$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2037352b-8ef1-42c4-98c9-d4986a32093d/87290615-d6d8-3ece-861f-08e38d8ebc6f.roa File: 87290615-d6d8-3ece-861f-08e38d8ebc6f.roa (raw, json) Hash identifier: MIs6KW/oDEM9LT/8HB1Cr2pmoRAEaSFlE8Y9YEbmyIs= Subject key identifier: 25:CB:52:F6:0C:4A:C2:24:0D:8E:43:53:E2:66:FA:C8:2F:78:30:31 Certificate issuer: /CN=2037352b-8ef1-42c4-98c9-d4986a32093d Certificate serial: 010D0C9F4328584B6FF74C2B460BDC6C791B4180 Authority key identifier: 06:E5:34:42:C2:AB:00:06:CC:E9:76:E2:EC:CE:F4:5A:93:7E:5C:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2037352b-8ef1-42c4-98c9-d4986a32093d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2037352b-8ef1-42c4-98c9-d4986a32093d/87290615-d6d8-3ece-861f-08e38d8ebc6f.roa Signing time: Tue 07 Oct 2025 01:00:29 +0000 ROA not before: Tue 07 Oct 2025 01:00:29 +0000 ROA not after: Mon 05 Jan 2026 02:00:29 +0000 asID: 397836 IP address blocks: 209.236.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2037352b-8ef1-42c4-98c9-d4986a32093d/2037352b-8ef1-42c4-98c9-d4986a32093d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2037352b-8ef1-42c4-98c9-d4986a32093d/2037352b-8ef1-42c4-98c9-d4986a32093d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2037352b-8ef1-42c4-98c9-d4986a32093d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:f7:4c:2b:46:0b:dc:6c:79:1b:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2037352b-8ef1-42c4-98c9-d4986a32093d Validity Not Before: Oct 7 01:00:29 2025 GMT Not After : Jan 5 02:00:29 2026 GMT Subject: CN=452dd916-89ac-41db-8fd4-9aeeeced6b6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d2:6e:b7:7d:84:6d:44:05:94:c3:90:e8:d8: 84:61:dc:dc:c7:6b:60:59:26:7b:67:22:7e:5b:f3: 9c:e9:75:01:d4:61:4f:de:eb:b5:97:d3:3c:6b:1c: f6:16:a8:ab:c8:ab:04:70:b6:e5:d4:c2:b4:80:cc: 54:17:8d:dd:4e:cd:dc:be:c9:0c:52:eb:1f:2e:21: c3:19:2b:4f:09:27:1a:38:ef:aa:fe:30:ca:94:61: 86:82:54:20:18:2c:7a:65:8e:2f:f7:c4:cd:76:76: 48:ef:04:aa:26:65:e4:b4:33:a8:98:b7:d4:be:89: e6:bf:77:05:c1:e2:d8:69:6b:d9:4d:69:28:38:e4: 47:c1:b4:1f:b0:d9:3a:bf:d1:b3:41:e9:65:44:b5: b7:00:63:dd:a7:bd:e6:e2:79:bd:0d:8c:5a:73:62: fe:34:ba:76:75:10:ae:8f:96:24:38:27:f4:b3:98: b4:26:30:3c:1c:0d:0c:38:2b:f1:ef:5c:8a:8d:54: 4f:e5:50:98:ff:ec:45:b6:f6:ab:2f:d7:48:6e:4b: 5f:2a:8c:88:fb:c4:d7:8c:a6:ed:2e:9f:03:d9:ad: 54:6b:39:f5:bf:09:da:aa:f9:88:83:72:55:58:5e: 1f:dd:c3:bc:ed:e9:89:44:7f:2b:1e:21:55:e5:95: 7f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:CB:52:F6:0C:4A:C2:24:0D:8E:43:53:E2:66:FA:C8:2F:78:30:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2037352b-8ef1-42c4-98c9-d4986a32093d/87290615-d6d8-3ece-861f-08e38d8ebc6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2037352b-8ef1-42c4-98c9-d4986a32093d/2037352b-8ef1-42c4-98c9-d4986a32093d.crl X509v3 Authority Key Identifier: keyid:06:E5:34:42:C2:AB:00:06:CC:E9:76:E2:EC:CE:F4:5A:93:7E:5C:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2037352b-8ef1-42c4-98c9-d4986a32093d.cer sbgp-ipAddrBlock: critical IPv4: 209.236.