$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/6204d571-e803-3094-aba8-da4087c9cc40.roa File: 6204d571-e803-3094-aba8-da4087c9cc40.roa (raw, json) Hash identifier: E2C+TQS4Q21z9NmmM68+flG5hqlJVIwS+srYo2J8q4I= Subject key identifier: 71:2E:50:0C:C3:75:A2:E3:76:1C:BD:E3:54:3D:00:13:F4:B5:37:61 Certificate issuer: /CN=b267d832-cb05-4c68-a5ce-ba4645db35e0 Certificate serial: 010D0C9F4328584BA39CFDE8745B7E9463B8AD00 Authority key identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/6204d571-e803-3094-aba8-da4087c9cc40.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 10929 IP address blocks: 209.44.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9c:fd:e8:74:5b:7e:94:63:b8:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b267d832-cb05-4c68-a5ce-ba4645db35e0 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=d758cae8-7770-47e3-b29d-632676e2f49b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d8:78:48:c5:11:4d:48:9a:0d:d3:1a:00:45: 9a:a2:d0:4c:27:e7:7d:ee:66:2d:27:44:83:37:c6: 66:f9:74:60:44:7c:5d:e3:28:6c:87:c3:f5:9a:65: 38:b3:9f:c2:45:1f:6c:75:7c:de:5d:5a:b0:a8:5c: 6e:bb:25:87:08:41:6d:11:2c:80:4f:72:fe:d1:f1: c9:6a:44:a6:9a:e8:a3:71:ea:95:70:cc:1f:7d:7c: 88:47:37:77:bd:cc:84:73:a2:82:52:dd:3d:da:2a: 30:1f:c5:67:31:94:d7:0f:35:fd:ae:35:71:60:93: 87:6d:93:42:92:55:2d:4f:3f:c6:f4:ca:3c:f6:6d: c2:23:09:0e:40:d0:96:a4:6a:cd:cf:6c:2e:35:ae: e2:69:19:f4:34:d4:6b:d9:1a:2a:48:62:fa:4a:7d: 7b:26:5f:40:19:e1:33:07:2e:c0:36:d1:c2:1f:e8: 0b:0a:8a:61:5d:98:a8:bb:08:2a:3d:1f:f3:75:a5: f5:0e:25:10:69:3a:d1:48:6b:2d:07:a6:b6:5e:6e: 8b:db:1e:78:21:b8:a7:ba:89:8b:63:73:d2:bc:32: fb:a6:d5:22:ab:fb:6c:5c:42:90:cc:31:66:d8:a6: 88:02:19:d1:9b:cc:72:fe:63:0e:75:74:49:66:72: 5f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2E:50:0C:C3:75:A2:E3:76:1C:BD:E3:54:3D:00:13:F4:B5:37:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/6204d571-e803-3094-aba8-da4087c9cc40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl X509v3 Authority Key Identifier: keyid:DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer sbgp-ipAddrBlock: critical IPv4: 209.44.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:e1:3b:0f:43:5b:63:d4:28:78:e3:55:ce:47:5d:8e:e8:d1: ee:ca:d6:0f:b9:dc:67:b9:48:db:4d:f0:a0:01:16:de:5b:f3: 94:b7:50:f5:e6:63:24:98:ef:e1:16:a0:57:f4:56:b9:00:24: f0:73:6a:3d:37:2e:9c:cb:d3:90:3a:c5:6c:b0:58:5f:df:f1: 88:c9:6b:86:d7:43:7d:d0:7a:e8:4a:2d:59:9d:d6:ab:5e:6f: ec:0f:ca:71:4f:ca:4e:c8:d4:8a:1a:f5:fa:48:f4:3b:a3:33: 95:9e:da:47:df:35:e6:b3:c5:2a:2a:a1:e6:2b:4c:90:10:5a: 62:5d:cb:c3:a0:76:70:de:8a:a4:89:61:d0:36:d6:ee:9c:ae: 75:4c:33:51:a1:70:d9:b6:1e:0a:fe:89:65:ea:17:d6:30:2a: 38:d1:83:92:84:d5:80:48:a8:4c:a8:39:53:f3:dd:b0:f9:8e: 12:24:dc:f0:d8:a2:6f:c7:12:43:6b:2c:5c:16:ca:7f:70:92: 9e:3f:3d:ff:03:80:94:15:8d:ac:61:6f:db:a5:18:17:8a:ec: 27:a7:90:1c:58:ca:ab:28:1b:14:0b:e2:0a:ad:30:81:1b:52: 7e:ad:13:44:15:5a:ae:bb:4b:78:50:29:1f:08:59:33:e1:b7: f0:24:72:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnP3odFt+lGO4rQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI2N2Q4MzItY2IwNS00YzY4LWE1Y2UtYmE0NjQ1ZGIz NWUwMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZDc1OGNhZTgtNzc3MC00N2UzLWIyOWQtNjMyNjc2ZTJmNDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9h4SMURTUiaDdMaAEWaotBMJ+d97mYtJ0SD N8Zm+XRgRHxd4yhsh8P1mmU4s5/CRR9sdXzeXVqwqFxuuyWHCEFtESyAT3L+0fHJ akSmmuijceqVcMwffXyIRzd3vcyEc6KCUt092iowH8VnMZTXDzX9rjVxYJOHbZNC klUtTz/G9Mo89m3CIwkOQNCWpGrNz2wuNa7iaRn0NNRr2RoqSGL6Sn17Jl9AGeEz By7ANtHCH+gLCophXZiouwgqPR/zdaX1DiUQaTrRSGstB6a2Xm6L2x54IbinuomL Y3PSvDL7ptUiq/tsXEKQzDFm2KaIAhnRm8xy/mMOdXRJZnJfDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEuUAzDdaLjdhy941Q9ABP0tTdhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMjY3 ZDgzMi1jYjA1LTRjNjgtYTVjZS1iYTQ2NDVkYjM1ZTAvNjIwNGQ1NzEtZTgwMy0z MDk0LWFiYTgtZGE0MDg3YzljYzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjI2N2Q4MzItY2IwNS00YzY4LWE1 Y2UtYmE0NjQ1ZGIzNWUwL2IyNjdkODMyLWNiMDUtNGM2OC1hNWNlLWJhNDY0NWRi MzVlMC5jcmwwHwYDVR0jBBgwFoAU2rliA1hIhy/TMsdQmyxxCC9eqCYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iMjY3ZDgzMi1jYjA1LTRjNjgtYTVjZS1iYTQ2 NDVkYjM1ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0SxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbhOw9DW2PUKHjjVc5HXY7o0e7K1g+53Ge5SNtN8KABFt5b85S3UPXm YySY7+EWoFf0VrkAJPBzaj03LpzL05A6xWywWF/f8YjJa4bXQ33QeuhKLVmd1qte b+wPynFPyk7I1Ioa9fpI9DujM5We2kffNeazxSoqoeYrTJAQWmJdy8OgdnDeiqSJ YdA21u6crnVMM1GhcNm2Hgr+iWXqF9YwKjjRg5KE1YBIqEyoOVPz3bD5jhIk3PDY om/HEkNrLFwWyn9wkp4/Pf8DgJQVjaxhb9ulGBeK7CenkBxYyqsoGxQL4gqtMIEb Un6tE0QVWq67S3hQKR8IWTPht/AkcvY= -----END CERTIFICATE-----Generated at Wed Nov 5 16:37:53 2025 by rpki-client