$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/efd48fea-fbb1-3268-a9a1-4f9caa081aa8.roa File: efd48fea-fbb1-3268-a9a1-4f9caa081aa8.roa (raw, json) Hash identifier: vSqVddb16WneInpfbHpN4HHMInYn96N4Rh2068rtTDA= Subject key identifier: 81:6F:33:85:2A:00:ED:75:E6:50:10:8C:C3:B3:24:BB:42:5A:2B:F3 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584B4D11D08056DACF0EFE3D7EA8 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/efd48fea-fbb1-3268-a9a1-4f9caa081aa8.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 40836 IP address blocks: 209.114.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:d0:80:56:da:cf:0e:fe:3d:7e:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=fad4c4dc-9a1e-40f9-9985-3fdc3855da02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:17:c0:97:cf:a0:c1:f4:fe:e3:65:be:3e:97: 75:ce:44:e1:a2:fa:6f:ea:32:af:2f:f2:44:fa:31: 7e:19:4a:6f:6e:57:c8:d2:b3:2d:e4:be:6a:8e:55: 80:60:46:2d:c5:38:a5:32:9b:64:95:d0:e7:1e:e1: 04:11:c3:47:1c:0a:07:48:89:aa:2e:9a:b8:10:95: ab:c2:bb:7b:af:e8:c9:32:89:8f:e3:98:b5:12:96: c4:8e:39:1d:ff:5e:03:bc:e6:24:46:f4:a4:7e:44: eb:c4:6d:b6:0e:ad:f4:de:67:66:9e:a3:90:d9:34: fd:12:b1:6b:55:b0:ac:9a:f4:e5:81:c0:ba:a6:86: 24:68:3a:d5:f1:6e:ba:58:06:bb:a5:1f:80:e3:aa: f2:47:66:10:36:27:45:97:a5:00:40:ba:ee:da:c3: 50:44:f2:ce:92:16:85:02:fa:ec:41:f5:5b:e4:a6: cf:48:29:84:77:14:6f:15:dc:90:bf:c8:3a:f6:b3: 46:ae:ca:6c:36:02:3e:f6:89:cb:80:c7:5d:1d:33: 9e:28:8f:be:b8:ce:81:a5:b9:09:a0:1e:f6:6f:c3: 56:21:b6:30:9b:2a:c7:9d:3a:f4:57:ce:0e:d2:0f: e3:af:36:37:f6:f1:b8:f2:fd:79:ac:7a:5e:0b:32: f9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:6F:33:85:2A:00:ED:75:E6:50:10:8C:C3:B3:24:BB:42:5A:2B:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/efd48fea-fbb1-3268-a9a1-4f9caa081aa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.114.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:ad:50:90:a6:e0:db:6c:09:f6:15:e6:9b:9f:8c:d7:09:3c: 4a:03:3b:be:fe:16:86:7a:6a:82:05:c4:37:a6:93:f9:97:58: ea:4a:d0:0d:aa:b8:b8:00:84:69:44:63:ca:25:40:1d:89:39: 92:6b:af:7a:a4:1e:d0:a6:1d:6d:f9:4b:33:a3:6d:09:9d:2e: 28:fe:58:dd:1b:c7:87:fc:1f:b6:fc:fd:01:65:c7:d6:d3:a2: e7:ce:a5:78:25:a7:ea:75:73:73:c1:fe:f3:90:2c:2e:71:c1: 9c:69:08:ad:e1:c0:72:3f:e4:3f:ed:f9:17:66:16:70:1e:93: e3:31:46:66:32:0e:95:95:37:bd:2e:07:d5:59:09:fd:04:48: 1f:87:9c:da:f7:5a:b1:d0:40:dd:93:87:0a:33:f6:d4:87:48: 35:89:55:ca:92:db:89:85:89:3e:13:69:9f:f0:3f:a8:9a:62: 60:f6:8e:65:46:97:20:52:a4:6a:f9:ce:8f:20:a4:51:b9:6b: f6:98:39:09:19:7b:3f:1c:91:73:1b:a3:b7:03:76:22:89:e6: b6:e1:71:84:45:54:c8:8b:51:2a:a5:00:56:9a:b1:7b:26:14: 4e:3d:df:3c:c1:79:c4:42:c1:22:b5:28:6b:c5:89:11:5d:07: 87:33:1c:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEdCAVtrPDv49fqgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk ZmFkNGM0ZGMtOWExZS00MGY5LTk5ODUtM2ZkYzM4NTVkYTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RfAl8+gwfT+42W+Ppd1zkThovpv6jKvL/JE +jF+GUpvblfI0rMt5L5qjlWAYEYtxTilMptkldDnHuEEEcNHHAoHSImqLpq4EJWr wrt7r+jJMomP45i1EpbEjjkd/14DvOYkRvSkfkTrxG22Dq303mdmnqOQ2TT9ErFr VbCsmvTlgcC6poYkaDrV8W66WAa7pR+A46ryR2YQNidFl6UAQLru2sNQRPLOkhaF AvrsQfVb5KbPSCmEdxRvFdyQv8g69rNGrspsNgI+9onLgMddHTOeKI++uM6BpbkJ oB72b8NWIbYwmyrHnTr0V84O0g/jrzY39vG48v15rHpeCzL5swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFvM4UqAO115lAQjMOzJLtCWivzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvZWZkNDhmZWEtZmJiMS0z MjY4LWE5YTEtNGY5Y2FhMDgxYWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XK6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+tUJCm4NtsCfYV5pufjNcJPEoDO77+FoZ6aoIFxDemk/mXWOpK0A2q uLgAhGlEY8olQB2JOZJrr3qkHtCmHW35SzOjbQmdLij+WN0bx4f8H7b8/QFlx9bT oufOpXglp+p1c3PB/vOQLC5xwZxpCK3hwHI/5D/t+RdmFnAek+MxRmYyDpWVN70u B9VZCf0ESB+HnNr3WrHQQN2Thwoz9tSHSDWJVcqS24mFiT4TaZ/wP6iaYmD2jmVG lyBSpGr5zo8gpFG5a/aYOQkZez8ckXMbo7cDdiKJ5rbhcYRFVMiLUSqlAFaasXsm FE493zzBecRCwSK1KGvFiRFdB4czHIE= -----END CERTIFICATE-----Generated at Fri Oct 24 12:00:43 2025 by rpki-client