$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a24ce06b-685a-3a98-b9de-505b47c68363.roa File: a24ce06b-685a-3a98-b9de-505b47c68363.roa (raw, json) Hash identifier: yXVIw49JfidbYbKYxEi7OeSw0oVP97hdhDk1QtHqa6Y= Subject key identifier: 76:A9:F3:D3:6C:21:12:B9:E8:ED:57:6D:A6:EF:19:EA:8E:40:95:A5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AD3A1239AEC3381A817ADF180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a24ce06b-685a-3a98-b9de-505b47c68363.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 7342 IP address blocks: 209.131.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:23:9a:ec:33:81:a8:17:ad:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=0ac3e188-4f85-4c4a-9ec3-f6d2194da02d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bd:10:32:d1:9b:ff:f3:a9:4f:36:a7:df:2b: fe:3d:c3:52:cc:4b:00:52:f1:1f:8e:f5:3b:4e:9c: e8:90:9e:05:1b:b9:22:5e:60:79:20:b3:e3:50:c9: 0f:44:64:cb:e9:29:71:80:91:f0:d5:9b:2b:5e:54: 87:12:be:87:5c:07:2e:15:75:f7:5d:8d:3c:8d:c0: ed:42:4c:b9:00:96:58:b2:95:1e:81:60:15:4c:11: 56:93:dd:a7:3c:de:62:15:2e:2c:1d:59:1f:15:04: fd:cb:e2:3c:68:3e:6d:74:1b:15:31:80:af:5b:a8: 59:f9:57:10:4f:65:cd:62:59:da:f8:03:da:cf:f9: 13:59:d0:11:ab:ab:80:55:d6:48:3f:fc:d4:09:a4: 63:4d:9b:ac:b7:0c:0b:9c:21:3d:17:f3:24:a7:a9: c1:03:d1:94:94:96:8b:44:fc:6c:28:ab:2e:e5:4d: 43:65:3b:99:e6:af:8d:39:c8:15:f1:14:81:1f:33: a8:4a:0b:bc:52:29:23:19:e5:08:6a:71:26:a2:db: c9:19:b6:6b:53:60:ad:08:16:d2:0b:2a:74:a1:a7: a4:bd:e6:09:21:f8:3d:01:d6:7d:5f:eb:65:c3:31: fb:13:28:a0:d1:8a:ef:8b:28:43:b4:79:85:05:5f: 0c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A9:F3:D3:6C:21:12:B9:E8:ED:57:6D:A6:EF:19:EA:8E:40:95:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a24ce06b-685a-3a98-b9de-505b47c68363.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:a1:ee:5f:ff:06:d3:df:b9:86:78:f7:6b:3e:b3:91:0a:ef: 43:4a:ca:d2:de:f6:28:49:e3:f5:3b:27:a7:32:c7:f5:79:a3: a9:94:76:b6:5f:85:26:15:7f:60:7f:a1:74:ab:65:a8:9b:18: 86:96:80:6f:5c:66:40:c3:ae:b7:b0:34:d0:c9:31:52:c3:35: ec:9b:49:42:66:d8:8d:1d:51:0f:d4:17:16:df:ae:7d:bd:60: 32:76:4f:1a:b7:86:0e:d4:48:90:4d:00:e4:5d:73:43:fe:26: 40:03:27:41:78:49:13:86:95:9b:84:08:4e:e0:38:b3:c3:28: bf:b6:0f:75:61:92:54:01:3c:79:cf:6d:09:22:54:6f:6e:b0: 99:74:83:4d:e2:ef:90:ab:37:10:c2:44:bd:57:e6:84:11:cc: 7d:04:57:08:85:f0:ce:96:88:05:51:d4:6a:e9:6f:d9:98:b8: 26:b8:cc:ab:10:71:af:e5:b3:d1:f0:41:89:a5:f0:dc:81:70: 34:c3:7b:4e:80:8f:3e:44:54:ed:09:45:9f:ed:76:11:42:50: 64:02:e7:3d:fb:84:2c:5b:3d:4e:e6:38:b4:91:73:f7:b6:46: 28:35:82:45:40:0d:14:93:3f:e5:97:94:05:27:fe:33:31:0e: d0:a1:d9:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToSOa7DOBqBet8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk MGFjM2UxODgtNGY4NS00YzRhLTllYzMtZjZkMjE5NGRhMDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlL0QMtGb//OpTzan3yv+PcNSzEsAUvEfjvU7 TpzokJ4FG7kiXmB5ILPjUMkPRGTL6SlxgJHw1ZsrXlSHEr6HXAcuFXX3XY08jcDt Qky5AJZYspUegWAVTBFWk92nPN5iFS4sHVkfFQT9y+I8aD5tdBsVMYCvW6hZ+VcQ T2XNYlna+APaz/kTWdARq6uAVdZIP/zUCaRjTZustwwLnCE9F/Mkp6nBA9GUlJaL RPxsKKsu5U1DZTuZ5q+NOcgV8RSBHzOoSgu8UikjGeUIanEmotvJGbZrU2CtCBbS Cyp0oaekveYJIfg9AdZ9X+tlwzH7Eyig0YrviyhDtHmFBV8M8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHap89NsIRK56O1XbabvGeqOQJWlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTI0Y2UwNmItNjg1YS0z YTk4LWI5ZGUtNTA1YjQ3YzY4MzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmh7l//BtPfuYZ492s+s5EK70NKytLe9ihJ4/U7J6cyx/V5o6mUdrZf hSYVf2B/oXSrZaibGIaWgG9cZkDDrrewNNDJMVLDNeybSUJm2I0dUQ/UFxbfrn29 YDJ2Txq3hg7USJBNAORdc0P+JkADJ0F4SROGlZuECE7gOLPDKL+2D3VhklQBPHnP bQkiVG9usJl0g03i75CrNxDCRL1X5oQRzH0EVwiF8M6WiAVR1Grpb9mYuCa4zKsQ ca/ls9HwQYml8NyBcDTDe06Ajz5EVO0JRZ/tdhFCUGQC5z37hCxbPU7mOLSRc/e2 Rig1gkVADRSTP+WXlAUn/jMxDtCh2Qg= -----END CERTIFICATE-----Generated at Wed Oct 29 09:12:00 2025 by rpki-client