$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/83a858c1-7f35-3305-b7cf-259902de0fdb.roa File: 83a858c1-7f35-3305-b7cf-259902de0fdb.roa (raw, json) Hash identifier: 4kS/YSxnZCdIRA7v7JbUNoXnGBNgUszXnc1ewjB0jeA= Subject key identifier: AC:33:1A:3E:0A:7B:74:AF:19:28:0E:D0:0F:32:8E:C7:B6:F9:D4:73 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584B1806E995C9E38C25D0216300 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/83a858c1-7f35-3305-b7cf-259902de0fdb.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 11232 IP address blocks: 209.169.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:e9:95:c9:e3:8c:25:d0:21:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=93cac116-6168-46e2-8175-eb79730bd2d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d5:71:9b:83:fd:4a:c4:ff:c5:e4:17:87:88: 2b:1a:d4:19:31:1d:b8:08:60:a4:e2:83:b1:60:57: c5:f4:00:cd:a8:9d:c4:78:00:9b:c2:ea:14:99:7e: 0e:ea:6b:e3:3d:6f:2b:0b:d3:b3:94:79:2f:16:52: 12:e1:44:18:2f:ac:73:59:f2:de:ae:37:8d:a7:ee: dc:ec:bd:43:5f:8f:02:8d:2a:42:07:1b:c0:5b:96: 00:29:25:bc:18:88:ff:e0:1f:a1:16:20:6b:e5:fc: e6:dd:a4:3d:db:7c:84:29:1e:ae:fc:5b:6f:64:44: 4f:72:50:21:22:07:ea:81:d9:37:92:67:07:2c:53: 19:b8:ae:55:54:82:75:17:da:88:21:c0:15:57:16: 1f:4e:ea:8d:2a:77:0b:02:47:08:70:fb:fe:34:33: 32:d0:b0:7c:ec:4a:55:59:e6:7e:c0:12:8b:7b:4b: c5:f5:a4:1d:5e:61:09:2e:c6:e9:ad:04:4a:e8:5a: 44:2d:dd:08:c1:b7:ba:df:b7:47:96:a9:7a:d8:b3: df:45:f5:3f:3e:6e:2d:b1:16:27:b0:a9:b5:a3:e3: aa:9a:a6:e8:c5:af:92:40:de:32:d4:5d:e7:ed:49: 6b:02:2c:2a:99:cc:e2:78:07:4e:b4:d3:2a:eb:52: 66:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:33:1A:3E:0A:7B:74:AF:19:28:0E:D0:0F:32:8E:C7:B6:F9:D4:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/83a858c1-7f35-3305-b7cf-259902de0fdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 209.169.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:e3:7a:9c:fa:b3:0d:a9:8c:eb:75:9f:1f:6d:84:87:3a:b6: db:b9:21:a1:e6:38:fb:95:1c:3b:68:13:ca:53:c9:c2:94:26: 0a:18:e8:61:89:7e:7a:00:3a:9e:96:b9:8a:64:18:d5:d3:bc: 9c:2e:75:65:06:3b:52:03:23:25:99:3d:2f:ef:bf:98:12:20: 69:19:ff:82:bc:f6:a2:98:2c:39:cd:f1:c7:94:4e:c7:59:6e: 67:b9:c5:70:a4:33:10:3a:cd:8e:d2:fb:d0:32:f1:23:e4:96: 3e:ce:2e:aa:b1:4e:6f:0b:97:52:09:ac:2b:0e:bc:ef:0a:b3: 4e:b2:37:14:24:2f:e0:d1:3b:17:fa:fb:d0:cf:3f:01:3a:95: 1d:54:03:1c:b7:fe:e8:75:52:92:8a:27:48:b0:0c:fd:6f:ce: 29:6e:c3:c9:ef:1e:24:f2:a4:97:d8:56:95:38:35:80:51:0a: 32:f0:24:cd:3d:7e:90:7d:66:51:44:f7:09:af:db:82:ea:00: 62:25:65:61:7f:43:61:f2:35:04:fd:cc:f9:1d:de:67:85:9c: 38:c9:94:61:be:f1:aa:ca:6b:0c:50:b0:33:48:2f:c5:71:7b: 3c:fd:bf:04:70:40:66:ea:ba:e0:08:c8:d3:0f:43:95:0c:d5: 98:1f:c5:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBumVyeOMJdAhYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk OTNjYWMxMTYtNjE2OC00NmUyLTgxNzUtZWI3OTczMGJkMmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNVxm4P9SsT/xeQXh4grGtQZMR24CGCk4oOx YFfF9ADNqJ3EeACbwuoUmX4O6mvjPW8rC9OzlHkvFlIS4UQYL6xzWfLerjeNp+7c 7L1DX48CjSpCBxvAW5YAKSW8GIj/4B+hFiBr5fzm3aQ923yEKR6u/FtvZERPclAh Igfqgdk3kmcHLFMZuK5VVIJ1F9qIIcAVVxYfTuqNKncLAkcIcPv+NDMy0LB87EpV WeZ+wBKLe0vF9aQdXmEJLsbprQRK6FpELd0Iwbe637dHlql62LPfRfU/Pm4tsRYn sKm1o+Oqmqboxa+SQN4y1F3n7UlrAiwqmczieAdOtNMq61JmyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwzGj4Ke3SvGSgO0A8yjse2+dRzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvODNhODU4YzEtN2YzNS0z MzA1LWI3Y2YtMjU5OTAyZGUwZmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0anGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrjepz6sw2pjOt1nx9thIc6ttu5IaHmOPuVHDtoE8pTycKUJgoY6GGJ fnoAOp6WuYpkGNXTvJwudWUGO1IDIyWZPS/vv5gSIGkZ/4K89qKYLDnN8ceUTsdZ bme5xXCkMxA6zY7S+9Ay8SPklj7OLqqxTm8Ll1IJrCsOvO8Ks06yNxQkL+DROxf6 +9DPPwE6lR1UAxy3/uh1UpKKJ0iwDP1vziluw8nvHiTypJfYVpU4NYBRCjLwJM09 fpB9ZlFE9wmv24LqAGIlZWF/Q2HyNQT9zPkd3meFnDjJlGG+8arKawxQsDNIL8Vx ezz9vwRwQGbquuAIyNMPQ5UM1ZgfxZ8= -----END CERTIFICATE-----Generated at Wed Nov 5 10:08:32 2025 by rpki-client