$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944/dfb09b85-cf08-36d7-b81f-0f42c2247693.roa File: dfb09b85-cf08-36d7-b81f-0f42c2247693.roa (raw, json) Hash identifier: Dj1ZiaucEE6iz3/xJJsNl9uiUaJ2dy6ez61Z+xLB5DI= Subject key identifier: A6:ED:5E:77:88:6E:44:AD:88:88:CC:54:3D:FD:6E:56:8C:F7:0D:5A Certificate issuer: /CN=14efeb6b-dc21-496a-a0be-e528a7d05944 Certificate serial: 010D0C9F4328584B56D74BED88B1490791E1DCE0 Authority key identifier: 96:F2:95:2A:C9:87:B7:10:2B:5B:63:CB:83:6A:BF:F8:5C:A4:5F:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944/dfb09b85-cf08-36d7-b81f-0f42c2247693.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30523 IP address blocks: 209.40.84.0/22 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944/14efeb6b-dc21-496a-a0be-e528a7d05944.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944/14efeb6b-dc21-496a-a0be-e528a7d05944.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:4b:ed:88:b1:49:07:91:e1:dc:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14efeb6b-dc21-496a-a0be-e528a7d05944 Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=7676c165-0339-459a-9149-0edd82c01776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0d:b8:e7:34:45:d7:40:0a:5f:f9:cd:4f:39: 04:c5:87:11:6c:b1:d5:64:7a:5a:04:16:b0:99:3d: 01:29:48:a6:92:a8:e5:a9:60:90:58:73:b1:97:fb: 0d:97:8f:21:a6:6b:01:72:61:5b:08:91:f4:a7:58: 91:a5:05:87:cc:9d:ed:f0:d2:01:01:e7:db:4f:5b: 2a:88:70:14:4a:b2:90:20:db:81:c0:32:d3:51:28: 75:84:ac:c9:dd:5e:f4:7f:72:be:ec:cd:34:3c:a9: 04:5e:6c:4b:78:f2:de:03:39:04:8e:41:f3:60:03: 89:2f:3d:c2:44:2f:12:28:ab:be:8c:08:78:86:82: 4d:d3:1e:9f:34:cb:3f:97:6f:6c:00:77:fd:de:35: 1e:45:a6:23:f0:94:b5:4a:5f:4d:8e:f4:a1:53:34: 27:52:d6:09:46:a6:bf:02:ab:5e:df:93:fe:57:4d: dd:cd:fa:78:ce:3d:10:45:22:84:42:3a:4b:22:b4: 3d:f2:fb:2d:1b:79:9d:9a:c4:6b:84:31:de:76:f7: 08:00:fb:96:8d:bc:69:d5:6e:39:32:85:1b:17:c1: 3d:82:b3:ba:b2:d4:8d:cd:5a:39:ba:4d:29:3f:23: 36:5b:b7:da:b2:cb:3f:a3:ed:04:59:91:ba:14:56: a3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:ED:5E:77:88:6E:44:AD:88:88:CC:54:3D:FD:6E:56:8C:F7:0D:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944/dfb09b85-cf08-36d7-b81f-0f42c2247693.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944/14efeb6b-dc21-496a-a0be-e528a7d05944.crl X509v3 Authority Key Identifier: keyid:96:F2:95:2A:C9:87:B7:10:2B:5B:63:CB:83:6A:BF:F8:5C:A4:5F:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944.cer sbgp-ipAddrBlock: critical IPv4: 209.40.