$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/d1c97a1a-4e55-364a-b407-9f6e1a9bc993.roa File: d1c97a1a-4e55-364a-b407-9f6e1a9bc993.roa (raw, json) Hash identifier: BceJ6NARFSsIJqBhBZfLrkEMlrVTSZdtLl+HMVzFqyM= Subject key identifier: 04:53:C5:F5:1E:46:EB:82:F7:54:AE:B9:F6:34:9F:FB:46:B6:CB:23 Certificate issuer: /CN=11f590b6-eb6e-4969-824b-0df247220283 Certificate serial: 010D0C9F4328584B9CA231F5CDC6512FFE1C2CC0 Authority key identifier: 82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/d1c97a1a-4e55-364a-b407-9f6e1a9bc993.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 395301 IP address blocks: 209.251.28.0/24 maxlen: 24 209.251.29.0/24 maxlen: 24 209.251.30.0/24 maxlen: 24 209.251.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:31:f5:cd:c6:51:2f:fe:1c:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11f590b6-eb6e-4969-824b-0df247220283 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=203e78e6-8593-49c7-b195-2a8ecf1a11b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:76:7f:68:75:e7:0f:69:cf:5d:4c:5f:29:b4: 49:bc:7c:67:6e:23:f3:97:74:17:04:23:b2:13:92: 0d:e7:04:f4:69:66:95:48:aa:6c:6a:16:52:15:5f: 68:6e:72:03:2e:b0:c7:1f:1c:35:92:18:e4:f5:83: 38:e0:57:0f:af:9d:0d:5d:43:16:6c:1c:56:dd:10: 6f:16:6b:d3:ef:32:ab:78:61:45:5e:8b:93:01:3f: c4:96:2d:3e:99:1e:5a:ca:5f:0c:d2:40:6f:c0:25: 17:89:04:52:88:9f:6b:b7:01:0a:2e:f2:a5:3a:4d: 48:e3:ec:7b:94:5d:86:f0:a9:f5:96:51:db:64:53: da:63:f4:5f:b4:15:9a:35:d3:07:c1:a2:09:28:f1: 92:f6:29:4a:22:a0:4b:3c:69:fd:a4:6a:fe:88:1f: 2f:ed:91:c8:d0:7a:5f:a5:5a:aa:b3:c0:24:62:c5: 07:be:a8:26:2b:e9:0f:0b:12:e2:1a:35:23:47:2b: 66:31:f3:b7:fa:a3:5b:3d:b8:63:eb:82:82:b1:47: a6:31:83:3d:90:e3:3b:fa:28:47:55:aa:39:3a:32: 26:ec:2e:74:e9:b1:cc:34:b1:50:59:74:63:9f:1b: bd:70:e5:8a:01:31:53:00:31:5c:62:68:c3:53:2e: 3f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:53:C5:F5:1E:46:EB:82:F7:54:AE:B9:F6:34:9F:FB:46:B6:CB:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/d1c97a1a-4e55-364a-b407-9f6e1a9bc993.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283/11f590b6-eb6e-4969-824b-0df247220283.crl X509v3 Authority Key Identifier: keyid:82:E3:24:D8:BE:C6:85:DD:4F:6A:D5:26:93:6C:BE:0A:48:31:18:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/11f590b6-eb6e-4969-824b-0df247220283.cer sbgp-ipAddrBlock: critical IPv4: 209.251.