$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/c23d2d90-392f-3a5f-97c3-1a83ff42538f.roa File: c23d2d90-392f-3a5f-97c3-1a83ff42538f.roa (raw, json) Hash identifier: 4SVftWWA+q/X2+yNWmRzxJsI/19y8BmMeX2NwauGesM= Subject key identifier: 0D:A7:04:92:B4:B2:4E:DF:69:4A:55:8B:05:1B:13:84:17:97:79:A1 Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584AE9F669FE4D3D6FEEEF949E80 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/c23d2d90-392f-3a5f-97c3-1a83ff42538f.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 62651 IP address blocks: 205.185.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:69:fe:4d:3d:6f:ee:ef:94:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=48e6e6e8-a751-47ca-a56a-d5b19a2abcf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c3:8a:20:46:f5:0f:f1:17:36:4e:b3:89:2c: d4:92:f3:4e:03:d4:41:19:db:9a:94:b4:60:49:9a: 53:e5:14:63:45:16:04:9d:a6:48:d8:a9:8b:e2:52: 41:82:b5:3c:28:f7:fe:d4:fe:12:7b:35:3f:87:ef: 3e:75:65:2e:a8:e6:7e:93:3a:5c:82:47:9f:f3:1c: d6:4d:b2:17:3c:21:73:21:f8:5f:7f:8c:2f:de:cb: 6e:bd:27:39:f8:3b:23:49:02:4f:64:1f:0f:b4:95: 49:4d:1a:a9:c0:a0:fd:fc:f8:bd:0c:71:16:7e:ee: 02:c7:72:30:c1:da:ae:06:42:5a:e5:73:f7:61:d9: 32:c2:b7:fc:28:97:ab:69:1f:88:54:4c:07:f0:cd: eb:c8:5b:c2:0f:5c:84:ae:2d:e8:74:1c:90:d1:14: f4:c3:26:d9:49:7d:1e:29:30:0b:55:d5:54:84:0c: 03:32:38:5d:c2:5d:e5:a3:7c:2d:4e:b9:ed:5b:4c: a5:cf:fc:64:8e:ef:24:6a:7a:c4:77:aa:20:ba:7e: 4c:56:e8:46:0f:6b:92:83:35:a4:3b:b1:57:19:24: 4d:ae:4e:c3:0a:49:0d:02:e1:83:78:39:af:dd:5c: 4c:bc:42:f0:30:15:65:de:27:0d:ae:30:22:91:b6: eb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A7:04:92:B4:B2:4E:DF:69:4A:55:8B:05:1B:13:84:17:97:79:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/c23d2d90-392f-3a5f-97c3-1a83ff42538f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 205.185.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:9f:3a:7d:f5:df:5e:06:bf:66:59:85:e0:2d:ab:00:f3:dc: 68:5e:85:3d:41:22:4b:97:2d:79:70:d4:e8:68:ec:d9:71:1c: 37:31:e8:f1:eb:c1:b2:f3:b5:95:dd:48:38:ef:04:e0:51:35: 69:49:28:73:1d:d7:f3:b6:72:d3:d2:27:32:9a:f9:b5:bb:91: df:3a:f8:61:15:58:7c:bd:3b:be:8e:de:56:f3:5d:78:96:f4: 75:2f:2b:47:51:b3:67:f8:79:10:2b:9c:e2:e8:b8:72:2a:b7: 68:69:a3:10:9b:57:a9:9d:e7:3f:49:28:30:70:17:cf:78:0a: 29:58:a0:cd:65:91:b6:ed:9a:8b:97:63:30:5a:bc:de:b5:ab: 2f:00:08:34:5e:59:02:e6:76:d1:93:db:1e:ad:5b:15:58:6d: fd:5e:b4:28:37:c8:2a:7e:21:07:ed:c5:9f:54:fe:32:6e:e2: 20:f3:3c:3b:a9:35:f4:61:2a:9f:ed:ae:55:67:5a:26:b3:d8: 49:52:87:ec:f9:62:2c:42:40:83:4a:aa:02:3a:06:0d:bf:e5: bd:d0:8b:92:4e:76:03:23:32:aa:d7:63:a3:eb:c2:aa:3f:2f: 8d:ef:cc:8c:2d:6a:13:62:df:93:a8:b1:e7:c3:85:44:0b:d5: 2d:9e:0d:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErp9mn+TT1v7u+UnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk NDhlNmU2ZTgtYTc1MS00N2NhLWE1NmEtZDViMTlhMmFiY2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMOKIEb1D/EXNk6ziSzUkvNOA9RBGdualLRg SZpT5RRjRRYEnaZI2KmL4lJBgrU8KPf+1P4SezU/h+8+dWUuqOZ+kzpcgkef8xzW TbIXPCFzIfhff4wv3stuvSc5+DsjSQJPZB8PtJVJTRqpwKD9/Pi9DHEWfu4Cx3Iw wdquBkJa5XP3Ydkywrf8KJeraR+IVEwH8M3ryFvCD1yEri3odByQ0RT0wybZSX0e KTALVdVUhAwDMjhdwl3lo3wtTrntW0ylz/xkju8kanrEd6ogun5MVuhGD2uSgzWk O7FXGSRNrk7DCkkNAuGDeDmv3VxMvELwMBVl3icNrjAikbbrfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2nBJK0sk7faUpViwUbE4QXl3mhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvYzIzZDJkOTAtMzkyZi0z YTVmLTk3YzMtMWE4M2ZmNDI1MzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzbnRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2fOn31314Gv2ZZheAtqwDz3GhehT1BIkuXLXlw1Oho7NlxHDcx6PHr wbLztZXdSDjvBOBRNWlJKHMd1/O2ctPSJzKa+bW7kd86+GEVWHy9O76O3lbzXXiW 9HUvK0dRs2f4eRArnOLouHIqt2hpoxCbV6md5z9JKDBwF894CilYoM1lkbbtmouX YzBavN61qy8ACDReWQLmdtGT2x6tWxVYbf1etCg3yCp+IQftxZ9U/jJu4iDzPDup NfRhKp/trlVnWiaz2ElSh+z5YixCQINKqgI6Bg2/5b3Qi5JOdgMjMqrXY6Prwqo/ L43vzIwtahNi35OosefDhUQL1S2eDR8= -----END CERTIFICATE-----Generated at Fri Oct 24 10:31:54 2025 by rpki-client