$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/8c0cf3f7-33fa-3591-ab58-960d708c9989.roa File: 8c0cf3f7-33fa-3591-ab58-960d708c9989.roa (raw, json) Hash identifier: 8iGTSEd5Mi4LRGOqX/IwCXzESrlFm8WCKYXWj1OHyQg= Subject key identifier: D1:B8:CB:C1:F7:0F:22:17:52:6A:11:0B:BF:78:22:07:7A:41:53:05 Certificate issuer: /CN=974309dc-20f5-4894-9707-f2e446573ea1 Certificate serial: 010D0C9F4328584B99D7889372EDE4833DFAE580 Authority key identifier: F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/8c0cf3f7-33fa-3591-ab58-960d708c9989.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 209.142.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:88:93:72:ed:e4:83:3d:fa:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=974309dc-20f5-4894-9707-f2e446573ea1 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=d8e3c478-7e2d-4f60-8380-9c27e3b03e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5e:1e:af:f9:15:13:6a:95:a8:6b:1c:31:09: fd:13:da:a7:bf:ff:37:fc:79:c3:74:75:34:8f:08: d2:16:80:13:38:e4:b2:73:84:f4:4c:f4:30:99:f8: 8b:25:85:51:22:50:c5:f7:33:b2:ee:c1:eb:01:dd: 2c:c2:8f:41:43:63:7a:af:9a:4b:b8:87:1b:87:bd: 1b:67:3f:23:e1:4f:1b:16:f6:53:65:31:59:62:e2: 05:4e:3b:56:1f:92:75:8c:23:e8:a2:94:19:8c:17: 5d:24:8d:d6:f2:b6:ed:c8:43:1d:f5:c1:7b:06:69: 71:2d:5f:c3:6c:ea:23:c1:b5:ea:6f:9e:15:ae:ee: e4:c2:43:bc:e2:27:0a:bb:83:28:86:e1:ee:26:f2: 76:32:08:76:de:e5:3a:ae:c4:71:fc:35:52:54:b3: 39:85:18:c2:7d:a4:84:cb:dd:e9:cb:76:5a:7f:cb: c6:89:e7:f6:79:a1:29:25:96:3b:31:01:d1:4a:80: 7d:e5:e2:0b:16:f7:5d:0c:ce:c5:4a:2a:5a:e5:5f: 14:61:bd:39:5f:7b:81:fd:f3:96:ba:47:8a:ae:2e: 24:92:f9:44:8f:87:af:1f:10:93:5d:38:28:e0:bf: e3:63:4f:4b:69:00:5e:40:d1:90:69:c5:0e:a3:5b: dc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B8:CB:C1:F7:0F:22:17:52:6A:11:0B:BF:78:22:07:7A:41:53:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/8c0cf3f7-33fa-3591-ab58-960d708c9989.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl X509v3 Authority Key Identifier: keyid:F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer sbgp-ipAddrBlock: critical IPv4: 209.142.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:fb:4a:97:21:88:a1:36:0b:32:f2:7b:36:d2:59:fd:df:28: 04:2b:81:99:6a:8b:59:72:c8:83:c9:1e:c7:9b:4e:b8:71:e3: e4:dc:38:ac:71:c7:dc:4a:7b:69:79:5d:a2:82:bb:04:61:59: 41:7e:be:e2:f8:37:65:28:b8:6b:bb:c1:e4:69:a7:ed:d5:f7: 1b:94:cb:02:07:b8:86:85:f6:10:9a:29:80:e9:4a:9d:5f:12: 34:b4:0d:28:a4:de:d5:51:f1:09:ef:fb:fc:b4:a1:ec:1d:36: 81:81:44:e4:3c:7b:dc:61:ef:bd:2f:b5:d8:3a:33:4a:4d:8c: 37:68:6d:de:fa:ed:71:61:0c:90:48:9c:fc:f9:38:d1:a9:51: dd:f7:e9:c4:1d:2b:fa:48:df:d8:cd:4d:27:91:af:e4:46:0b: 99:50:4e:14:bb:06:c4:99:93:a5:29:83:e1:a9:f9:02:57:75: 0b:a7:7f:65:22:41:c6:fd:06:91:00:8d:42:bd:da:f0:23:bc: 2e:bc:62:58:a3:d7:d4:c9:d0:ee:ef:62:35:b9:6c:a7:3b:8b: 01:91:5f:09:b2:52:41:9d:32:bc:e8:f4:16:a1:1a:d9:75:31: 0d:47:3b:bc:a2:43:e3:98:6e:c4:9f:06:aa:45:c1:65:9d:f0: 43:8a:be:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ14iTcu3kgz365YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTc0MzA5ZGMtMjBmNS00ODk0LTk3MDctZjJlNDQ2NTcz ZWExMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZDhlM2M0NzgtN2UyZC00ZjYwLTgzODAtOWMyN2UzYjAzZTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF4er/kVE2qVqGscMQn9E9qnv/83/HnDdHU0 jwjSFoATOOSyc4T0TPQwmfiLJYVRIlDF9zOy7sHrAd0swo9BQ2N6r5pLuIcbh70b Zz8j4U8bFvZTZTFZYuIFTjtWH5J1jCPoopQZjBddJI3W8rbtyEMd9cF7BmlxLV/D bOojwbXqb54Vru7kwkO84icKu4MohuHuJvJ2Mgh23uU6rsRx/DVSVLM5hRjCfaSE y93py3Zaf8vGief2eaEpJZY7MQHRSoB95eILFvddDM7FSipa5V8UYb05X3uB/fOW ukeKri4kkvlEj4evHxCTXTgo4L/jY09LaQBeQNGQacUOo1vcSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNG4y8H3DyIXUmoRC794Igd6QVMFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85NzQz MDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0NDY1NzNlYTEvOGMwY2YzZjctMzNmYS0z NTkxLWFiNTgtOTYwZDcwOGM5OTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTc0MzA5ZGMtMjBmNS00ODk0LTk3 MDctZjJlNDQ2NTczZWExLzk3NDMwOWRjLTIwZjUtNDg5NC05NzA3LWYyZTQ0NjU3 M2VhMS5jcmwwHwYDVR0jBBgwFoAU8wpyK8l5Fe1rdy/fvqwHji6l1eEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NzQzMDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0 NDY1NzNlYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y5OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF77SpchiKE2CzLyezbSWf3fKAQrgZlqi1lyyIPJHsebTrhx4+TcOKxx x9xKe2l5XaKCuwRhWUF+vuL4N2UouGu7weRpp+3V9xuUywIHuIaF9hCaKYDpSp1f EjS0DSik3tVR8Qnv+/y0oewdNoGBROQ8e9xh770vtdg6M0pNjDdobd767XFhDJBI nPz5ONGpUd336cQdK/pI39jNTSeRr+RGC5lQThS7BsSZk6Upg+Gp+QJXdQunf2Ui Qcb9BpEAjUK92vAjvC68Ylij19TJ0O7vYjW5bKc7iwGRXwmyUkGdMrzo9BahGtl1 MQ1HO7yiQ+OYbsSfBqpFwWWd8EOKvuo= -----END CERTIFICATE-----Generated at Wed Nov 5 10:02:01 2025 by rpki-client