$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12/5e96c0cf-3077-3854-81df-de74836c1b82.roa File: 5e96c0cf-3077-3854-81df-de74836c1b82.roa (raw, json) Hash identifier: PW7m8vnbDmPkJL4Ju8dkjW055GB6kuxs5JUcrmkye8E= Subject key identifier: 2B:E3:D8:82:7F:50:D8:4B:50:9F:7D:BB:1C:84:8F:E6:8F:DF:64:25 Certificate issuer: /CN=914c4a10-97c5-4f06-914d-13485f7f3e12 Certificate serial: 010D0C9F4328584BB5C2669094639483AC920DC0 Authority key identifier: DB:B8:B2:F4:DF:9F:2E:9D:14:08:37:EE:78:0A:A2:6A:31:0A:96:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12/5e96c0cf-3077-3854-81df-de74836c1b82.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 398032 IP address blocks: 209.151.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12/914c4a10-97c5-4f06-914d-13485f7f3e12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12/914c4a10-97c5-4f06-914d-13485f7f3e12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:66:90:94:63:94:83:ac:92:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914c4a10-97c5-4f06-914d-13485f7f3e12 Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=f8f8907f-ad39-4573-824a-b5ad8dd7b162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4a:e3:64:be:60:41:3c:7f:be:dc:57:f3:75: 7a:fb:f3:ae:e3:9e:b5:5d:62:ad:6d:ab:d8:06:9a: 0b:53:89:cf:1b:a4:57:71:45:b8:b3:22:45:68:a1: 40:20:3e:d4:cd:48:e5:9f:81:ba:e5:74:51:8f:04: ac:05:23:d1:1b:a7:0b:0a:e8:2f:2f:96:25:c9:9d: 2a:9a:4b:27:a7:6e:06:ad:98:9d:01:88:a6:46:52: c2:5f:12:28:ed:01:a3:a3:bc:2b:8f:86:f0:b2:dd: 0f:99:ec:43:a4:d3:47:88:f7:3d:12:91:57:d7:90: 35:78:c0:3e:52:5a:07:21:bc:d1:a3:fb:6e:a5:b7: de:50:41:bd:f9:69:75:eb:37:73:9d:90:0b:6c:d6: 4d:4b:4e:db:21:12:6d:89:c1:18:93:f9:b7:a3:6a: 9c:30:36:c4:50:9d:34:48:23:e5:30:06:c8:a1:47: 67:00:f5:ae:c5:52:64:19:17:73:f2:67:b6:bd:50: fe:ee:82:8b:fa:be:9e:91:2e:8b:bd:b8:88:02:6d: 10:16:db:bc:cf:7c:93:8a:ba:18:04:0b:bc:fc:d3: 37:a9:be:4c:ab:33:ba:6f:3e:a1:24:1b:3a:6b:b6: 8c:89:0f:54:30:58:c9:9e:43:38:12:8a:8c:1d:07: 06:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E3:D8:82:7F:50:D8:4B:50:9F:7D:BB:1C:84:8F:E6:8F:DF:64:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12/5e96c0cf-3077-3854-81df-de74836c1b82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12/914c4a10-97c5-4f06-914d-13485f7f3e12.crl X509v3 Authority Key Identifier: keyid:DB:B8:B2:F4:DF:9F:2E:9D:14:08:37:EE:78:0A:A2:6A:31:0A:96:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/914c4a10-97c5-4f06-914d-13485f7f3e12.cer sbgp-ipAddrBlock: critical IPv4: 209.151.