$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/f1d32fb4-228c-37d2-9751-57a3f0746694.roa File: f1d32fb4-228c-37d2-9751-57a3f0746694.roa (raw, json) Hash identifier: H1+KjxNGTgGKAdsmsCWjYJgkEDB11eDDaPDK2KZdBco= Subject key identifier: E1:B6:33:55:6B:AA:11:F5:CA:F7:71:CB:B4:4D:0A:DB:A6:44:80:71 Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a Certificate serial: 010D0C9F4328584B27617C9CE686876306157D80 Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/f1d32fb4-228c-37d2-9751-57a3f0746694.roa Signing time: Thu 11 Sep 2025 01:00:33 +0000 ROA not before: Thu 11 Sep 2025 01:00:33 +0000 ROA not after: Wed 10 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 209.114.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:61:7c:9c:e6:86:87:63:06:15:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a Validity Not Before: Sep 11 01:00:33 2025 GMT Not After : Dec 10 02:00:33 2025 GMT Subject: CN=59bde744-65a8-4239-b8e2-3c9fd18761fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:da:66:ee:a7:82:c5:b8:33:48:94:10:cd:3f: e8:0a:9d:64:66:99:18:de:41:63:cf:ea:02:5a:82: d4:05:b7:02:bf:88:95:9e:69:f7:3f:c3:78:0b:b4: 4a:fc:d9:dc:11:3a:a3:bf:0b:91:9a:2b:31:5f:f4: ca:94:cf:f7:44:03:79:d7:d2:3a:b8:29:ea:23:f3: 7f:58:92:c5:c7:2c:2c:c7:30:e4:5c:b5:25:92:de: 3a:43:0a:22:97:45:00:6f:4a:c7:b0:69:48:fe:2e: b4:8a:a3:49:b0:98:4b:21:90:c1:d3:b7:c1:7d:2f: d1:57:49:11:db:4d:21:cd:35:4c:0b:f3:90:3b:94: 5b:c4:50:ef:07:01:b3:3d:2f:2a:45:87:29:a6:be: 52:d5:9c:0c:80:e9:67:12:9d:f8:76:91:42:c1:d6: 0b:3e:6d:ff:96:75:79:00:0a:09:f6:2e:34:9c:d8: 23:c7:80:4f:55:21:4d:0e:fc:a2:d1:8a:b1:10:11: 88:e7:49:32:59:4a:0f:d4:fa:f0:fc:8d:69:8c:f9: 41:07:88:18:aa:4c:cf:b7:7e:e0:cf:60:8d:9d:33: b0:93:fd:54:fc:02:a9:02:9e:98:f3:5a:32:c0:e3: ed:32:89:56:19:32:b5:42:99:bd:0a:78:3c:e3:ab: 87:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B6:33:55:6B:AA:11:F5:CA:F7:71:CB:B4:4D:0A:DB:A6:44:80:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/f1d32fb4-228c-37d2-9751-57a3f0746694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl X509v3 Authority Key Identifier: keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer sbgp-ipAddrBlock: critical IPv4: 209.114.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:db:25:f9:95:0d:e4:d4:53:d5:61:22:87:56:43:d2:54:27: 04:26:11:88:77:7c:4d:f5:7d:33:7f:16:9d:a2:82:de:b6:c2: 08:b7:46:82:07:b4:ba:aa:1c:b3:a8:38:99:24:d3:3b:f4:ed: 57:bd:5f:39:e0:26:d6:d7:f3:5a:d8:e6:5c:09:61:2a:4e:a5: ee:a1:90:ce:cc:bc:fa:64:34:66:1d:58:c6:26:b9:43:a7:15: b9:fd:0f:44:f2:51:74:6a:51:f2:96:3b:d9:f8:1e:a1:d1:d1: e5:22:df:f4:5d:de:65:6d:94:7d:cb:b4:e6:35:04:44:32:22: 9d:20:b1:97:3e:a0:5f:0c:89:e8:04:ca:63:97:66:ef:11:b8: 64:a7:aa:68:0a:b5:49:ce:1d:32:31:42:df:e1:54:15:d1:93: e4:39:05:6b:19:26:7e:76:1d:4f:21:03:21:66:24:af:bb:6b: 01:58:e2:62:b8:04:1e:51:2d:b3:b4:7b:9e:dc:d8:f7:1e:85: 98:4f:90:e2:87:00:ec:e1:a9:f6:bf:56:a3:05:ce:b0:e1:f4: b3:a7:2f:dd:8a:ce:dd:07:f5:5e:62:e9:74:47:0c:12:5e:59: bb:de:10:c9:9b:df:e2:ea:4b:5f:68:38:da:d4:50:ae:2c:4f: 20:93:47:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsnYXyc5oaHYwYVfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkNTYxOTMtOGUzMy00Nzg2LTlhNjQtOTQ5MzM4ZmMz MjVhMB4XDTI1MDkxMTAxMDAzM1oXDTI1MTIxMDAyMDAzM1owLzEtMCsGA1UEAxMk NTliZGU3NDQtNjVhOC00MjM5LWI4ZTItM2M5ZmQxODc2MWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitpm7qeCxbgzSJQQzT/oCp1kZpkY3kFjz+oC WoLUBbcCv4iVnmn3P8N4C7RK/NncETqjvwuRmisxX/TKlM/3RAN519I6uCnqI/N/ WJLFxywsxzDkXLUlkt46Qwoil0UAb0rHsGlI/i60iqNJsJhLIZDB07fBfS/RV0kR 200hzTVMC/OQO5RbxFDvBwGzPS8qRYcppr5S1ZwMgOlnEp34dpFCwdYLPm3/lnV5 AAoJ9i40nNgjx4BPVSFNDvyi0YqxEBGI50kyWUoP1Prw/I1pjPlBB4gYqkzPt37g z2CNnTOwk/1U/AKpAp6Y81oywOPtMolWGTK1Qpm9Cng846uHIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOG2M1VrqhH1yvdxy7RNCtumRIBxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1 NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkzMzhmYzMyNWEvZjFkMzJmYjQtMjI4Yy0z N2QyLTk3NTEtNTdhM2YwNzQ2Njk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFkNTYxOTMtOGUzMy00Nzg2LTlh NjQtOTQ5MzM4ZmMzMjVhLzhhZDU2MTkzLThlMzMtNDc4Ni05YTY0LTk0OTMzOGZj MzI1YS5jcmwwHwYDVR0jBBgwFoAUSmxPN9MqsY5wHL0G6xvD+21OV+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkz MzhmYzMyNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XICMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHbJfmVDeTUU9VhIodWQ9JUJwQmEYh3fE31fTN/Fp2igt62wgi3RoIH tLqqHLOoOJkk0zv07Ve9XzngJtbX81rY5lwJYSpOpe6hkM7MvPpkNGYdWMYmuUOn Fbn9D0TyUXRqUfKWO9n4HqHR0eUi3/Rd3mVtlH3LtOY1BEQyIp0gsZc+oF8MiegE ymOXZu8RuGSnqmgKtUnOHTIxQt/hVBXRk+Q5BWsZJn52HU8hAyFmJK+7awFY4mK4 BB5RLbO0e57c2PcehZhPkOKHAOzhqfa/VqMFzrDh9LOnL92Kzt0H9V5i6XRHDBJe WbveEMmb3+LqS19oONrUUK4sTyCTR+g= -----END CERTIFICATE-----Generated at Sun Oct 19 22:08:58 2025 by rpki-client