$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/ffdaae2c-6641-3649-a249-97918224c1cd.roa File: ffdaae2c-6641-3649-a249-97918224c1cd.roa (raw, json) Hash identifier: JAn7E9kOiOJpwbQNpZEoxNGPKVFlpCLH88gntCASyc0= Subject key identifier: 01:0A:CA:A8:BF:BE:17:7B:6A:62:70:A5:29:0A:EA:72:0D:2C:AD:56 Certificate issuer: /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Certificate serial: 010D0C9F4328584AF0F13202C7F59F22AE271740 Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/ffdaae2c-6641-3649-a249-97918224c1cd.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 13213 IP address blocks: 209.236.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:32:02:c7:f5:9f:22:ae:27:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=50184d6c-2cba-41d3-a818-baea370a77cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c1:54:c4:33:75:94:35:90:96:d6:fa:3c:40: 65:3e:fe:f0:2c:ba:4f:bf:14:35:58:91:66:46:e8: eb:21:5f:7a:ac:1f:7c:e4:be:20:39:53:59:97:95: 91:6b:5e:4e:a1:80:39:f7:57:30:b8:71:6f:51:98: ad:6e:71:1b:9d:51:b0:97:6b:3a:a1:58:b3:47:85: e7:98:c9:18:b3:4f:d6:2e:7c:d2:a4:5a:7b:de:ef: 78:02:d1:0b:d5:cb:36:b1:e4:62:9e:ec:a7:45:5c: b6:5b:c1:c3:b8:64:b1:d8:3c:b7:3d:3a:45:47:4f: e4:1c:e1:24:b6:1e:81:3d:88:97:3b:0d:5b:ba:d9: b2:fa:c2:8c:90:ef:bb:14:ec:99:62:28:d8:bb:df: d6:43:5f:3f:bb:46:41:40:b9:21:ba:ec:d4:81:58: b7:3d:6c:7b:af:45:42:2b:ea:a1:76:12:91:35:07: 9f:08:44:18:96:ea:4e:0a:25:60:e4:20:38:30:d8: 8c:2f:bd:1e:bc:d1:9f:7e:07:d5:d1:97:5e:33:12: 8e:b7:72:8d:6a:f8:0c:db:e4:8d:41:1c:87:de:13: 69:56:ed:13:f3:16:89:e7:5d:02:fe:6b:30:64:a2: a0:63:c2:5b:0a:c0:d5:10:07:d0:a3:94:7d:99:22: b3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:0A:CA:A8:BF:BE:17:7B:6A:62:70:A5:29:0A:EA:72:0D:2C:AD:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/ffdaae2c-6641-3649-a249-97918224c1cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl X509v3 Authority Key Identifier: keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer sbgp-ipAddrBlock: critical IPv4: 209.236.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:8d:35:03:75:94:5d:9e:aa:b7:24:d4:1e:26:b8:34:03:94: 43:cd:a6:96:64:f6:c4:39:58:24:96:f4:96:8f:0a:fe:fd:15: 36:b4:c5:22:fa:b2:67:4f:5e:b5:bd:0b:45:ca:6d:01:6b:9b: 46:00:4c:9d:78:e8:95:13:12:b9:67:90:0c:46:df:d2:45:55: 22:76:76:83:3c:b6:96:2d:80:47:89:f7:05:8a:95:b7:63:b0: fa:73:5f:7d:af:1e:26:4a:f0:e1:9d:51:49:05:a7:95:a6:c1: 04:28:6a:d6:ba:4f:89:e1:5b:60:4d:e0:99:5e:a9:be:3e:3a: ba:fc:21:b2:46:68:85:33:a5:0f:90:90:94:e5:9c:ec:52:28: 82:7d:95:d9:b9:3e:d8:02:48:15:61:83:51:ad:4f:d3:d0:9a: df:fc:d2:a3:54:80:ec:12:07:ff:4a:5c:7e:1f:b1:20:ad:c9: 46:85:89:c8:75:d0:dd:60:94:97:d1:85:89:18:2b:7a:d5:79: 92:7b:22:8f:22:42:98:2c:da:f2:e6:a8:e4:31:76:af:62:3e: b3:c8:1f:11:dd:f6:3a:d9:6b:f7:8a:d3:95:62:87:9a:1d:f2: 07:4d:01:a3:90:d9:c6:91:09:e4:89:e6:c9:7f:32:f3:69:27: 5a:5c:6c:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8TICx/WfIq4nF0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY3YTk4YjAtMTAwZi00ZTY5LThhOWYtYmNlYWRiN2U5 YWFlMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk NTAxODRkNmMtMmNiYS00MWQzLWE4MTgtYmFlYTM3MGE3N2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMFUxDN1lDWQltb6PEBlPv7wLLpPvxQ1WJFm RujrIV96rB985L4gOVNZl5WRa15OoYA591cwuHFvUZitbnEbnVGwl2s6oVizR4Xn mMkYs0/WLnzSpFp73u94AtEL1cs2seRinuynRVy2W8HDuGSx2Dy3PTpFR0/kHOEk th6BPYiXOw1butmy+sKMkO+7FOyZYijYu9/WQ18/u0ZBQLkhuuzUgVi3PWx7r0VC K+qhdhKRNQefCEQYlupOCiVg5CA4MNiML70evNGffgfV0ZdeMxKOt3KNavgM2+SN QRyH3hNpVu0T8xaJ510C/mswZKKgY8JbCsDVEAfQo5R9mSKz1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEKyqi/vhd7amJwpSkK6nINLK1WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Njdh OThiMC0xMDBmLTRlNjktOGE5Zi1iY2VhZGI3ZTlhYWUvZmZkYWFlMmMtNjY0MS0z NjQ5LWEyNDktOTc5MTgyMjRjMWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTY3YTk4YjAtMTAwZi00ZTY5LThh OWYtYmNlYWRiN2U5YWFlLzk2N2E5OGIwLTEwMGYtNGU2OS04YTlmLWJjZWFkYjdl OWFhZS5jcmwwHwYDVR0jBBgwFoAU11g4vsgJB/HhoBW3h78hrABJOTswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NjdhOThiMC0xMDBmLTRlNjktOGE5Zi1iY2Vh ZGI3ZTlhYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0exEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByNNQN1lF2eqrck1B4muDQDlEPNppZk9sQ5WCSW9JaPCv79FTa0xSL6 smdPXrW9C0XKbQFrm0YATJ146JUTErlnkAxG39JFVSJ2doM8tpYtgEeJ9wWKlbdj sPpzX32vHiZK8OGdUUkFp5WmwQQoata6T4nhW2BN4Jleqb4+Orr8IbJGaIUzpQ+Q kJTlnOxSKIJ9ldm5PtgCSBVhg1GtT9PQmt/80qNUgOwSB/9KXH4fsSCtyUaFich1 0N1glJfRhYkYK3rVeZJ7Io8iQpgs2vLmqOQxdq9iPrPIHxHd9jrZa/eK05Vih5od 8gdNAaOQ2caRCeSJ5sl/MvNpJ1pcbDY= -----END CERTIFICATE-----Generated at Tue Oct 28 03:54:43 2025 by rpki-client