$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa File: 10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa (raw, json) Hash identifier: Pv14oU7gm1d7D7Eqf0nmCV41ZCkIpfs6+nkh2CnQPic= Subject key identifier: 32:62:4E:60:88:4A:FC:CD:49:C2:F7:CC:CD:BE:7F:1E:F0:38:9B:03 Certificate issuer: /CN=8c902da3-488d-44d9-9833-f1295a9fd887 Certificate serial: 010D0C9F4328584B2A2C2E6883C9AE09D3036980 Authority key identifier: 1A:3F:BD:48:B8:18:D6:2E:89:17:81:D2:0A:54:B5:D9:4C:F6:36:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 3925 IP address blocks: 209.165.201.0/24 maxlen: 24 209.165.202.0/24 maxlen: 24 209.165.209.0/24 maxlen: 24 209.165.211.0/24 maxlen: 24 209.165.212.0/24 maxlen: 24 209.165.213.0/24 maxlen: 24 209.165.214.0/24 maxlen: 24 209.165.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:2e:68:83:c9:ae:09:d3:03:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c902da3-488d-44d9-9833-f1295a9fd887 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=ed3388bc-171c-4d7d-a3c8-4a582e85c7af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c5:76:1f:90:9d:e5:b5:ce:7e:c7:4b:d5:c3: f9:86:7e:9f:a6:8c:0c:5d:3c:d1:ed:91:15:d9:79: 6a:a3:34:91:df:b9:bf:5c:b3:4d:eb:11:d6:70:f9: 99:fc:9c:9e:36:d3:04:13:73:5d:58:c3:46:8a:c5: 1a:c5:b2:ff:8c:10:7a:02:45:ef:2a:a9:ec:04:80: 9f:12:33:a0:72:c8:dd:d0:07:41:05:23:86:45:a3: 38:91:a5:92:28:39:da:7f:c3:35:af:be:af:e8:15: 1b:8e:17:2a:d3:e0:9c:bb:19:62:80:d1:9c:d3:22: 8d:4d:4b:dd:b6:22:75:ba:71:40:6b:53:18:01:95: 28:7a:48:8d:ec:09:06:6b:99:65:63:af:db:cf:6e: 54:24:41:0b:57:30:2c:1a:c5:7d:32:c7:58:1f:54: f9:3c:15:95:b4:bd:c0:d2:b9:2f:93:ef:f8:85:23: 10:a8:44:07:3e:ba:9f:67:44:72:26:13:cd:1e:b3: 9d:64:89:0a:65:9f:76:e5:c2:7e:10:f1:aa:f9:54: 07:4c:2b:8a:e8:73:2c:49:09:49:ce:01:54:0f:15: 19:83:04:93:bb:ed:ac:bf:de:e2:5b:0d:4a:57:7b: 0f:35:50:93:32:8d:63:25:80:8d:92:05:2a:0e:2e: d4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:62:4E:60:88:4A:FC:CD:49:C2:F7:CC:CD:BE:7F:1E:F0:38:9B:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.crl X509v3 Authority Key Identifier: keyid:1A:3F:BD:48:B8:18:D6:2E:89:17:81:D2:0A:54:B5:D9:4C:F6:36:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer sbgp-ipAddrBlock: critical IPv4: 209.165.201.0-209.165.202.255 209.165.209.0/24 209.165.211.0-209.165.215.