$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/c4d0d21f-1690-36d6-8c24-202cfa311060.roa File: c4d0d21f-1690-36d6-8c24-202cfa311060.roa (raw, json) Hash identifier: KUAEInTTB+zlszn9Et3AUHTorki36jHf7oStLa0FFgM= Subject key identifier: B4:EE:76:86:EB:60:35:C8:C0:B5:CF:A6:B3:06:65:8E:11:3E:B8:B5 Certificate issuer: /CN=3a000633-c1ee-492c-b730-12e113ab8bd2 Certificate serial: 010D0C9F4328584B76F25CE43D446D8B181AD300 Authority key identifier: 14:65:71:08:C5:BE:34:EE:A3:C6:27:F4:F6:6D:04:52:CF:CF:23:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/c4d0d21f-1690-36d6-8c24-202cfa311060.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 394710 IP address blocks: 209.216.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:5c:e4:3d:44:6d:8b:18:1a:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a000633-c1ee-492c-b730-12e113ab8bd2 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=743b11aa-a4af-4735-b473-f7bf4299684a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6c:1b:45:5b:38:bf:41:20:87:fe:04:71:92: f7:e2:76:36:1e:53:08:26:c9:1e:75:81:b0:06:9d: 78:33:cd:08:83:94:3b:fb:61:5d:40:d6:fb:31:b0: 1a:9e:22:54:e6:9b:93:09:bf:a7:9a:f6:8c:69:e4: f6:67:12:16:0d:0a:ac:20:50:30:51:2e:36:28:a8: 89:ff:af:43:84:14:61:e9:fb:65:ef:8a:a1:16:56: 38:18:3a:24:90:56:8f:12:a9:03:6f:51:6a:91:9a: b3:ff:ee:d0:f5:10:65:3e:7a:2b:9b:40:52:46:10: 2e:fd:2f:f6:0d:26:b7:c3:5a:ba:e1:bd:5c:d8:5a: be:3d:c3:3d:29:7e:c2:1c:39:d7:f2:f6:cb:71:49: 07:3f:d1:78:ae:d6:5f:65:26:3f:3d:6d:8b:2b:b9: 15:d0:96:63:0c:f2:e4:c0:51:76:4d:31:62:15:67: eb:69:b6:3c:66:42:74:0e:e3:b7:64:d9:7d:ee:81: 79:23:b5:8f:0c:b1:b4:5a:5d:e7:3a:1e:d8:73:c9: 29:f3:6f:f0:63:9f:48:fb:31:22:ba:c5:11:83:2b: 95:9d:d3:9f:bf:ff:cb:71:85:2e:89:a4:92:00:b2: 09:cd:d4:48:52:43:51:ca:8a:ce:31:0f:cf:07:c4: 22:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:EE:76:86:EB:60:35:C8:C0:B5:CF:A6:B3:06:65:8E:11:3E:B8:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/c4d0d21f-1690-36d6-8c24-202cfa311060.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2/3a000633-c1ee-492c-b730-12e113ab8bd2.crl X509v3 Authority Key Identifier: keyid:14:65:71:08:C5:BE:34:EE:A3:C6:27:F4:F6:6D:04:52:CF:CF:23:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a000633-c1ee-492c-b730-12e113ab8bd2.cer sbgp-ipAddrBlock: critical IPv4: 209.216.