$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/a976272e-66d4-3404-810a-1db9636b39a3.roa File: a976272e-66d4-3404-810a-1db9636b39a3.roa (raw, json) Hash identifier: krQhp9pl58/yMitiJKeI80AGVoQu/nbxIoDSAV44fy8= Subject key identifier: A8:80:22:42:02:BF:ED:88:DC:F3:7E:CA:4B:69:B5:EC:2C:81:BB:DE Certificate issuer: /CN=2313a5ec-edb5-49a3-b3b3-980d80d8e766 Certificate serial: 010D0C9F4328584B95A79004D92E541240AF5C00 Authority key identifier: 8F:1A:F3:78:62:23:1B:3A:E9:0F:C9:03:06:14:51:39:B0:98:33:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/a976272e-66d4-3404-810a-1db9636b39a3.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 399628 IP address blocks: 209.237.154.0/24 maxlen: 24 2620:96:a000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:90:04:d9:2e:54:12:40:af:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2313a5ec-edb5-49a3-b3b3-980d80d8e766 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=741dca2e-62fe-4811-8f71-bd76da92b9e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f4:12:e2:79:f6:a8:a1:22:5b:57:f5:6a:49: 81:0e:bf:10:9d:5a:eb:31:e5:23:04:1c:73:78:2e: 7d:27:ad:14:80:06:89:fb:43:3f:df:12:83:ba:80: 41:fa:44:59:b7:0d:63:93:ce:d8:95:61:eb:67:14: e3:1a:08:ff:4b:30:71:8a:f1:d0:96:e1:79:00:73: d3:a9:f4:d4:6f:73:e2:d9:ab:5b:29:6a:59:52:04: 54:20:3e:fd:9f:4c:46:2c:b0:e4:c2:bf:0d:8f:89: ef:3d:5e:79:ef:98:7e:c1:d5:4e:ae:96:d0:7e:e0: eb:33:12:92:6f:6c:eb:00:24:00:fa:ec:d4:a0:80: d4:65:ae:88:89:52:ba:94:d1:09:ae:44:bd:ac:bb: 17:9c:cc:2b:1a:08:a6:88:df:78:e2:2f:60:f3:48: 67:60:72:75:25:f0:91:f4:44:b9:a9:19:65:b3:84: b4:95:57:10:a8:96:33:c1:3e:ea:99:a6:4e:d4:49: bd:c4:c7:d9:ba:7d:80:f7:49:30:be:a8:d1:6b:6e: 60:37:35:08:d4:38:2f:ae:2e:0b:0b:ba:74:d8:1a: 4c:09:4b:2d:0f:16:b3:3f:dd:51:c8:d3:f4:f3:22: 79:29:ee:cb:a0:f0:8e:4e:e9:67:73:85:4c:f3:03: 1d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:80:22:42:02:BF:ED:88:DC:F3:7E:CA:4B:69:B5:EC:2C:81:BB:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/a976272e-66d4-3404-810a-1db9636b39a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.crl X509v3 Authority Key Identifier: keyid:8F:1A:F3:78:62:23:1B:3A:E9:0F:C9:03:06:14:51:39:B0:98:33:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer sbgp-ipAddrBlock: critical IPv4: 209.237.154.0/24 IPv6: 2620:96:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:be:c6:87:f5:f9:f2:62:72:9a:7c:a8:ea:55:ff:ba:aa:23: 73:87:7b:0c:5f:0e:a2:76:18:fc:2d:cd:3a:bb:c6:0c:3c:99: 