$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/84d571f2-66e1-3f12-9230-063e7c81b63a.roa File: 84d571f2-66e1-3f12-9230-063e7c81b63a.roa (raw, json) Hash identifier: T+M/OhM3BZ65creq0SGm9tnQ9Ej1nyYnJO9SKfEKqm4= Subject key identifier: 17:B6:9B:6C:35:E1:21:D6:04:2C:DE:55:2B:9C:3D:70:2E:F8:B7:19 Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F4328584B970CE353C0B29EB8C4194100 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/84d571f2-66e1-3f12-9230-063e7c81b63a.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 12129 IP address blocks: 209.124.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:e3:53:c0:b2:9e:b8:c4:19:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=bd2ef593-8104-42e7-b75d-59475b85cd90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:97:37:78:5d:02:0b:6d:c9:1d:12:88:a9:a7: 29:ca:c9:0a:fd:f2:50:3c:b0:11:2b:87:2c:e2:f8: 4e:9b:b7:d5:5f:3f:db:79:b2:e3:18:bf:ee:7a:a9: 6f:bc:f8:32:cf:9f:c0:df:66:71:6c:cd:6c:f6:db: bc:a8:cd:97:b5:dd:fb:ec:74:50:bb:dd:23:47:a5: 31:be:57:b9:84:f6:05:33:5f:9a:5c:4c:c1:0c:ae: 31:f0:a1:a8:50:fc:9d:db:fa:8c:e5:bc:9c:52:34: ba:ca:3a:7b:35:ec:38:88:a3:14:b4:b6:c1:08:ff: b2:51:29:6b:78:d7:11:c7:29:91:2a:6c:5b:d6:73: cb:d5:1b:fd:bb:1e:a4:06:1e:79:cb:67:9d:54:aa: 4f:5d:02:52:e2:66:1d:0b:41:33:70:48:c4:36:ff: 17:4d:9d:15:d0:2f:8b:7e:8b:c7:de:32:43:1d:91: 32:45:e4:51:a4:ac:b7:ac:99:06:2a:09:6c:0f:73: 6e:4b:4d:5c:0f:a9:9a:fa:d0:23:d9:5f:d8:f3:04: ae:a7:69:4e:97:86:2c:e8:90:7e:6f:61:31:eb:c4: a4:19:d1:06:09:e2:28:f9:c2:7e:13:e9:11:ba:36: b6:fb:67:97:61:40:1a:92:2d:d3:81:fd:7b:e2:8b: a8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B6:9B:6C:35:E1:21:D6:04:2C:DE:55:2B:9C:3D:70:2E:F8:B7:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/84d571f2-66e1-3f12-9230-063e7c81b63a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 209.124.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:cd:19:ca:d2:be:71:a9:eb:98:9f:45:0f:da:e8:f8:eb:ff: 16:86:89:71:37:c6:42:2e:40:fb:fc:f6:1d:73:8a:e0:38:22: ff:76:d3:d5:23:09:e3:cd:84:d4:94:51:20:a6:61:9d:01:b6: 6a:28:95:52:23:79:e5:d7:3d:e6:2d:f2:7c:ac:ca:2f:dc:c1: d1:3d:57:3d:34:9e:c4:df:fc:4f:43:48:52:18:c0:fe:70:ef: de:93:32:31:2b:57:1a:06:f9:3b:e4:2f:68:b5:81:b6:f7:d1: 4b:f0:7b:ed:3d:c7:66:7c:2a:e3:e6:86:9b:78:f8:b6:fb:28: f2:b3:90:1f:6d:82:c8:96:28:45:3f:b7:79:26:5a:f5:d1:cf: 70:52:90:e2:68:bc:88:de:43:da:15:3a:2b:e2:e3:81:c4:21: 02:82:41:90:9c:86:af:61:05:9a:c6:f7:ec:7d:6e:0c:48:90: 4b:d5:10:42:b8:ab:69:c0:ac:30:6a:c0:bd:9b:7b:b1:6a:43: b9:59:3d:4b:26:9c:6a:a2:fb:95:96:32:42:62:26:aa:21:fc: 83:2a:f6:a7:18:58:35:06:b6:61:39:c9:ee:3e:02:b8:88:c2: 7d:87:0d:94:98:89:06:90:19:4b:12:ed:d6:c3:9f:f0:12:1a: 66:2a:11:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDONTwLKeuMQZQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk YmQyZWY1OTMtODEwNC00MmU3LWI3NWQtNTk0NzViODVjZDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZc3eF0CC23JHRKIqacpyskK/fJQPLARK4cs 4vhOm7fVXz/bebLjGL/ueqlvvPgyz5/A32ZxbM1s9tu8qM2Xtd377HRQu90jR6Ux vle5hPYFM1+aXEzBDK4x8KGoUPyd2/qM5bycUjS6yjp7New4iKMUtLbBCP+yUSlr eNcRxymRKmxb1nPL1Rv9ux6kBh55y2edVKpPXQJS4mYdC0EzcEjENv8XTZ0V0C+L fovH3jJDHZEyReRRpKy3rJkGKglsD3NuS01cD6ma+tAj2V/Y8wSup2lOl4Ys6JB+ b2Ex68SkGdEGCeIo+cJ+E+kRuja2+2eXYUAaki3Tgf174ouoowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBe2m2w14SHWBCzeVSucPXAu+LcZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvODRkNTcxZjItNjZlMS0z ZjEyLTkyMzAtMDYzZTdjODFiNjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0XwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTNGcrSvnGp65ifRQ/a6Pjr/xaGiXE3xkIuQPv89h1ziuA4Iv9209Uj CePNhNSUUSCmYZ0BtmoolVIjeeXXPeYt8nysyi/cwdE9Vz00nsTf/E9DSFIYwP5w 796TMjErVxoG+TvkL2i1gbb30Uvwe+09x2Z8KuPmhpt4+Lb7KPKzkB9tgsiWKEU/ t3kmWvXRz3BSkOJovIjeQ9oVOivi44HEIQKCQZCchq9hBZrG9+x9bgxIkEvVEEK4 q2nArDBqwL2be7FqQ7lZPUsmnGqi+5WWMkJiJqoh/IMq9qcYWDUGtmE5ye4+AriI wn2HDZSYiQaQGUsS7dbDn/ASGmYqETw= -----END CERTIFICATE-----Generated at Thu Oct 30 22:33:58 2025 by rpki-client