$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/0c0b966f-cc08-36fa-8094-773d54a45b9d.roa File: 0c0b966f-cc08-36fa-8094-773d54a45b9d.roa (raw, json) Hash identifier: Dv8ccORrG52CeAGQR7d7XXkEejW8HRSKETiFcUHy1rg= Subject key identifier: 64:08:2E:50:48:55:83:D2:FA:63:B8:51:BD:84:71:9A:74:DF:08:36 Certificate issuer: /CN=6827a74b-021f-4aa4-a558-67d2d6c22fe9 Certificate serial: 010D0C9F4328584BBE402DDC1937594FE9292880 Authority key identifier: C1:DB:0E:88:F2:C5:17:32:F0:52:F7:C0:4E:43:82:BA:B4:44:56:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/0c0b966f-cc08-36fa-8094-773d54a45b9d.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 396982 IP address blocks: 209.209.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/6827a74b-021f-4aa4-a558-67d2d6c22fe9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/6827a74b-021f-4aa4-a558-67d2d6c22fe9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:2d:dc:19:37:59:4f:e9:29:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6827a74b-021f-4aa4-a558-67d2d6c22fe9 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=85a5bc25-0037-4761-bd82-16e065de2d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3c:9a:99:86:39:e3:8a:fe:ad:5d:ef:44:3e: c7:4d:1a:9a:c2:cf:94:b9:fb:0c:60:8b:c4:84:c5: 03:ff:05:63:0b:07:b0:69:25:6f:2d:0d:7e:14:66: 67:60:96:0f:b7:37:9b:f6:d7:55:1a:ca:55:22:c8: 2e:02:ba:4d:a9:c5:2d:eb:eb:fd:78:50:55:f7:b9: 4c:56:78:d3:0e:0d:39:42:28:f8:99:27:14:42:40: 44:0f:c0:1b:44:10:f2:88:42:a2:a0:c6:c6:89:26: e3:fe:09:d7:f4:bd:fb:04:ca:41:d0:e9:3e:f2:d8: 74:85:ee:8b:49:77:82:ee:75:3e:5a:cd:b2:16:d4: 82:cc:a3:7a:c2:e1:18:fb:cc:46:32:3c:9a:70:b7: 1a:38:f7:05:e8:50:8a:d0:7d:e6:c2:a3:95:0f:86: 35:47:2a:f8:bf:61:d1:25:15:7b:5a:11:59:47:77: e1:85:a6:a5:28:8d:8f:4a:4c:22:11:76:23:02:a2: 61:b1:16:f9:52:1e:c0:a1:97:5b:50:a8:61:7e:15: 73:33:04:61:d8:d2:e2:f1:0e:66:55:49:89:2f:94: 97:2d:59:97:a2:eb:8f:63:bf:08:05:6e:ec:2a:77: 9f:a5:56:fb:23:af:7d:54:90:d5:18:b0:cd:8b:0f: de:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:08:2E:50:48:55:83:D2:FA:63:B8:51:BD:84:71:9A:74:DF:08:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/0c0b966f-cc08-36fa-8094-773d54a45b9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/6827a74b-021f-4aa4-a558-67d2d6c22fe9.crl X509v3 Authority Key Identifier: keyid:C1:DB:0E:88:F2:C5:17:32:F0:52:F7:C0:4E:43:82:BA:B4:44:56:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9.cer sbgp-ipAddrBlock: critical IPv4: 209.209.