$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/d0006625-f457-3068-ab43-dd1b3162c248.roa File: d0006625-f457-3068-ab43-dd1b3162c248.roa (raw, json) Hash identifier: 9cmMnW8D+pZFcDXmk0JThYeiesikwyeUtouHJ5O3YGk= Subject key identifier: D3:52:34:A1:55:68:79:02:91:90:29:81:D2:F9:15:C1:47:B4:1D:25 Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a Certificate serial: 010D0C9F4328584B8EAD0E35B54CBBDD413EEE80 Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/d0006625-f457-3068-ab43-dd1b3162c248.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 20115 IP address blocks: 209.114.4.0/22 maxlen: 24 209.114.8.0/21 maxlen: 24 209.114.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ad:0e:35:b5:4c:bb:dd:41:3e:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=7d67adc5-db95-4293-9582-f4a25fdb5f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ce:59:7e:83:ce:f7:e0:f4:dc:7b:d9:8a:51: 9b:b0:ad:40:06:bf:b5:27:5d:7e:c8:07:df:ee:06: aa:6e:9d:33:8b:eb:9b:78:7d:e7:e4:cf:9b:24:ff: c3:c3:cb:06:50:e4:77:fc:d0:60:a9:aa:56:74:66: d0:47:f3:f8:aa:3b:06:d6:20:9a:06:80:23:1d:11: b9:99:3e:a3:b6:c1:b8:a0:72:2e:ff:06:bb:2a:88: 65:44:8f:e8:c1:6d:04:f2:35:fa:c6:d7:54:33:39: c9:6a:fb:e4:b4:d7:a9:c6:1e:83:54:32:c9:f4:42: dc:e9:51:4f:75:50:b6:44:5c:45:1f:4e:a9:34:d2: 46:e2:13:14:5e:cc:57:40:93:b5:f9:24:93:71:61: a8:16:77:32:d8:fa:29:20:c2:66:1c:fa:62:18:8f: 0a:5f:91:51:87:8b:99:52:21:e0:52:67:11:ee:c7: 38:2d:be:bb:ad:20:c7:99:64:06:a8:62:25:2f:6f: c4:8c:f1:fd:81:18:b1:64:d7:00:f7:ce:ab:58:42: cf:4b:a3:48:d1:b1:89:92:db:0d:00:b8:91:6c:a8: c9:ba:17:94:01:b3:4f:59:d3:91:77:97:9b:cd:4d: f6:8d:cb:46:fd:06:60:2b:43:08:c8:5f:35:89:31: e2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:52:34:A1:55:68:79:02:91:90:29:81:D2:F9:15:C1:47:B4:1D:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/d0006625-f457-3068-ab43-dd1b3162c248.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl X509v3 Authority Key Identifier: keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer sbgp-ipAddrBlock: critical IPv4: 209.114.4.0-209.114.31.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:b8:21:ef:c7:1a:0f:69:4a:18:b7:7f:31:ae:a2:ce:79:c3: 7b:93:df:85:60:76:c7:3a:b1:71:e0:5f:c3:e7:92:6a:97:34: a2:d9:ab:1a:90:cd:e3:33:48:ba:03:a6:a7:2d:d8:c7:2e:5e: 76:88:ea:be:70:1e:04:00:99:dc:31:26:a4:b5:ad:d5:ff:1c: 9b:ad:5c:47:b2:02:41:62:df:20:cd:d7:56:44:fa:49:58:9a: ca:5c:10:45:cd:0c:44:e6:5f:90:71:df:90:22:aa:25:89:6e: 7d:ac:4a:00:5b:74:e2:40:70:61:39:eb:12:f3:68:8c:18:e8: 6b:e8:1d:57:e4:25:53:a1:f1:d7:f1:63:13:59:6a:49:1d:6f: 1a:c9:ed:99:cc:b7:04:98:b1:84:e9:24:b7:0a:db:6d:b4:21: 88:06:55:c0:6d:69:44:43:4d:e5:51:31:1c:9e:e8:69:73:0b: 5b:88:45:9c:53:e3:7e:dc:6f:b7:d4:38:ac:2f:a4:77:42:cd: 27:57:3e:cb:2f:f3:25:0c:b9:84:85:15:24:85:03:0f:e7:79: 59:92:44:91:72:cf:cc:6c:27:29:b4:4a:f6:c5:d4:1c:ff:6c: 06:e9:61:ce:61:26:b0:b9:93:b3:99:7e:4d:e9:30:3c:0c:d2: c9:31:00:37 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEuOrQ41tUy73UE+7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkNTYxOTMtOGUzMy00Nzg2LTlhNjQtOTQ5MzM4ZmMz MjVhMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk N2Q2N2FkYzUtZGI5NS00MjkzLTk1ODItZjRhMjVmZGI1ZjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs5ZfoPO9+D03HvZilGbsK1ABr+1J11+yAff 7gaqbp0zi+ubeH3n5M+bJP/Dw8sGUOR3/NBgqapWdGbQR/P4qjsG1iCaBoAjHRG5 mT6jtsG4oHIu/wa7KohlRI/owW0E8jX6xtdUMznJavvktNepxh6DVDLJ9ELc6VFP dVC2RFxFH06pNNJG4hMUXsxXQJO1+SSTcWGoFncy2PopIMJmHPpiGI8KX5FRh4uZ UiHgUmcR7sc4Lb67rSDHmWQGqGIlL2/EjPH9gRixZNcA986rWELPS6NI0bGJktsN ALiRbKjJuheUAbNPWdORd5ebzU32jctG/QZgK0MIyF81iTHibQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFNNSNKFVaHkCkZApgdL5FcFHtB0lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1 NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkzMzhmYzMyNWEvZDAwMDY2MjUtZjQ1Ny0z MDY4LWFiNDMtZGQxYjMxNjJjMjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFkNTYxOTMtOGUzMy00Nzg2LTlh NjQtOTQ5MzM4ZmMzMjVhLzhhZDU2MTkzLThlMzMtNDc4Ni05YTY0LTk0OTMzOGZj MzI1YS5jcmwwHwYDVR0jBBgwFoAUSmxPN9MqsY5wHL0G6xvD+21OV+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkz MzhmYzMyNWEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALRcgQD BAXRcgAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAWrgh78caD2lKGLd/Ma6iznnDe5PfhWB2xzqxceBfw+eS apc0otmrGpDN4zNIugOmpy3Yxy5edojqvnAeBACZ3DEmpLWt1f8cm61cR7ICQWLf IM3XVkT6SViaylwQRc0MROZfkHHfkCKqJYlufaxKAFt04kBwYTnrEvNojBjoa+gd V+QlU6Hx1/FjE1lqSR1vGsntmcy3BJixhOkktwrbbbQhiAZVwG1pRENN5VExHJ7o aXMLW4hFnFPjftxvt9Q4rC+kd0LNJ1c+yy/zJQy5hIUVJIUDD+d5WZJEkXLPzGwn KbRK9sXUHP9sBulhzmEmsLmTs5l+TekwPAzSyTEANw== -----END CERTIFICATE-----Generated at Sun Oct 19 22:08:41 2025 by rpki-client