$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/6910e57a-19e1-35c1-a202-faf2127b1fe1.roa File: 6910e57a-19e1-35c1-a202-faf2127b1fe1.roa (raw, json) Hash identifier: 4+k8j5PTPr1NfJzoNlxcSuiKcEPQB4c+QUsknsj43IQ= Subject key identifier: D5:BF:99:8D:2B:B3:3A:27:34:62:99:DA:59:97:96:DE:7D:11:90:8A Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a Certificate serial: 010D0C9F4328584B0746B5DFEE33C2DB9566DE40 Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/6910e57a-19e1-35c1-a202-faf2127b1fe1.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 16509 IP address blocks: 209.114.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:b5:df:ee:33:c2:db:95:66:de:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=96c05614-1209-4a51-bfdc-31e6a613739a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8b:d2:11:24:ce:02:ad:61:76:8b:4a:f5:d7: fb:7d:f6:11:90:77:4a:f5:20:de:78:ff:fd:a4:d2: cb:3f:79:0d:ff:2a:af:b5:51:ab:06:4a:ec:25:e9: cb:43:5d:2c:f9:bb:14:a4:24:74:de:9c:88:e0:0b: 52:f9:94:30:49:66:42:5f:6c:c1:53:37:1d:32:e9: 2f:c4:03:c9:a8:52:52:82:77:e9:f4:4d:b2:53:4e: 34:fd:11:47:d9:d7:b7:36:ed:be:cd:e7:3f:9d:d1: 38:22:e7:51:79:67:76:76:40:c7:73:cd:e4:61:b7: 32:72:d3:d9:6a:f8:13:5b:e5:75:0b:c1:cb:02:d6: fb:b6:1a:1c:89:16:28:66:1a:53:1a:5c:3a:4d:3d: dd:43:67:f9:7a:d4:d2:02:99:dd:2b:54:3f:79:13: 36:ba:ab:96:8b:75:0f:21:f1:71:ab:b4:93:3e:1d: bc:e6:a9:67:1f:98:ab:d7:9e:58:85:21:e7:b1:42: 66:68:1d:6c:61:82:6d:bb:f1:57:73:7c:45:49:90: f8:cd:2a:e8:6c:32:2c:0f:fb:62:75:24:dd:43:27: d5:b2:80:bc:59:cf:5c:b3:b7:f9:d9:c3:8a:0e:89: 1e:c7:08:c0:64:a9:00:b7:3e:48:ba:cd:fb:44:75: 9a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BF:99:8D:2B:B3:3A:27:34:62:99:DA:59:97:96:DE:7D:11:90:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/6910e57a-19e1-35c1-a202-faf2127b1fe1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl X509v3 Authority Key Identifier: keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer sbgp-ipAddrBlock: critical IPv4: 209.114.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:e4:db:d5:f2:bf:23:1e:4f:0d:f9:1d:ab:a2:26:94:56:53: 57:64:1c:bd:85:b4:bd:2b:e6:84:d0:df:17:6c:24:f6:4d:75: d0:ec:46:2e:9c:8f:8b:07:71:c5:6b:22:a2:e8:03:10:12:b8: 48:bf:d6:f9:73:f3:07:bd:9d:fc:55:5d:0d:90:17:29:7b:fd: 92:73:42:8b:6e:98:58:30:a9:8a:ec:ec:f4:47:38:9d:59:09: c7:29:8d:b9:83:4c:f3:92:f7:db:ad:c4:39:ce:a1:c8:f2:34: 2e:0d:d1:b5:ac:8c:67:16:fc:13:f7:c9:79:c4:4d:4a:90:ac: f1:6a:95:d9:e6:f4:c3:f5:35:f8:5a:bb:00:7d:e1:20:27:15: 31:0d:d5:80:73:35:be:aa:b1:0a:02:3c:cc:9b:56:26:cd:fb: 4f:60:f5:07:1b:c3:4a:5e:71:d2:1b:36:6a:5e:c9:50:7e:27: 73:ce:48:6c:01:91:ce:bb:9c:e5:4a:9e:7a:10:60:17:47:ca: dc:80:29:72:ef:37:5a:73:a1:b6:3a:21:91:14:fa:b6:b3:0c: f6:ff:24:8f:25:e4:2d:08:90:38:c7:17:67:1a:f2:8c:07:d4: 35:0d:cb:15:0f:85:c6:16:85:ff:cf:27:90:8a:bc:1a:98:5a: 84:c7:4a:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRrXf7jPC25Vm3kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkNTYxOTMtOGUzMy00Nzg2LTlhNjQtOTQ5MzM4ZmMz MjVhMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk OTZjMDU2MTQtMTIwOS00YTUxLWJmZGMtMzFlNmE2MTM3MzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYvSESTOAq1hdotK9df7ffYRkHdK9SDeeP/9 pNLLP3kN/yqvtVGrBkrsJenLQ10s+bsUpCR03pyI4AtS+ZQwSWZCX2zBUzcdMukv xAPJqFJSgnfp9E2yU040/RFH2de3Nu2+zec/ndE4IudReWd2dkDHc83kYbcyctPZ avgTW+V1C8HLAtb7thociRYoZhpTGlw6TT3dQ2f5etTSApndK1Q/eRM2uquWi3UP IfFxq7STPh285qlnH5ir155YhSHnsUJmaB1sYYJtu/FXc3xFSZD4zSrobDIsD/ti dSTdQyfVsoC8Wc9cs7f52cOKDokexwjAZKkAtz5Ius37RHWaQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNW/mY0rszonNGKZ2lmXlt59EZCKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1 NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkzMzhmYzMyNWEvNjkxMGU1N2EtMTllMS0z NWMxLWEyMDItZmFmMjEyN2IxZmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFkNTYxOTMtOGUzMy00Nzg2LTlh NjQtOTQ5MzM4ZmMzMjVhLzhhZDU2MTkzLThlMzMtNDc4Ni05YTY0LTk0OTMzOGZj MzI1YS5jcmwwHwYDVR0jBBgwFoAUSmxPN9MqsY5wHL0G6xvD+21OV+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkz MzhmYzMyNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDk29XyvyMeTw35HauiJpRWU1dkHL2FtL0r5oTQ3xdsJPZNddDsRi6c j4sHccVrIqLoAxASuEi/1vlz8we9nfxVXQ2QFyl7/ZJzQotumFgwqYrs7PRHOJ1Z CccpjbmDTPOS99utxDnOocjyNC4N0bWsjGcW/BP3yXnETUqQrPFqldnm9MP1Nfha uwB94SAnFTEN1YBzNb6qsQoCPMybVibN+09g9Qcbw0pecdIbNmpeyVB+J3POSGwB kc67nOVKnnoQYBdHytyAKXLvN1pzobY6IZEU+razDPb/JI8l5C0IkDjHF2ca8owH 1DUNyxUPhcYWhf/PJ5CKvBqYWoTHSoA= -----END CERTIFICATE-----Generated at Wed Sep 3 17:35:35 2025 by rpki-client