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:e5:e9:44:71:a7:06:2f:b1:6f:1e:cb:53:24:3f:e2:9f:82: 6a:07:c3:8f:13:ca:74:1f:56:87:f9:c5:f7:b5:83:13:e8:2a: a8:10:24:17:30:b6:8b:07:2b:73:5a:08:37:d7:58:58:2f:f2: 12:62:62:4e:e3:f9:62:15:49:5a:7f:6c:74:af:25:a9:29:1d: a0:03:cb:d6:f7:b0:0b:8a:fa:df:ca:3e:33:75:9a:bf:db:89: 09:2f:4d:c2:3d:a8:bb:b4:2b:ae:a4:be:a1:63:15:fb:44:74: 45:1c:d1:d5:6a:92:d0:51:41:6c:5b:94:04:6a:dd:d3:f5:7e: c8:1a:83:47:ba:b2:89:35:3c:ee:45:03:c4:37:fe:ed:f4:e8: bd:e2:1e:5a:1b:6c:ce:73:42:fc:50:e7:fa:53:8a:12:d6:74: ec:c5:8f:a9:74:79:31:31:ea:55:23:6c:67:bb:ce:65:58:ed: fc:d0:fa:1b:28:f5:bb:69:18:d8:08:57:7b:bd:58:30:ab:29: 5b:db:38:25:93:1f:10:47:c1:87:cf:1b:15:a3:64:df:6b:93: 78:43:ef:d1:33:64:18:be:7c:ad:2c:34:8f:6c:32:b0:d7:56: d8:89:15:bb:bd:78:61:b1:10:c1:53:63:ed:50:32:1e:44:50: 14:39:7b:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QC3cGTdZT+kpKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjgyN2E3NGItMDIxZi00YWE0LWE1NTgtNjdkMmQ2YzIy ZmU5MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ODVhNWJjMjUtMDAzNy00NzYxLWJkODItMTZlMDY1ZGUyZDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzyamYY544r+rV3vRD7HTRqaws+UufsMYIvE hMUD/wVjCwewaSVvLQ1+FGZnYJYPtzeb9tdVGspVIsguArpNqcUt6+v9eFBV97lM VnjTDg05Qij4mScUQkBED8AbRBDyiEKioMbGiSbj/gnX9L37BMpB0Ok+8th0he6L SXeC7nU+Ws2yFtSCzKN6wuEY+8xGMjyacLcaOPcF6FCK0H3mwqOVD4Y1Ryr4v2HR JRV7WhFZR3fhhaalKI2PSkwiEXYjAqJhsRb5Uh7AoZdbUKhhfhVzMwRh2NLi8Q5m VUmJL5SXLVmXouuPY78IBW7sKnefpVb7I699VJDVGLDNiw/e9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQILlBIVYPS+mO4Ub2EcZp03wg2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82ODI3 YTc0Yi0wMjFmLTRhYTQtYTU1OC02N2QyZDZjMjJmZTkvMGMwYjk2NmYtY2MwOC0z NmZhLTgwOTQtNzczZDU0YTQ1YjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjgyN2E3NGItMDIxZi00YWE0LWE1 NTgtNjdkMmQ2YzIyZmU5LzY4MjdhNzRiLTAyMWYtNGFhNC1hNTU4LTY3ZDJkNmMy MmZlOS5jcmwwHwYDVR0jBBgwFoAUwdsOiPLFFzLwUvfATkOCurREVpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82ODI3YTc0Yi0wMjFmLTRhYTQtYTU1OC02N2Qy ZDZjMjJmZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dF9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3l6URxpwYvsW8ey1MkP+KfgmoHw48TynQfVof5xfe1gxPoKqgQJBcw tosHK3NaCDfXWFgv8hJiYk7j+WIVSVp/bHSvJakpHaADy9b3sAuK+t/KPjN1mr/b iQkvTcI9qLu0K66kvqFjFftEdEUc0dVqktBRQWxblARq3dP1fsgag0e6sok1PO5F A8Q3/u306L3iHlobbM5zQvxQ5/pTihLWdOzFj6l0eTEx6lUjbGe7zmVY7fzQ+hso 9btpGNgIV3u9WDCrKVvbOCWTHxBHwYfPGxWjZN9rk3hD79EzZBi+fK0sNI9sMrDX VtiJFbu9eGGxEMFTY+1QMh5EUBQ5e4A= -----END CERTIFICATE-----Generated at Wed Nov 5 10:34:57 2025 by rpki-client