$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/541632ed-4124-362f-8edd-c6a63bea2883.roa File: 541632ed-4124-362f-8edd-c6a63bea2883.roa (raw, json) Hash identifier: 6WqWUb2ns9GDknvU4qQIjltOXwM3/CVlCLXio0XF1L4= Subject key identifier: BC:36:10:E4:1E:99:F2:6D:91:FD:6C:72:C5:30:D3:F1:59:8B:E0:D7 Certificate issuer: /CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae Certificate serial: 010D0C9F4328584B25FC314FABCFA8126D8BE980 Authority key identifier: 0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/541632ed-4124-362f-8edd-c6a63bea2883.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 46841 IP address blocks: 209.222.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:31:4f:ab:cf:a8:12:6d:8b:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=328a4927-dc29-453a-9d0a-4d0b9c0b7313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:56:21:a9:86:9c:53:05:b2:3e:a4:dc:7f:af: 0f:8f:a3:ea:c2:93:e9:f1:db:7d:17:33:c5:1c:93: 20:39:68:45:d9:d6:f5:71:76:e5:53:51:49:22:18: 08:df:ca:70:6e:eb:56:ed:46:69:ca:0b:87:3f:b6: 94:dd:46:43:28:a4:44:36:2d:ef:78:5c:b2:c6:90: a4:55:27:9f:18:a4:ce:82:3f:39:09:73:5d:85:4d: 0a:72:81:b5:e3:af:7e:23:d9:b7:e1:92:8b:24:5c: e2:fc:f0:1c:af:83:c6:b9:42:e1:a2:41:43:22:a1: 59:b6:68:c0:74:60:40:4b:a5:7f:e3:f3:ca:6a:21: 96:fc:96:6c:8c:e7:01:fb:8f:46:e2:74:10:18:8c: 21:ad:a6:6d:38:15:c3:b6:46:a6:52:bb:ea:5e:66: 0d:1a:a0:56:a7:49:99:ed:ba:be:ba:ef:c2:32:45: 66:b8:f5:c9:c2:07:03:63:67:b7:3d:f1:3f:a9:a0: ea:2b:ef:75:55:4f:e7:5d:3f:ca:36:7e:50:6a:f1: 44:de:86:09:9a:7f:ec:8f:3d:32:6c:e0:0c:b0:c4: 2c:ea:da:4f:b2:e9:55:94:81:d4:4e:0d:74:58:76: 3e:20:c3:ab:f3:7b:df:c6:f2:11:23:b8:46:5c:ed: 32:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:36:10:E4:1E:99:F2:6D:91:FD:6C:72:C5:30:D3:F1:59:8B:E0:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/541632ed-4124-362f-8edd-c6a63bea2883.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl X509v3 Authority Key Identifier: keyid:0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer sbgp-ipAddrBlock: critical IPv4: 209.222.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:36:e8:74:4b:cb:03:6b:d7:89:73:0c:01:fc:32:8c:ba:31: 6e:e9:3e:9a:d7:23:8a:c4:48:c8:f9:81:7d:c3:7c:68:f2:b2: ba:b9:4f:14:bf:27:32:09:57:4f:24:87:0c:54:9d:99:b2:59: 88:68:a1:06:85:d2:7f:50:da:95:5f:1e:25:a7:68:12:d3:63: 8d:17:18:bd:8a:ba:e7:20:0b:ca:55:fd:44:12:44:43:36:49: 40:5f:cf:ca:d2:8e:e5:0b:21:61:dc:29:a0:8a:97:f6:42:d5: ff:01:53:4c:bd:d8:a9:9d:e4:19:0b:8a:af:9e:3b:1b:4f:88: e3:56:a5:e5:29:0a:d3:c9:8e:73:f3:e8:8e:97:a7:79:e3:c1: 19:2d:b2:e8:32:3f:af:ad:97:77:b5:a7:88:92:60:69:50:26: 97:99:16:0b:21:2b:b7:f3:11:b3:d5:75:87:7f:2d:b7:af:d8: b8:ae:7a:ae:9d:3d:09:1b:ca:2b:53:8e:e0:d2:b0:05:92:59: a1:40:04:1f:07:77:c5:49:d4:e1:f3:ab:35:56:fa:0a:6a:5b: 0c:44:10:cd:f8:2d:7b:f0:39:8a:da:b5:e7:ef:3d:a8:e1:0a: 50:29:9e:82:41:a3:5b:25:a9:76:7b:26:a6:20:82:54:77:13: 72:6d:a4:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/DFPq8+oEm2L6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjFhYzgzYjUtNGNmZC00YjM4LWIxYmItNDUwMDBlZWJh NmFlMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk MzI4YTQ5MjctZGMyOS00NTNhLTlkMGEtNGQwYjljMGI3MzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlYhqYacUwWyPqTcf68Pj6PqwpPp8dt9FzPF HJMgOWhF2db1cXblU1FJIhgI38pwbutW7UZpyguHP7aU3UZDKKRENi3veFyyxpCk VSefGKTOgj85CXNdhU0KcoG1469+I9m34ZKLJFzi/PAcr4PGuULhokFDIqFZtmjA dGBAS6V/4/PKaiGW/JZsjOcB+49G4nQQGIwhraZtOBXDtkamUrvqXmYNGqBWp0mZ 7bq+uu/CMkVmuPXJwgcDY2e3PfE/qaDqK+91VU/nXT/KNn5QavFE3oYJmn/sjz0y bOAMsMQs6tpPsulVlIHUTg10WHY+IMOr83vfxvIRI7hGXO0y6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLw2EOQemfJtkf1scsUw0/FZi+DXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFj ODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAwMGVlYmE2YWUvNTQxNjMyZWQtNDEyNC0z NjJmLThlZGQtYzZhNjNiZWEyODgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjFhYzgzYjUtNGNmZC00YjM4LWIx YmItNDUwMDBlZWJhNmFlL2YxYWM4M2I1LTRjZmQtNGIzOC1iMWJiLTQ1MDAwZWVi YTZhZS5jcmwwHwYDVR0jBBgwFoAUCrA0V1FPrMSLEXsWcz7MjvXGb0YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFjODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAw MGVlYmE2YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0d7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGU26HRLywNr14lzDAH8Moy6MW7pPprXI4rESMj5gX3DfGjysrq5TxS/ JzIJV08khwxUnZmyWYhooQaF0n9Q2pVfHiWnaBLTY40XGL2KuucgC8pV/UQSREM2 SUBfz8rSjuULIWHcKaCKl/ZC1f8BU0y92Kmd5BkLiq+eOxtPiONWpeUpCtPJjnPz 6I6Xp3njwRktsugyP6+tl3e1p4iSYGlQJpeZFgshK7fzEbPVdYd/Lbev2Liueq6d PQkbyitTjuDSsAWSWaFABB8Hd8VJ1OHzqzVW+gpqWwxEEM34LXvwOYratefvPajh ClApnoJBo1slqXZ7JqYgglR3E3JtpOU= -----END CERTIFICATE-----Generated at Wed Nov 5 01:58:37 2025 by rpki-client