$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07c8af42-3e07-4a45-aa70-e40a4da66a53/71013a3e-c566-3929-ba41-cc539946f194.roa File: 71013a3e-c566-3929-ba41-cc539946f194.roa (raw, json) Hash identifier: Y6Hy9okNsA32IeDJ9ttj0km+nJYCDnZWOygNy9TeTZM= Subject key identifier: 41:7A:E6:DC:B3:7D:28:5C:C9:10:84:B8:4F:4C:01:8E:E3:A5:60:06 Certificate issuer: /CN=07c8af42-3e07-4a45-aa70-e40a4da66a53 Certificate serial: 010D0C9F4328584B110BFE66A05D16E8A52C0F80 Authority key identifier: 46:E6:26:D8:58:80:C3:FC:66:59:91:54:4B:59:26:81:4F:1D:F0:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07c8af42-3e07-4a45-aa70-e40a4da66a53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07c8af42-3e07-4a45-aa70-e40a4da66a53/71013a3e-c566-3929-ba41-cc539946f194.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 399580 IP address blocks: 209.209.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07c8af42-3e07-4a45-aa70-e40a4da66a53/07c8af42-3e07-4a45-aa70-e40a4da66a53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07c8af42-3e07-4a45-aa70-e40a4da66a53/07c8af42-3e07-4a45-aa70-e40a4da66a53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07c8af42-3e07-4a45-aa70-e40a4da66a53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0b:fe:66:a0:5d:16:e8:a5:2c:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07c8af42-3e07-4a45-aa70-e40a4da66a53 Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=dc89d5c7-f808-4ad3-bac1-b359dec3bf00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:da:74:c3:c1:9a:5b:8d:33:7f:d3:ab:3d:e8: d9:bc:19:9f:ac:4d:b1:13:3a:ee:57:f5:3a:e1:ac: 95:56:82:26:6d:a4:27:79:ef:a6:ca:b8:b0:a9:05: 9f:28:8e:19:ac:75:dc:dd:d7:4e:73:39:1d:f0:f4: 6b:3b:0b:c7:fe:8e:9a:6a:47:79:58:b7:04:f3:a7: a5:00:9d:89:08:35:4b:13:26:61:bc:0f:c9:d7:a5: 81:8a:9a:84:b6:98:a8:d0:46:c0:74:a0:70:28:36: 11:85:d4:f8:5e:92:ec:e9:63:b4:a0:ab:39:4f:24: e8:56:02:44:4e:c5:46:7a:b1:63:c2:a6:2a:a0:b2: c8:c4:d9:99:b7:c9:56:30:60:cc:1d:8e:34:e0:01: 17:32:26:a9:b3:67:d1:8f:10:f7:a9:f9:90:45:c0: 80:b7:86:d3:88:3f:db:ca:42:83:e9:da:f2:94:d8: 89:e0:14:eb:2f:7d:3d:34:bf:ef:71:39:6e:a3:06: a3:57:cc:a1:b9:a3:39:b6:42:b1:f3:2a:2d:54:28: 48:ec:16:5a:5a:e6:cf:fd:c1:4a:67:84:1d:df:21: d2:c1:4b:1e:45:63:e9:b2:c0:54:69:ab:01:85:e8: e8:73:b4:e6:c4:d9:22:bd:b7:01:7f:0e:44:e6:5b: 2e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:7A:E6:DC:B3:7D:28:5C:C9:10:84:B8:4F:4C:01:8E:E3:A5:60:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07c8af42-3e07-4a45-aa70-e40a4da66a53/71013a3e-c566-3929-ba41-cc539946f194.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07c8af42-3e07-4a45-aa70-e40a4da66a53/07c8af42-3e07-4a45-aa70-e40a4da66a53.crl X509v3 Authority Key Identifier: keyid:46:E6:26:D8:58:80:C3:FC:66:59:91:54:4B:59:26:81:4F:1D:F0:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07c8af42-3e07-4a45-aa70-e40a4da66a53.cer sbgp-ipAddrBlock: critical IPv4: 209.209.