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:51:89:52:61:fd:51:5b:20:81:75:20:b0:97:a7:04:ba:a6: b8:fa:4c:99:e5:cb:dc:53:79:5d:a6:20:dd:2f:25:26:3c:09: 56:7a:94:4a:e2:d9:46:6b:ce:3e:97:46:27:e8:0b:3c:dd:b6: 8e:f8:34:3b:2e:99:82:aa:8a:b5:17:f7:8e:4f:8f:af:76:ee: 9a:10:86:8c:ba:0d:60:f0:dd:47:92:a2:5f:83:2b:be:bc:34: 8f:2d:d1:f0:7e:ef:62:7b:84:cc:77:eb:21:94:92:c1:20:a4: 4a:f2:9a:8e:b5:a0:d1:72:a6:00:aa:66:34:ee:06:0f:c4:1f: 95:97:c2:64:00:2f:9d:db:0b:5f:f5:7f:a7:54:6b:3e:1f:f0: 12:63:1b:6f:db:61:4c:d5:5c:9e:8c:69:7d:7e:52:31:43:a7: cb:4c:a5:49:03:94:26:14:ad:84:f8:a9:eb:67:42:3b:3e:fd: 08:c8:53:bc:68:08:65:c5:c7:3d:03:40:60:26:2b:ed:7e:c8: f4:1e:97:a2:1c:2b:fd:3b:e1:5b:a1:a1:f5:33:e1:10:b7:31: cb:1a:e1:8c:4f:79:61:50:5d:8b:01:c2:b5:23:c4:3c:3d:f9: c2:3f:a8:43:6d:c4:88:93:78:7c:3c:20:b7:07:4f:c7:8d:2e: f0:bb:82:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtv90wrRgvcbHkbQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjAzNzM1MmItOGVmMS00MmM0LTk4YzktZDQ5ODZhMzIw OTNkMB4XDTI1MTAwNzAxMDAyOVoXDTI2MDEwNTAyMDAyOVowLzEtMCsGA1UEAxMk NDUyZGQ5MTYtODlhYy00MWRiLThmZDQtOWFlZWVjZWQ2YjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudJut32EbUQFlMOQ6NiEYdzcx2tgWSZ7ZyJ+ W/Oc6XUB1GFP3uu1l9M8axz2FqiryKsEcLbl1MK0gMxUF43dTs3cvskMUusfLiHD GStPCScaOO+q/jDKlGGGglQgGCx6ZY4v98TNdnZI7wSqJmXktDOomLfUvonmv3cF weLYaWvZTWkoOORHwbQfsNk6v9GzQellRLW3AGPdp73m4nm9DYxac2L+NLp2dRCu j5YkOCf0s5i0JjA8HA0MOCvx71yKjVRP5VCY/+xFtvarL9dIbktfKoyI+8TXjKbt Lp8D2a1Uazn1vwnaqvmIg3JVWF4f3cO87emJRH8rHiFV5ZV/CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXLUvYMSsIkDY5DU+Jm+sgveDAxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yMDM3 MzUyYi04ZWYxLTQyYzQtOThjOS1kNDk4NmEzMjA5M2QvODcyOTA2MTUtZDZkOC0z ZWNlLTg2MWYtMDhlMzhkOGViYzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjAzNzM1MmItOGVmMS00MmM0LTk4 YzktZDQ5ODZhMzIwOTNkLzIwMzczNTJiLThlZjEtNDJjNC05OGM5LWQ0OTg2YTMy MDkzZC5jcmwwHwYDVR0jBBgwFoAUBuU0QsKrAAbM6Xbi7M70WpN+XN8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yMDM3MzUyYi04ZWYxLTQyYzQtOThjOS1kNDk4 NmEzMjA5M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0eyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFRiVJh/VFbIIF1ILCXpwS6prj6TJnly9xTeV2mIN0vJSY8CVZ6lEri 2UZrzj6XRifoCzzdto74NDsumYKqirUX945Pj6927poQhoy6DWDw3UeSol+DK768 NI8t0fB+72J7hMx36yGUksEgpErymo61oNFypgCqZjTuBg/EH5WXwmQAL53bC1/1 f6dUaz4f8BJjG2/bYUzVXJ6MaX1+UjFDp8tMpUkDlCYUrYT4qetnQjs+/QjIU7xo CGXFxz0DQGAmK+1+yPQel6IcK/074VuhofUz4RC3Mcsa4YxPeWFQXYsBwrUjxDw9 +cI/qENtxIiTeHw8ILcHT8eNLvC7gh8= -----END CERTIFICATE-----Generated at Wed Oct 8 21:17:05 2025 by rpki-client