$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/1426a637-13aa-36d7-87c8-2a889dcd7975.roa File: 1426a637-13aa-36d7-87c8-2a889dcd7975.roa (raw, json) Hash identifier: 8TOwGDWtwsn6zgwVs2qcnByrbic9bo5LhPZjYQDbtO0= Subject key identifier: 5A:6A:AC:04:19:41:67:46:12:48:91:E5:9C:7B:05:73:3B:03:33:A8 Certificate issuer: /CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Certificate serial: 010D0C9F4328584B41E70B38375C60166B829D00 Authority key identifier: EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/1426a637-13aa-36d7-87c8-2a889dcd7975.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 207645 IP address blocks: 209.240.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:0b:38:37:5c:60:16:6b:82:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=fc8678d3-871a-4d45-9a6f-c89610e32962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2c:3a:2b:7e:18:2f:eb:7e:c3:38:c3:3b:e7: b4:13:62:8a:b9:46:c2:a1:77:06:4e:62:5b:f2:2d: 28:d2:76:e2:41:9e:0d:64:ab:bc:35:7b:1e:b9:e7: a5:36:24:e2:e0:2b:dc:83:84:54:76:49:c4:e9:08: 15:39:dc:27:6e:22:f2:e8:b4:58:09:b0:f7:23:ca: 94:90:21:5d:d2:06:a2:a0:8c:97:00:11:0f:84:9b: 38:4b:64:25:9c:e5:15:b3:26:14:07:37:38:d2:a0: d4:bf:9b:9a:c7:2d:aa:81:f4:aa:b6:97:aa:5d:5e: 07:54:2d:9a:2d:e2:12:a9:de:e2:c3:8c:05:de:7d: 60:fc:d3:08:ce:96:23:77:74:71:cd:68:5c:71:5a: 44:ea:43:0c:23:46:d2:b6:83:28:a7:df:91:84:bb: 24:76:ef:6a:2a:d0:1b:16:ea:a3:24:96:e7:d0:b1: ed:33:b9:2c:b2:67:0f:32:06:8d:c3:37:eb:8a:34: 97:d5:56:ed:26:8f:66:a4:bc:0f:fc:6c:41:a1:0d: db:3f:94:b3:32:16:b6:20:31:5c:d9:9d:cb:d9:a6: 69:11:f0:21:08:b9:4e:fe:47:db:b8:21:af:e5:a8: 20:49:a1:3a:0e:c6:1b:5d:b6:7b:21:08:02:16:3b: df:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6A:AC:04:19:41:67:46:12:48:91:E5:9C:7B:05:73:3B:03:33:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/1426a637-13aa-36d7-87c8-2a889dcd7975.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl X509v3 Authority Key Identifier: keyid:EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer sbgp-ipAddrBlock: critical IPv4: 209.240.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:32:7c:a6:79:40:c3:66:3a:e7:de:ec:3a:7a:56:2a:3d:40: e0:56:e6:33:06:3d:14:75:fe:1e:36:24:5f:24:7b:9e:59:5d: 4a:81:d9:e1:7c:3c:a2:91:af:d3:7c:e1:82:5c:10:55:a3:b2: c5:5c:4a:77:1f:b4:a5:a4:03:17:0f:fc:0d:84:8c:76:0f:d8: f8:21:ac:b2:31:2e:ba:4f:8e:c5:1d:98:6e:f0:46:af:36:d2: d2:4e:31:d6:ba:a2:f6:69:21:4a:86:53:d1:e1:98:b3:00:c4: b8:ef:75:78:de:5b:24:59:3b:b8:b8:b7:85:59:04:1c:84:f3: 3b:13:5e:7b:e2:ee:d3:e9:49:6a:e9:55:27:64:e9:56:8f:2f: 29:b0:c5:71:62:0e:b5:a9:5a:40:e2:de:12:ea:e4:c3:5d:44: b8:c0:e1:73:c6:2c:3b:fe:e9:86:5d:1c:09:ce:47:2f:37:c5: b3:f7:d7:95:c8:71:c4:e9:9c:a2:89:40:3a:f6:7a:c7:34:70: 6b:51:cd:0c:cc:68:5a:3a:70:22:e5:44:b2:7e:30:60:88:7a: 14:52:59:34:91:9f:de:95:72:49:20:58:22:74:f0:df:b4:1b: ae:64:ce:80:ee:51:94:87:ab:b2:52:43:86:5d:fb:0d:77:be: 2d:84:f8:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5ws4N1xgFmuCnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZlOTg5MTItNTFmYy00OTBlLWI1MmYtMGY2ZGI5YTI4 NDdlMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ZmM4Njc4ZDMtODcxYS00ZDQ1LTlhNmYtYzg5NjEwZTMyOTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCw6K34YL+t+wzjDO+e0E2KKuUbCoXcGTmJb 8i0o0nbiQZ4NZKu8NXseueelNiTi4Cvcg4RUdknE6QgVOdwnbiLy6LRYCbD3I8qU kCFd0gaioIyXABEPhJs4S2QlnOUVsyYUBzc40qDUv5uaxy2qgfSqtpeqXV4HVC2a LeISqd7iw4wF3n1g/NMIzpYjd3RxzWhccVpE6kMMI0bStoMop9+RhLskdu9qKtAb FuqjJJbn0LHtM7kssmcPMgaNwzfrijSX1VbtJo9mpLwP/GxBoQ3bP5SzMha2IDFc 2Z3L2aZpEfAhCLlO/kfbuCGv5aggSaE6DsYbXbZ7IQgCFjvf8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpqrAQZQWdGEkiR5Zx7BXM7AzOoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5 ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZkYjlhMjg0N2UvMTQyNmE2MzctMTNhYS0z NmQ3LTg3YzgtMmE4ODlkY2Q3OTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGZlOTg5MTItNTFmYy00OTBlLWI1 MmYtMGY2ZGI5YTI4NDdlL2RmZTk4OTEyLTUxZmMtNDkwZS1iNTJmLTBmNmRiOWEy ODQ3ZS5jcmwwHwYDVR0jBBgwFoAU7IFTNMBbGPl+30NKbxqXz6CvV2kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZk YjlhMjg0N2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0fAEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwyfKZ5QMNmOufe7Dp6Vio9QOBW5jMGPRR1/h42JF8ke55ZXUqB2eF8 PKKRr9N84YJcEFWjssVcSncftKWkAxcP/A2EjHYP2PghrLIxLrpPjsUdmG7wRq82 0tJOMda6ovZpIUqGU9HhmLMAxLjvdXjeWyRZO7i4t4VZBByE8zsTXnvi7tPpSWrp VSdk6VaPLymwxXFiDrWpWkDi3hLq5MNdRLjA4XPGLDv+6YZdHAnORy83xbP315XI ccTpnKKJQDr2esc0cGtRzQzMaFo6cCLlRLJ+MGCIehRSWTSRn96VckkgWCJ08N+0 G65kzoDuUZSHq7JSQ4Zd+w13vi2E+H0= -----END CERTIFICATE-----Generated at Thu Oct 16 12:29:41 2025 by rpki-client