$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/eaef6ac3-58db-3ee3-b577-e2a864089da8.roa File: eaef6ac3-58db-3ee3-b577-e2a864089da8.roa (raw, json) Hash identifier: 4xpQvlqnj7W9gQigdBW9NTOrXLbd32B5Co0NXINY2ns= Subject key identifier: 3B:A3:D8:09:79:2D:40:DA:D8:2C:25:DB:23:D2:D3:AC:7F:13:58:68 Certificate issuer: /CN=46b96165-9c22-47d1-962f-486840cec7fa Certificate serial: 010D0C9F4328584B22EDB68F36CB10785FFC5C80 Authority key identifier: 7E:68:D8:AA:EB:33:0A:33:7C:88:D9:3E:FA:7D:E1:FC:34:A1:2F:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/eaef6ac3-58db-3ee3-b577-e2a864089da8.roa Signing time: Tue 09 Sep 2025 10:44:09 +0000 ROA not before: Tue 09 Sep 2025 10:44:09 +0000 ROA not after: Mon 08 Dec 2025 11:44:09 +0000 asID: 3320 IP address blocks: 209.205.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/46b96165-9c22-47d1-962f-486840cec7fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/46b96165-9c22-47d1-962f-486840cec7fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:22:ed:b6:8f:36:cb:10:78:5f:fc:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46b96165-9c22-47d1-962f-486840cec7fa Validity Not Before: Sep 9 10:44:09 2025 GMT Not After : Dec 8 11:44:09 2025 GMT Subject: CN=beb47bb8-5aa7-4d16-a25a-c002ce54d442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8b:47:0a:5f:fe:6e:9a:dc:2f:4c:05:d2:74: 12:7f:7f:60:20:e8:96:c5:41:a2:35:6a:ae:61:75: be:94:7c:04:ea:12:6e:ad:dc:85:4e:8a:71:3c:b7: 48:a0:45:2d:0a:c3:0e:55:14:ea:70:91:c6:da:08: 95:d0:43:1f:55:46:e8:7a:e5:81:eb:67:27:ae:b7: 00:01:16:60:0e:6f:1c:27:72:e1:97:55:4c:37:11: e5:bf:f3:f5:9b:c2:6f:c8:63:37:ef:ef:14:40:84: da:80:26:eb:18:4c:6a:bc:98:ba:8e:94:12:52:98: 74:06:51:da:09:21:c0:6f:3e:fe:c7:05:50:ae:74: 4d:5a:e0:09:9e:57:e8:ab:a2:79:9b:42:5b:07:0c: 03:e5:ae:f3:6e:72:15:83:2d:68:3b:43:2f:9a:5a: eb:6a:f4:e4:47:dc:ad:23:09:5c:a1:83:0e:9e:55: 28:d3:b8:ed:92:28:e7:04:c2:80:58:e5:de:98:1b: e0:77:e7:fb:ff:51:5b:44:5c:0f:9f:fa:64:02:0d: f2:ac:c1:bd:1f:da:99:86:1c:3d:81:36:ab:dc:f6: 01:c5:23:d8:7a:be:db:7d:dd:29:0d:15:26:f5:44: d3:97:1e:e1:d9:fb:f1:7d:85:93:8e:de:fa:29:3e: 2c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A3:D8:09:79:2D:40:DA:D8:2C:25:DB:23:D2:D3:AC:7F:13:58:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/eaef6ac3-58db-3ee3-b577-e2a864089da8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/46b96165-9c22-47d1-962f-486840cec7fa.crl X509v3 Authority Key Identifier: keyid:7E:68:D8:AA:EB:33:0A:33:7C:88:D9:3E:FA:7D:E1:FC:34:A1:2F:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa.cer sbgp-ipAddrBlock: critical IPv4: 209.205.