$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/e3f2b204-39cc-3a44-b2d8-2d8e6470baaa.roa File: e3f2b204-39cc-3a44-b2d8-2d8e6470baaa.roa (raw, json) Hash identifier: waR/+gkBW7Xx2kbE7A6plzWKbHGSRcXQOCJdNPGFdR0= Subject key identifier: 28:D7:EE:27:DE:16:A8:11:22:12:24:97:C0:81:14:84:6E:D5:D5:78 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584B44B1BB46BD16E8EA571D8D80 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/e3f2b204-39cc-3a44-b2d8-2d8e6470baaa.roa Signing time: Sun 21 Sep 2025 13:00:42 +0000 ROA not before: Sun 21 Sep 2025 13:00:42 +0000 ROA not after: Sat 20 Dec 2025 14:00:42 +0000 asID: 11233 IP address blocks: 209.237.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:b1:bb:46:bd:16:e8:ea:57:1d:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Sep 21 13:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=07f30ce6-a520-466a-b98b-fd67c474f6ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1f:dd:7f:75:96:48:81:47:06:b6:e3:d4:ae: 31:bf:d1:2b:3e:98:5a:58:ce:1b:22:55:99:76:a8: 74:f4:e6:ef:c5:0f:56:91:45:02:cb:e0:18:27:7f: 2e:f6:b6:c0:f8:89:d4:e3:09:29:2b:7c:a4:d1:78: de:be:11:01:ed:5d:1d:11:23:de:a4:1b:69:56:d5: e7:56:fd:c8:75:0c:85:94:9b:1d:3b:81:92:e4:ae: c5:f3:d6:fb:46:f5:25:ee:d3:3e:1c:45:8d:a0:c7: b2:17:db:58:26:e9:56:3e:f9:a2:a3:70:43:a3:26: 76:d1:1c:25:52:cc:6f:b8:28:2d:b9:be:46:26:c8: d6:cd:e6:2a:bb:0e:d0:2d:1d:83:4e:55:bd:de:6f: 4f:5c:15:d0:02:e5:1a:9f:c1:5e:b3:c0:a7:ce:c8: d0:68:91:67:f6:9f:92:b7:be:ab:02:32:8a:08:bc: 68:13:75:53:3f:b1:7c:84:4b:00:80:dc:a5:d8:a5: 0b:7f:4d:7e:e5:c3:15:20:a1:b6:74:cf:1b:2b:71: 32:20:d6:fe:a6:b7:93:a5:bf:c2:84:57:39:ba:35: 2f:67:11:b9:dd:55:58:41:bc:53:43:12:44:1e:db: a4:2b:84:37:36:df:b2:d6:99:b3:04:59:0e:d8:04: 4d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D7:EE:27:DE:16:A8:11:22:12:24:97:C0:81:14:84:6E:D5:D5:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/e3f2b204-39cc-3a44-b2d8-2d8e6470baaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:e1:b5:d0:15:78:f0:1c:af:00:51:1f:5e:fa:a9:d2:32:d4: 9c:45:26:db:38:0c:f0:6d:5f:49:63:78:7b:1f:b9:67:17:fa: 2b:0f:81:24:82:47:b8:6a:40:b1:be:72:2d:4c:e6:f5:dd:4f: f7:c6:8e:1d:eb:dd:12:4e:5c:06:76:68:10:6e:5c:cc:a9:8e: cc:48:51:00:69:c4:16:37:a5:e6:f9:a2:51:f2:6b:4c:70:d8: 58:ee:95:ae:ce:c7:97:ed:01:13:97:47:af:d7:47:c6:08:00: 7f:20:3a:f8:d3:da:5c:8d:3b:9c:5f:b7:b7:fe:dd:d5:71:b1: 5d:d2:15:a4:60:7c:93:76:26:8f:c3:4a:58:da:a1:ee:87:3e: c1:63:af:8e:e4:ac:81:8a:ec:37:d6:d6:d4:18:ca:15:94:9d: 02:b9:e5:2a:bc:03:6a:88:6c:9f:41:a3:fa:f0:1c:c6:0b:1c: 47:74:d5:5a:f7:b9:12:e2:3f:a4:d5:10:f5:a0:a4:56:75:bd: 78:c9:9d:58:9f:e1:fd:7d:5d:a6:37:4f:83:5d:18:c9:e7:e9: 63:03:bc:61:5c:12:ad:99:d6:a9:f1:e4:da:80:09:d4:17:64: ac:b7:90:fa:b2:43:89:65:d7:cd:71:78:ee:83:cf:68:6f:89: 7b:e4:fc:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEsbtGvRbo6lcdjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk MDdmMzBjZTYtYTUyMC00NjZhLWI5OGItZmQ2N2M0NzRmNmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix/df3WWSIFHBrbj1K4xv9ErPphaWM4bIlWZ dqh09ObvxQ9WkUUCy+AYJ38u9rbA+InU4wkpK3yk0XjevhEB7V0dESPepBtpVtXn Vv3IdQyFlJsdO4GS5K7F89b7RvUl7tM+HEWNoMeyF9tYJulWPvmio3BDoyZ20Rwl UsxvuCgtub5GJsjWzeYquw7QLR2DTlW93m9PXBXQAuUan8Fes8CnzsjQaJFn9p+S t76rAjKKCLxoE3VTP7F8hEsAgNyl2KULf01+5cMVIKG2dM8bK3EyINb+preTpb/C hFc5ujUvZxG53VVYQbxTQxJEHtukK4Q3Nt+y1pmzBFkO2ARNqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjX7ifeFqgRIhIkl8CBFIRu1dV4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvZTNmMmIyMDQtMzljYy0z YTQ0LWIyZDgtMmQ4ZTY0NzBiYWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0e1GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3htdAVePAcrwBRH176qdIy1JxFJts4DPBtX0ljeHsfuWcX+isPgSSC R7hqQLG+ci1M5vXdT/fGjh3r3RJOXAZ2aBBuXMypjsxIUQBpxBY3peb5olHya0xw 2Fjula7Ox5ftAROXR6/XR8YIAH8gOvjT2lyNO5xft7f+3dVxsV3SFaRgfJN2Jo/D Sljaoe6HPsFjr47krIGK7DfW1tQYyhWUnQK55Sq8A2qIbJ9Bo/rwHMYLHEd01Vr3 uRLiP6TVEPWgpFZ1vXjJnVif4f19XaY3T4NdGMnn6WMDvGFcEq2Z1qnx5NqACdQX ZKy3kPqyQ4ll181xeO6Dz2hviXvk/Cs= -----END CERTIFICATE-----Generated at Wed Nov 5 11:03:50 2025 by rpki-client