$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3fb4c2b-2e88-3d08-85fd-80e791ebc446.roa File: c3fb4c2b-2e88-3d08-85fd-80e791ebc446.roa (raw, json) Hash identifier: WQscijq1Lk3ZkqnxYv2cFCWnsSEBxxoAy1pfOJO28Ak= Subject key identifier: 96:52:15:42:E0:AA:3C:A0:38:65:F5:FC:86:7E:72:BD:D1:9F:7D:EF Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD44217F7359EB21BD4E0180 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3fb4c2b-2e88-3d08-85fd-80e791ebc446.roa Signing time: Tue 26 Aug 2025 22:57:33 +0000 ROA not before: Tue 26 Aug 2025 22:57:33 +0000 ROA not after: Mon 24 Nov 2025 23:57:33 +0000 asID: 31898 IP address blocks: 209.17.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:44:21:7f:73:59:eb:21:bd:4e:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:57:33 2025 GMT Not After : Nov 24 23:57:33 2025 GMT Subject: CN=fa90d4a5-1de8-4cd6-ac28-c414cb666a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c5:fb:34:5f:4b:32:5b:9c:fd:6b:67:b9:af: 45:ba:f0:05:57:d6:45:c9:54:9c:43:5f:85:c1:19: da:cf:e8:50:4b:0d:ac:b7:f7:8f:72:22:44:83:d4: 41:69:8a:06:5e:bc:1a:b7:e7:86:95:91:ff:e4:d1: 3d:b7:db:f0:cc:6a:cf:74:0a:4b:d5:df:b5:bf:ae: 09:2f:12:b5:90:f2:21:9b:82:dc:5e:fb:05:b8:41: 4d:62:7c:45:f9:36:a4:12:4f:5b:ff:80:6a:e7:ac: 87:59:2c:8b:88:09:39:24:07:0a:ca:2a:c9:80:41: af:14:55:88:28:b1:ae:99:dd:41:d5:bb:48:3e:e1: a8:46:c8:4e:bd:4f:10:6b:d9:83:cf:15:5c:40:f9: f3:c9:f6:a8:0e:e0:46:60:bb:1d:93:f7:c9:e2:6d: 20:ec:47:19:fa:c1:ca:ab:10:37:db:9e:31:54:e0: 66:04:f0:ab:01:ed:fc:58:0e:4e:b9:43:0b:3a:1c: e1:33:7e:98:82:3f:4a:28:d8:79:05:b4:ca:39:2d: 45:9d:5e:52:cd:72:9f:09:b0:fb:76:01:d7:78:aa: 13:3e:0e:b4:6b:b5:8a:2c:24:af:3f:e6:32:a3:2a: 26:db:ac:ff:08:4c:3b:c3:81:40:4b:fe:67:67:42: 8d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:52:15:42:E0:AA:3C:A0:38:65:F5:FC:86:7E:72:BD:D1:9F:7D:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c3fb4c2b-2e88-3d08-85fd-80e791ebc446.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 209.17.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:57:3a:f9:34:96:e3:6c:bb:fb:e9:69:70:3f:93:5e:28:56: 5f:cd:b2:9f:05:ab:b2:33:2d:c7:47:5d:e1:78:42:7b:d8:b1: 26:0b:ee:2f:63:f5:3d:95:e5:c6:ec:3b:21:db:54:66:f6:c8: ce:08:87:d2:53:84:f4:57:86:64:5b:1a:0d:06:9d:00:78:68: b6:fc:6b:ab:53:05:de:93:3d:b9:b0:77:81:1c:e8:f6:a7:cf: 50:f3:f5:68:0c:db:2d:d2:a5:7d:37:30:0f:9a:2c:db:9e:fe: d6:fc:19:db:aa:8a:26:2e:b1:81:be:16:4d:64:b2:cf:ac:ee: bf:02:10:80:f6:63:8f:5f:c1:52:3d:13:7d:f3:0f:ab:49:ef: 95:2f:0b:a2:81:31:b9:7d:de:e7:43:b1:39:a8:64:27:a1:44: 4f:05:19:38:35:36:e6:41:7c:f7:99:d5:c1:a4:20:40:13:f4: 59:a7:e2:3a:d7:69:05:37:89:b4:fe:6b:70:59:34:10:59:8d: 8d:88:ed:42:38:e6:d1:ce:44:d2:5e:43:39:f3:10:33:15:12: 6a:f7:82:aa:59:2e:c0:43:24:1c:c4:a8:aa:98:2c:30:e4:7b: e2:84:6a:4c:11:5a:cc:be:5a:ed:bf:3b:5f:33:16:be:45:08: ea:55:26:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9RCF/c1nrIb1OAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTczM1oXDTI1MTEyNDIzNTczM1owLzEtMCsGA1UEAxMk ZmE5MGQ0YTUtMWRlOC00Y2Q2LWFjMjgtYzQxNGNiNjY2YTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncX7NF9LMluc/Wtnua9FuvAFV9ZFyVScQ1+F wRnaz+hQSw2st/ePciJEg9RBaYoGXrwat+eGlZH/5NE9t9vwzGrPdApL1d+1v64J LxK1kPIhm4LcXvsFuEFNYnxF+TakEk9b/4Bq56yHWSyLiAk5JAcKyirJgEGvFFWI KLGumd1B1btIPuGoRshOvU8Qa9mDzxVcQPnzyfaoDuBGYLsdk/fJ4m0g7EcZ+sHK qxA3254xVOBmBPCrAe38WA5OuUMLOhzhM36Ygj9KKNh5BbTKOS1FnV5SzXKfCbD7 dgHXeKoTPg60a7WKLCSvP+Yyoyom26z/CEw7w4FAS/5nZ0KNiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZSFULgqjygOGX1/IZ+cr3Rn33vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYzNmYjRjMmItMmU4OC0z ZDA4LTg1ZmQtODBlNzkxZWJjNDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RE0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVXOvk0luNsu/vpaXA/k14oVl/Nsp8Fq7IzLcdHXeF4QnvYsSYL7i9j 9T2V5cbsOyHbVGb2yM4Ih9JThPRXhmRbGg0GnQB4aLb8a6tTBd6TPbmwd4Ec6Pan z1Dz9WgM2y3SpX03MA+aLNue/tb8GduqiiYusYG+Fk1kss+s7r8CEID2Y49fwVI9 E33zD6tJ75UvC6KBMbl93udDsTmoZCehRE8FGTg1NuZBfPeZ1cGkIEAT9Fmn4jrX aQU3ibT+a3BZNBBZjY2I7UI45tHORNJeQznzEDMVEmr3gqpZLsBDJBzEqKqYLDDk e+KEakwRWsy+Wu2/O18zFr5FCOpVJrI= -----END CERTIFICATE-----Generated at Wed Oct 8 23:18:05 2025 by rpki-client