$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/83a687bd-8f33-38a0-b954-7a7150c2e666.roa File: 83a687bd-8f33-38a0-b954-7a7150c2e666.roa (raw, json) Hash identifier: bhgTOMdBWTnCuYMdLB659WqQqYfEIcwjnOQq7/PN1tU= Subject key identifier: 23:48:09:4F:97:C5:AF:1D:D1:80:86:A7:3F:8E:A5:04:44:A9:64:34 Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584BAA97A3D03B1E5654E1537240 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/83a687bd-8f33-38a0-b954-7a7150c2e666.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 394437 IP address blocks: 209.173.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:a3:d0:3b:1e:56:54:e1:53:72:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=5970460c-7936-4217-8872-ffb90947b10a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6d:70:fd:31:3a:30:90:b5:68:65:58:9e:85: 60:dd:55:ed:df:3f:6d:bb:02:de:c1:05:c3:15:63: f6:3d:ad:75:96:31:1c:10:dd:7c:d0:cf:e1:ad:6d: fe:5b:f3:3b:ce:f6:9a:ae:11:01:08:f3:1d:aa:65: 04:75:cf:72:c6:e8:7c:04:28:d5:f0:66:0e:4c:eb: 62:37:40:0d:fc:bf:61:eb:fc:37:86:37:da:3d:00: 51:f0:94:0b:63:0e:57:32:6a:18:1a:91:00:40:cf: 66:3c:4d:3b:88:5c:44:3d:f5:49:a2:60:46:ab:9b: 91:ed:ea:d5:e5:8e:f1:72:e1:60:68:08:9b:a5:52: 87:1a:8e:20:08:f6:70:ef:5a:0f:ab:12:7d:0e:eb: 42:e2:04:af:c0:5e:89:2d:86:ab:f1:83:f0:63:31: 53:70:83:47:7a:88:52:e6:10:ea:d6:d7:e5:0c:6d: 17:f6:b2:97:a0:aa:0d:f9:4f:19:5b:ea:04:56:18: c5:87:83:23:be:b0:eb:de:a6:3a:e4:5f:64:b9:8f: 5d:ae:40:57:60:95:fe:0c:95:cf:dc:65:49:78:5d: ec:84:37:95:5e:a4:c2:ff:e1:e4:04:b3:e5:23:25: 17:42:c6:62:ca:f7:ce:c1:11:a7:30:68:41:27:e6: 59:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:48:09:4F:97:C5:AF:1D:D1:80:86:A7:3F:8E:A5:04:44:A9:64:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/83a687bd-8f33-38a0-b954-7a7150c2e666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 209.173.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:3e:75:40:f0:11:7b:9f:26:28:b5:e2:cc:69:23:06:73:35: 55:87:82:5f:56:ea:9d:e6:26:e9:e1:61:a9:0c:57:8e:a8:0c: bf:4b:c2:ce:20:d1:cf:2b:52:0b:4b:9a:6d:87:8f:a8:3a:40: 92:41:2f:78:22:d9:41:53:a6:3f:d3:de:fa:41:6c:7c:02:42: 90:52:fb:45:f4:7a:d2:17:11:e1:6d:d9:5c:59:27:36:54:16: 5b:e2:27:6f:be:5e:7b:25:de:5b:27:97:83:04:a4:b5:a1:5f: 83:62:26:ad:6b:6c:b8:26:83:53:2e:ae:22:b3:ac:b3:3a:9c: 41:d2:49:47:9e:b2:df:21:e0:90:2a:08:b8:76:9a:51:61:de: a0:45:62:a3:a3:02:8a:c7:04:5f:14:b4:e4:1a:2f:9c:94:e4: 66:b6:0f:06:cc:b8:20:b3:f6:3f:83:88:12:90:9d:46:6d:80: 10:49:e0:f1:36:cd:c4:17:84:e2:b6:5a:42:59:64:eb:3a:f4: b8:5e:8e:ae:78:58:ee:19:fd:86:ad:9f:67:76:d6:4f:c2:64: 16:2d:08:a7:51:f8:5e:ac:eb:8b:5c:ef:20:a4:9a:b9:a0:18: 94:95:84:b3:18:3e:5f:15:9d:22:ac:0e:20:3d:76:eb:9c:2c: 7d:83:cc:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql6PQOx5WVOFTckAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk NTk3MDQ2MGMtNzkzNi00MjE3LTg4NzItZmZiOTA5NDdiMTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm1w/TE6MJC1aGVYnoVg3VXt3z9tuwLewQXD FWP2Pa11ljEcEN180M/hrW3+W/M7zvaarhEBCPMdqmUEdc9yxuh8BCjV8GYOTOti N0AN/L9h6/w3hjfaPQBR8JQLYw5XMmoYGpEAQM9mPE07iFxEPfVJomBGq5uR7erV 5Y7xcuFgaAibpVKHGo4gCPZw71oPqxJ9DutC4gSvwF6JLYar8YPwYzFTcINHeohS 5hDq1tflDG0X9rKXoKoN+U8ZW+oEVhjFh4MjvrDr3qY65F9kuY9drkBXYJX+DJXP 3GVJeF3shDeVXqTC/+HkBLPlIyUXQsZiyvfOwRGnMGhBJ+ZZYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNICU+Xxa8d0YCGpz+OpQREqWQ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvODNhNjg3YmQtOGYzMy0z OGEwLWI5NTQtN2E3MTUwYzJlNjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0a38MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACY+dUDwEXufJii14sxpIwZzNVWHgl9W6p3mJunhYakMV46oDL9Lws4g 0c8rUgtLmm2Hj6g6QJJBL3gi2UFTpj/T3vpBbHwCQpBS+0X0etIXEeFt2VxZJzZU FlviJ2++Xnsl3lsnl4MEpLWhX4NiJq1rbLgmg1MuriKzrLM6nEHSSUeest8h4JAq CLh2mlFh3qBFYqOjAorHBF8UtOQaL5yU5Ga2DwbMuCCz9j+DiBKQnUZtgBBJ4PE2 zcQXhOK2WkJZZOs69Lhejq54WO4Z/Yatn2d21k/CZBYtCKdR+F6s64tc7yCkmrmg GJSVhLMYPl8VnSKsDiA9duucLH2DzOw= -----END CERTIFICATE-----Generated at Wed Nov 5 19:17:38 2025 by rpki-client