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:76:d3:df:fe:48:8e:3c:8f:1f:b4:ea:90:a9:ba:72:20:4e: 0c:15:e8:4d:38:b7:37:fe:bc:ad:81:a9:00:b8:15:00:e0:e4: c0:50:34:b1:1f:13:d4:d5:fa:08:ce:2b:5b:51:22:8b:34:0d: 1d:fd:b8:a1:ed:fb:cb:28:db:ed:c1:7d:a2:7a:43:9b:4b:44: f9:32:80:03:38:cd:d9:ce:e9:e6:e9:ec:e8:b4:c3:e6:11:a0: e0:47:81:8c:c8:80:bf:c3:60:d6:07:de:59:bf:05:92:f4:46: b2:56:e8:61:53:2e:b0:3e:0b:35:9e:ec:8e:e2:3f:01:b5:12: 08:53:5b:6a:29:c5:f9:b1:95:b7:bd:b7:09:43:29:ec:9d:0d: 6f:1c:72:55:9f:76:62:01:9f:66:cf:16:d2:09:3d:2a:be:6b: 81:55:8f:9a:37:af:7c:72:99:e9:a1:74:a3:ce:df:e0:65:5c: e0:2d:1b:a6:ee:5c:5c:ba:58:d2:67:5d:b8:b9:b8:24:11:b1: 8e:29:62:8c:16:21:5e:77:55:2a:ad:f4:63:21:78:25:7d:4d: 8c:ab:77:63:f9:19:07:80:d3:d3:b0:1f:99:fe:b1:3a:cb:b3: 63:8f:13:6c:e9:15:59:cb:c9:e5:8c:88:8b:fa:d7:6d:35:d7: 4d:3a:6e:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsi7baPNssQeF/8XIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDZiOTYxNjUtOWMyMi00N2QxLTk2MmYtNDg2ODQwY2Vj N2ZhMB4XDTI1MDkwOTEwNDQwOVoXDTI1MTIwODExNDQwOVowLzEtMCsGA1UEAxMk YmViNDdiYjgtNWFhNy00ZDE2LWEyNWEtYzAwMmNlNTRkNDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnotHCl/+bprcL0wF0nQSf39gIOiWxUGiNWqu YXW+lHwE6hJurdyFTopxPLdIoEUtCsMOVRTqcJHG2giV0EMfVUboeuWB62cnrrcA ARZgDm8cJ3Lhl1VMNxHlv/P1m8JvyGM37+8UQITagCbrGExqvJi6jpQSUph0BlHa CSHAbz7+xwVQrnRNWuAJnlfoq6J5m0JbBwwD5a7zbnIVgy1oO0MvmlrravTkR9yt IwlcoYMOnlUo07jtkijnBMKAWOXemBvgd+f7/1FbRFwPn/pkAg3yrMG9H9qZhhw9 gTar3PYBxSPYer7bfd0pDRUm9UTTlx7h2fvxfYWTjt76KT4sWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuj2Al5LUDa2Cwl2yPS06x/E1hoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NmI5 NjE2NS05YzIyLTQ3ZDEtOTYyZi00ODY4NDBjZWM3ZmEvZWFlZjZhYzMtNThkYi0z ZWUzLWI1NzctZTJhODY0MDg5ZGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDZiOTYxNjUtOWMyMi00N2QxLTk2 MmYtNDg2ODQwY2VjN2ZhLzQ2Yjk2MTY1LTljMjItNDdkMS05NjJmLTQ4Njg0MGNl YzdmYS5jcmwwHwYDVR0jBBgwFoAUfmjYquszCjN8iNk++n3h/DShL6YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NmI5NjE2NS05YzIyLTQ3ZDEtOTYyZi00ODY4 NDBjZWM3ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0c3mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADp209/+SI48jx+06pCpunIgTgwV6E04tzf+vK2BqQC4FQDg5MBQNLEf E9TV+gjOK1tRIos0DR39uKHt+8so2+3BfaJ6Q5tLRPkygAM4zdnO6ebp7Oi0w+YR oOBHgYzIgL/DYNYH3lm/BZL0RrJW6GFTLrA+CzWe7I7iPwG1EghTW2opxfmxlbe9 twlDKeydDW8cclWfdmIBn2bPFtIJPSq+a4FVj5o3r3xymemhdKPO3+BlXOAtG6bu XFy6WNJnXbi5uCQRsY4pYowWIV53VSqt9GMheCV9TYyrd2P5GQeA09OwH5n+sTrL s2OPE2zpFVnLyeWMiIv612011006bvM= -----END CERTIFICATE-----Generated at Wed Sep 10 09:25:44 2025 by rpki-client