$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/9c1acd6a-07c0-376e-87e2-b1a2992e2c69.roa File: 9c1acd6a-07c0-376e-87e2-b1a2992e2c69.roa (raw, json) Hash identifier: anXJnaXf8aXKQft1MU8zsnIes1vv8bZ3BMFCmUlzlFY= Subject key identifier: BF:F2:DE:A0:96:E4:69:11:69:AA:50:F5:FC:E4:8F:9E:8C:06:F5:18 Certificate issuer: /CN=4f8ec25d-932a-4dd4-8f83-f1da049068ec Certificate serial: 010D0C9F4328584B1F01695FC938BCD7B9815D00 Authority key identifier: 31:C5:E0:9D:A7:42:17:EF:27:47:7E:8E:A5:29:8D:3F:33:F2:E5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/9c1acd6a-07c0-376e-87e2-b1a2992e2c69.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 209.127.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:69:5f:c9:38:bc:d7:b9:81:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8ec25d-932a-4dd4-8f83-f1da049068ec Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=deb71e3a-43d8-49ad-91a9-53728cdd2369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d7:2b:c2:39:90:2c:47:15:20:0a:47:7a:1b: 84:b5:d4:6b:0c:cd:e3:f8:be:00:ed:5a:dc:67:cd: 95:91:8c:cb:0e:81:96:78:f4:41:9e:cd:ae:4a:15: 03:49:f4:1a:8b:b7:41:db:15:2e:05:ed:ee:b4:47: 82:1e:c4:98:d8:40:21:1e:7e:df:97:07:53:be:ed: 03:df:b6:0a:ee:a7:ac:34:75:af:0b:f3:29:99:04: eb:64:cf:a8:8b:61:e9:61:5a:e9:90:a8:0d:0b:13: d1:bb:50:73:82:79:32:51:e2:bc:7f:9a:d1:2a:68: fe:5f:f5:86:8c:f0:db:94:39:9c:36:fa:92:20:c1: 06:85:ea:4f:2f:b3:e1:6d:fa:91:a3:69:40:9c:19: 6e:c5:1e:e8:f4:fc:94:64:c9:1a:16:7d:3c:08:eb: 43:f9:1f:e6:b6:3a:03:01:15:d6:ea:2e:13:4e:2a: 3b:39:c1:ab:08:19:80:63:87:3d:1b:1b:ea:eb:2f: ca:83:30:82:68:da:31:2a:94:c3:c7:11:36:26:ec: 42:ed:f6:51:da:27:70:05:2f:fe:6c:d1:df:54:b2: ef:32:19:1d:57:8f:1c:2c:98:61:56:66:54:a2:06: 20:f0:4b:30:ae:7f:4b:9f:14:b1:db:c5:02:48:95: f3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F2:DE:A0:96:E4:69:11:69:AA:50:F5:FC:E4:8F:9E:8C:06:F5:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/9c1acd6a-07c0-376e-87e2-b1a2992e2c69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.crl X509v3 Authority Key Identifier: keyid:31:C5:E0:9D:A7:42:17:EF:27:47:7E:8E:A5:29:8D:3F:33:F2:E5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer sbgp-ipAddrBlock: critical IPv4: 209.127.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:5b:a1:8b:40:a6:31:03:15:32:ba:f1:f0:70:3c:5a:a1:af: d7:98:41:dc:ff:3f:c9:bb:ee:74:a2:51:0a:e2:5f:8d:6d:d3: 79:5c:fb:05:c6:0a:6e:78:dc:9e:19:db:58:45:ca:ca:47:d5: 3a:16:3e:27:f4:df:db:a3:36:c1:85:56:d1:02:b1:dc:1c:d7: e5:43:ef:02:be:06:64:b0:37:0a:4f:36:69:e3:62:a3:73:49: 8b:c1:7f:b0:08:08:2b:2a:d9:30:c0:c9:cd:25:36:42:bb:fa: eb:c6:60:04:8d:a4:18:45:bd:9d:96:4d:96:df:ea:41:18:12: 31:d2:6e:57:ab:a2:3f:46:fc:78:a4:c9:07:55:cd:2c:36:4b: 17:6e:44:d9:87:38:99:b0:20:5c:af:82:d4:ff:bb:b9:30:bd: a0:d2:c8:c8:f3:27:c9:70:d5:23:75:d8:6f:d4:f9:1a:77:86: ab:da:f6:43:de:13:47:0d:0e:a3:40:19:62:e0:d0:a5:de:7a: fc:8c:06:46:4d:a1:49:bc:bc:59:12:de:05:e9:cf:31:3b:90: 8b:71:05:16:cc:d6:76:2b:42:bc:ae:a2:1f:2c:2f:75:0d:9b: 31:5b:fe:11:f7:92:45:13:3d:be:ad:63:a2:12:75:2f:47:ad: 09:45:43:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAWlfyTi817mBXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY4ZWMyNWQtOTMyYS00ZGQ0LThmODMtZjFkYTA0OTA2 OGVjMB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk ZGViNzFlM2EtNDNkOC00OWFkLTkxYTktNTM3MjhjZGQyMzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69crwjmQLEcVIApHehuEtdRrDM3j+L4A7Vrc Z82VkYzLDoGWePRBns2uShUDSfQai7dB2xUuBe3utEeCHsSY2EAhHn7flwdTvu0D 37YK7qesNHWvC/MpmQTrZM+oi2HpYVrpkKgNCxPRu1BzgnkyUeK8f5rRKmj+X/WG jPDblDmcNvqSIMEGhepPL7PhbfqRo2lAnBluxR7o9PyUZMkaFn08COtD+R/mtjoD ARXW6i4TTio7OcGrCBmAY4c9Gxvq6y/KgzCCaNoxKpTDxxE2JuxC7fZR2idwBS/+ bNHfVLLvMhkdV48cLJhhVmZUogYg8Eswrn9LnxSx28UCSJXzZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/y3qCW5GkRaapQ9fzkj56MBvUYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80Zjhl YzI1ZC05MzJhLTRkZDQtOGY4My1mMWRhMDQ5MDY4ZWMvOWMxYWNkNmEtMDdjMC0z NzZlLTg3ZTItYjFhMjk5MmUyYzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGY4ZWMyNWQtOTMyYS00ZGQ0LThm ODMtZjFkYTA0OTA2OGVjLzRmOGVjMjVkLTkzMmEtNGRkNC04ZjgzLWYxZGEwNDkw NjhlYy5jcmwwHwYDVR0jBBgwFoAUMcXgnadCF+8nR36OpSmNPzPy5U0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZjhlYzI1ZC05MzJhLTRkZDQtOGY4My1mMWRh MDQ5MDY4ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0X/pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpboYtApjEDFTK68fBwPFqhr9eYQdz/P8m77nSiUQriX41t03lc+wXG Cm543J4Z21hFyspH1ToWPif039ujNsGFVtECsdwc1+VD7wK+BmSwNwpPNmnjYqNz SYvBf7AICCsq2TDAyc0lNkK7+uvGYASNpBhFvZ2WTZbf6kEYEjHSbleroj9G/Hik yQdVzSw2SxduRNmHOJmwIFyvgtT/u7kwvaDSyMjzJ8lw1SN12G/U+Rp3hqva9kPe E0cNDqNAGWLg0KXeevyMBkZNoUm8vFkS3gXpzzE7kItxBRbM1nYrQryuoh8sL3UN mzFb/hH3kkUTPb6tY6ISdS9HrQlFQ1Y= -----END CERTIFICATE-----Generated at Thu Sep 18 08:22:18 2025 by rpki-client