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:ad:24:24:55:f0:05:1e:fb:b5:65:21:27:10:27:aa:7e:c7: 81:5e:3c:8c:c5:d2:4a:96:e0:34:1e:23:35:6b:f5:df:2c:e5: f9:a4:8e:3e:79:2f:5b:b4:ee:06:75:55:01:96:bb:cf:6b:9b: aa:86:40:68:23:ed:a9:95:8e:32:02:93:d1:f6:fd:a7:51:7d: 68:61:a9:39:b6:e7:fc:e4:c0:c2:38:0f:56:08:e7:fd:c3:de: b7:42:c9:70:0c:e4:2f:88:44:40:77:61:92:b4:de:49:a2:17: 55:41:25:6d:91:45:cd:9f:da:3e:30:a7:c0:80:6d:5b:c4:a6: d5:c4:e0:ef:fd:9f:ac:32:d5:98:21:43:ec:c1:1c:47:ee:8b: ff:27:b6:20:cf:86:01:66:fe:52:cf:39:8c:0d:c4:e5:55:10: 97:d9:f3:19:00:28:db:6a:47:2b:68:e4:c5:c7:5c:a5:09:75: 70:98:ed:ae:4f:a4:31:8d:2e:31:d1:52:16:c4:15:d9:49:f3: 4e:97:70:2d:36:50:d8:d2:49:33:11:ce:0d:29:27:5a:db:b5: 0c:73:fc:20:37:a1:8e:73:4d:29:ae:1f:14:ab:b7:8f:ea:c2: 79:71:07:f4:3a:41:c5:07:96:96:9e:9f:ec:b4:ae:56:3f:d9: d5:df:81:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wmaQlGOUg6ySDcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0YzRhMTAtOTdjNS00ZjA2LTkxNGQtMTM0ODVmN2Yz ZTEyMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk ZjhmODkwN2YtYWQzOS00NTczLTgyNGEtYjVhZDhkZDdiMTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikrjZL5gQTx/vtxX83V6+/Ou4561XWKtbavY BpoLU4nPG6RXcUW4syJFaKFAID7UzUjln4G65XRRjwSsBSPRG6cLCugvL5YlyZ0q mksnp24GrZidAYimRlLCXxIo7QGjo7wrj4bwst0PmexDpNNHiPc9EpFX15A1eMA+ UloHIbzRo/tupbfeUEG9+Wl16zdznZALbNZNS07bIRJticEYk/m3o2qcMDbEUJ00 SCPlMAbIoUdnAPWuxVJkGRdz8me2vVD+7oKL+r6ekS6LvbiIAm0QFtu8z3yTiroY BAu8/NM3qb5MqzO6bz6hJBs6a7aMiQ9UMFjJnkM4EoqMHQcGMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvj2IJ/UNhLUJ99uxyEj+aP32QlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85MTRj NGExMC05N2M1LTRmMDYtOTE0ZC0xMzQ4NWY3ZjNlMTIvNWU5NmMwY2YtMzA3Ny0z ODU0LTgxZGYtZGU3NDgzNmMxYjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTE0YzRhMTAtOTdjNS00ZjA2LTkx NGQtMTM0ODVmN2YzZTEyLzkxNGM0YTEwLTk3YzUtNGYwNi05MTRkLTEzNDg1Zjdm M2UxMi5jcmwwHwYDVR0jBBgwFoAU27iy9N+fLp0UCDfueAqiajEKloMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85MTRjNGExMC05N2M1LTRmMDYtOTE0ZC0xMzQ4 NWY3ZjNlMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Zd/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOtJCRV8AUe+7VlIScQJ6p+x4FePIzF0kqW4DQeIzVr9d8s5fmkjj55 L1u07gZ1VQGWu89rm6qGQGgj7amVjjICk9H2/adRfWhhqTm25/zkwMI4D1YI5/3D 3rdCyXAM5C+IREB3YZK03kmiF1VBJW2RRc2f2j4wp8CAbVvEptXE4O/9n6wy1Zgh Q+zBHEfui/8ntiDPhgFm/lLPOYwNxOVVEJfZ8xkAKNtqRyto5MXHXKUJdXCY7a5P pDGNLjHRUhbEFdlJ806XcC02UNjSSTMRzg0pJ1rbtQxz/CA3oY5zTSmuHxSrt4/q wnlxB/Q6QcUHlpaen+y0rlY/2dXfgW0= -----END CERTIFICATE-----Generated at Wed Nov 5 14:40:53 2025 by rpki-client