$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/7d98dbe3-4cd5-3bcd-91c1-ade1013af44f.roa File: 7d98dbe3-4cd5-3bcd-91c1-ade1013af44f.roa (raw, json) Hash identifier: en+CCsB+lNXU4Zjn/RQJV0zAPymbY/tXCHmI/ypsSjU= Subject key identifier: 22:D5:8B:5B:B0:21:3A:6D:7E:EF:1C:C1:EB:EB:1E:85:27:75:18:6F Certificate issuer: /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Certificate serial: 010D0C9F4328584B2496CE1C3C5C0BF9E60ACB00 Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/7d98dbe3-4cd5-3bcd-91c1-ade1013af44f.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 22580 IP address blocks: 209.173.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:ce:1c:3c:5c:0b:f9:e6:0a:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=287b1d2e-c4d8-4492-9ccd-967c4a21e2b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7f:bc:01:42:e5:c4:5b:ae:03:10:d3:7f:bc: f4:85:3b:44:e4:9b:93:95:6c:a2:1a:3b:ff:2d:25: 06:6c:49:a2:31:e5:52:8f:aa:db:ff:c4:db:9e:a8: 37:13:9f:e7:3a:cf:ac:a8:e6:d3:90:63:af:12:45: 9b:ea:6c:22:dc:3a:2b:5a:8b:34:fb:db:d2:23:0c: ee:b4:9a:62:bb:4f:45:cb:da:30:ad:c5:f9:8a:a7: 0a:7c:5f:15:4c:ca:a8:ce:41:fd:c9:2e:55:e5:52: 68:47:5c:b1:4d:85:82:67:75:c0:5e:6c:82:0c:d0: 7a:70:72:ee:d7:88:6e:5b:d5:5b:67:0f:1d:b7:c4: 30:9b:39:d4:91:47:6a:83:0f:a4:37:f3:d9:c2:9d: 74:69:e3:bb:30:6b:74:19:5e:3d:0e:f5:f1:90:8e: 7f:72:a6:66:90:c3:2f:ae:72:0c:b5:ea:68:0e:f5: 22:de:9a:06:ff:74:48:11:3b:a0:b5:46:14:07:74: 92:0f:d1:f1:1f:7f:15:bf:c5:2d:13:b3:0b:da:7a: 53:83:05:4a:59:38:d5:46:d4:69:df:79:90:d2:82: 20:2d:77:1c:9f:ff:65:47:f6:ea:65:e8:84:d6:ee: 7a:6d:b8:f8:67:e0:06:e2:fa:76:6a:45:fc:a3:73: 0c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D5:8B:5B:B0:21:3A:6D:7E:EF:1C:C1:EB:EB:1E:85:27:75:18:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/7d98dbe3-4cd5-3bcd-91c1-ade1013af44f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl X509v3 Authority Key Identifier: keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer sbgp-ipAddrBlock: critical IPv4: 209.173.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:7e:9b:5f:d2:a4:72:97:e6:eb:bd:48:03:4b:c8:6a:ab:64: 00:0b:52:59:d2:48:ee:e4:14:c8:ea:27:86:16:31:cf:26:b4: a3:3d:f6:ee:e0:ef:ed:15:42:0a:80:1b:c0:79:bb:b8:3c:7d: d5:a3:87:3b:ea:4e:dc:00:a2:ce:44:b3:65:b1:ae:6d:42:e7: 7f:60:5f:43:7e:03:62:21:89:65:90:97:76:79:63:ba:30:a0: cc:06:98:0e:5a:1c:be:da:95:0b:12:ea:42:a3:0e:57:7e:4e: 40:25:f1:f3:f9:8f:67:5c:28:77:c5:21:79:79:4c:11:d9:f5: ad:9f:f8:a2:ab:ca:61:50:e2:f8:79:75:41:4b:94:07:36:ed: a0:42:22:15:75:65:dd:5a:ca:fe:cb:05:4d:a8:29:b3:e7:01: eb:e6:19:4e:ce:5b:91:4c:e3:ab:d9:c8:43:b2:8c:c5:b1:db: da:97:ae:fe:6c:92:1b:fe:03:98:47:77:6c:96:99:b9:23:4b: 0d:b6:4b:c6:e5:9d:8e:57:f5:e4:1d:7d:4d:f8:5d:01:43:c5: 05:d3:be:01:6b:62:08:45:fd:c1:e1:17:7a:8c:60:a5:f6:9f: 94:63:a4:4b:1f:a0:65:a1:29:2a:3e:36:db:e8:31:77:ab:ab: 17:97:5e:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskls4cPFwL+eYKywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZmZjZWYtZDdkOC00YjU4LWI0ZjUtYmJlY2M2OTVi YWZmMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk Mjg3YjFkMmUtYzRkOC00NDkyLTljY2QtOTY3YzRhMjFlMmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3+8AULlxFuuAxDTf7z0hTtE5JuTlWyiGjv/ LSUGbEmiMeVSj6rb/8Tbnqg3E5/nOs+sqObTkGOvEkWb6mwi3DorWos0+9vSIwzu tJpiu09Fy9owrcX5iqcKfF8VTMqozkH9yS5V5VJoR1yxTYWCZ3XAXmyCDNB6cHLu 14huW9VbZw8dt8QwmznUkUdqgw+kN/PZwp10aeO7MGt0GV49DvXxkI5/cqZmkMMv rnIMtepoDvUi3poG/3RIETugtUYUB3SSD9HxH38Vv8UtE7ML2npTgwVKWTjVRtRp 33mQ0oIgLXccn/9lR/bqZeiE1u56bbj4Z+AG4vp2akX8o3MMrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLVi1uwITptfu8cwevrHoUndRhvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRm ZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVjYzY5NWJhZmYvN2Q5OGRiZTMtNGNkNS0z YmNkLTkxYzEtYWRlMTAxM2FmNDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZmZjZWYtZDdkOC00YjU4LWI0 ZjUtYmJlY2M2OTViYWZmLzQ1ZGZmY2VmLWQ3ZDgtNGI1OC1iNGY1LWJiZWNjNjk1 YmFmZi5jcmwwHwYDVR0jBBgwFoAU2Ian5EHiWu1c+gv6GSKHe+hhYv4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRmZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVj YzY5NWJhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0a0fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK1+m1/SpHKX5uu9SANLyGqrZAALUlnSSO7kFMjqJ4YWMc8mtKM99u7g 7+0VQgqAG8B5u7g8fdWjhzvqTtwAos5Es2Wxrm1C539gX0N+A2IhiWWQl3Z5Y7ow oMwGmA5aHL7alQsS6kKjDld+TkAl8fP5j2dcKHfFIXl5TBHZ9a2f+KKrymFQ4vh5 dUFLlAc27aBCIhV1Zd1ayv7LBU2oKbPnAevmGU7OW5FM46vZyEOyjMWx29qXrv5s khv+A5hHd2yWmbkjSw22S8blnY5X9eQdfU34XQFDxQXTvgFrYghF/cHhF3qMYKX2 n5RjpEsfoGWhKSo+NtvoMXerqxeXXrE= -----END CERTIFICATE-----Generated at Tue Sep 16 10:40:23 2025 by rpki-client