$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/cb4b4823-4600-35bb-b18c-2db9d5fed6b7.roa File: cb4b4823-4600-35bb-b18c-2db9d5fed6b7.roa (raw, json) Hash identifier: 8tNb1zNzyldUQ4VLfs0IHUdb0x7QWuN4XjvlWeUXJ/g= Subject key identifier: 23:CE:7F:A3:A0:5D:AE:68:3A:B7:17:84:45:B6:17:6E:42:02:53:DF Certificate issuer: /CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62 Certificate serial: 010D0C9F4328584BA237941C692B354EB4D0CC80 Authority key identifier: C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/cb4b4823-4600-35bb-b18c-2db9d5fed6b7.roa Signing time: Sat 25 Oct 2025 01:00:31 +0000 ROA not before: Sat 25 Oct 2025 01:00:31 +0000 ROA not after: Fri 23 Jan 2026 02:00:31 +0000 asID: 23243 IP address blocks: 209.124.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a2:37:94:1c:69:2b:35:4e:b4:d0:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62 Validity Not Before: Oct 25 01:00:31 2025 GMT Not After : Jan 23 02:00:31 2026 GMT Subject: CN=56b0140d-6c5b-4a5b-ad70-f0f5f8e164af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cc:90:51:01:84:96:47:1c:83:4f:1a:7f:8d: 88:ac:55:16:d4:86:b2:a8:bb:b3:b7:fe:68:26:4d: b0:0a:b4:a6:60:03:2a:0f:21:a2:eb:69:1c:b6:a5: 13:af:62:ca:82:b0:80:e6:97:75:f0:9e:17:89:a1: b3:5d:23:ad:71:3d:64:1d:a2:1f:39:fc:ab:fd:f2: ca:02:da:ca:11:41:df:dd:fe:5d:e9:e6:29:6f:ba: d7:22:46:c5:e1:61:f8:fa:0c:c8:e2:14:8c:36:68: b1:8d:7e:eb:1a:31:8a:46:dc:7b:f9:59:71:07:bd: 1d:85:21:38:8b:5d:b7:e4:38:bb:2b:2a:44:48:24: d2:4a:9e:bd:8d:9d:ae:e8:12:03:ef:26:2f:7e:3a: f1:f6:f2:15:7b:1f:d6:f1:0a:ac:2f:8e:1a:e7:16: 46:8e:5d:82:ff:8e:eb:43:5e:70:9c:1c:30:d2:4d: e2:76:b1:69:c2:6e:4a:e0:f4:3b:43:00:cc:07:1c: 14:95:0d:96:50:82:cf:4b:99:19:1b:5f:e0:49:cd: c3:4b:f0:d9:18:97:70:b3:99:f4:b5:b1:36:be:3f: 7d:a1:f6:04:8c:f3:d2:b9:c3:8b:6c:31:df:9d:c9: db:6e:20:fd:6a:a9:90:05:f3:d6:2f:cc:c7:67:ae: f6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:CE:7F:A3:A0:5D:AE:68:3A:B7:17:84:45:B6:17:6E:42:02:53:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/cb4b4823-4600-35bb-b18c-2db9d5fed6b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl X509v3 Authority Key Identifier: keyid:C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer sbgp-ipAddrBlock: critical IPv4: 209.124.