1f:52:b7:60:34:b5:79:bf:a1:1d:b8:a4:fc:66: ec:9a:66:e3:0a:45:c5:7b:92:f4:7e:03:61:2f:8a:c7:09:7a: 19:a5:d2:b9:50:5e:3e:7b:69:01:81:27:08:cd:6e:16:16:f8: ed:98:3b:6f:2f:f7:f7:4e:09:20:8d:c0:40:93:14:c3:65:39: 11:06:d9:70:84:3e:a0:52:a4:32:a7:b2:5f:cb:1c:b5:2b:11: cc:24:c1:fd:8f:74:22:cb:6f:95:16:0d:a5:dc:11:9b:08:47: fb:a4:06:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEci4tXMANiTP0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw MjhiMB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk OTc0N2M4Y2UtMmFkNy00OGM3LWE1NDktNTcwMjAxZjUzNWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMLGp2JTPz99UM+aG90NlzkSs677BNZLQWav 8aEzYtNNqNozq1DM1nySFH9BHVtToDRP+epadoXhGl4fBuO1lk4Q8VzXjbRZA7Lu AHuF15RMbjBUiGkqSZcjfCC+DYOcjR3rdrTnX//KxpzRHkvuVzF4MXwr5jIr4QRP heWtDVls949QdcgCmIFbkja8qT3iOJ+Tn9jjaULKNIjiVhWs6QMQvHiR2d72O71o oHclbbyJkFKRIhvXzZnoMyF680NvindDaOBVJPjjREUTiL9636pZK0lvfiscPNn4 Blnx4NaIno9Z1jtj56h20EFe/YNql80z6p4Er25FMeduvUjxswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQjIS0cTcT5KoS8K/jWO79O7Gx7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvM2JlYTcwZDAtY2QyYi0z Zjc0LTkwOTItZTY0YjYyZjZkYTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0 NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0an9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkb3uCD1p0smWscn1vU3KT1XBqBBpMH/uFZG5y+Nxujjmf3e+VhTQWj TUvM3FGeiHLzISHZXP26voE+QPruSQGe/XRCrOXaWAUDmR2AngeI4ye6XFOxwBPn 09nUaexGzJulf3kytL/oJP8bp6B8BBfQkSoHiLAb4+ScOCr5Sf3DHFgRspxbPfWE k3QXdrZKU/FVgW0fUrdgNLV5v6EduKT8ZuyaZuMKRcV7kvR+A2EviscJehml0rlQ Xj57aQGBJwjNbhYW+O2YO28v9/dOCSCNwECTFMNlOREG2XCEPqBSpDKnsl/LHLUr Ecwkwf2PdCLLb5UWDaXcEZsIR/ukBjs= -----END CERTIFICATE-----Generated at Wed Oct 8 23:34:45 2025 by rpki-client