$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/f1f781b7-8a84-376a-9017-fd34fc72c06f.roa File: f1f781b7-8a84-376a-9017-fd34fc72c06f.roa (raw, json) Hash identifier: SJFxkcombdy8J5CbxFg3iWHl4l05xI6s1eZTb3KK3sM= Subject key identifier: F4:32:CD:E6:FD:10:67:34:09:09:F1:0E:A6:8B:C6:E3:A7:42:96:9F Certificate issuer: /CN=46b96165-9c22-47d1-962f-486840cec7fa Certificate serial: 010D0C9F4328584B22F26DD441BB5278DA3C2300 Authority key identifier: 7E:68:D8:AA:EB:33:0A:33:7C:88:D9:3E:FA:7D:E1:FC:34:A1:2F:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/f1f781b7-8a84-376a-9017-fd34fc72c06f.roa Signing time: Tue 09 Sep 2025 10:53:39 +0000 ROA not before: Tue 09 Sep 2025 10:53:39 +0000 ROA not after: Mon 08 Dec 2025 11:53:39 +0000 asID: 3320 IP address blocks: 209.205.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/46b96165-9c22-47d1-962f-486840cec7fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/46b96165-9c22-47d1-962f-486840cec7fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:22:f2:6d:d4:41:bb:52:78:da:3c:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46b96165-9c22-47d1-962f-486840cec7fa Validity Not Before: Sep 9 10:53:39 2025 GMT Not After : Dec 8 11:53:39 2025 GMT Subject: CN=b5b84978-afd1-4acb-b9f0-dc69a965e7ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:92:0f:0a:75:0a:ce:49:42:02:dc:1d:f1:cd: ce:71:11:82:3f:87:7a:92:5f:72:90:88:04:c6:bd: 9e:69:b9:3c:fa:52:fc:45:73:8c:6d:33:b2:6b:ef: 7d:f4:fb:81:c7:25:85:fc:67:50:e7:b1:cd:f3:cd: 25:8f:86:ad:72:52:17:c5:2a:62:8d:6f:a8:a0:af: d5:3d:9d:2f:2e:e7:1e:81:97:d2:5c:a3:8f:f9:4f: a5:22:43:82:34:5f:2d:35:2d:3a:61:d0:52:05:0c: f0:ef:cd:ae:e1:67:b5:42:57:f4:03:03:0b:77:f3: 98:31:87:e8:46:7b:45:7b:04:e9:b6:c3:8e:f2:cf: ef:16:90:ef:7f:83:14:e7:fb:26:ed:1b:a3:9e:8d: 4f:b2:63:3c:cb:30:09:6d:0e:9b:b4:a8:e5:f7:3a: cf:f0:fa:28:65:04:28:79:b3:49:94:d8:97:80:87: 38:5f:3a:73:a9:93:7e:de:77:5d:0d:4c:f5:61:a2: 55:ab:03:72:62:e6:59:82:9f:cd:dc:ad:85:35:c1: 99:97:45:8a:f6:30:d3:bc:cf:a8:81:40:42:e8:92: c6:98:cb:1a:a0:e7:da:19:16:33:bf:91:4c:18:78: 26:5f:a2:85:07:7c:de:1e:c8:da:cb:a4:a2:78:4f: f7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:32:CD:E6:FD:10:67:34:09:09:F1:0E:A6:8B:C6:E3:A7:42:96:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/f1f781b7-8a84-376a-9017-fd34fc72c06f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/46b96165-9c22-47d1-962f-486840cec7fa.crl X509v3 Authority Key Identifier: keyid:7E:68:D8:AA:EB:33:0A:33:7C:88:D9:3E:FA:7D:E1:FC:34:A1:2F:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa.cer sbgp-ipAddrBlock: critical IPv4: 209.205.