$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/3a315f55-20c2-37ff-b50f-af30c5811ce0.roa File: 3a315f55-20c2-37ff-b50f-af30c5811ce0.roa (raw, json) Hash identifier: 72quiDQdlZvX6RQ5F+TmL4QL3ZD2NlYBIRUerA0C97c= Subject key identifier: D6:29:92:4B:91:B2:0F:52:1E:0F:21:C6:FC:AE:9C:3A:C0:A1:29:94 Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a Certificate serial: 010D0C9F4328584B5DD1E22D976530916C553D80 Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/3a315f55-20c2-37ff-b50f-af30c5811ce0.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 7018 IP address blocks: 209.114.4.0/22 maxlen: 24 209.114.8.0/21 maxlen: 24 209.114.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:e2:2d:97:65:30:91:6c:55:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=884d462b-7d13-43c9-8255-e2ba88dfa75e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2e:2a:f8:65:89:f7:1d:e0:6c:9c:e4:e7:0c: c5:10:f4:01:61:e6:dd:9b:17:52:3f:71:57:25:3b: 45:23:c5:c9:27:b0:37:53:ec:f8:87:13:00:7c:13: 3c:4e:3f:8e:b4:9b:8c:a9:d5:79:b7:5a:1a:47:53: da:46:b7:c7:f7:ed:c4:df:5f:41:cf:a8:76:47:c7: 20:0c:eb:70:40:39:07:50:a8:51:ab:1e:a8:95:e5: 66:72:52:2a:8b:ae:07:06:a4:8d:d0:aa:01:e8:96: 0c:92:9f:47:73:79:c5:04:1f:8a:43:58:53:87:7b: e6:b0:e7:9a:57:a9:c6:fa:e7:82:61:ab:55:88:09: 8b:ae:1d:d7:df:0d:3e:82:09:6f:1c:7e:d9:3f:55: 05:9b:fc:f9:3c:3d:a7:4b:af:01:59:84:b7:a1:d4: 49:5a:2e:44:81:7e:38:14:58:0e:f9:0e:11:5c:7a: 1c:a1:ef:46:8e:63:48:63:e3:94:85:52:95:d4:64: 17:fc:ae:db:b4:ea:89:63:6d:23:14:e0:ef:86:9e: 67:2a:95:e1:76:20:d6:ea:16:00:10:f2:99:3a:4e: 89:ea:32:a5:69:93:40:65:79:7a:a0:17:9b:95:80: 10:26:4e:e4:ab:1c:3c:d0:a3:81:3d:a3:0f:c5:11: 41:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:29:92:4B:91:B2:0F:52:1E:0F:21:C6:FC:AE:9C:3A:C0:A1:29:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/3a315f55-20c2-37ff-b50f-af30c5811ce0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl X509v3 Authority Key Identifier: keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer sbgp-ipAddrBlock: critical IPv4: 209.114.4.0-209.114.31.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:19:7b:12:7e:2f:93:65:d9:ee:38:69:a8:39:c0:9f:36:a5: 78:f0:45:de:c8:ed:0d:b2:f2:1f:31:58:f5:e5:0e:63:c2:3e: b3:59:22:4a:9d:29:6b:6e:2c:86:ba:6f:c8:c3:63:60:6d:9a: 24:ee:d8:3f:26:7d:40:73:d3:c0:d0:8c:44:6f:f8:dd:3d:fe: 91:e5:9e:5e:5f:1e:3b:db:32:ab:54:46:20:64:8a:b4:74:79: 0f:6f:75:ad:97:30:73:92:4d:f4:b9:76:ac:83:4d:d2:f2:90: fd:e9:b6:69:97:6f:c1:45:28:00:29:c9:6f:4e:90:e0:75:25: 71:8f:7e:db:bd:33:1d:54:cf:e3:a9:02:5e:be:b1:ac:ed:ad: 3b:7a:0b:7d:5e:22:81:cd:b5:16:21:1e:3e:7c:1a:57:dd:3e: e4:ce:e5:55:8b:8e:9b:fc:b4:7f:02:df:1b:3f:c1:73:a9:95: 29:f7:86:92:6c:11:1e:dd:f8:be:85:47:67:4f:76:30:e3:30: f4:54:f0:cd:cb:dd:b4:20:57:25:f5:e5:7c:23:35:3c:88:08: b0:31:28:56:c0:56:86:8a:63:c9:34:9d:df:98:71:3d:7e:8b: 19:ca:df:61:3e:ac:0f:44:51:28:97:ac:14:e4:61:bc:1f:b4: ae:d2:53:e9 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEtd0eItl2UwkWxVPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkNTYxOTMtOGUzMy00Nzg2LTlhNjQtOTQ5MzM4ZmMz MjVhMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk ODg0ZDQ2MmItN2QxMy00M2M5LTgyNTUtZTJiYTg4ZGZhNzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi4q+GWJ9x3gbJzk5wzFEPQBYebdmxdSP3FX JTtFI8XJJ7A3U+z4hxMAfBM8Tj+OtJuMqdV5t1oaR1PaRrfH9+3E319Bz6h2R8cg DOtwQDkHUKhRqx6oleVmclIqi64HBqSN0KoB6JYMkp9Hc3nFBB+KQ1hTh3vmsOea V6nG+ueCYatViAmLrh3X3w0+gglvHH7ZP1UFm/z5PD2nS68BWYS3odRJWi5EgX44 FFgO+Q4RXHocoe9GjmNIY+OUhVKV1GQX/K7btOqJY20jFODvhp5nKpXhdiDW6hYA EPKZOk6J6jKlaZNAZXl6oBeblYAQJk7kqxw80KOBPaMPxRFBoQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFNYpkkuRsg9SHg8hxvyunDrAoSmUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1 NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkzMzhmYzMyNWEvM2EzMTVmNTUtMjBjMi0z N2ZmLWI1MGYtYWYzMGM1ODExY2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFkNTYxOTMtOGUzMy00Nzg2LTlh NjQtOTQ5MzM4ZmMzMjVhLzhhZDU2MTkzLThlMzMtNDc4Ni05YTY0LTk0OTMzOGZj MzI1YS5jcmwwHwYDVR0jBBgwFoAUSmxPN9MqsY5wHL0G6xvD+21OV+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkz MzhmYzMyNWEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALRcgQD BAXRcgAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEArxl7En4vk2XZ7jhpqDnAnzalePBF3sjtDbLyHzFY9eUO Y8I+s1kiSp0pa24shrpvyMNjYG2aJO7YPyZ9QHPTwNCMRG/43T3+keWeXl8eO9sy q1RGIGSKtHR5D291rZcwc5JN9Ll2rINN0vKQ/em2aZdvwUUoACnJb06Q4HUlcY9+ 270zHVTP46kCXr6xrO2tO3oLfV4igc21FiEePnwaV90+5M7lVYuOm/y0fwLfGz/B c6mVKfeGkmwRHt34voVHZ092MOMw9FTwzcvdtCBXJfXlfCM1PIgIsDEoVsBWhopj yTSd35hxPX6LGcrfYT6sD0RRKJesFORhvB+0rtJT6Q== -----END CERTIFICATE-----Generated at Sun Oct 19 16:06:31 2025 by rpki-client