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:31:88:55:b2:d5:ac:6b:74:c0:34:93:3c:fe:bc:22:73:07: 71:1a:7a:87:ba:6a:0e:10:0c:57:2a:3c:0d:a9:75:a0:be:ed: 7d:bc:dd:0d:5f:b4:4d:36:a7:25:cb:b6:09:cc:41:0a:76:7b: 36:72:22:bf:0f:0b:26:d7:64:64:88:64:6b:41:05:27:7a:5b: 3b:bf:42:f2:bd:56:60:44:c2:30:54:de:f6:4d:7b:9a:c3:17: cc:b8:d0:09:a7:fb:1c:53:36:59:35:94:62:94:d5:8f:9f:f6: a8:e7:54:59:67:ae:91:7c:f4:88:52:48:f6:73:3a:59:06:5c: 1c:84:53:50:f0:4e:72:cd:c6:cc:51:83:f0:7d:a0:ba:c2:c1: fc:57:34:a7:da:58:d1:14:97:c3:77:4c:0c:fa:de:13:6e:7b: a0:36:b2:95:88:35:03:9f:a7:97:44:b2:6e:2d:e3:3d:c9:02: c0:b3:8b:a5:f5:7e:8e:d1:b3:eb:51:eb:b9:67:44:52:1a:de: da:dc:56:39:2f:de:0a:11:77:e1:84:74:d0:a3:cf:fc:ab:b5: 8e:e7:46:ac:e8:52:4d:a5:fb:92:db:91:5e:20:db:6b:96:58: 35:c5:92:d9:a5:74:99:64:62:d4:96:02:49:1e:25:c9:d3:61: bc:67:1f:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28lzkPURtixga0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2EwMDA2MzMtYzFlZS00OTJjLWI3MzAtMTJlMTEzYWI4 YmQyMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NzQzYjExYWEtYTRhZi00NzM1LWI0NzMtZjdiZjQyOTk2ODRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGwbRVs4v0Egh/4EcZL34nY2HlMIJskedYGw Bp14M80Ig5Q7+2FdQNb7MbAaniJU5puTCb+nmvaMaeT2ZxIWDQqsIFAwUS42KKiJ /69DhBRh6ftl74qhFlY4GDokkFaPEqkDb1FqkZqz/+7Q9RBlPnorm0BSRhAu/S/2 DSa3w1q64b1c2Fq+PcM9KX7CHDnX8vbLcUkHP9F4rtZfZSY/PW2LK7kV0JZjDPLk wFF2TTFiFWfrabY8ZkJ0DuO3ZNl97oF5I7WPDLG0Wl3nOh7Yc8kp82/wY59I+zEi usURgyuVndOfv//LcYUuiaSSALIJzdRIUkNRyorOMQ/PB8QiJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTudobrYDXIwLXPprMGZY4RPri1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYTAw MDYzMy1jMWVlLTQ5MmMtYjczMC0xMmUxMTNhYjhiZDIvYzRkMGQyMWYtMTY5MC0z NmQ2LThjMjQtMjAyY2ZhMzExMDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2EwMDA2MzMtYzFlZS00OTJjLWI3 MzAtMTJlMTEzYWI4YmQyLzNhMDAwNjMzLWMxZWUtNDkyYy1iNzMwLTEyZTExM2Fi OGJkMi5jcmwwHwYDVR0jBBgwFoAUFGVxCMW+NO6jxif09m0EUs/PIyAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYTAwMDYzMy1jMWVlLTQ5MmMtYjczMC0xMmUx MTNhYjhiZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0dhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHExiFWy1axrdMA0kzz+vCJzB3Eaeoe6ag4QDFcqPA2pdaC+7X283Q1f tE02pyXLtgnMQQp2ezZyIr8PCybXZGSIZGtBBSd6Wzu/QvK9VmBEwjBU3vZNe5rD F8y40Amn+xxTNlk1lGKU1Y+f9qjnVFlnrpF89IhSSPZzOlkGXByEU1DwTnLNxsxR g/B9oLrCwfxXNKfaWNEUl8N3TAz63hNue6A2spWINQOfp5dEsm4t4z3JAsCzi6X1 fo7Rs+tR67lnRFIa3trcVjkv3goRd+GEdNCjz/yrtY7nRqzoUk2l+5LbkV4g22uW WDXFktmldJlkYtSWAkkeJcnTYbxnH54= -----END CERTIFICATE-----Generated at Mon Nov 3 08:38:27 2025 by rpki-client