$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/949b4d0e-326e-3bba-8a22-f9d6056bf712.roa File: 949b4d0e-326e-3bba-8a22-f9d6056bf712.roa (raw, json) Hash identifier: PqEAy5xpvdNhnX0xYIl7olUoXv9VEuOJLp7f6G88tCA= Subject key identifier: 8C:40:D0:5B:B2:C2:A1:35:A0:63:5D:B9:EC:E0:21:BC:FB:91:F5:ED Certificate issuer: /CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Certificate serial: 010D0C9F4328584AFC1BF1DC7FFCADF323A0D600 Authority key identifier: D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/949b4d0e-326e-3bba-8a22-f9d6056bf712.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 62856 IP address blocks: 209.112.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:f1:dc:7f:fc:ad:f3:23:a0:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=b24a3b07-3bf1-44e0-b19f-fa97e35a7e41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f8:ba:e0:71:61:da:e8:17:4c:b1:b3:28:2e: 03:ea:27:f9:01:87:fd:00:65:ee:61:8e:b0:d3:b5: 71:5b:05:74:1f:d4:f3:1b:ad:f4:cb:c1:4d:8a:86: 18:15:e7:06:a5:79:13:40:03:59:89:2a:82:9f:8a: 45:94:52:1b:a4:e8:f6:2b:c3:ab:e7:7f:06:7b:24: 3f:95:06:41:cc:b3:1b:e6:95:34:ea:ca:5f:f1:3c: e8:7d:1f:03:1e:c8:07:24:42:e3:73:ac:97:49:c5: 1c:92:64:3a:1d:04:4c:44:d3:df:71:da:4c:cb:66: 6d:f1:ec:03:51:c3:14:0b:17:71:e0:7b:ed:9a:4a: 9a:0e:a1:68:1f:8e:8f:96:8d:78:1b:9b:6b:ad:67: 14:9c:f2:0b:98:82:a1:87:fc:f3:31:e6:2b:f5:d7: ad:31:b2:c7:98:f5:f9:e1:13:62:cb:0a:b9:87:07: cb:64:1c:c9:be:1e:34:d7:09:ee:34:7f:dd:32:09: 3f:38:9b:ed:28:bb:a1:24:70:91:21:fc:5a:0c:c8: 5b:20:85:76:26:e2:23:46:4f:41:74:46:c4:c6:da: 93:7e:f7:a8:95:dc:88:40:00:a1:d3:41:21:6b:2b: f0:4e:04:d6:41:96:1a:ce:50:c3:ff:9a:1a:06:68: 55:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:40:D0:5B:B2:C2:A1:35:A0:63:5D:B9:EC:E0:21:BC:FB:91:F5:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/949b4d0e-326e-3bba-8a22-f9d6056bf712.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl X509v3 Authority Key Identifier: keyid:D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer sbgp-ipAddrBlock: critical IPv4: 209.112.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ff:62:8d:ab:01:0e:22:09:cf:27:e1:29:ba:a8:79:aa:64: 1e:e6:5f:61:1c:98:d3:74:c7:6d:a1:12:2a:95:86:24:4b:35: 37:4a:ad:d1:1e:95:d4:03:7e:93:24:52:c4:eb:96:ab:49:51: 76:e8:74:e1:c8:34:54:6e:57:c0:db:11:5b:b2:16:8f:cc:fa: 13:4e:51:41:05:35:49:bf:cc:02:0d:90:5d:a6:f6:80:eb:b2: 73:ec:d2:26:0b:05:65:3d:d3:f9:70:75:ab:54:64:5c:fc:5e: f9:de:11:cf:7a:22:06:d4:a2:19:ef:e1:50:2e:74:84:5d:28: 83:98:12:86:cb:d3:76:30:7f:21:7d:31:25:a1:0f:0c:55:39: 8a:49:63:cf:c8:e6:52:ae:c4:d3:c5:f2:60:8d:f4:50:50:00: bd:1c:c5:a5:b1:7b:54:d2:59:29:26:55:dd:9d:47:c6:12:7d: 62:e4:06:78:7c:d4:4e:9b:11:e7:e8:38:56:08:ab:c3:b7:4d: ff:66:5a:46:a4:f5:b9:5a:86:7e:be:94:65:69:62:3f:6e:41: 0a:20:e2:4c:5a:6a:33:9d:b1:ba:e0:df:ad:52:f6:03:ee:66: b8:e4:26:e5:85:b2:fb:52:ec:65:6c:a5:06:07:a4:27:af:2b: 25:93:76:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G/Hcf/yt8yOg1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFmN2RmMzUtYzY3Zi00NDBkLTk3OTktNDYxZTdhODA5 ZWYzMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk YjI0YTNiMDctM2JmMS00NGUwLWIxOWYtZmE5N2UzNWE3ZTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPi64HFh2ugXTLGzKC4D6if5AYf9AGXuYY6w 07VxWwV0H9TzG630y8FNioYYFecGpXkTQANZiSqCn4pFlFIbpOj2K8Or538GeyQ/ lQZBzLMb5pU06spf8TzofR8DHsgHJELjc6yXScUckmQ6HQRMRNPfcdpMy2Zt8ewD UcMUCxdx4HvtmkqaDqFoH46Plo14G5trrWcUnPILmIKhh/zzMeYr9detMbLHmPX5 4RNiywq5hwfLZBzJvh401wnuNH/dMgk/OJvtKLuhJHCRIfxaDMhbIIV2JuIjRk9B dEbExtqTfveoldyIQACh00EhayvwTgTWQZYazlDD/5oaBmhVRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxA0FuywqE1oGNduezgIbz7kfXtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3 ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFlN2E4MDllZjMvOTQ5YjRkMGUtMzI2ZS0z YmJhLThhMjItZjlkNjA1NmJmNzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWFmN2RmMzUtYzY3Zi00NDBkLTk3 OTktNDYxZTdhODA5ZWYzL2VhZjdkZjM1LWM2N2YtNDQwZC05Nzk5LTQ2MWU3YTgw OWVmMy5jcmwwHwYDVR0jBBgwFoAU2Wzj3bzwBlTPKTIqIy/84RLCWzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFl N2E4MDllZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XBoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHr/Yo2rAQ4iCc8n4Sm6qHmqZB7mX2EcmNN0x22hEiqVhiRLNTdKrdEe ldQDfpMkUsTrlqtJUXbodOHINFRuV8DbEVuyFo/M+hNOUUEFNUm/zAINkF2m9oDr snPs0iYLBWU90/lwdatUZFz8XvneEc96IgbUohnv4VAudIRdKIOYEobL03YwfyF9 MSWhDwxVOYpJY8/I5lKuxNPF8mCN9FBQAL0cxaWxe1TSWSkmVd2dR8YSfWLkBnh8 1E6bEefoOFYIq8O3Tf9mWkak9blahn6+lGVpYj9uQQog4kxaajOdsbrg361S9gPu ZrjkJuWFsvtS7GVspQYHpCevKyWTdnA= -----END CERTIFICATE-----Generated at Wed Nov 5 10:37:01 2025 by rpki-client