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:d9:1b:66:c3:dc:62:25:a1:66:71:89:6b:ed:e5:14:f0:81: ea:f5:e0:ac:eb:49:bc:1f:b8:f2:8e:6a:de:fe:7b:0b:47:b7: 5d:4d:82:13:00:a6:1d:81:9b:d1:2d:05:0d:f4:a9:84:62:6f: 26:dc:e8:16:92:ab:1d:5f:b0:eb:00:90:9a:26:0b:02:b3:46: bb:36:3c:e9:72:4f:8d:ce:56:dc:a9:58:1e:9e:90:fc:9a:12: 57:e7:87:73:81:74:92:86:86:d2:03:ca:80:f1:79:7b:1d:26: b9:e6:ac:a3:42:90:83:79:44:c1:7e:60:12:54:23:25:b1:f4: 5c:40:11:03:4d:38:a7:47:98:9e:65:62:5e:ae:86:7a:a1:91: 3b:b7:db:17:21:ea:c2:c3:86:da:24:70:57:ac:10:9e:d1:32: db:81:49:6d:6b:4b:13:4d:2e:5c:06:29:66:57:aa:4d:1a:7c: a1:27:f3:d2:a7:fe:f8:68:08:1f:21:36:a4:c0:90:07:c4:fd: a5:43:42:95:5d:02:0e:82:05:15:15:c8:05:09:9d:41:53:c6: 83:25:96:eb:5f:5c:37:04:70:95:af:98:7e:70:eb:6b:0d:ae: 16:03:ca:2c:2a:0b:d8:56:c3:23:74:ec:96:01:1e:d1:a7:af: ea:0b:c7:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW10vtiLFJB5Hh3OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTRlZmViNmItZGMyMS00OTZhLWEwYmUtZTUyOGE3ZDA1 OTQ0MB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk NzY3NmMxNjUtMDMzOS00NTlhLTkxNDktMGVkZDgyYzAxNzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwg245zRF10AKX/nNTzkExYcRbLHVZHpaBBaw mT0BKUimkqjlqWCQWHOxl/sNl48hpmsBcmFbCJH0p1iRpQWHzJ3t8NIBAefbT1sq iHAUSrKQINuBwDLTUSh1hKzJ3V70f3K+7M00PKkEXmxLePLeAzkEjkHzYAOJLz3C RC8SKKu+jAh4hoJN0x6fNMs/l29sAHf93jUeRaYj8JS1Sl9NjvShUzQnUtYJRqa/ Aqte35P+V03dzfp4zj0QRSKEQjpLIrQ98vstG3mdmsRrhDHedvcIAPuWjbxp1W45 MoUbF8E9grO6stSNzVo5uk0pPyM2W7fasss/o+0EWZG6FFaj1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbtXneIbkStiIjMVD39blaM9w1aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8xNGVm ZWI2Yi1kYzIxLTQ5NmEtYTBiZS1lNTI4YTdkMDU5NDQvZGZiMDliODUtY2YwOC0z NmQ3LWI4MWYtMGY0MmMyMjQ3NjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMTRlZmViNmItZGMyMS00OTZhLWEw YmUtZTUyOGE3ZDA1OTQ0LzE0ZWZlYjZiLWRjMjEtNDk2YS1hMGJlLWU1MjhhN2Qw NTk0NC5jcmwwHwYDVR0jBBgwFoAUlvKVKsmHtxArW2PLg2q/+FykXyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8xNGVmZWI2Yi1kYzIxLTQ5NmEtYTBiZS1lNTI4 YTdkMDU5NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ShUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETZG2bD3GIloWZxiWvt5RTwger14KzrSbwfuPKOat7+ewtHt11NghMA ph2Bm9EtBQ30qYRibybc6BaSqx1fsOsAkJomCwKzRrs2POlyT43OVtypWB6ekPya Elfnh3OBdJKGhtIDyoDxeXsdJrnmrKNCkIN5RMF+YBJUIyWx9FxAEQNNOKdHmJ5l Yl6uhnqhkTu32xch6sLDhtokcFesEJ7RMtuBSW1rSxNNLlwGKWZXqk0afKEn89Kn /vhoCB8hNqTAkAfE/aVDQpVdAg6CBRUVyAUJnUFTxoMllutfXDcEcJWvmH5w62sN rhYDyiwqC9hWwyN07JYBHtGnr+oLx28= -----END CERTIFICATE-----Generated at Wed Oct 8 19:48:40 2025 by rpki-client