$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/941447d6-8e48-3f72-b99d-fe4bfe5f9392.roa File: 941447d6-8e48-3f72-b99d-fe4bfe5f9392.roa (raw, json) Hash identifier: 0BnI/uZ+iYTIxK1yKQmQbLBW6Wa1LNVS1GBcZsK1IoU= Subject key identifier: BA:FD:88:41:CA:78:8F:51:5E:4A:0C:F6:19:08:86:B5:21:73:EF:AB Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584B9B3D06E1B14E9372709565F6 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/941447d6-8e48-3f72-b99d-fe4bfe5f9392.roa Signing time: Wed 22 Oct 2025 13:00:38 +0000 ROA not before: Wed 22 Oct 2025 13:00:38 +0000 ROA not after: Tue 20 Jan 2026 14:00:38 +0000 asID: 62044 IP address blocks: 209.55.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:3d:06:e1:b1:4e:93:72:70:95:65:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Oct 22 13:00:38 2025 GMT Not After : Jan 20 14:00:38 2026 GMT Subject: CN=f7ec7d77-5ea7-4205-8421-d043b3fbd61a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f7:05:e7:c4:c6:60:9c:0c:87:57:b6:c3:d2: b9:d3:de:4a:88:0e:9c:2b:35:74:ea:79:13:07:96: 0f:e4:65:8e:d9:e6:d0:12:0d:6e:4c:1b:7e:3d:69: 14:19:b9:5e:de:d0:c3:2e:ce:50:fe:16:48:da:09: 9f:fe:e8:6e:aa:9e:bf:75:c1:bf:30:5f:c0:fc:b5: df:32:d5:0b:81:d5:7f:87:87:cd:3a:06:8e:8b:b6: ba:76:4c:51:eb:29:fc:3e:10:b4:53:c9:0a:f9:0e: 09:80:2d:a6:cf:f4:54:98:f6:52:56:91:19:4d:01: 5b:fb:a2:ed:8c:e2:f1:b6:bf:41:5a:b2:f3:15:f9: ff:0d:10:5f:af:4e:69:18:ee:77:a7:6a:a4:11:eb: 3c:63:86:3c:da:99:93:e1:df:f0:a0:6b:59:87:0a: 99:ab:af:e2:f8:b6:8f:40:44:61:9f:dd:64:e7:d7: bd:68:c2:1b:33:81:08:33:10:e0:2f:d0:1e:31:47: c8:f6:2a:91:1a:18:04:65:ba:13:52:05:7e:32:e1: 22:50:4f:6d:39:b4:9f:a6:33:77:c3:41:f2:4b:b9: 6d:b3:ac:e2:c0:f6:81:d5:e7:ab:65:1e:ff:ca:d8: 0b:21:d5:23:df:81:84:28:b0:36:fe:25:8a:3b:f5: ad:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FD:88:41:CA:78:8F:51:5E:4A:0C:F6:19:08:86:B5:21:73:EF:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/941447d6-8e48-3f72-b99d-fe4bfe5f9392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:d2:6f:54:48:c2:4a:6e:f9:ee:33:d5:82:06:4a:8b:23:aa: e9:59:93:2c:a3:3b:d6:d7:d3:e1:25:7a:ce:ec:ac:0d:41:81: d6:e1:e9:6a:25:ae:12:64:2d:2e:7a:b4:95:9a:b0:f7:de:50: 00:17:27:e9:af:6d:95:87:cc:a2:9f:08:98:2d:e0:a7:a1:14: f2:63:41:88:75:54:68:89:ed:21:e4:b7:a3:45:9b:08:13:3b: 42:02:86:f9:b3:c9:27:fb:cf:39:5d:40:be:c3:eb:47:51:6e: e5:e6:2d:66:f8:13:ea:be:b7:99:4c:1c:7a:8b:1b:58:0e:3b: 73:b1:d9:ea:3b:11:9f:d0:00:84:c8:5c:8f:6c:2d:b1:03:93: 94:73:ab:e7:58:3b:06:46:83:ec:bf:21:db:32:90:d1:45:7c: c2:ba:90:df:e4:9c:47:a0:a4:dc:14:76:3b:ef:b6:b2:b2:b0: ef:77:77:cb:f9:9c:e0:de:d1:1c:b7:34:ab:42:bb:00:cb:29: c2:9f:76:c4:de:69:4b:97:d9:a1:4a:51:1c:24:f3:ed:e3:8b: ee:63:5a:52:f4:36:c7:1b:47:f5:ae:56:88:e9:7d:2d:c5:4f: aa:3c:32:65:43:12:25:e1:25:ab:be:d6:7a:b5:33:3c:b2:b2: be:72:a6:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubPQbhsU6TcnCVZfYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTAyMjEzMDAzOFoXDTI2MDEyMDE0MDAzOFowLzEtMCsGA1UEAxMk ZjdlYzdkNzctNWVhNy00MjA1LTg0MjEtZDA0M2IzZmJkNjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfcF58TGYJwMh1e2w9K5095KiA6cKzV06nkT B5YP5GWO2ebQEg1uTBt+PWkUGble3tDDLs5Q/hZI2gmf/uhuqp6/dcG/MF/A/LXf MtULgdV/h4fNOgaOi7a6dkxR6yn8PhC0U8kK+Q4JgC2mz/RUmPZSVpEZTQFb+6Lt jOLxtr9BWrLzFfn/DRBfr05pGO53p2qkEes8Y4Y82pmT4d/woGtZhwqZq6/i+LaP QERhn91k59e9aMIbM4EIMxDgL9AeMUfI9iqRGhgEZboTUgV+MuEiUE9tObSfpjN3 w0HyS7lts6ziwPaB1eerZR7/ytgLIdUj34GEKLA2/iWKO/WtHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLr9iEHKeI9RXkoM9hkIhrUhc++rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvOTQxNDQ3ZDYtOGU0OC0z ZjcyLWI5OWQtZmU0YmZlNWY5MzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TecMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXSb1RIwkpu+e4z1YIGSosjqulZkyyjO9bX0+Eles7srA1Bgdbh6Wol rhJkLS56tJWasPfeUAAXJ+mvbZWHzKKfCJgt4KehFPJjQYh1VGiJ7SHkt6NFmwgT O0IChvmzySf7zzldQL7D60dRbuXmLWb4E+q+t5lMHHqLG1gOO3Ox2eo7EZ/QAITI XI9sLbEDk5Rzq+dYOwZGg+y/IdsykNFFfMK6kN/knEegpNwUdjvvtrKysO93d8v5 nODe0Ry3NKtCuwDLKcKfdsTeaUuX2aFKURwk8+3ji+5jWlL0NscbR/WuVojpfS3F T6o8MmVDEiXhJau+1nq1Mzyysr5ypmM= -----END CERTIFICATE-----Generated at Thu Oct 23 08:25:39 2025 by rpki-client