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:17:75:82:c2:64:ca:6d:7a:12:fe:66:85:78:b8:70:a2:d0: 6e:80:7a:17:4d:1f:f5:98:82:d5:bb:68:8d:7b:69:13:43:74: d9:4f:26:9f:7a:b5:cd:4b:9c:7f:c1:01:71:aa:59:12:16:9d: 50:4e:46:9a:1d:bd:15:5b:e0:44:30:6d:74:dd:10:78:13:9d: 9d:1c:1c:8e:b1:ed:52:2f:e0:9b:53:02:11:99:9f:ea:81:4e: e8:9c:bf:cd:23:fe:19:65:08:8e:53:70:b9:44:d7:4a:d0:5e: d8:92:0d:af:4d:b1:63:c5:93:2a:a1:7e:c1:e1:ba:ad:99:8a: 4b:ff:42:17:0c:2d:82:72:7e:a1:83:b3:55:b3:d8:35:47:78: 97:12:ea:7c:97:0a:ee:bc:cb:e8:d9:5c:77:ad:c8:d7:4e:52: 88:2d:47:59:9a:96:7c:79:f9:75:49:a5:82:c9:fc:50:b8:5b: 0c:cb:1c:78:e8:97:56:40:e8:88:c9:cb:49:93:83:18:a6:5f: e1:0b:9c:7c:67:ad:c2:1d:cf:e2:0b:3c:c9:df:68:bd:3a:c9: 98:5b:23:53:23:d6:f6:90:97:2e:cf:a3:c8:63:4a:1b:db:06: 11:b7:ac:cb:e0:74:8c:6d:36:aa:b1:4e:36:96:01:57:ea:0f: 37:76:8a:5e -----BEGIN CERTIFICATE----- MIIGXzCCBUegAwIBAgIUAQ0Mn0MoWEsqLC5og8muCdMDaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM5MDJkYTMtNDg4ZC00NGQ5LTk4MzMtZjEyOTVhOWZk ODg3MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk ZWQzMzg4YmMtMTcxYy00ZDdkLWEzYzgtNGE1ODJlODVjN2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8V2H5Cd5bXOfsdL1cP5hn6fpowMXTzR7ZEV 2XlqozSR37m/XLNN6xHWcPmZ/JyeNtMEE3NdWMNGisUaxbL/jBB6AkXvKqnsBICf EjOgcsjd0AdBBSOGRaM4kaWSKDnaf8M1r76v6BUbjhcq0+CcuxligNGc0yKNTUvd tiJ1unFAa1MYAZUoekiN7AkGa5llY6/bz25UJEELVzAsGsV9MsdYH1T5PBWVtL3A 0rkvk+/4hSMQqEQHPrqfZ0RyJhPNHrOdZIkKZZ925cJ+EPGq+VQHTCuK6HMsSQlJ zgFUDxUZgwSTu+2sv97iWw1KV3sPNVCTMo1jJYCNkgUqDi7UAQIDAQABo4IDcTCC A20wHQYDVR0OBBYEFDJiTmCISvzNScL3zM2+fx7wOJsDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84Yzkw MmRhMy00ODhkLTQ0ZDktOTgzMy1mMTI5NWE5ZmQ4ODcvMTBhNTk4NTYtZjcxYS0z NWZhLWFhMGQtM2MyOTNmYWE4Y2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGM5MDJkYTMtNDg4ZC00NGQ5LTk4 MzMtZjEyOTVhOWZkODg3LzhjOTAyZGEzLTQ4OGQtNDRkOS05ODMzLWYxMjk1YTlm ZDg4Ny5jcmwwHwYDVR0jBBgwFoAUGj+9SLgY1i6JF4HSClS12Uz2NvIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84YzkwMmRhMy00ODhkLTQ0ZDktOTgzMy1mMTI5 NWE5ZmQ4ODcuY2VyMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBADRpckD BADRpcoDBADRpdEwDAMEANGl0wMEA9Gl0DBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCIF3WCwmTKbXoS/maF eLhwotBugHoXTR/1mILVu2iNe2kTQ3TZTyaferXNS5x/wQFxqlkSFp1QTkaaHb0V W+BEMG103RB4E52dHByOse1SL+CbUwIRmZ/qgU7onL/NI/4ZZQiOU3C5RNdK0F7Y kg2vTbFjxZMqoX7B4bqtmYpL/0IXDC2Ccn6hg7NVs9g1R3iXEup8lwruvMvo2Vx3 rcjXTlKILUdZmpZ8efl1SaWCyfxQuFsMyxx46JdWQOiIyctJk4MYpl/hC5x8Z63C Hc/iCzzJ32i9OsmYWyNTI9b2kJcuz6PIY0ob2wYRt6zL4HSMbTaqsU42lgFX6g83 dope -----END CERTIFICATE-----Generated at Wed Nov 5 04:08:32 2025 by rpki-client