$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/487efafd-1d25-3ab6-ace5-2da718338232.roa File: 487efafd-1d25-3ab6-ace5-2da718338232.roa (raw, json) Hash identifier: yglcQgj8LbJIX5BSIWBvj8AuGOakBE6yx7xFeHzSvA8= Subject key identifier: 92:88:FA:0D:B2:6C:C8:D2:DA:A0:B2:10:3C:9D:BD:47:A0:DC:97:FB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AFC1C1AC0FF0DA3030732FA80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/487efafd-1d25-3ab6-ace5-2da718338232.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 7342 IP address blocks: 209.131.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:1a:c0:ff:0d:a3:03:07:32:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=8b772115-832f-471a-af20-283a45098ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a4:63:a9:a4:0e:39:10:f4:26:55:69:33:4b: ad:05:2a:22:02:3e:be:98:bb:bb:ba:4c:7a:51:d7: ba:52:e8:d5:eb:71:02:43:30:14:33:9d:c2:b9:00: 91:99:aa:3a:66:fe:3a:87:ee:ec:d7:fa:fc:4f:db: 1f:30:4b:96:cc:ee:16:0a:05:5a:8c:d7:68:fc:42: 17:5f:25:e7:77:5b:2c:d7:d1:44:95:b8:ee:b5:2b: c4:b5:dd:41:79:ee:92:d0:2b:e3:2e:bd:90:1f:cd: b4:f0:99:53:30:ef:e8:20:ea:e7:5b:82:24:06:df: 3b:5a:39:67:b2:d4:6d:0a:30:d5:86:b0:5e:16:21: 16:75:b3:7e:fe:49:b4:01:0e:70:2e:9e:f0:0e:d9: d3:33:8f:44:a1:e9:be:65:df:4a:c8:11:01:3d:a0: e5:f9:e6:b7:ae:a8:b5:75:ef:32:12:5c:6b:b4:32: 5c:b1:12:04:5c:37:9d:5a:5d:b7:e9:c2:52:af:86: d8:44:e7:f9:3d:dc:94:bf:8e:f0:0c:15:61:00:2e: a8:8f:90:bc:68:c9:4c:fe:43:2f:9e:ae:2b:63:db: cf:e2:cd:a4:51:35:e3:6a:43:94:c4:97:e1:c2:1b: 3d:7f:fd:cd:fb:14:f7:02:81:db:8d:fb:c9:87:38: 9c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:88:FA:0D:B2:6C:C8:D2:DA:A0:B2:10:3C:9D:BD:47:A0:DC:97:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/487efafd-1d25-3ab6-ace5-2da718338232.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:52:af:97:58:be:7e:56:80:df:61:d3:d7:ec:da:51:af:98: ff:f7:07:09:d2:31:e0:53:74:db:e4:f7:c0:49:e8:75:2b:a6: 56:1d:e0:c4:85:ba:b4:3d:7f:d6:1e:11:b6:ed:35:61:db:f2: 87:87:0b:c9:54:82:ee:63:b4:18:02:0e:17:b6:2b:91:8b:d6: b4:1a:9e:35:83:92:e5:85:5a:21:23:65:87:ee:20:a1:7d:18: 0a:e7:12:1e:b0:25:f5:95:5a:28:91:49:1c:e3:25:54:fe:50: 06:33:bf:2d:01:64:47:2e:1a:44:e2:43:ac:fe:bf:e7:4c:ec: 19:05:2b:4d:01:fe:69:4d:38:b8:72:7a:0d:0e:47:62:84:b4: 69:84:72:02:db:1c:78:d4:d3:e4:35:0d:a3:6a:5a:af:fb:14: af:24:4c:16:1a:5c:d3:be:73:85:eb:0a:05:4c:0d:97:28:30: 29:61:31:16:f6:da:90:b4:05:99:57:49:78:fe:ed:ce:74:d4: cc:d1:b2:4a:a6:00:df:04:87:f9:79:3e:13:36:c9:d3:2b:e8: b5:01:1d:17:81:b1:fb:a4:f1:8b:12:00:cd:23:4c:9b:26:13: 81:43:54:90:cd:5b:7c:3b:7d:c3:35:5e:54:e9:1a:0a:02:b1: f4:ea:78:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HBrA/w2jAwcy+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk OGI3NzIxMTUtODMyZi00NzFhLWFmMjAtMjgzYTQ1MDk4ZWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6RjqaQOORD0JlVpM0utBSoiAj6+mLu7ukx6 Ude6UujV63ECQzAUM53CuQCRmao6Zv46h+7s1/r8T9sfMEuWzO4WCgVajNdo/EIX XyXnd1ss19FElbjutSvEtd1Bee6S0CvjLr2QH8208JlTMO/oIOrnW4IkBt87Wjln stRtCjDVhrBeFiEWdbN+/km0AQ5wLp7wDtnTM49Eoem+Zd9KyBEBPaDl+ea3rqi1 de8yElxrtDJcsRIEXDedWl236cJSr4bYROf5PdyUv47wDBVhAC6oj5C8aMlM/kMv nq4rY9vP4s2kUTXjakOUxJfhwhs9f/3N+xT3AoHbjfvJhzicVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKI+g2ybMjS2qCyEDydvUeg3Jf7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDg3ZWZhZmQtMWQyNS0z YWI2LWFjZTUtMmRhNzE4MzM4MjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5Sr5dYvn5WgN9h09fs2lGvmP/3BwnSMeBTdNvk98BJ6HUrplYd4MSF urQ9f9YeEbbtNWHb8oeHC8lUgu5jtBgCDhe2K5GL1rQanjWDkuWFWiEjZYfuIKF9 GArnEh6wJfWVWiiRSRzjJVT+UAYzvy0BZEcuGkTiQ6z+v+dM7BkFK00B/mlNOLhy eg0OR2KEtGmEcgLbHHjU0+Q1DaNqWq/7FK8kTBYaXNO+c4XrCgVMDZcoMClhMRb2 2pC0BZlXSXj+7c501MzRskqmAN8Eh/l5PhM2ydMr6LUBHReBsfuk8YsSAM0jTJsm E4FDVJDNW3w7fcM1XlTpGgoCsfTqeLs= -----END CERTIFICATE-----Generated at Wed Sep 10 20:42:17 2025 by rpki-client