$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca7e65bb-0a6e-3599-a418-0e6f0cb92519.roa File: ca7e65bb-0a6e-3599-a418-0e6f0cb92519.roa (raw, json) Hash identifier: o5cL4HDXAeDPGJdO8ovtBg7WOvO4w9UlmbnjPBVgjvs= Subject key identifier: B1:DE:F5:95:CA:0B:AE:FB:2B:79:FC:E5:5B:F8:7F:34:6A:0E:92:60 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB98CF3D7CCBF5AB7F46280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca7e65bb-0a6e-3599-a418-0e6f0cb92519.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 7015 IP address blocks: 209.23.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:8c:f3:d7:cc:bf:5a:b7:f4:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=970ab71d-b25b-4f15-853f-31652604a343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:45:ea:d6:6d:31:fc:cc:59:74:ca:aa:ee:53: 3c:38:65:8c:48:65:73:58:ca:73:bd:e6:32:02:c4: 1e:50:dc:f2:76:ad:85:b8:f6:3b:88:d9:80:48:1a: a5:fe:f1:78:98:d7:60:cc:35:b7:ba:ed:12:39:7e: 14:eb:93:8e:f6:79:c3:97:c8:07:26:0b:42:c9:86: e3:a1:4b:15:1b:68:52:4e:89:aa:02:e9:45:be:df: 56:ce:4e:30:ce:ea:a3:a9:b3:ad:8e:dc:c8:df:ff: 14:28:86:99:42:dc:be:44:57:6a:0e:d4:cf:b4:17: 6e:5e:ba:01:be:11:7e:8c:65:e3:62:47:74:3c:40: 40:4a:89:97:e0:47:2e:ac:6c:89:36:dd:6a:cf:91: ef:48:71:98:f4:bc:e8:53:ab:83:43:bd:8f:8d:2c: 97:e4:95:2e:35:33:40:4d:2f:df:c1:1a:88:74:a8: bb:fa:ab:fb:8f:8a:4b:55:1b:44:e5:88:35:86:3e: a2:7a:88:22:95:19:90:2d:dc:6d:08:87:d3:3d:a3: d4:24:b4:fc:f4:74:5f:e1:7b:e1:00:a0:57:65:09: bb:f4:fb:1f:a1:d8:5e:61:a3:c1:8f:1f:d4:67:47: 3c:e9:e0:59:00:6d:69:80:c9:d7:dd:5b:a6:7e:04: f2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:DE:F5:95:CA:0B:AE:FB:2B:79:FC:E5:5B:F8:7F:34:6A:0E:92:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca7e65bb-0a6e-3599-a418-0e6f0cb92519.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 209.23.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:93:b0:a6:69:99:ef:af:9b:dc:22:da:81:ff:0d:e5:a6:40: c4:d0:de:36:a4:a0:d1:f7:48:ad:c2:f2:ec:e9:af:56:7c:3d: 7a:fe:02:19:4b:70:f6:1c:83:e9:38:ad:36:ba:06:dd:c1:98: 34:eb:82:88:ac:0c:98:b2:da:7a:88:4f:37:78:e8:9b:21:52: cc:1f:19:62:8d:5c:d1:94:9b:6f:b9:49:9f:7e:05:85:a8:6b: 16:ca:f3:78:98:45:82:f5:6a:65:88:ca:ff:2a:3d:d7:a4:27: aa:2a:14:ac:27:23:60:97:b8:f0:9e:7b:83:83:92:cd:50:42: 1d:7e:76:68:f4:a2:1a:ec:60:27:19:98:6f:54:35:36:d2:56: 3a:be:c0:c5:d4:b6:2d:85:18:7e:b5:cd:ec:5d:46:88:e4:86: 02:e9:f7:4e:db:73:2d:76:60:8e:74:eb:86:2d:21:47:93:e8: 2b:1c:a7:81:d0:0b:71:16:cd:63:fa:ab:b9:59:e9:91:c5:e3: 44:8d:75:48:cf:74:d0:7f:a9:ea:ad:fd:24:f4:8a:34:a4:0e: 88:60:fb:f5:0a:34:75:8f:de:93:d8:fb:4b:8a:39:53:5d:59: 14:03:4f:8b:54:f6:eb:d4:79:ff:97:3f:ca:77:53:c6:bf:51: 75:0b:d4:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uYzz18y/Wrf0YoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OTcwYWI3MWQtYjI1Yi00ZjE1LTg1M2YtMzE2NTI2MDRhMzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUXq1m0x/MxZdMqq7lM8OGWMSGVzWMpzveYy AsQeUNzydq2FuPY7iNmASBql/vF4mNdgzDW3uu0SOX4U65OO9nnDl8gHJgtCyYbj oUsVG2hSTomqAulFvt9Wzk4wzuqjqbOtjtzI3/8UKIaZQty+RFdqDtTPtBduXroB vhF+jGXjYkd0PEBASomX4EcurGyJNt1qz5HvSHGY9LzoU6uDQ72PjSyX5JUuNTNA TS/fwRqIdKi7+qv7j4pLVRtE5Yg1hj6ieogilRmQLdxtCIfTPaPUJLT89HRf4Xvh AKBXZQm79PsfodheYaPBjx/UZ0c86eBZAG1pgMnX3VumfgTylQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHe9ZXKC677K3n85Vv4fzRqDpJgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2E3ZTY1YmItMGE2ZS0z NTk5LWE0MTgtMGU2ZjBjYjkyNTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Rf7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmTsKZpme+vm9wi2oH/DeWmQMTQ3jakoNH3SK3C8uzpr1Z8PXr+AhlL cPYcg+k4rTa6Bt3BmDTrgoisDJiy2nqITzd46JshUswfGWKNXNGUm2+5SZ9+BYWo axbK83iYRYL1amWIyv8qPdekJ6oqFKwnI2CXuPCee4ODks1QQh1+dmj0ohrsYCcZ mG9UNTbSVjq+wMXUti2FGH61zexdRojkhgLp907bcy12YI5064YtIUeT6Cscp4HQ C3EWzWP6q7lZ6ZHF40SNdUjPdNB/qeqt/ST0ijSkDohg+/UKNHWP3pPY+0uKOVNd WRQDT4tU9uvUef+XP8p3U8a/UXUL1Ls= -----END CERTIFICATE-----Generated at Wed Nov 5 03:44:02 2025 by rpki-client