16:c2:ab:13:d4:c8:c0:f6:cf:8a:29:82:cc:1b:12:c7:a9:ea: 71:17:2f:d2:14:87:de:30:56:14:c8:64:3e:b8:b1:5d:73:a0: 12:8b:af:84:4a:64:a0:bf:41:78:9f:90:da:6c:e0:d8:92:eb: 71:d3:9c:e5:9a:bc:3f:9b:d5:11:3a:70:6e:ae:a7:4a:c7:e5: c7:fb:7e:a9:ed:e4:7e:9a:67:df:aa:a7:6c:c1:ba:c9:18:1d: 50:0d:32:21:72:51:64:e5:a8:9c:eb:35:42:30:f8:89:14:b2: cd:52:89:aa:c1:0a:cc:1b:b5:fb:13:1d:c7:59:34:67:98:1d: bc:37:e0:ea:d3:6f:73:7a:c2:15:f1:6a:88:bb:62:9d:9b:29: 7e:31:7f:c5:37:2c:66:93:4d:83:7c:b6:06:d0:96:e3:d4:a7: c5:48:17:23:5b:4e:c9:c0:6f:8d:1f:e8:1c:7b:a5:32:b1:2f: 8a:c9:d7:a8:a5:73:0c:86:72:2b:4f:58:b8:33:14:9e:5b:15: 42:57:58:7c:ce:81:46:55:1f:ba:47:e5:17:8f:53:98:a6:62: 3d:7c:b9:cd -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEuVp5AE2S5UEkCvXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjMxM2E1ZWMtZWRiNS00OWEzLWIzYjMtOTgwZDgwZDhl NzY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NzQxZGNhMmUtNjJmZS00ODExLThmNzEtYmQ3NmRhOTJiOWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/QS4nn2qKEiW1f1akmBDr8QnVrrMeUjBBxz eC59J60UgAaJ+0M/3xKDuoBB+kRZtw1jk87YlWHrZxTjGgj/SzBxivHQluF5AHPT qfTUb3Pi2atbKWpZUgRUID79n0xGLLDkwr8Nj4nvPV5575h+wdVOrpbQfuDrMxKS b2zrACQA+uzUoIDUZa6IiVK6lNEJrkS9rLsXnMwrGgimiN944i9g80hnYHJ1JfCR 9ES5qRlls4S0lVcQqJYzwT7qmaZO1Em9xMfZun2A90kwvqjRa25gNzUI1Dgvri4L C7p02BpMCUstDxazP91RyNP08yJ5Ke7LoPCOTulnc4VM8wMd9wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFKiAIkICv+2I3PN+yktptewsgbveMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMzEz YTVlYy1lZGI1LTQ5YTMtYjNiMy05ODBkODBkOGU3NjYvYTk3NjI3MmUtNjZkNC0z NDA0LTgxMGEtMWRiOTYzNmIzOWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjMxM2E1ZWMtZWRiNS00OWEzLWIz YjMtOTgwZDgwZDhlNzY2LzIzMTNhNWVjLWVkYjUtNDlhMy1iM2IzLTk4MGQ4MGQ4 ZTc2Ni5jcmwwHwYDVR0jBBgwFoAUjxrzeGIjGzrpD8kDBhRRObCYM+4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMzEzYTVlYy1lZGI1LTQ5YTMtYjNiMy05ODBk ODBkOGU3NjYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA0e2aMA8E AgACMAkDBwAmIACWoAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAHr7Gh/X58mJymnyo6lX/uqojc4d7DF8O onYY/C3NOrvGDDyZFsKrE9TIwPbPiimCzBsSx6nqcRcv0hSH3jBWFMhkPrixXXOg EouvhEpkoL9BeJ+Q2mzg2JLrcdOc5Zq8P5vVETpwbq6nSsflx/t+qe3kfppn36qn bMG6yRgdUA0yIXJRZOWonOs1QjD4iRSyzVKJqsEKzBu1+xMdx1k0Z5gdvDfg6tNv c3rCFfFqiLtinZspfjF/xTcsZpNNg3y2BtCW49SnxUgXI1tOycBvjR/oHHulMrEv isnXqKVzDIZyK09YuDMUnlsVQldYfM6BRlUfukflF49TmKZiPXy5zQ== -----END CERTIFICATE-----Generated at Tue Oct 21 07:04:59 2025 by rpki-client