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:b5:96:23:0a:96:79:35:f0:13:d7:3f:c8:5c:fb:fd:df:b0: 1c:87:ca:93:03:4f:e0:4e:69:fd:33:31:8d:1b:73:8d:56:31: a7:f8:be:68:0f:99:03:90:47:d6:8d:ca:89:53:7e:82:e1:f7: 27:d5:25:83:5a:e9:9f:0b:97:06:6c:97:6f:f3:77:95:07:f6: 45:c6:06:17:26:92:ad:b9:7e:96:72:da:ad:4c:34:48:3a:02: ee:b9:86:07:11:b7:d7:68:0f:89:ea:a9:c6:23:b0:30:e7:f2: 90:e9:86:06:ca:f9:a6:5c:78:f3:de:d1:5c:a7:e6:1a:16:32: f3:06:d5:96:81:6a:a7:ba:cb:b3:af:d5:38:96:91:be:cc:48: 92:ab:2a:b4:44:65:26:3e:8d:51:ff:8d:8d:48:2e:5c:78:d0: d3:aa:1c:a9:0d:9f:e8:c6:d0:09:42:49:40:81:5b:c0:e4:99: a3:45:48:a6:05:ad:5c:22:60:0e:de:3e:30:cc:95:e5:cd:07: 84:49:73:4f:ed:1b:65:c1:c6:fe:6e:e0:a2:fd:7c:99:4a:36: 13:04:c5:fd:15:c9:06:bf:f1:24:07:e9:e5:42:84:5f:19:3f: c6:93:b4:d8:e6:63:f0:31:fb:29:5c:72:e4:cb:aa:ad:58:2c: a2:bd:6f:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRC/5moF0W6KUsD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDdjOGFmNDItM2UwNy00YTQ1LWFhNzAtZTQwYTRkYTY2 YTUzMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZGM4OWQ1YzctZjgwOC00YWQzLWJhYzEtYjM1OWRlYzNiZjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29p0w8GaW40zf9OrPejZvBmfrE2xEzruV/U6 4ayVVoImbaQnee+myriwqQWfKI4ZrHXc3ddOczkd8PRrOwvH/o6aakd5WLcE86el AJ2JCDVLEyZhvA/J16WBipqEtpio0EbAdKBwKDYRhdT4XpLs6WO0oKs5TyToVgJE TsVGerFjwqYqoLLIxNmZt8lWMGDMHY404AEXMiaps2fRjxD3qfmQRcCAt4bTiD/b ykKD6drylNiJ4BTrL309NL/vcTluowajV8yhuaM5tkKx8yotVChI7BZaWubP/cFK Z4Qd3yHSwUseRWPpssBUaasBhejoc7TmxNkivbcBfw5E5lsupwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEF65tyzfShcyRCEuE9MAY7jpWAGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wN2M4 YWY0Mi0zZTA3LTRhNDUtYWE3MC1lNDBhNGRhNjZhNTMvNzEwMTNhM2UtYzU2Ni0z OTI5LWJhNDEtY2M1Mzk5NDZmMTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDdjOGFmNDItM2UwNy00YTQ1LWFh NzAtZTQwYTRkYTY2YTUzLzA3YzhhZjQyLTNlMDctNGE0NS1hYTcwLWU0MGE0ZGE2 NmE1My5jcmwwHwYDVR0jBBgwFoAURuYm2FiAw/xmWZFUS1kmgU8d8B0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wN2M4YWY0Mi0zZTA3LTRhNDUtYWE3MC1lNDBh NGRhNjZhNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dFYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMC1liMKlnk18BPXP8hc+/3fsByHypMDT+BOaf0zMY0bc41WMaf4vmgP mQOQR9aNyolTfoLh9yfVJYNa6Z8LlwZsl2/zd5UH9kXGBhcmkq25fpZy2q1MNEg6 Au65hgcRt9doD4nqqcYjsDDn8pDphgbK+aZcePPe0Vyn5hoWMvMG1ZaBaqe6y7Ov 1TiWkb7MSJKrKrREZSY+jVH/jY1ILlx40NOqHKkNn+jG0AlCSUCBW8DkmaNFSKYF rVwiYA7ePjDMleXNB4RJc0/tG2XBxv5u4KL9fJlKNhMExf0VyQa/8SQH6eVChF8Z P8aTtNjmY/Ax+ylccuTLqq1YLKK9b3E= -----END CERTIFICATE-----Generated at Wed Nov 5 16:44:35 2025 by rpki-client