$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/059b2a6e-0dc8-3000-8de1-205f552c9f26.roa File: 059b2a6e-0dc8-3000-8de1-205f552c9f26.roa (raw, json) Hash identifier: FyXfidP62H+ziJtCzVGv7AN0givBHxODQ9Vvg+hrx2w= Subject key identifier: 17:15:CD:2B:6D:1E:72:60:43:89:30:5E:A6:9F:02:62:0B:39:0F:E5 Certificate issuer: /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Certificate serial: 010D0C9F4328584B8917827953A7F441657A4140 Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/059b2a6e-0dc8-3000-8de1-205f552c9f26.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 6079 IP address blocks: 209.250.8.0/23 maxlen: 23 209.250.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:82:79:53:a7:f4:41:65:7a:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=0a406bf4-e391-42a5-b6f7-7d5ab0dfe44d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2d:9a:d3:df:c4:13:56:7a:e0:9f:03:37:03: 18:50:87:61:6c:bb:14:fa:ce:e3:0d:e9:89:d4:df: 37:af:0d:ad:bc:d8:6c:dc:f3:8c:cf:84:f5:a6:5e: 8c:ed:38:c5:85:79:57:4e:de:02:cc:74:4e:25:09: 28:4f:3a:ae:f6:60:e1:ae:bc:00:82:e4:de:ec:27: 02:ce:9f:36:d3:6e:32:d5:9d:77:13:fb:2b:3c:e6: 38:14:52:b1:5d:9b:61:b2:c4:a4:e3:20:ed:c0:59: b0:3d:f0:f2:04:db:d5:fe:d1:9e:8c:69:7d:c4:58: 8c:f4:be:43:de:f4:2c:57:9b:82:98:b2:52:54:68: 2e:4b:af:b9:33:03:87:79:4a:2d:5b:c4:48:67:4b: 86:87:52:76:63:59:9e:1d:c4:66:c8:b7:0a:d2:bf: 88:04:01:6f:c7:1f:74:db:ef:78:84:2e:e2:64:55: b6:21:e2:06:18:19:8d:9a:6d:a3:bd:7e:ac:fe:0c: 10:ed:8b:88:3f:e7:cf:db:37:41:55:88:6c:17:4d: d1:6e:57:20:d2:5c:71:45:bc:ab:60:f6:74:21:34: 90:b8:b8:fd:c5:14:16:78:7a:60:c0:96:da:63:01: a0:d3:dc:f1:3c:a7:11:cf:8f:8b:47:64:db:d5:e4: c9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:15:CD:2B:6D:1E:72:60:43:89:30:5E:A6:9F:02:62:0B:39:0F:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/059b2a6e-0dc8-3000-8de1-205f552c9f26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl X509v3 Authority Key Identifier: keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer sbgp-ipAddrBlock: critical IPv4: 209.250.8.0/23 209.250.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:e6:5b:9d:b1:6e:08:ce:89:3f:c0:89:27:62:38:5f:42:04: 64:ba:b6:67:73:dd:38:5f:10:0a:40:87:a9:d8:ad:41:7c:98: 56:84:99:5b:b9:61:69:35:ad:4d:6f:3e:41:26:17:38:a5:f9: 3e:66:7e:d8:bb:90:51:e0:01:8d:9f:33:f6:18:62:0a:47:69: 34:c5:77:4f:11:6b:55:e9:e9:9d:96:3d:3b:46:eb:ed:fc:ad: c3:6d:6a:05:cf:bd:6c:82:c6:00:f0:9f:03:d4:0e:41:59:b2: 9b:d8:9d:23:40:cf:db:e3:d9:5f:2b:61:34:59:4a:8f:ec:c8: 28:33:ee:1b:16:25:02:76:b1:67:89:86:0c:fe:0e:b3:1a:f8: 97:9c:d8:95:cd:d8:05:1e:83:4c:d7:a5:b2:1c:a4:e3:74:57: e0:d5:03:8f:af:08:bb:a4:ca:09:d3:96:cc:0f:35:f0:59:2f: 58:18:fb:c7:aa:ed:58:83:75:bb:76:e6:69:a1:56:61:8b:78: dd:51:94:a7:09:af:af:a4:5c:d4:10:b1:31:72:22:f7:7d:bc: 33:8e:d4:4a:4f:97:b2:07:f6:e8:0f:70:c6:39:4b:b4:e7:86: e9:53:3b:8f:cd:37:31:cd:9b:2f:65:39:93:0d:3b:69:74:7b: 43:92:4b:b3 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuJF4J5U6f0QWV6QUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk2YjZjNjUtMTFiYi00MDVlLWEzNGEtYjcxNmZjZGM3 ZGQ0MB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk MGE0MDZiZjQtZTM5MS00MmE1LWI2ZjctN2Q1YWIwZGZlNDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty2a09/EE1Z64J8DNwMYUIdhbLsU+s7jDemJ 1N83rw2tvNhs3POMz4T1pl6M7TjFhXlXTt4CzHROJQkoTzqu9mDhrrwAguTe7CcC zp82024y1Z13E/srPOY4FFKxXZthssSk4yDtwFmwPfDyBNvV/tGejGl9xFiM9L5D 3vQsV5uCmLJSVGguS6+5MwOHeUotW8RIZ0uGh1J2Y1meHcRmyLcK0r+IBAFvxx90 2+94hC7iZFW2IeIGGBmNmm2jvX6s/gwQ7YuIP+fP2zdBVYhsF03Rblcg0lxxRbyr YPZ0ITSQuLj9xRQWeHpgwJbaYwGg09zxPKcRz4+LR2Tb1eTJ+wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBcVzSttHnJgQ4kwXqafAmILOQ/lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZi NmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2ZmNkYzdkZDQvMDU5YjJhNmUtMGRjOC0z MDAwLThkZTEtMjA1ZjU1MmM5ZjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjk2YjZjNjUtMTFiYi00MDVlLWEz NGEtYjcxNmZjZGM3ZGQ0L2Y5NmI2YzY1LTExYmItNDA1ZS1hMzRhLWI3MTZmY2Rj N2RkNC5jcmwwHwYDVR0jBBgwFoAUXA5zSiCBvLBmexmGdhkHGO6ne+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZiNmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2 ZmNkYzdkZDQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB0foIAwQB 0foMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAD7mW52xbgjOiT/AiSdiOF9CBGS6tmdz3ThfEApAh6nYrUF8 mFaEmVu5YWk1rU1vPkEmFzil+T5mfti7kFHgAY2fM/YYYgpHaTTFd08Ra1Xp6Z2W PTtG6+38rcNtagXPvWyCxgDwnwPUDkFZspvYnSNAz9vj2V8rYTRZSo/syCgz7hsW JQJ2sWeJhgz+DrMa+Jec2JXN2AUeg0zXpbIcpON0V+DVA4+vCLukygnTlswPNfBZ L1gY+8eq7ViDdbt25mmhVmGLeN1RlKcJr6+kXNQQsTFyIvd9vDOO1EpPl7IH9ugP cMY5S7TnhulTO4/NNzHNmy9lOZMNO2l0e0OSS7M= -----END CERTIFICATE-----Generated at Tue Nov 4 18:59:37 2025 by rpki-client