$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d1f16f21-2123-35e0-9e87-9914f0b4d70d.roa File: d1f16f21-2123-35e0-9e87-9914f0b4d70d.roa (raw, json) Hash identifier: VhGbLxnM1yeItw9cvw+iFYDHejlxSNnF8uSv4/lIk0s= Subject key identifier: 2C:90:CD:C4:36:81:3F:23:9A:24:01:AB:EE:4B:64:2B:75:2F:94:E6 Certificate issuer: /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Certificate serial: 010D0C9F4328584B0B76BAC43C5FD48E93552248 Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d1f16f21-2123-35e0-9e87-9914f0b4d70d.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 23470 IP address blocks: 209.222.100.0/24 maxlen: 24 209.222.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:ba:c4:3c:5f:d4:8e:93:55:22:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=b96f3fd4-4660-4a0b-b51e-8636bfc113f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:01:73:1a:ec:a7:4f:45:3e:f0:df:ee:91:7f: 48:e3:63:18:ca:5f:ad:a3:98:a3:eb:ca:5e:01:9f: 79:3d:e3:e5:83:68:12:61:2e:0a:6e:35:70:9e:6f: 27:10:e8:80:44:98:e9:5d:62:fe:82:7b:8e:ed:9d: 68:34:ea:65:3f:6b:a6:49:c5:95:0c:47:bf:50:1d: 50:3b:44:40:f6:cb:33:6c:e1:d8:a1:8c:93:8d:ea: b3:ce:cd:db:e3:2c:1c:8f:c3:a5:87:be:a2:38:83: eb:77:60:f6:31:ae:f1:0a:61:b7:39:8f:5a:87:6c: 70:9d:e3:68:2f:0b:53:a2:20:b7:2a:57:e9:a1:80: e7:8f:bd:4c:ab:ec:d9:1d:55:ea:b8:3f:7a:75:78: 09:ac:13:f6:50:cc:5b:e8:57:e6:38:9e:ff:35:9b: 18:95:1a:44:d9:7c:dc:ec:bc:24:0b:f5:2f:9f:6d: 21:ad:b0:5d:7e:d1:0d:f2:b3:c4:dc:21:7c:eb:66: ae:2b:7a:02:73:a4:23:37:04:75:56:b2:84:cc:56: cd:55:86:9e:b6:bf:cd:12:b5:ee:2d:df:d7:e6:43: 13:47:87:f0:20:ff:4a:6c:18:1d:95:f1:ab:51:d7: 90:eb:5a:cd:57:a3:0f:0b:40:ef:2b:9a:f5:a9:93: 0a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:90:CD:C4:36:81:3F:23:9A:24:01:AB:EE:4B:64:2B:75:2F:94:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d1f16f21-2123-35e0-9e87-9914f0b4d70d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl X509v3 Authority Key Identifier: keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer sbgp-ipAddrBlock: critical IPv4: 209.222.100.0/24 209.222.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:af:d1:12:c4:b3:42:e8:12:62:a5:45:62:5d:1e:1a:23:bc: 7e:ae:6c:88:1f:a1:f0:b1:15:47:9f:94:69:d5:e3:9a:1b:dd: 21:7a:d0:87:73:30:84:be:b4:b1:1b:e8:12:66:b8:6d:b2:17: 03:8b:ce:1f:7a:23:1c:d1:27:ca:50:2a:7c:b5:d6:ae:8f:9a: a8:6f:fb:37:a0:2a:67:6e:83:a8:4f:8d:3f:85:da:86:7c:13: d7:1e:e6:a9:5b:a9:41:1b:3f:d4:fd:29:96:47:34:8c:27:d3: dc:d1:5d:ef:4e:47:03:0e:88:b3:99:1b:25:0d:93:fd:bb:61: 96:f5:44:9a:80:23:df:5e:fa:a2:89:37:2f:bb:a9:72:19:d4: 3b:32:58:d4:39:e9:80:f6:f7:39:a0:c2:00:f2:ab:ff:ab:04: 6f:52:c3:03:95:53:89:d1:ae:95:30:2a:7d:70:10:04:95:4c: 6a:72:d1:40:12:bd:97:da:12:c3:cc:91:94:eb:3d:43:83:2b: c7:cd:af:c9:be:9b:e1:98:8b:53:d6:48:fa:35:d2:64:a9:a8: f4:eb:b7:92:dc:b9:48:27:09:9b:34:d7:24:f9:05:e4:88:3d: 2f:e5:5b:ec:cd:24:84:f2:d5:b7:c3:4a:09:2e:d2:db:3c:e4: cb:a1:86:52 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsLdrrEPF/UjpNVIkgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM2OWIzMjEtNjliYy00MWM0LWE2ZTEtMzQ5MWRiZmMy NTQ0MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk Yjk2ZjNmZDQtNDY2MC00YTBiLWI1MWUtODYzNmJmYzExM2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQFzGuynT0U+8N/ukX9I42MYyl+to5ij68pe AZ95PePlg2gSYS4KbjVwnm8nEOiARJjpXWL+gnuO7Z1oNOplP2umScWVDEe/UB1Q O0RA9sszbOHYoYyTjeqzzs3b4ywcj8Olh76iOIPrd2D2Ma7xCmG3OY9ah2xwneNo LwtToiC3KlfpoYDnj71Mq+zZHVXquD96dXgJrBP2UMxb6FfmOJ7/NZsYlRpE2Xzc 7LwkC/Uvn20hrbBdftEN8rPE3CF862auK3oCc6QjNwR1VrKEzFbNVYaetr/NErXu Ld/X5kMTR4fwIP9KbBgdlfGrUdeQ61rNV6MPC0DvK5r1qZMKaQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCyQzcQ2gT8jmiQBq+5LZCt1L5TmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5 YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkxZGJmYzI1NDQvZDFmMTZmMjEtMjEyMy0z NWUwLTllODctOTkxNGYwYjRkNzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWM2OWIzMjEtNjliYy00MWM0LWE2 ZTEtMzQ5MWRiZmMyNTQ0LzljNjliMzIxLTY5YmMtNDFjNC1hNmUxLTM0OTFkYmZj MjU0NC5jcmwwHwYDVR0jBBgwFoAUHjmb1lU0mBF67zRaH+8vJwq9KawwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkx ZGJmYzI1NDQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA0d5kAwQA 0d5mMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAISv0RLEs0LoEmKlRWJdHhojvH6ubIgfofCxFUeflGnV45ob 3SF60IdzMIS+tLEb6BJmuG2yFwOLzh96IxzRJ8pQKny11q6Pmqhv+zegKmdug6hP jT+F2oZ8E9ce5qlbqUEbP9T9KZZHNIwn09zRXe9ORwMOiLOZGyUNk/27YZb1RJqA I99e+qKJNy+7qXIZ1DsyWNQ56YD29zmgwgDyq/+rBG9SwwOVU4nRrpUwKn1wEASV TGpy0UASvZfaEsPMkZTrPUODK8fNr8m+m+GYi1PWSPo10mSpqPTrt5LcuUgnCZs0 1yT5BeSIPS/lW+zNJITy1bfDSgku0ts85MuhhlI= -----END CERTIFICATE-----Generated at Wed Nov 5 17:52:15 2025 by rpki-client