$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d34bfd9d-57a4-3452-aad3-b812c11a1320.roa File: d34bfd9d-57a4-3452-aad3-b812c11a1320.roa (raw, json) Hash identifier: ElQtbp4vqJ2CG66x5ru+u2rowRZkzSLlbTcf1F+BTcM= Subject key identifier: 29:32:51:E4:3E:45:F4:16:2A:12:AB:90:49:78:6E:41:92:61:A0:23 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAEC7C900B455F82789CC0980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d34bfd9d-57a4-3452-aad3-b812c11a1320.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 7342 IP address blocks: 209.131.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:c9:00:b4:55:f8:27:89:cc:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=0b5b2fd4-f74c-4fc9-b1d3-e57824ccca83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:50:69:e1:fa:bb:b2:fd:ac:9f:08:51:66:e2: 53:8a:45:5a:2f:59:96:ba:1d:ba:6e:c1:d7:5c:23: 36:52:27:60:5a:2d:a4:7f:47:cc:8a:e2:2f:22:15: 9d:11:93:c3:5f:3e:d8:70:73:2a:56:15:ee:ce:92: 2b:38:2e:72:cc:1c:4e:84:43:89:1e:51:57:3d:41: 07:2b:7c:85:d9:e0:85:10:31:a1:02:1d:9b:28:43: de:5c:68:a8:3c:81:a2:a8:3b:8c:d8:88:ce:48:e6: d5:3d:0d:1c:b8:f4:27:56:7e:39:bb:34:8e:b2:da: a5:40:ed:dd:86:cd:ed:25:33:5e:f5:d4:53:62:17: 49:15:6b:0e:64:2c:22:94:bd:c7:f8:d8:6d:2c:6c: e5:ef:2e:bb:cf:e9:cd:d5:4c:de:0a:e8:f0:96:90: b2:e1:3b:1e:5d:55:17:fb:6a:d5:d4:f7:10:f7:79: 35:69:35:97:dc:81:02:32:4f:9c:8d:87:7d:4b:66: 52:22:ed:51:d7:e6:42:0d:80:6f:ac:33:5a:bf:01: c6:6f:4c:bc:df:8e:76:e3:62:f7:c0:a8:ea:c3:60: 2f:0c:a4:00:34:86:78:44:98:3d:92:c5:89:c2:1a: 12:8d:0b:12:d8:96:a1:cb:5e:63:46:5a:b1:e1:61: b4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:32:51:E4:3E:45:F4:16:2A:12:AB:90:49:78:6E:41:92:61:A0:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d34bfd9d-57a4-3452-aad3-b812c11a1320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:0a:e8:6e:48:80:a8:6f:2c:cf:f5:bf:d5:b3:0f:5a:84:a2: f9:a9:8e:ef:7e:c0:18:62:a3:34:3c:b8:2b:ce:f6:68:d4:ee: 82:fa:37:fd:6c:a4:6b:d4:53:54:e2:69:2e:96:38:5a:e8:68: 42:58:d3:ba:fe:7d:ef:7d:5b:32:26:01:22:65:ce:67:bb:bb: 22:7f:47:3a:af:a7:84:c4:01:15:34:c1:ad:d1:84:7e:c3:01: 98:28:3e:da:84:c8:b9:bf:bf:e3:99:b0:8f:a6:08:28:d0:4e: 10:45:59:5d:c0:8b:86:40:be:58:6f:97:29:23:0d:bd:61:16: 57:c5:49:17:80:60:f0:01:c5:c3:c1:1c:51:57:37:ad:32:2d: d0:96:8b:25:60:c8:e6:db:fd:34:cf:18:a6:6a:ed:7f:88:02: 9b:a5:ea:e6:da:83:07:5c:03:f0:f3:ba:70:f0:fa:55:a5:31: 48:76:6a:31:3f:c0:8a:36:ef:98:3e:b4:21:8e:f0:17:8b:0e: 95:89:7e:04:18:b5:79:74:8e:a3:ef:a2:db:24:5e:25:35:e4: e1:9f:f6:35:5f:0a:6f:60:5b:33:d7:cc:83:12:25:c8:b1:73: c1:f7:19:18:5c:4e:5c:7e:27:1a:ff:25:f0:2a:6e:9b:c6:8c: 0b:f7:fe:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux8kAtFX4J4nMCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk MGI1YjJmZDQtZjc0Yy00ZmM5LWIxZDMtZTU3ODI0Y2NjYTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFBp4fq7sv2snwhRZuJTikVaL1mWuh26bsHX XCM2UidgWi2kf0fMiuIvIhWdEZPDXz7YcHMqVhXuzpIrOC5yzBxOhEOJHlFXPUEH K3yF2eCFEDGhAh2bKEPeXGioPIGiqDuM2IjOSObVPQ0cuPQnVn45uzSOstqlQO3d hs3tJTNe9dRTYhdJFWsOZCwilL3H+NhtLGzl7y67z+nN1UzeCujwlpCy4TseXVUX +2rV1PcQ93k1aTWX3IECMk+cjYd9S2ZSIu1R1+ZCDYBvrDNavwHGb0y8345242L3 wKjqw2AvDKQANIZ4RJg9ksWJwhoSjQsS2Jahy15jRlqx4WG04QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkyUeQ+RfQWKhKrkEl4bkGSYaAjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDM0YmZkOWQtNTdhNC0z NDUyLWFhZDMtYjgxMmMxMWExMzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQK6G5IgKhvLM/1v9WzD1qEovmpju9+wBhiozQ8uCvO9mjU7oL6N/1s pGvUU1TiaS6WOFroaEJY07r+fe99WzImASJlzme7uyJ/Rzqvp4TEARU0wa3RhH7D AZgoPtqEyLm/v+OZsI+mCCjQThBFWV3Ai4ZAvlhvlykjDb1hFlfFSReAYPABxcPB HFFXN60yLdCWiyVgyObb/TTPGKZq7X+IApul6ubagwdcA/DzunDw+lWlMUh2ajE/ wIo275g+tCGO8BeLDpWJfgQYtXl0jqPvotskXiU15OGf9jVfCm9gWzPXzIMSJcix c8H3GRhcTlx+Jxr/JfAqbpvGjAv3/ic= -----END CERTIFICATE-----Generated at Wed Nov 5 09:09:39 2025 by rpki-client