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:35:89:45:98:d9:12:ee:c5:22:c9:d1:b2:0d:b8:e0:f8:f5: fd:6a:82:50:b7:a4:47:7b:9c:15:e9:02:8c:00:a0:3f:fb:f4: c4:0a:d4:9a:ac:a6:c9:d1:b4:f4:f6:1c:ed:d1:7c:1a:7f:2f: 68:28:a4:31:1b:44:5b:ba:3b:18:7a:ee:c8:50:75:7e:01:33: c5:dc:2a:8b:b3:f2:74:41:d3:62:a3:1d:4f:ee:5f:a8:27:7b: ec:b2:78:4f:ff:12:9c:ca:47:9b:60:a7:cb:18:c2:f5:a4:29: 45:7a:30:04:3d:84:d6:5d:72:9d:d8:ed:cf:fb:4b:f4:d3:2c: 0d:a6:39:05:2d:05:93:c5:81:ca:64:4b:0a:e8:a4:e6:58:8f: 07:61:d6:bc:3a:57:a9:f9:38:66:58:b1:ad:c7:76:fa:f4:fc: 56:7a:59:e8:f8:42:33:29:c4:65:ee:97:47:a2:04:ff:ac:c0: 66:f6:85:0a:20:4b:50:2e:3c:59:6a:49:24:f7:6a:a2:c0:ee: 75:a6:7c:e1:2e:16:df:71:b5:e4:f3:5b:c2:ea:70:af:7f:7a: 06:93:9a:b8:c9:bc:59:4a:cf:0a:8b:3b:a8:0a:c3:f8:0f:57: d1:8c:38:16:7e:6c:6c:d2:df:e8:d6:d5:d4:cb:a3:bd:73:ae: 8b:60:f9:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsi8m3UQbtSeNo8IwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDZiOTYxNjUtOWMyMi00N2QxLTk2MmYtNDg2ODQwY2Vj N2ZhMB4XDTI1MDkwOTEwNTMzOVoXDTI1MTIwODExNTMzOVowLzEtMCsGA1UEAxMk YjViODQ5NzgtYWZkMS00YWNiLWI5ZjAtZGM2OWE5NjVlN2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5IPCnUKzklCAtwd8c3OcRGCP4d6kl9ykIgE xr2eabk8+lL8RXOMbTOya+999PuBxyWF/GdQ57HN880lj4atclIXxSpijW+ooK/V PZ0vLucegZfSXKOP+U+lIkOCNF8tNS06YdBSBQzw782u4We1Qlf0AwMLd/OYMYfo RntFewTptsOO8s/vFpDvf4MU5/sm7Rujno1PsmM8yzAJbQ6btKjl9zrP8PooZQQo ebNJlNiXgIc4XzpzqZN+3nddDUz1YaJVqwNyYuZZgp/N3K2FNcGZl0WK9jDTvM+o gUBC6JLGmMsaoOfaGRYzv5FMGHgmX6KFB3zeHsjay6SieE/3CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQyzeb9EGc0CQnxDqaLxuOnQpafMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NmI5 NjE2NS05YzIyLTQ3ZDEtOTYyZi00ODY4NDBjZWM3ZmEvZjFmNzgxYjctOGE4NC0z NzZhLTkwMTctZmQzNGZjNzJjMDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDZiOTYxNjUtOWMyMi00N2QxLTk2 MmYtNDg2ODQwY2VjN2ZhLzQ2Yjk2MTY1LTljMjItNDdkMS05NjJmLTQ4Njg0MGNl YzdmYS5jcmwwHwYDVR0jBBgwFoAUfmjYquszCjN8iNk++n3h/DShL6YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80NmI5NjE2NS05YzIyLTQ3ZDEtOTYyZi00ODY4 NDBjZWM3ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0c3lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMM1iUWY2RLuxSLJ0bINuOD49f1qglC3pEd7nBXpAowAoD/79MQK1Jqs psnRtPT2HO3RfBp/L2gopDEbRFu6Oxh67shQdX4BM8XcKouz8nRB02KjHU/uX6gn e+yyeE//EpzKR5tgp8sYwvWkKUV6MAQ9hNZdcp3Y7c/7S/TTLA2mOQUtBZPFgcpk SwropOZYjwdh1rw6V6n5OGZYsa3Hdvr0/FZ6Wej4QjMpxGXul0eiBP+swGb2hQog S1AuPFlqSST3aqLA7nWmfOEuFt9xteTzW8LqcK9/egaTmrjJvFlKzwqLO6gKw/gP V9GMOBZ+bGzS3+jW1dTLo71zrotg+cs= -----END CERTIFICATE-----Generated at Wed Sep 10 09:32:22 2025 by rpki-client