$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/1839d6ea-ba2f-3f03-89da-d50dd4ef08e1.roa File: 1839d6ea-ba2f-3f03-89da-d50dd4ef08e1.roa (raw, json) Hash identifier: ZvqVYK9J6lqIhFGv4YSfqDqP4YKHIc+qaWMj98SKN34= Subject key identifier: E3:2D:BC:C4:1C:42:95:7A:1E:B7:73:54:03:6C:91:C5:5A:43:3D:56 Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Certificate serial: 010D0C9F4328584BBB758D8C1A2EB5C7F1A9EB80 Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/1839d6ea-ba2f-3f03-89da-d50dd4ef08e1.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 16509 IP address blocks: 208.71.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:8d:8c:1a:2e:b5:c7:f1:a9:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=37f8d512-9628-4c80-b579-29b8b3523a84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e6:a5:e0:9e:bf:4e:65:4a:cb:66:7c:34:80: b8:2d:81:8c:3a:ca:c3:54:d0:23:2a:bc:4e:89:ee: bd:e3:08:cc:33:1d:3e:c9:5d:5a:9e:97:0c:00:34: d7:94:29:76:18:ba:c7:ef:64:6e:03:18:10:3e:fd: fd:0b:af:88:f8:de:6d:ae:f9:14:b1:d4:a4:e8:08: bc:29:b3:8a:17:26:22:b8:e4:a2:78:ab:41:9c:ce: 97:63:a9:e0:4d:e5:c5:db:97:2d:ed:08:63:4a:d6: f8:f1:74:21:1d:81:cd:9d:a9:8b:3e:17:07:23:c2: c8:80:33:32:94:67:06:65:e0:20:f1:b0:5f:de:12: 10:36:b7:bd:6c:dc:97:fa:69:24:ad:8d:93:f4:4b: cf:d9:a3:fb:e1:e8:3a:9c:09:90:23:4e:73:61:4a: ee:38:cb:3a:57:7e:65:ca:50:71:af:8a:c8:67:f3: 7f:e3:4c:cc:98:5f:32:49:36:c8:24:de:52:f8:1f: 0e:43:4a:29:6a:1b:dc:f4:ec:69:f9:ef:4f:9c:e3: c1:1e:f7:08:9d:af:cf:26:15:9d:ca:7c:21:69:90: 4e:1d:30:72:92:f7:c0:1a:fa:7a:48:e9:a0:db:cf: 0f:96:3f:99:ed:ce:6d:9c:a4:35:95:5d:a2:cc:47: 09:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2D:BC:C4:1C:42:95:7A:1E:B7:73:54:03:6C:91:C5:5A:43:3D:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/1839d6ea-ba2f-3f03-89da-d50dd4ef08e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl X509v3 Authority Key Identifier: keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer sbgp-ipAddrBlock: critical IPv4: 208.71.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:5b:ae:ca:5f:37:ae:f2:a0:57:d5:20:9b:ec:09:f4:01:d6: 71:7a:90:1c:11:bd:6b:77:9a:c9:83:a0:93:b5:51:75:42:2b: 0c:03:39:53:42:59:08:6b:60:51:a6:7b:c7:e3:a6:b6:b3:82: 08:fa:9c:db:ec:9f:ff:cc:5c:f4:c1:e8:d8:7c:94:07:d5:78: 15:f8:e9:6e:8a:12:6a:c6:f5:e4:60:99:10:e8:7c:25:04:c4: 44:0d:16:86:a4:99:6c:d8:7a:72:5c:b9:80:87:bb:98:28:9e: e7:3f:08:6c:d7:2f:c8:e1:95:59:1c:c9:97:da:ad:cf:d8:b6: 98:14:8d:55:49:3c:b5:42:13:82:98:04:af:b9:df:b5:c2:3a: c1:f4:e6:1a:23:24:81:45:b1:f7:08:b4:fe:2c:0f:89:93:02: b7:7b:74:b9:8f:8a:95:10:dd:de:43:b7:49:7b:46:bc:4c:10: f9:e9:64:04:a0:5a:72:f7:5c:3b:59:0e:e3:b6:75:1c:32:9e: 71:11:44:3a:e9:7d:83:bc:e5:b6:b4:d7:50:8e:f5:b9:66:97: de:67:39:cb:45:36:66:cf:22:2e:46:df:c0:bd:4d:5c:9e:7c: 3a:9f:d6:62:34:5d:3a:05:5f:53:13:ae:bd:29:28:a6:a0:33: fd:66:b3:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dY2MGi61x/Gp64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5YTFiYTQtZjAzMy00ZTliLTg5ZTEtOGRmMDczMzc1 YjE3MB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk MzdmOGQ1MTItOTYyOC00YzgwLWI1NzktMjliOGIzNTIzYTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeal4J6/TmVKy2Z8NIC4LYGMOsrDVNAjKrxO ie694wjMMx0+yV1anpcMADTXlCl2GLrH72RuAxgQPv39C6+I+N5trvkUsdSk6Ai8 KbOKFyYiuOSieKtBnM6XY6ngTeXF25ct7QhjStb48XQhHYHNnamLPhcHI8LIgDMy lGcGZeAg8bBf3hIQNre9bNyX+mkkrY2T9EvP2aP74eg6nAmQI05zYUruOMs6V35l ylBxr4rIZ/N/40zMmF8ySTbIJN5S+B8OQ0opahvc9Oxp+e9PnOPBHvcIna/PJhWd ynwhaZBOHTBykvfAGvp6SOmg288Plj+Z7c5tnKQ1lV2izEcJ3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMtvMQcQpV6HrdzVANskcVaQz1WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MDlh MWJhNC1mMDMzLTRlOWItODllMS04ZGYwNzMzNzViMTcvMTgzOWQ2ZWEtYmEyZi0z ZjAzLTg5ZGEtZDUwZGQ0ZWYwOGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTA5YTFiYTQtZjAzMy00ZTliLTg5 ZTEtOGRmMDczMzc1YjE3LzUwOWExYmE0LWYwMzMtNGU5Yi04OWUxLThkZjA3MzM3 NWIxNy5jcmwwHwYDVR0jBBgwFoAUfM1NY/lw+7+G/z74RQ5Pru6ZV4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MDlhMWJhNC1mMDMzLTRlOWItODllMS04ZGYw NzMzNzViMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Ef0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhbrspfN67yoFfVIJvsCfQB1nF6kBwRvWt3msmDoJO1UXVCKwwDOVNC WQhrYFGme8fjprazggj6nNvsn//MXPTB6Nh8lAfVeBX46W6KEmrG9eRgmRDofCUE xEQNFoakmWzYenJcuYCHu5gonuc/CGzXL8jhlVkcyZfarc/YtpgUjVVJPLVCE4KY BK+537XCOsH05hojJIFFsfcItP4sD4mTArd7dLmPipUQ3d5Dt0l7RrxMEPnpZASg WnL3XDtZDuO2dRwynnERRDrpfYO85ba011CO9blml95nOctFNmbPIi5G38C9TVye fDqf1mI0XToFX1MTrr0pKKagM/1msyo= -----END CERTIFICATE-----Generated at Wed Nov 5 01:10:48 2025 by rpki-client