$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/40a445a0-c71d-3db6-9909-8be2612ff8f9.roa File: 40a445a0-c71d-3db6-9909-8be2612ff8f9.roa (raw, json) Hash identifier: a2gr2O0Jy2GeG7RJSTQCWUtLuGR7kL3hKK1oQC3YRxg= Subject key identifier: F2:18:AF:00:EE:C7:3A:B4:5B:64:BD:00:4B:ED:85:2B:BE:21:7C:73 Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a Certificate serial: 010D0C9F4328584B891779C3B1E0787FCE89B380 Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/40a445a0-c71d-3db6-9909-8be2612ff8f9.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 209.114.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:79:c3:b1:e0:78:7f:ce:89:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=49c02900-bb45-4899-93b2-43daf3268b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d9:e4:56:c3:a6:48:41:a3:b6:82:00:be:86: de:6b:c3:0b:90:e7:24:25:03:d9:cc:e7:68:cb:72: 70:24:37:9f:07:78:0d:75:ba:70:46:47:db:a0:96: aa:a1:47:a5:47:83:e5:b4:b8:75:91:72:bb:a9:01: a2:8a:df:c0:ba:76:dc:77:48:9d:cf:a9:a1:af:70: 33:6b:20:75:14:7d:21:e2:ef:8a:d8:68:a6:8a:0e: 75:e5:85:8c:e0:49:55:cb:8e:bf:31:d8:5a:39:8d: a8:2a:30:67:f2:e8:03:0c:6d:b6:2a:73:7b:f0:4f: 48:43:54:c7:5f:91:ce:0f:30:4b:d8:bc:4e:44:b9: 79:39:73:49:da:ed:18:23:1d:a3:f7:f7:81:58:32: af:f4:ee:bf:3e:fa:ed:58:47:16:3e:1d:3f:a1:c3: 17:fa:41:a3:f1:c8:37:2c:76:51:b0:4d:07:bb:00: 23:1b:f8:a4:47:58:a8:6a:1f:52:f3:e0:0f:98:cd: 77:40:b1:95:e7:a3:70:91:88:4e:e1:2c:f8:07:82: 92:69:b6:e9:3f:1e:38:86:0c:10:c3:be:fb:a8:f6: f0:5a:eb:8b:bd:9f:b3:9a:c8:94:cd:a4:ba:d7:f2: 48:e6:fa:51:8e:46:91:e1:7c:c2:1b:86:48:8e:68: 59:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:18:AF:00:EE:C7:3A:B4:5B:64:BD:00:4B:ED:85:2B:BE:21:7C:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/40a445a0-c71d-3db6-9909-8be2612ff8f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl X509v3 Authority Key Identifier: keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer sbgp-ipAddrBlock: critical IPv4: 209.114.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:ec:39:47:d8:de:a8:04:11:fa:e2:dd:9b:3b:44:24:4f:eb: 76:b8:d8:c5:51:80:82:9f:84:d2:b6:15:05:96:ed:a8:2f:f4: 84:c0:09:7f:4a:3c:92:8a:2a:33:f2:3f:1c:b7:df:13:3a:a6: 2e:c2:df:dc:e2:f0:06:a4:df:03:4f:0c:42:2d:d0:ee:10:27: 8a:56:59:76:b1:e6:7f:23:43:d6:d9:0e:a8:1b:4d:18:f8:fd: b1:c6:f0:eb:13:ca:e0:39:e9:65:0a:33:83:5d:13:f1:92:e3: b9:34:3c:16:0b:6e:d3:72:30:23:1e:6d:7d:d7:22:26:a8:fc: 64:80:d8:73:2e:09:d3:16:6b:84:6c:a1:97:03:ab:ea:3d:75: d5:4f:be:ac:6a:c6:be:98:94:b6:fa:27:78:7d:ef:42:e5:50: a9:82:39:f6:e2:a5:77:8d:2e:5e:39:75:7f:0f:e4:37:ad:47: ec:16:0f:2b:cc:26:07:8b:20:8f:4e:27:21:bf:ef:2b:b4:b9: 6a:7b:b2:43:ca:60:d3:aa:69:bb:cc:fa:93:bb:fe:3c:ee:c9: 45:ef:c9:5c:a1:6f:b6:05:31:53:bd:b8:db:49:56:c4:e8:1e: ce:ad:08:e6:17:84:3c:06:17:30:05:8f:73:7c:67:77:87:d4: 48:c3:d8:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF3nDseB4f86Js4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkNTYxOTMtOGUzMy00Nzg2LTlhNjQtOTQ5MzM4ZmMz MjVhMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk NDljMDI5MDAtYmI0NS00ODk5LTkzYjItNDNkYWYzMjY4YjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNnkVsOmSEGjtoIAvobea8MLkOckJQPZzOdo y3JwJDefB3gNdbpwRkfboJaqoUelR4PltLh1kXK7qQGiit/Aunbcd0idz6mhr3Az ayB1FH0h4u+K2Gimig515YWM4ElVy46/MdhaOY2oKjBn8ugDDG22KnN78E9IQ1TH X5HODzBL2LxORLl5OXNJ2u0YIx2j9/eBWDKv9O6/PvrtWEcWPh0/ocMX+kGj8cg3 LHZRsE0HuwAjG/ikR1ioah9S8+APmM13QLGV56NwkYhO4Sz4B4KSabbpPx44hgwQ w777qPbwWuuLvZ+zmsiUzaS61/JI5vpRjkaR4XzCG4ZIjmhZkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIYrwDuxzq0W2S9AEvthSu+IXxzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1 NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkzMzhmYzMyNWEvNDBhNDQ1YTAtYzcxZC0z ZGI2LTk5MDktOGJlMjYxMmZmOGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFkNTYxOTMtOGUzMy00Nzg2LTlh NjQtOTQ5MzM4ZmMzMjVhLzhhZDU2MTkzLThlMzMtNDc4Ni05YTY0LTk0OTMzOGZj MzI1YS5jcmwwHwYDVR0jBBgwFoAUSmxPN9MqsY5wHL0G6xvD+21OV+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkz MzhmYzMyNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XIDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHsOUfY3qgEEfri3Zs7RCRP63a42MVRgIKfhNK2FQWW7agv9ITACX9K PJKKKjPyPxy33xM6pi7C39zi8Aak3wNPDEIt0O4QJ4pWWXax5n8jQ9bZDqgbTRj4 /bHG8OsTyuA56WUKM4NdE/GS47k0PBYLbtNyMCMebX3XIiao/GSA2HMuCdMWa4Rs oZcDq+o9ddVPvqxqxr6YlLb6J3h970LlUKmCOfbipXeNLl45dX8P5DetR+wWDyvM JgeLII9OJyG/7yu0uWp7skPKYNOqabvM+pO7/jzuyUXvyVyhb7YFMVO9uNtJVsTo Hs6tCOYXhDwGFzAFj3N8Z3eH1EjD2L4= -----END CERTIFICATE-----Generated at Sun Oct 19 22:09:00 2025 by rpki-client