$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/f44d1fc1-7b77-3156-9214-4a2a059c2b3f.roa File: f44d1fc1-7b77-3156-9214-4a2a059c2b3f.roa (raw, json) Hash identifier: Ib9n5XZkIlWmeH+fYUcgAKwZgL0AQF2Vn9EpjJr1ICU= Subject key identifier: D4:A5:A4:33:F1:09:F4:4F:23:F3:F4:F2:4C:C3:B1:75:3F:55:5B:67 Certificate issuer: /CN=ae67d891-3b16-4302-bf8b-4adb69436dbe Certificate serial: 010D0C9F4328584B047C0A12FFF81DEA9B0DDD80 Authority key identifier: A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/f44d1fc1-7b77-3156-9214-4a2a059c2b3f.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 16604 IP address blocks: 209.124.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:0a:12:ff:f8:1d:ea:9b:0d:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae67d891-3b16-4302-bf8b-4adb69436dbe Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=bb65e542-ee7b-484c-b610-d1ff3371b0bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:82:b2:85:19:61:f9:bf:db:c0:8a:a0:f2:c8: f1:e8:9a:2b:fa:ef:d5:44:39:66:72:5d:4d:bd:5d: 90:db:cc:e0:ea:ce:24:65:8e:53:4e:8d:95:1b:62: 3b:2b:40:f7:af:10:87:5e:34:73:92:db:a1:bb:f9: dd:71:30:ed:a5:4f:5e:f5:9b:c3:2b:d1:89:0e:77: 6c:ed:15:9f:2a:9d:0b:9f:bd:94:b2:c7:b5:d3:f2: c7:de:f1:84:c6:a3:f2:fd:0e:e1:2f:a8:2d:13:8b: a7:48:b5:c8:6c:64:83:a9:c7:e7:e8:86:3a:7d:c1: 90:43:22:aa:5c:48:d6:9d:8e:ad:90:6d:80:a7:6b: 7b:82:30:ba:d9:83:f7:3d:40:ef:8d:6b:12:3c:63: b9:c3:c3:ff:43:86:07:99:12:49:89:f6:99:d5:f7: 38:c6:9d:ce:17:ea:b3:8c:8f:96:9b:46:34:d1:69: d7:9d:71:f9:c9:4e:41:74:66:11:f8:90:e5:2b:84: 43:3e:69:ce:30:d8:d5:d9:f6:8c:43:42:f8:2e:d3: 0a:43:42:a5:df:a2:07:a0:19:40:2a:0c:26:78:c7: 37:d5:5c:39:26:9c:a0:5a:bd:9d:90:ef:53:54:93: 6d:51:fc:37:d5:50:b0:bb:b3:21:73:1b:f5:c6:fb: 59:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A5:A4:33:F1:09:F4:4F:23:F3:F4:F2:4C:C3:B1:75:3F:55:5B:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/f44d1fc1-7b77-3156-9214-4a2a059c2b3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl X509v3 Authority Key Identifier: keyid:A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer sbgp-ipAddrBlock: critical IPv4: 209.124.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:7e:b3:37:8d:b6:51:9d:2a:34:eb:01:10:4b:51:f2:37:e8: 47:71:42:db:bf:c0:82:01:2f:db:8a:52:17:b6:d9:7d:3e:d1: fc:4e:96:1e:e5:b5:0b:bf:f1:17:57:68:b2:3d:0a:e3:8d:96: 15:c8:8a:5f:8b:12:40:73:17:77:4a:cf:4c:a1:40:16:84:8d: c7:3e:a1:82:b4:f0:4f:a9:55:bb:aa:eb:a6:26:36:07:50:13: 79:b8:91:c9:90:27:68:be:0d:1a:75:bc:78:d3:cb:27:b4:37: ab:fb:05:73:b8:e5:3c:07:92:76:6d:43:f8:36:81:bb:d3:29: 31:22:29:04:25:6a:ce:f6:8b:79:d9:bf:32:d8:fc:2d:0a:4d: dd:92:14:ca:a5:f7:cc:03:43:03:b2:0f:78:28:78:38:a3:5f: a4:30:a3:7b:05:8a:0d:7c:4d:a1:c8:13:20:fa:0e:55:a5:12: d4:42:d2:73:85:7b:92:3b:6e:2d:04:3b:38:d2:73:8f:cb:b3: db:12:09:9b:45:d7:f7:40:e6:2b:4b:b2:03:03:ce:94:c9:3a: 6a:34:11:7d:e2:9b:66:ab:c7:0b:b2:d8:4c:36:c0:51:5b:c5: 16:91:f2:24:ed:72:ce:e4:e6:c2:d4:f1:76:d9:d8:b8:dc:42: 07:ee:bb:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfAoS//gd6psN3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU2N2Q4OTEtM2IxNi00MzAyLWJmOGItNGFkYjY5NDM2 ZGJlMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk YmI2NWU1NDItZWU3Yi00ODRjLWI2MTAtZDFmZjMzNzFiMGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4KyhRlh+b/bwIqg8sjx6Jor+u/VRDlmcl1N vV2Q28zg6s4kZY5TTo2VG2I7K0D3rxCHXjRzktuhu/ndcTDtpU9e9ZvDK9GJDnds 7RWfKp0Ln72Usse10/LH3vGExqPy/Q7hL6gtE4unSLXIbGSDqcfn6IY6fcGQQyKq XEjWnY6tkG2Ap2t7gjC62YP3PUDvjWsSPGO5w8P/Q4YHmRJJifaZ1fc4xp3OF+qz jI+Wm0Y00WnXnXH5yU5BdGYR+JDlK4RDPmnOMNjV2faMQ0L4LtMKQ0Kl36IHoBlA KgwmeMc31Vw5JpygWr2dkO9TVJNtUfw31VCwu7Mhcxv1xvtZnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSlpDPxCfRPI/P08kzDsXU/VVtnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hZTY3 ZDg5MS0zYjE2LTQzMDItYmY4Yi00YWRiNjk0MzZkYmUvZjQ0ZDFmYzEtN2I3Ny0z MTU2LTkyMTQtNGEyYTA1OWMyYjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWU2N2Q4OTEtM2IxNi00MzAyLWJm OGItNGFkYjY5NDM2ZGJlL2FlNjdkODkxLTNiMTYtNDMwMi1iZjhiLTRhZGI2OTQz NmRiZS5jcmwwHwYDVR0jBBgwFoAUqQTSjf5p6pOv5FCHULU1zbydkCgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hZTY3ZDg5MS0zYjE2LTQzMDItYmY4Yi00YWRi Njk0MzZkYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XyEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZ+szeNtlGdKjTrARBLUfI36EdxQtu/wIIBL9uKUhe22X0+0fxOlh7l tQu/8RdXaLI9CuONlhXIil+LEkBzF3dKz0yhQBaEjcc+oYK08E+pVbuq66YmNgdQ E3m4kcmQJ2i+DRp1vHjTyye0N6v7BXO45TwHknZtQ/g2gbvTKTEiKQQlas72i3nZ vzLY/C0KTd2SFMql98wDQwOyD3goeDijX6Qwo3sFig18TaHIEyD6DlWlEtRC0nOF e5I7bi0EOzjSc4/Ls9sSCZtF1/dA5itLsgMDzpTJOmo0EX3im2arxwuy2Ew2wFFb xRaR8iTtcs7k5sLU8XbZ2LjcQgfuu08= -----END CERTIFICATE-----Generated at Wed Nov 5 08:37:24 2025 by rpki-client