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:ca:a9:97:49:8a:29:dd:72:66:3e:ec:e3:e8:8e:35:01:79: 52:0d:5b:53:da:2a:b1:b1:c4:e4:76:c7:93:70:41:55:d2:5c: 5a:72:5c:ae:d7:d7:49:34:7b:41:b2:6f:b9:d3:eb:85:44:9a: 7c:de:10:12:3b:dc:99:71:96:64:30:44:fa:8f:26:0c:64:6b: 5d:c3:a2:37:bd:33:73:2d:61:7a:e0:90:f2:82:46:f5:eb:03: 09:95:74:95:f1:bf:5d:c1:4b:d9:97:9e:18:9b:d8:52:06:20: df:7d:51:d2:64:ed:c8:6c:23:65:e8:4f:6d:3d:26:89:b1:56: 49:4b:7a:46:2f:cb:54:7c:1b:d9:81:df:2d:04:8e:a4:fe:de: ad:12:39:1b:ab:1c:c4:63:7d:d5:9e:3f:e3:f4:1b:a8:45:3e: ee:fa:56:cf:c5:eb:e6:4c:15:9d:06:2f:b2:87:e9:a8:c6:d3: 6f:ac:6a:32:3e:73:4d:47:de:d8:92:95:0d:3d:71:ce:32:76: 37:f0:c9:6c:36:2f:29:a5:a8:4f:9d:e3:fc:e5:aa:b8:43:f6: 01:29:58:95:34:5a:98:a8:e4:66:b5:93:45:bd:01:a6:f0:68: 7f:7b:c2:42:8d:b4:cb:1d:a4:e5:20:97:90:fa:fc:c1:89:5d: 65:b6:65:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuiN5QcaSs1TrTQzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE1MzJhZGItZWQ3ZC00M2JhLWE2NmYtMmEzMzNmYjlj ZjYyMB4XDTI1MTAyNTAxMDAzMVoXDTI2MDEyMzAyMDAzMVowLzEtMCsGA1UEAxMk NTZiMDE0MGQtNmM1Yi00YTViLWFkNzAtZjBmNWY4ZTE2NGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsyQUQGElkccg08af42IrFUW1IayqLuzt/5o Jk2wCrSmYAMqDyGi62kctqUTr2LKgrCA5pd18J4XiaGzXSOtcT1kHaIfOfyr/fLK AtrKEUHf3f5d6eYpb7rXIkbF4WH4+gzI4hSMNmixjX7rGjGKRtx7+VlxB70dhSE4 i1235Di7KypESCTSSp69jZ2u6BID7yYvfjrx9vIVex/W8QqsL44a5xZGjl2C/47r Q15wnBww0k3idrFpwm5K4PQ7QwDMBxwUlQ2WUILPS5kZG1/gSc3DS/DZGJdws5n0 tbE2vj99ofYEjPPSucOLbDHfncnbbiD9aqmQBfPWL8zHZ672XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPOf6OgXa5oOrcXhEW2F25CAlPfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MTUz MmFkYi1lZDdkLTQzYmEtYTY2Zi0yYTMzM2ZiOWNmNjIvY2I0YjQ4MjMtNDYwMC0z NWJiLWIxOGMtMmRiOWQ1ZmVkNmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjE1MzJhZGItZWQ3ZC00M2JhLWE2 NmYtMmEzMzNmYjljZjYyLzYxNTMyYWRiLWVkN2QtNDNiYS1hNjZmLTJhMzMzZmI5 Y2Y2Mi5jcmwwHwYDVR0jBBgwFoAUyWUizQq8OtYAsr0X/ULCZsZFX80wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82MTUzMmFkYi1lZDdkLTQzYmEtYTY2Zi0yYTMz M2ZiOWNmNjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Xx9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnKqZdJiindcmY+7OPojjUBeVINW1PaKrGxxOR2x5NwQVXSXFpyXK7X 10k0e0Gyb7nT64VEmnzeEBI73JlxlmQwRPqPJgxka13Doje9M3MtYXrgkPKCRvXr AwmVdJXxv13BS9mXnhib2FIGIN99UdJk7chsI2XoT209JomxVklLekYvy1R8G9mB 3y0EjqT+3q0SORurHMRjfdWeP+P0G6hFPu76Vs/F6+ZMFZ0GL7KH6ajG02+sajI+ c01H3tiSlQ09cc4ydjfwyWw2LymlqE+d4/zlqrhD9gEpWJU0Wpio5Ga1k0W9Aabw aH97wkKNtMsdpOUgl5D6/MGJXWW2ZVY= -----END CERTIFICATE-----Generated at Wed Nov 5 07:13:16 2025 by rpki-client