$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ab8e301-8ff3-38c7-ac4f-9c49cd02e1ad.roa File: 2ab8e301-8ff3-38c7-ac4f-9c49cd02e1ad.roa (raw, json) Hash identifier: rbO0ygASADmuSCoNwvrVM6uK7eItPljacDQAwIdzXdg= Subject key identifier: A5:F5:43:DD:40:8B:E9:73:D7:1D:29:3A:92:EB:77:0C:C2:6A:97:B7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAEC7C66C6570CF3533D08200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ab8e301-8ff3-38c7-ac4f-9c49cd02e1ad.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 7342 IP address blocks: 209.131.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:c6:6c:65:70:cf:35:33:d0:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=9782ed67-f909-448c-877c-71be4fccf437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:13:9f:3b:d8:e2:b1:5c:ad:01:3a:df:02:a4: 52:ed:1b:04:78:1c:a7:5e:ec:ab:75:36:b5:dd:19: 35:5e:0b:63:49:db:72:dd:bd:18:01:17:67:95:c3: 0a:d6:2b:32:24:59:bc:02:39:b9:db:f4:56:f0:9c: 5c:50:b3:74:ee:c6:20:3b:1d:32:f0:1c:2d:78:aa: dd:f8:b7:51:bb:68:fb:5a:75:b1:78:d3:6a:12:11: 99:07:f8:2e:9f:1e:b6:d7:fa:5c:68:61:36:86:a1: db:db:25:a9:48:2f:ab:8a:d7:53:67:43:1a:2e:2f: e3:e9:d5:fb:6e:67:3c:18:8b:11:90:62:4b:35:75: 3f:4d:b1:21:1b:c8:68:21:86:a3:fa:61:51:03:c4: e1:92:20:c5:83:e6:64:b4:23:36:7e:1d:ab:d4:06: 5b:69:2f:76:90:5f:ce:a3:3d:44:81:9b:8a:9c:44: 91:c6:34:67:9a:1b:3b:d6:03:ec:66:bb:6a:cd:b5: d2:66:4b:af:83:dc:13:91:2d:75:28:93:12:bc:91: 05:3a:dc:3c:63:b5:51:7e:05:3c:85:60:81:ca:f0: bb:64:5a:88:cf:1d:3d:4b:75:a8:27:88:90:c2:13: fd:d1:a4:9f:1e:da:ee:f7:3b:2c:54:bd:b1:99:f3: b7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F5:43:DD:40:8B:E9:73:D7:1D:29:3A:92:EB:77:0C:C2:6A:97:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ab8e301-8ff3-38c7-ac4f-9c49cd02e1ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:bc:5b:8a:03:b4:50:28:f7:8b:86:72:46:f8:ff:7b:00:38: 09:2a:4a:21:c5:16:0a:c1:64:fe:02:97:e8:3d:06:57:8e:8c: 06:c4:3d:8e:0e:c9:b8:50:3f:00:11:78:69:35:88:de:f3:9e: 93:85:f9:a7:f4:b9:ce:73:d2:2e:30:9c:23:7c:b7:e2:88:a1: bf:04:9c:e5:60:ef:fa:1b:57:0a:67:fb:6b:4d:a0:22:43:2a: e7:6a:ce:6f:72:e3:d4:92:d8:f5:a3:29:db:82:f6:46:8c:16: 17:55:c1:31:59:b2:a0:70:37:90:3c:c7:aa:18:c7:7b:62:c7: 58:31:b4:e8:57:8b:54:a5:cb:59:92:16:42:06:25:13:a3:9c: 22:df:60:c9:26:4e:bc:c4:dd:0d:15:2d:6f:83:1b:28:7e:d8: 38:9e:28:76:72:0a:64:e3:15:51:5d:9a:3d:fa:da:ec:52:cd: fa:ad:da:85:71:7f:ab:d9:a3:9d:47:50:f1:5e:0f:92:49:89: b4:e7:66:3b:4a:43:f6:9b:eb:16:70:40:11:8b:24:81:ed:3d: 08:af:d0:af:f6:62:f2:62:ac:2a:3c:ba:28:04:2b:74:2c:3d: 1f:6f:e5:96:a5:5e:8a:5b:8c:e7:d3:43:d8:2a:0e:64:59:1a: fb:99:f3:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux8ZsZXDPNTPQggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk OTc4MmVkNjctZjkwOS00NDhjLTg3N2MtNzFiZTRmY2NmNDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxOfO9jisVytATrfAqRS7RsEeBynXuyrdTa1 3Rk1XgtjSdty3b0YARdnlcMK1isyJFm8Ajm52/RW8JxcULN07sYgOx0y8BwteKrd +LdRu2j7WnWxeNNqEhGZB/gunx621/pcaGE2hqHb2yWpSC+ritdTZ0MaLi/j6dX7 bmc8GIsRkGJLNXU/TbEhG8hoIYaj+mFRA8ThkiDFg+ZktCM2fh2r1AZbaS92kF/O oz1EgZuKnESRxjRnmhs71gPsZrtqzbXSZkuvg9wTkS11KJMSvJEFOtw8Y7VRfgU8 hWCByvC7ZFqIzx09S3WoJ4iQwhP90aSfHtru9zssVL2xmfO34wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKX1Q91Ai+lz1x0pOpLrdwzCape3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmFiOGUzMDEtOGZmMy0z OGM3LWFjNGYtOWM0OWNkMDJlMWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABe8W4oDtFAo94uGckb4/3sAOAkqSiHFFgrBZP4Cl+g9BleOjAbEPY4O ybhQPwAReGk1iN7znpOF+af0uc5z0i4wnCN8t+KIob8EnOVg7/obVwpn+2tNoCJD Kudqzm9y49SS2PWjKduC9kaMFhdVwTFZsqBwN5A8x6oYx3tix1gxtOhXi1Sly1mS FkIGJROjnCLfYMkmTrzE3Q0VLW+DGyh+2DieKHZyCmTjFVFdmj362uxSzfqt2oVx f6vZo51HUPFeD5JJibTnZjtKQ/ab6xZwQBGLJIHtPQiv0K/2YvJirCo8uigEK3Qs PR9v5ZalXopbjOfTQ9gqDmRZGvuZ88k= -----END CERTIFICATE-----Generated at Wed Nov 5 09:08:40 2025 by rpki-client