$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0/b111c894-cd73-3500-9cee-b79cec172482.roa File: b111c894-cd73-3500-9cee-b79cec172482.roa (raw, json) Hash identifier: kgCkdl0RcDnY1COuJdLQJiAqPvW6YdrFb3Yt2DH+QG4= Subject key identifier: 87:19:06:4B:E7:6D:6E:C8:3C:09:D8:7E:78:19:E2:A9:B9:5B:81:2E Certificate issuer: /CN=b450e5ef-41c2-4834-b6b3-6d1a1efe28f0 Certificate serial: 010D0C9F4328584BA39D28FAC17B7097507D75E0 Authority key identifier: 44:70:52:90:13:82:B9:35:9C:3D:3F:EF:73:C2:83:91:9B:95:22:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0/b111c894-cd73-3500-9cee-b79cec172482.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 198949 IP address blocks: 209.222.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:28:fa:c1:7b:70:97:50:7d:75:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b450e5ef-41c2-4834-b6b3-6d1a1efe28f0 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=6fd12eca-d3a9-49fc-811d-6c03e543889c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:56:98:c4:51:d2:e7:d3:97:d8:3a:e8:af:ef: a9:37:b7:bc:cd:dd:08:6b:e1:df:ff:0e:a6:7e:86: 3e:80:7e:73:2f:c6:25:06:72:8d:91:a9:54:4c:2d: 5f:a8:15:03:b3:b1:21:67:bd:50:99:f3:8f:e5:16: 97:91:19:76:08:66:8b:1d:9f:b6:1a:12:c3:55:2e: d9:8f:a0:96:26:53:ad:91:bb:0e:a2:7f:e6:bb:d4: c5:da:76:dc:d3:41:01:c3:41:6e:91:ed:78:bd:8c: 01:ee:ee:ee:43:95:d4:b2:9b:77:f7:10:68:ed:29: 44:23:01:18:9b:6e:6e:6f:1c:d1:f7:7e:72:20:87: f9:2e:6e:1f:ba:58:a3:09:38:52:ee:2d:3e:78:19: e1:5f:c6:b8:4b:71:11:0a:8e:1f:c7:19:f0:bb:9f: 77:c7:c8:a4:75:8d:15:ba:1f:d8:cd:ba:f5:ec:af: d5:86:fb:f1:15:8c:ee:be:71:1e:82:fc:61:d7:ec: 43:6d:be:9b:c5:11:ec:5a:40:43:d6:91:c2:d0:da: 5c:bb:28:dc:28:97:6f:4e:b4:82:5a:a3:f4:40:5d: 83:6c:c0:28:13:85:e9:91:b5:5b:da:96:f6:4d:c9: e2:0c:5d:dc:a6:c1:f9:b6:93:22:be:e6:b6:8b:99: ea:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:19:06:4B:E7:6D:6E:C8:3C:09:D8:7E:78:19:E2:A9:B9:5B:81:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0/b111c894-cd73-3500-9cee-b79cec172482.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0.crl X509v3 Authority Key Identifier: keyid:44:70:52:90:13:82:B9:35:9C:3D:3F:EF:73:C2:83:91:9B:95:22:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0.cer sbgp-ipAddrBlock: critical IPv4: 209.222.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:8f:ce:99:1c:ed:12:7d:84:e9:83:6a:d0:f3:df:f4:93:76: fd:54:26:2d:cd:36:72:62:d5:47:65:15:1e:58:bc:4b:ae:31: f7:ef:62:34:28:4a:a1:17:74:cb:e2:a7:e4:5c:1a:18:ba:f7: c3:e3:2b:46:a7:dc:36:ac:ef:5b:80:5f:d0:d1:59:e7:03:fa: c3:21:5a:df:87:90:4c:85:6c:1d:92:8e:9c:37:62:57:1e:48: 43:2c:2f:87:dc:3c:3c:33:09:55:f3:71:1d:7f:1c:f5:c9:8f: 20:9e:14:da:95:34:30:6f:ef:56:10:58:f0:f9:81:a9:5c:a4: 03:a0:ee:c2:d8:3c:fa:f1:26:59:6e:19:9f:8f:0e:89:28:ff: be:fe:3b:56:02:d7:46:fa:e1:15:55:d9:31:60:0f:15:80:5b: 2b:04:94:f9:c3:07:c4:f4:d8:54:17:8f:b7:c8:2d:0a:7e:8d: ee:82:05:5a:4a:16:5c:42:da:82:b1:fc:fc:e3:d8:ae:2c:60: 5d:36:e1:ed:7a:17:8c:b8:76:8b:0b:68:ed:82:dd:77:30:cf: 1f:89:ec:2b:4e:49:1a:a1:35:2e:b1:98:28:84:a5:69:8c:d4: 3b:3a:33:4e:39:67:80:e9:d2:83:08:c9:38:c0:db:3d:da:71: 68:95:fc:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSj6wXtwl1B9deAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQ1MGU1ZWYtNDFjMi00ODM0LWI2YjMtNmQxYTFlZmUy OGYwMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NmZkMTJlY2EtZDNhOS00OWZjLTgxMWQtNmMwM2U1NDM4ODljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1aYxFHS59OX2Dror++pN7e8zd0Ia+Hf/w6m foY+gH5zL8YlBnKNkalUTC1fqBUDs7EhZ71QmfOP5RaXkRl2CGaLHZ+2GhLDVS7Z j6CWJlOtkbsOon/mu9TF2nbc00EBw0Fuke14vYwB7u7uQ5XUspt39xBo7SlEIwEY m25ubxzR935yIIf5Lm4fulijCThS7i0+eBnhX8a4S3ERCo4fxxnwu593x8ikdY0V uh/Yzbr17K/VhvvxFYzuvnEegvxh1+xDbb6bxRHsWkBD1pHC0NpcuyjcKJdvTrSC WqP0QF2DbMAoE4XpkbVb2pb2TcniDF3cpsH5tpMivua2i5nqdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcZBkvnbW7IPAnYfngZ4qm5W4EuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNDUw ZTVlZi00MWMyLTQ4MzQtYjZiMy02ZDFhMWVmZTI4ZjAvYjExMWM4OTQtY2Q3My0z NTAwLTljZWUtYjc5Y2VjMTcyNDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjQ1MGU1ZWYtNDFjMi00ODM0LWI2 YjMtNmQxYTFlZmUyOGYwL2I0NTBlNWVmLTQxYzItNDgzNC1iNmIzLTZkMWExZWZl MjhmMC5jcmwwHwYDVR0jBBgwFoAURHBSkBOCuTWcPT/vc8KDkZuVIr0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNDUwZTVlZi00MWMyLTQ4MzQtYjZiMy02ZDFh MWVmZTI4ZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0d7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqPzpkc7RJ9hOmDatDz3/STdv1UJi3NNnJi1UdlFR5YvEuuMffvYjQo SqEXdMvip+RcGhi698PjK0an3Das71uAX9DRWecD+sMhWt+HkEyFbB2Sjpw3Ylce SEMsL4fcPDwzCVXzcR1/HPXJjyCeFNqVNDBv71YQWPD5galcpAOg7sLYPPrxJllu GZ+PDoko/77+O1YC10b64RVV2TFgDxWAWysElPnDB8T02FQXj7fILQp+je6CBVpK FlxC2oKx/Pzj2K4sYF024e16F4y4dosLaO2C3Xcwzx+J7CtOSRqhNS6xmCiEpWmM 1Ds6M045Z4Dp0oMIyTjA2z3acWiV/Bw= -----END CERTIFICATE-----Generated at Mon Nov 3 22:11:21 2025 by rpki-client