$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/98a3e3fc-6f6d-39b7-bab0-5274a9daafbb.roa File: 98a3e3fc-6f6d-39b7-bab0-5274a9daafbb.roa (raw, json) Hash identifier: mrtaUWQ00ASQGNT2IoEpX72tIfRbLLmoyYzZNrmgLdQ= Subject key identifier: 82:FB:89:D2:E0:2D:39:E2:F8:D2:47:62:82:36:95:96:19:89:C5:01 Certificate issuer: /CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae Certificate serial: 010D0C9F4328584B2496D483957C262C84BC0180 Authority key identifier: 0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/98a3e3fc-6f6d-39b7-bab0-5274a9daafbb.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 31834 IP address blocks: 209.222.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:d4:83:95:7c:26:2c:84:bc:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=4c640005-7804-4b23-b570-6b761f4e025d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4b:fd:0b:a3:17:9d:fd:28:55:8d:77:7e:05: 5e:21:14:35:37:5c:c2:45:80:26:47:07:d6:7f:56: 79:ff:8e:23:49:8e:1c:ee:d4:97:46:af:18:ae:5d: 6c:75:88:8a:f0:46:d3:42:1f:be:a1:4c:7c:a5:99: 47:d1:e4:0d:af:be:11:82:cc:e8:59:81:43:d2:cb: 30:4f:f0:6d:d8:d0:f0:08:6b:8b:85:1d:39:e0:80: 37:53:93:2d:42:2d:35:96:9a:09:09:fc:bf:01:86: fe:97:c9:10:cd:b0:ea:ef:dd:52:cb:32:9b:d3:85: d4:1c:b7:25:6d:1a:4d:ec:1e:ea:9b:d9:18:f9:69: 30:e4:22:e5:f9:8d:95:6f:12:2a:22:45:8b:7a:b4: 8e:0d:60:3e:32:0b:0c:11:de:a3:a8:14:67:3d:18: cf:92:60:51:df:78:d1:4d:37:bc:6d:97:31:ec:4a: 74:94:2c:e5:59:02:99:29:9a:a5:86:01:08:74:0d: d1:60:ec:d4:9b:46:a2:ea:0a:90:5a:38:23:25:b9: 24:b7:a8:2a:a5:ed:20:75:db:86:51:4d:74:b5:6a: 48:48:ca:76:17:84:8c:ef:a3:85:c3:cf:8a:d9:35: 13:91:ec:4a:03:85:1e:69:98:09:b3:54:38:53:01: 14:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FB:89:D2:E0:2D:39:E2:F8:D2:47:62:82:36:95:96:19:89:C5:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/98a3e3fc-6f6d-39b7-bab0-5274a9daafbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl X509v3 Authority Key Identifier: keyid:0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer sbgp-ipAddrBlock: critical IPv4: 209.222.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:26:90:9c:2c:5f:96:2d:f9:a2:b9:69:46:94:cb:2d:cc:71: 75:9d:6e:89:da:b9:39:45:8f:72:a3:20:ee:2d:31:74:17:33: 46:5c:60:ad:71:01:fb:f3:a2:1e:90:6f:fd:dc:e3:aa:fa:0b: 32:de:d4:7f:d9:a3:3d:ba:cc:a3:63:88:65:80:fe:a8:2f:bc: 7c:ed:2a:72:4b:b1:cb:42:2b:cd:2b:9b:b4:14:6b:85:4a:96: c9:3e:bf:3b:f4:05:e2:d8:1e:e2:20:bc:8d:84:c5:fa:72:cc: e0:80:1f:9e:29:dc:ba:64:17:79:f2:32:45:62:92:b4:25:a9: 0a:0f:e6:d3:d3:05:ca:61:e2:d9:13:c4:73:d5:29:a5:31:24: b1:91:67:40:62:12:b1:aa:e5:92:30:20:0b:93:36:fa:98:41: 09:76:7d:29:11:0b:e6:01:b2:82:1f:75:10:97:ef:27:a0:0d: 6c:e4:20:26:68:2c:64:5b:42:c1:e5:42:fe:f4:e6:61:5c:d0: 4e:1d:84:78:48:c6:ce:c9:53:ae:fe:eb:30:1b:60:84:a3:6f: e3:17:e7:9c:f6:e1:3d:01:77:30:bb:4a:92:2e:58:29:c7:a4: f4:fb:75:20:57:69:d3:79:81:7a:e1:f8:59:74:1a:a9:18:e7: 7e:13:9d:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskltSDlXwmLIS8AYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjFhYzgzYjUtNGNmZC00YjM4LWIxYmItNDUwMDBlZWJh NmFlMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk NGM2NDAwMDUtNzgwNC00YjIzLWI1NzAtNmI3NjFmNGUwMjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEv9C6MXnf0oVY13fgVeIRQ1N1zCRYAmRwfW f1Z5/44jSY4c7tSXRq8Yrl1sdYiK8EbTQh++oUx8pZlH0eQNr74RgszoWYFD0ssw T/Bt2NDwCGuLhR054IA3U5MtQi01lpoJCfy/AYb+l8kQzbDq791SyzKb04XUHLcl bRpN7B7qm9kY+Wkw5CLl+Y2VbxIqIkWLerSODWA+MgsMEd6jqBRnPRjPkmBR33jR TTe8bZcx7Ep0lCzlWQKZKZqlhgEIdA3RYOzUm0ai6gqQWjgjJbkkt6gqpe0gdduG UU10tWpISMp2F4SM76OFw8+K2TUTkexKA4UeaZgJs1Q4UwEUywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIL7idLgLTni+NJHYoI2lZYZicUBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFj ODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAwMGVlYmE2YWUvOThhM2UzZmMtNmY2ZC0z OWI3LWJhYjAtNTI3NGE5ZGFhZmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjFhYzgzYjUtNGNmZC00YjM4LWIx YmItNDUwMDBlZWJhNmFlL2YxYWM4M2I1LTRjZmQtNGIzOC1iMWJiLTQ1MDAwZWVi YTZhZS5jcmwwHwYDVR0jBBgwFoAUCrA0V1FPrMSLEXsWcz7MjvXGb0YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFjODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAw MGVlYmE2YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0d7zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQmkJwsX5Yt+aK5aUaUyy3McXWdbonauTlFj3KjIO4tMXQXM0ZcYK1x Afvzoh6Qb/3c46r6CzLe1H/Zoz26zKNjiGWA/qgvvHztKnJLsctCK80rm7QUa4VK lsk+vzv0BeLYHuIgvI2ExfpyzOCAH54p3LpkF3nyMkVikrQlqQoP5tPTBcph4tkT xHPVKaUxJLGRZ0BiErGq5ZIwIAuTNvqYQQl2fSkRC+YBsoIfdRCX7yegDWzkICZo LGRbQsHlQv705mFc0E4dhHhIxs7JU67+6zAbYISjb+MX55z24T0BdzC7SpIuWCnH pPT7dSBXadN5gXrh+Fl0GqkY534TnXc= -----END CERTIFICATE-----Generated at Wed Sep 10 19:08:50 2025 by rpki-client