$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f326d331-2a96-34b4-8a42-0988136d1703.roa File: f326d331-2a96-34b4-8a42-0988136d1703.roa (raw, json) Hash identifier: ItwuHR2BhajVEvwvLBVuamkbupZLOutAsUvhV6RV/Nc= Subject key identifier: DF:D3:4F:64:C0:E7:E3:E9:4C:67:E0:70:31:89:56:B7:3B:45:3F:14 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584B39816E8E4417A3F4D2C29940 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f326d331-2a96-34b4-8a42-0988136d1703.roa Signing time: Wed 17 Sep 2025 12:49:34 +0000 ROA not before: Wed 17 Sep 2025 12:49:34 +0000 ROA not after: Tue 16 Dec 2025 13:49:34 +0000 asID: 25645 IP address blocks: 209.42.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:81:6e:8e:44:17:a3:f4:d2:c2:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Sep 17 12:49:34 2025 GMT Not After : Dec 16 13:49:34 2025 GMT Subject: CN=fad9ed83-f53a-4b60-8827-96946d31cd75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:69:df:4c:53:cc:2e:96:7c:92:7f:c1:39:b6: a9:5c:18:1f:3c:0c:7b:e3:db:e7:ed:5b:1d:2b:42: 9d:3a:24:c5:b3:1e:f5:de:c5:02:d8:3c:d2:fb:1b: 74:76:fd:c3:b2:fd:5c:ef:71:b6:23:be:d8:66:1d: 0e:05:7e:69:29:0c:a9:54:34:72:95:80:46:60:e3: 1c:f9:bf:a2:58:8c:e9:92:8b:3c:3e:09:66:22:36: 89:2e:83:01:ab:51:44:77:b6:bf:a9:0e:cf:c2:93: ad:b0:00:95:9b:a6:4e:9d:c5:af:44:38:7b:f3:fd: 16:4b:3d:34:4e:aa:13:9c:c7:8d:aa:54:90:98:ad: 67:b8:9a:3d:3c:73:55:06:3a:9d:d1:f2:3e:da:75: 1a:2d:31:04:71:eb:ea:ef:4a:2c:29:27:bc:f1:10: 95:87:cb:01:56:56:f6:1c:00:ad:cb:7d:20:26:3b: a7:ae:d1:9f:c2:b0:aa:3d:1a:23:da:b5:42:ae:20: ff:05:a1:b6:46:c2:de:05:32:17:31:88:35:ea:54: f8:54:eb:37:8d:3a:94:e7:e0:a2:59:da:5d:7d:7e: c0:9b:18:ff:8b:45:3f:fd:8d:d2:cb:b2:38:f6:bb: 26:0a:06:5e:f5:ef:25:f6:a7:6c:67:0a:08:11:cc: e9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D3:4F:64:C0:E7:E3:E9:4C:67:E0:70:31:89:56:B7:3B:45:3F:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f326d331-2a96-34b4-8a42-0988136d1703.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 209.42.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:1b:93:1c:98:2f:22:a4:27:f2:a4:a5:8c:35:c5:d7:46:4c: 3f:53:1a:ed:57:94:af:15:dc:3f:dd:ee:af:b7:83:38:1d:4f: 5a:04:3b:b9:10:38:84:99:f7:6a:83:f6:68:10:dd:aa:ad:ec: 28:31:60:3f:51:fd:30:f2:8d:c0:b2:d0:6a:8b:d2:c0:d2:4d: a1:83:dc:7d:5f:be:e4:fb:62:59:02:64:7e:e3:92:f2:e0:be: 5f:8c:5a:89:bd:e8:39:69:9c:39:81:ad:e6:a2:9b:e1:6a:bf: d6:3c:86:1c:8c:6b:40:11:20:99:61:72:3d:fc:44:81:9a:3e: 00:ed:92:1a:d3:60:df:48:b4:c2:60:74:34:11:0f:34:2f:e7: dd:f2:12:cf:66:be:1a:f1:20:43:b3:ce:59:92:48:87:54:fa: b6:6c:be:62:b7:7e:98:fb:30:bf:5a:81:e4:f8:15:7e:2c:9d: da:ff:ae:34:d1:61:fb:6f:03:e2:29:87:1c:1e:e3:c7:60:a9: 89:d2:59:f7:b7:33:97:b9:d7:48:59:8d:46:2d:04:70:7c:c0: 87:1e:b9:53:c2:fb:37:10:33:44:a0:89:88:cd:6b:4f:68:36: cc:44:4d:f3:37:79:b0:0c:c2:96:92:f5:bb:1b:06:c4:58:75: 49:ee:e8:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5gW6ORBej9NLCmUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDkxNzEyNDkzNFoXDTI1MTIxNjEzNDkzNFowLzEtMCsGA1UEAxMk ZmFkOWVkODMtZjUzYS00YjYwLTg4MjctOTY5NDZkMzFjZDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGnfTFPMLpZ8kn/BObapXBgfPAx749vn7Vsd K0KdOiTFsx713sUC2DzS+xt0dv3Dsv1c73G2I77YZh0OBX5pKQypVDRylYBGYOMc +b+iWIzpkos8PglmIjaJLoMBq1FEd7a/qQ7PwpOtsACVm6ZOncWvRDh78/0WSz00 TqoTnMeNqlSQmK1nuJo9PHNVBjqd0fI+2nUaLTEEcevq70osKSe88RCVh8sBVlb2 HACty30gJjunrtGfwrCqPRoj2rVCriD/BaG2RsLeBTIXMYg16lT4VOs3jTqU5+Ci WdpdfX7Amxj/i0U//Y3Sy7I49rsmCgZe9e8l9qdsZwoIEczpPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/TT2TA5+PpTGfgcDGJVrc7RT8UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvZjMyNmQzMzEtMmE5Ni0z NGI0LThhNDItMDk4ODEzNmQxNzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SqqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHobkxyYLyKkJ/KkpYw1xddGTD9TGu1XlK8V3D/d7q+3gzgdT1oEO7kQ OISZ92qD9mgQ3aqt7CgxYD9R/TDyjcCy0GqL0sDSTaGD3H1fvuT7YlkCZH7jkvLg vl+MWom96DlpnDmBreaim+Fqv9Y8hhyMa0ARIJlhcj38RIGaPgDtkhrTYN9ItMJg dDQRDzQv593yEs9mvhrxIEOzzlmSSIdU+rZsvmK3fpj7ML9ageT4FX4sndr/rjTR YftvA+Iphxwe48dgqYnSWfe3M5e510hZjUYtBHB8wIceuVPC+zcQM0SgiYjNa09o NsxETfM3ebAMwpaS9bsbBsRYdUnu6A8= -----END CERTIFICATE-----Generated at Fri Sep 19 01:15:09 2025 by rpki-client