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:82:5d:09:23:f3:54:ab:01:2c:c4:53:3b:15:34:f3:79:08: 85:b1:f4:63:c1:e8:2c:db:c6:69:6e:e6:57:d3:5d:13:f8:79: 6f:99:70:3f:d8:93:b2:8d:75:38:78:04:f3:47:b1:73:1d:d6: de:fc:39:2a:89:cc:9d:2e:e0:34:cb:32:fb:82:74:8e:79:36: 69:5e:dc:51:37:10:b8:01:4c:33:ae:aa:f9:4e:15:8e:73:36: c7:b4:6f:1e:1d:ae:ef:d4:5a:1b:33:5d:65:7d:ad:43:b1:23: 41:72:73:2d:7e:67:60:e1:9b:70:5a:b5:4d:ce:41:2a:70:49: 42:61:03:71:ea:a9:a3:02:bf:8a:75:a1:c7:25:0b:25:14:23: 0b:65:a1:f8:da:b3:35:58:dd:6c:bd:ef:6c:31:06:80:bf:5a: 02:3f:a1:f8:9e:96:df:97:2e:df:6b:fd:ea:aa:28:de:f5:b8: f0:5f:53:61:24:9d:95:4e:5f:96:82:06:19:27:cb:66:cb:f8: 77:eb:8a:45:85:1b:6f:8b:06:bd:b9:6b:c7:71:aa:d1:b7:d5: 11:88:d0:03:fe:ca:3d:34:28:f1:6d:26:7e:8c:0a:b2:39:01: 74:53:02:2c:7e:bc:2d:5b:63:7c:aa:bf:b8:22:68:89:f5:f2: cd:57:40:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEucojH1zcZRL/4cLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFmNTkwYjYtZWI2ZS00OTY5LTgyNGItMGRmMjQ3MjIw MjgzMB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk MjAzZTc4ZTYtODU5My00OWM3LWIxOTUtMmE4ZWNmMWExMWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXZ/aHXnD2nPXUxfKbRJvHxnbiPzl3QXBCOy E5IN5wT0aWaVSKpsahZSFV9obnIDLrDHHxw1khjk9YM44FcPr50NXUMWbBxW3RBv FmvT7zKreGFFXouTAT/Eli0+mR5ayl8M0kBvwCUXiQRSiJ9rtwEKLvKlOk1I4+x7 lF2G8Kn1llHbZFPaY/RftBWaNdMHwaIJKPGS9ilKIqBLPGn9pGr+iB8v7ZHI0Hpf pVqqs8AkYsUHvqgmK+kPCxLiGjUjRytmMfO3+qNbPbhj64KCsUemMYM9kOM7+ihH Vao5OjIm7C506bHMNLFQWXRjnxu9cOWKATFTADFcYmjDUy4/5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARTxfUeRuuC91SuufY0n/tGtssjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1 OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYyNDcyMjAyODMvZDFjOTdhMWEtNGU1NS0z NjRhLWI0MDctOWY2ZTFhOWJjOTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTFmNTkwYjYtZWI2ZS00OTY5LTgy NGItMGRmMjQ3MjIwMjgzLzExZjU5MGI2LWViNmUtNDk2OS04MjRiLTBkZjI0NzIy MDI4My5jcmwwHwYDVR0jBBgwFoAUguMk2L7Ghd1PatUmk2y+CkgxGFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMWY1OTBiNi1lYjZlLTQ5NjktODI0Yi0wZGYy NDcyMjAyODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0fscMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqCXQkj81SrASzEUzsVNPN5CIWx9GPB6Czbxmlu5lfTXRP4eW+ZcD/Y k7KNdTh4BPNHsXMd1t78OSqJzJ0u4DTLMvuCdI55Nmle3FE3ELgBTDOuqvlOFY5z Nse0bx4dru/UWhszXWV9rUOxI0Fycy1+Z2Dhm3BatU3OQSpwSUJhA3HqqaMCv4p1 occlCyUUIwtlofjaszVY3Wy972wxBoC/WgI/ofielt+XLt9r/eqqKN71uPBfU2Ek nZVOX5aCBhkny2bL+HfrikWFG2+LBr25a8dxqtG31RGI0AP+yj00KPFtJn6MCrI5 AXRTAix+vC1bY3yqv7giaIn18s1XQOE= -----END CERTIFICATE-----Generated at Wed Nov 5 11:48:32 2025 by rpki-client