$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/470a0d1c-0b52-3d81-807b-734f35cf00ea.roa File: 470a0d1c-0b52-3d81-807b-734f35cf00ea.roa (raw, json) Hash identifier: 0AQLcR8ws0O55wGz/iO7g7vnhunojTOWPjF3NDbcsCo= Subject key identifier: 0E:31:EB:3B:34:9D:E7:43:10:E3:CD:64:41:06:7A:6C:70:FB:F2:E2 Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Certificate serial: 010D0C9F4328584B0CDC0C018BD82DC3AE202D80 Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/470a0d1c-0b52-3d81-807b-734f35cf00ea.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 14618 IP address blocks: 208.71.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:0c:01:8b:d8:2d:c3:ae:20:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=72fdf3b1-0ee9-4cb5-af3c-cb3cdff35f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d1:1f:77:93:f0:0a:0e:f4:bb:93:70:1d:5b: 28:33:31:e8:16:ac:98:e8:1f:d2:95:8c:67:bb:55: 8b:b8:d1:b5:f1:41:14:76:99:20:b0:a1:51:1e:53: 49:44:2c:e6:ee:af:0c:e7:56:e0:46:b8:57:04:01: 73:b9:dc:03:73:50:7c:22:65:e1:9b:3a:e4:0d:7f: 2f:d7:65:2c:e8:48:60:f4:9a:8a:47:5b:90:59:d7: ff:56:5f:0b:93:53:95:a0:29:82:57:8d:12:17:d5: e8:07:2b:7c:fa:15:5c:a8:ba:58:12:49:de:75:f4: a3:f8:8f:83:46:99:d1:be:17:26:e1:92:59:ca:8e: 07:fc:24:1e:d1:da:00:0c:df:67:8c:30:57:9b:e6: 78:c6:27:71:0a:3a:43:b3:c1:2f:ec:59:59:a0:6c: 4e:20:5a:92:1c:df:5a:30:7a:aa:4e:83:cc:21:6f: 90:3d:31:4b:5c:75:93:a2:ae:ed:58:80:14:50:8c: 55:6d:e6:68:3c:d3:0f:c5:0f:fd:72:b7:d4:11:62: f5:b9:90:18:44:9f:e2:50:74:c6:d9:4c:36:02:77: 6c:7a:cb:04:73:c9:95:48:8e:3f:0a:5e:9e:11:c5: f1:04:44:4f:b9:46:bf:22:4b:de:57:ac:b6:0b:33: 8f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:31:EB:3B:34:9D:E7:43:10:E3:CD:64:41:06:7A:6C:70:FB:F2:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/470a0d1c-0b52-3d81-807b-734f35cf00ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl X509v3 Authority Key Identifier: keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer sbgp-ipAddrBlock: critical IPv4: 208.71.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:cc:50:ed:87:b1:dd:3b:8d:a1:56:d1:3e:78:f4:6e:e9:bf: 28:82:27:74:7a:61:40:07:39:e1:c8:50:e8:ad:7f:ae:6a:51: 6a:35:43:8e:c8:0f:20:e8:ec:96:08:eb:e3:86:e9:69:36:23: 52:4c:78:c1:09:67:7f:26:fa:06:da:79:5d:0b:80:54:8e:d9: 8d:9f:eb:84:e0:55:ee:40:9a:1e:45:66:b0:3f:25:b4:1e:19: a7:03:f3:1f:35:27:28:aa:13:0b:5c:11:ff:c3:52:48:d6:90: 2a:89:bf:0e:10:72:b9:fd:a8:90:ed:2a:4d:90:3e:8e:42:50: 0a:19:b3:5d:ab:91:38:66:30:d2:93:c6:93:21:67:00:aa:c5: 6f:c5:46:34:fc:28:d3:f0:0b:a6:93:f2:57:24:3e:72:e4:22: d4:43:6a:f8:3d:63:69:9e:5e:3d:9e:98:b0:28:01:57:9e:1d: 54:52:5a:6c:e1:67:aa:72:0f:08:36:97:a3:5d:2d:5d:6c:c3: a1:0f:ec:a5:90:f3:90:ee:9d:d2:12:8f:b3:60:ff:e4:03:dc: f5:d8:ac:76:7e:18:f7:c4:91:f8:7a:9c:56:ab:9e:29:e7:74: 80:24:d8:c5:75:82:a2:28:dc:e3:f5:a0:8c:68:08:b3:33:83: c0:e7:1f:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3AwBi9gtw64gLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5YTFiYTQtZjAzMy00ZTliLTg5ZTEtOGRmMDczMzc1 YjE3MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk NzJmZGYzYjEtMGVlOS00Y2I1LWFmM2MtY2IzY2RmZjM1Zjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdEfd5PwCg70u5NwHVsoMzHoFqyY6B/SlYxn u1WLuNG18UEUdpkgsKFRHlNJRCzm7q8M51bgRrhXBAFzudwDc1B8ImXhmzrkDX8v 12Us6Ehg9JqKR1uQWdf/Vl8Lk1OVoCmCV40SF9XoByt8+hVcqLpYEknedfSj+I+D RpnRvhcm4ZJZyo4H/CQe0doADN9njDBXm+Z4xidxCjpDs8Ev7FlZoGxOIFqSHN9a MHqqToPMIW+QPTFLXHWToq7tWIAUUIxVbeZoPNMPxQ/9crfUEWL1uZAYRJ/iUHTG 2Uw2AndsessEc8mVSI4/Cl6eEcXxBERPuUa/IkveV6y2CzOPewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4x6zs0nedDEOPNZEEGemxw+/LiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MDlh MWJhNC1mMDMzLTRlOWItODllMS04ZGYwNzMzNzViMTcvNDcwYTBkMWMtMGI1Mi0z ZDgxLTgwN2ItNzM0ZjM1Y2YwMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTA5YTFiYTQtZjAzMy00ZTliLTg5 ZTEtOGRmMDczMzc1YjE3LzUwOWExYmE0LWYwMzMtNGU5Yi04OWUxLThkZjA3MzM3 NWIxNy5jcmwwHwYDVR0jBBgwFoAUfM1NY/lw+7+G/z74RQ5Pru6ZV4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MDlhMWJhNC1mMDMzLTRlOWItODllMS04ZGYw NzMzNzViMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Ef1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3MUO2Hsd07jaFW0T549G7pvyiCJ3R6YUAHOeHIUOitf65qUWo1Q47I DyDo7JYI6+OG6Wk2I1JMeMEJZ38m+gbaeV0LgFSO2Y2f64TgVe5Amh5FZrA/JbQe GacD8x81JyiqEwtcEf/DUkjWkCqJvw4Qcrn9qJDtKk2QPo5CUAoZs12rkThmMNKT xpMhZwCqxW/FRjT8KNPwC6aT8lckPnLkItRDavg9Y2meXj2emLAoAVeeHVRSWmzh Z6pyDwg2l6NdLV1sw6EP7KWQ85DundISj7Ng/+QD3PXYrHZ+GPfEkfh6nFarninn dIAk2MV1gqIo3OP1oIxoCLMzg8DnH7I= -----END CERTIFICATE-----Generated at Wed Nov 5 01:09:58 2025 by rpki-client