$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/ff535494-2a23-36a7-81e0-762c387df51c.roa File: ff535494-2a23-36a7-81e0-762c387df51c.roa (raw, json) Hash identifier: YR/K2KsTqbNbfr1PZd+iFzq60J3E3t3jCprj1jxwEOY= Subject key identifier: 6F:1A:8B:7D:90:AE:D4:A7:88:58:B7:5C:FE:72:C0:D7:37:2A:48:E9 Certificate issuer: /CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae Certificate serial: 010D0C9F4328584B25FC313F6882852C6B89E980 Authority key identifier: 0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/ff535494-2a23-36a7-81e0-762c387df51c.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 33146 IP address blocks: 209.222.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:31:3f:68:82:85:2c:6b:89:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=d53339f6-8047-4535-ab13-30cedecff6c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fa:72:5a:5e:81:72:74:5d:1d:53:4d:7c:f8: bd:4b:21:18:2b:23:d0:1f:a8:a4:92:29:7f:63:b6: 14:0a:a7:b3:42:f5:7a:9a:e7:54:67:67:3e:76:c4: 88:da:cc:13:9c:aa:9b:ff:1f:7d:cc:ac:74:3f:23: 48:77:7a:84:87:48:ca:44:21:d7:d3:74:45:89:d2: ad:70:d3:94:7a:20:7a:30:ba:33:21:61:11:80:91: 9a:37:27:97:30:3f:90:66:cd:b8:89:59:32:4c:a7: 4c:0d:4d:6a:1d:d8:34:da:b6:5e:33:05:2f:69:4f: 14:38:ba:4f:71:c1:a8:b8:1c:f7:83:89:5b:df:16: 20:1a:9c:be:d1:5a:01:7f:8c:e9:6d:a3:2d:67:e9: 2d:89:b3:3b:5f:4a:e4:0e:6d:e0:b1:45:f0:2f:e7: fc:f0:11:ed:61:b4:4a:87:d2:3c:8e:2b:ab:8a:17: 76:a1:21:e5:97:e3:a2:17:da:d2:13:d9:57:ee:6e: 7a:3f:91:eb:c6:6a:b3:eb:76:5b:5c:ab:9c:46:65: 30:7a:e6:a6:ca:d9:10:49:c8:87:b2:2a:15:49:32: 1a:e2:ef:fe:69:f5:92:a6:44:ce:68:f4:27:72:54: f9:72:8b:ec:19:78:0f:e0:76:7d:77:1c:f8:4d:48: 02:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:1A:8B:7D:90:AE:D4:A7:88:58:B7:5C:FE:72:C0:D7:37:2A:48:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/ff535494-2a23-36a7-81e0-762c387df51c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl X509v3 Authority Key Identifier: keyid:0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer sbgp-ipAddrBlock: critical IPv4: 209.222.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:ab:55:45:a9:40:e4:22:6a:3f:5a:c7:94:0d:a0:48:fa:e4: 2d:6a:0b:65:04:e0:93:b0:ab:e2:6f:e0:a8:8b:c5:f0:2a:0b: 77:b6:34:94:5b:2a:71:40:32:d5:49:59:1f:f9:bf:c7:5f:27: 47:0b:cf:c9:dd:4e:d2:ab:9b:e5:28:ff:44:d8:5d:0c:dd:62: 63:f0:82:fb:a5:08:ad:51:3d:4e:48:c9:a6:0d:59:36:c4:b6: e5:a9:2a:76:4e:a7:99:d1:03:fc:63:ed:4f:d8:ca:cf:83:aa: 84:2a:39:4a:e8:a4:5d:6e:43:e1:64:04:b6:c0:d7:d9:f2:be: dc:59:d1:b1:dd:72:aa:cb:72:76:82:36:ec:4d:36:40:d0:58: 44:d8:ba:88:df:99:8c:77:00:79:7b:0d:cd:7b:6e:2b:49:98: 5d:27:e9:01:14:42:9d:6a:15:ab:b9:b0:a3:af:4f:da:83:e2: 29:96:bf:6c:b8:c1:50:30:38:77:39:f3:11:8b:82:c6:f7:ad: ab:e6:40:43:2e:b9:a8:86:31:e7:2c:90:37:23:4a:78:5e:b5: de:56:ea:40:80:8a:e7:64:ab:37:dc:aa:da:82:7f:06:31:64: 03:55:52:72:74:1c:c3:8e:fc:57:47:2a:0f:28:e4:d8:50:6a: 51:e4:e5:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/DE/aIKFLGuJ6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjFhYzgzYjUtNGNmZC00YjM4LWIxYmItNDUwMDBlZWJh NmFlMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk ZDUzMzM5ZjYtODA0Ny00NTM1LWFiMTMtMzBjZWRlY2ZmNmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPpyWl6BcnRdHVNNfPi9SyEYKyPQH6ikkil/ Y7YUCqezQvV6mudUZ2c+dsSI2swTnKqb/x99zKx0PyNId3qEh0jKRCHX03RFidKt cNOUeiB6MLozIWERgJGaNyeXMD+QZs24iVkyTKdMDU1qHdg02rZeMwUvaU8UOLpP ccGouBz3g4lb3xYgGpy+0VoBf4zpbaMtZ+ktibM7X0rkDm3gsUXwL+f88BHtYbRK h9I8jiurihd2oSHll+OiF9rSE9lX7m56P5Hrxmqz63ZbXKucRmUweuamytkQSciH sioVSTIa4u/+afWSpkTOaPQnclT5covsGXgP4HZ9dxz4TUgCmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8ai32QrtSniFi3XP5ywNc3KkjpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFj ODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAwMGVlYmE2YWUvZmY1MzU0OTQtMmEyMy0z NmE3LTgxZTAtNzYyYzM4N2RmNTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjFhYzgzYjUtNGNmZC00YjM4LWIx YmItNDUwMDBlZWJhNmFlL2YxYWM4M2I1LTRjZmQtNGIzOC1iMWJiLTQ1MDAwZWVi YTZhZS5jcmwwHwYDVR0jBBgwFoAUCrA0V1FPrMSLEXsWcz7MjvXGb0YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFjODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAw MGVlYmE2YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0d70MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCrVUWpQOQiaj9ax5QNoEj65C1qC2UE4JOwq+Jv4KiLxfAqC3e2NJRb KnFAMtVJWR/5v8dfJ0cLz8ndTtKrm+Uo/0TYXQzdYmPwgvulCK1RPU5IyaYNWTbE tuWpKnZOp5nRA/xj7U/Yys+DqoQqOUropF1uQ+FkBLbA19nyvtxZ0bHdcqrLcnaC NuxNNkDQWETYuojfmYx3AHl7Dc17bitJmF0n6QEUQp1qFau5sKOvT9qD4imWv2y4 wVAwOHc58xGLgsb3ravmQEMuuaiGMecskDcjSnhetd5W6kCAiudkqzfcqtqCfwYx ZANVUnJ0HMOO/FdHKg8o5NhQalHk5TA= -----END CERTIFICATE-----Generated at Wed Sep 10 19:13:05 2025 by rpki-client