$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/59c985f6-423f-32c7-86e4-5f836bd897fe.roa File: 59c985f6-423f-32c7-86e4-5f836bd897fe.roa (raw, json) Hash identifier: 0reoU7eU7LpJ+eu37le1rI/qiUUcExl88vbOVyFw0rQ= Subject key identifier: 8E:3D:64:F6:EC:B2:88:92:2A:83:3E:65:48:C8:1D:AB:28:FC:53:2D Certificate issuer: /CN=1ae9796a-5f3d-4f47-b117-42360a213e37 Certificate serial: 010D0C9F4328584B9E07B6AB6FE7E28B8F541100 Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/59c985f6-423f-32c7-86e4-5f836bd897fe.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 1004 IP address blocks: 209.112.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:b6:ab:6f:e7:e2:8b:8f:54:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=f057d16c-566a-45f6-9765-876d562a12ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5c:f6:01:18:25:74:b4:8e:c5:6e:27:a8:35: 22:15:87:4a:84:da:43:ef:40:af:05:48:00:00:e2: 87:0a:08:35:4f:c8:92:c9:7d:fa:97:2d:ad:2f:d9: 9e:bd:41:c7:b0:54:7c:33:a7:e1:5e:07:5e:1c:58: 4f:bc:29:72:c3:64:6d:8e:7b:d4:fa:aa:25:b5:c9: 97:08:b0:64:5a:86:7d:5b:9c:c5:01:26:b1:3e:d1: fe:9f:9c:3a:12:a4:50:76:a1:96:39:1b:03:9d:32: fa:4e:39:b2:e7:70:4d:74:8c:ac:0e:ac:fe:4a:8e: 6b:7e:e1:1b:32:e7:1d:6c:6c:81:cb:87:cf:de:19: f1:6e:91:4e:11:c1:b3:7b:45:ae:c7:47:61:e7:70: 12:36:45:89:ec:b0:e3:05:1c:a9:bf:77:a9:5a:41: 67:3b:d3:1d:d1:31:18:74:d3:dc:a4:de:b3:68:39: 49:3f:70:2a:ef:19:f7:18:5a:66:64:86:e4:8e:e7: 12:5d:b7:12:a1:c5:96:1c:a1:57:b5:3e:7e:8e:2a: 2e:47:b3:e0:10:21:9c:ac:d7:0b:70:4f:f7:c5:29: 1a:06:2e:10:63:8f:a8:a0:eb:b9:2b:ee:55:a3:01: 3e:d5:38:88:b0:df:06:1f:73:e4:89:c7:7a:dd:79: c2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:3D:64:F6:EC:B2:88:92:2A:83:3E:65:48:C8:1D:AB:28:FC:53:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/59c985f6-423f-32c7-86e4-5f836bd897fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl X509v3 Authority Key Identifier: keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer sbgp-ipAddrBlock: critical IPv4: 209.112.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:2c:a6:c3:db:3a:e7:d3:2b:20:3b:a3:32:0d:c0:3c:39:66: 65:da:4e:aa:97:24:7a:9d:e7:d5:0c:e0:20:6f:28:89:32:6e: 86:88:5a:10:de:98:ca:e7:bd:d5:7c:8c:f3:de:d9:b4:64:27: 57:cb:47:4e:1e:12:0a:cb:85:81:81:3e:3a:aa:bc:f7:ce:e1: 05:8e:84:e4:cc:67:a0:e2:b3:39:f5:22:fd:8c:e0:78:4f:61: f3:2d:4e:fd:01:be:38:9d:66:5e:f8:7a:5e:51:4a:90:b3:f4: 50:f8:78:73:fc:1c:1b:09:61:c1:30:06:17:4a:e2:a7:3b:55: 3b:89:d5:f5:cf:80:3f:be:15:c5:63:bd:ad:ed:f0:55:4c:e1: 17:4a:63:ed:79:2f:0d:1b:61:ce:5a:c1:54:00:5b:6e:f0:75: 86:02:4e:59:cd:f6:bc:ad:4e:8e:a0:91:3e:07:33:53:37:e2: 76:75:08:d8:f3:8f:fd:1c:23:32:f3:1e:66:2f:8b:d8:dc:87: 9e:fd:8f:db:6e:22:60:95:90:48:c3:49:ca:ca:4e:d4:09:37: 41:43:d4:66:6d:e7:a6:70:1c:97:18:e0:8b:12:e0:60:83:9d: f9:39:84:d4:65:78:e2:cd:8c:53:03:33:ab:b9:86:81:b2:36: 62:61:2a:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB7arb+fii49UEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFlOTc5NmEtNWYzZC00ZjQ3LWIxMTctNDIzNjBhMjEz ZTM3MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZjA1N2QxNmMtNTY2YS00NWY2LTk3NjUtODc2ZDU2MmExMmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Fz2ARgldLSOxW4nqDUiFYdKhNpD70CvBUgA AOKHCgg1T8iSyX36ly2tL9mevUHHsFR8M6fhXgdeHFhPvClyw2RtjnvU+qoltcmX CLBkWoZ9W5zFASaxPtH+n5w6EqRQdqGWORsDnTL6Tjmy53BNdIysDqz+So5rfuEb MucdbGyBy4fP3hnxbpFOEcGze0Wux0dh53ASNkWJ7LDjBRypv3epWkFnO9Md0TEY dNPcpN6zaDlJP3Aq7xn3GFpmZIbkjucSXbcSocWWHKFXtT5+jiouR7PgECGcrNcL cE/3xSkaBi4QY4+ooOu5K+5VowE+1TiIsN8GH3Pkicd63XnCswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI49ZPbssoiSKoM+ZUjIHaso/FMtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5 Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2MGEyMTNlMzcvNTljOTg1ZjYtNDIzZi0z MmM3LTg2ZTQtNWY4MzZiZDg5N2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWFlOTc5NmEtNWYzZC00ZjQ3LWIx MTctNDIzNjBhMjEzZTM3LzFhZTk3OTZhLTVmM2QtNGY0Ny1iMTE3LTQyMzYwYTIx M2UzNy5jcmwwHwYDVR0jBBgwFoAUTss6/l8FHqwG3VnOR6besyl/QdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2 MGEyMTNlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XBYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADospsPbOufTKyA7ozINwDw5ZmXaTqqXJHqd59UM4CBvKIkyboaIWhDe mMrnvdV8jPPe2bRkJ1fLR04eEgrLhYGBPjqqvPfO4QWOhOTMZ6Diszn1Iv2M4HhP YfMtTv0BvjidZl74el5RSpCz9FD4eHP8HBsJYcEwBhdK4qc7VTuJ1fXPgD++FcVj va3t8FVM4RdKY+15Lw0bYc5awVQAW27wdYYCTlnN9rytTo6gkT4HM1M34nZ1CNjz j/0cIzLzHmYvi9jch579j9tuImCVkEjDScrKTtQJN0FD1GZt56ZwHJcY4IsS4GCD nfk5hNRleOLNjFMDM6u5hoGyNmJhKpE= -----END CERTIFICATE-----Generated at Sun Oct 26 09:23:13 2025 by rpki-client