$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/0dfd6515-bdb1-3df5-93f0-d5778b70020f.roa File: 0dfd6515-bdb1-3df5-93f0-d5778b70020f.roa (raw, json) Hash identifier: qB0xJnEujXe2NBZxiixcWk2ACMvwhfW5aZCwKlTLeuc= Subject key identifier: 41:E7:09:C8:8C:11:3B:11:FD:74:4A:07:90:A5:3F:8D:89:5E:A7:90 Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Certificate serial: 010D0C9F4328584BBFA5A7EF489416035494BE80 Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/0dfd6515-bdb1-3df5-93f0-d5778b70020f.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16509 IP address blocks: 209.169.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:a7:ef:48:94:16:03:54:94:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=3904dd88-5e29-4480-96d0-c324e669bb1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c6:aa:72:4a:d6:f2:9f:15:33:0e:ac:82:f2: 1e:22:f0:d1:b2:4a:fa:42:55:d2:96:5b:4a:13:4c: 22:b3:1d:01:4b:a0:0b:be:7f:84:6f:24:08:64:7c: e3:f4:00:92:30:29:22:4b:58:89:3d:93:4b:ca:a1: 58:d8:05:d1:89:de:10:91:4e:19:5e:2c:12:50:49: 1c:51:1c:c4:13:b6:e8:b3:f4:ec:91:90:7b:84:55: 9f:dd:c7:ff:7b:c4:f1:6a:6c:bb:0d:06:da:da:7e: 91:0f:7d:82:5b:6f:f2:30:09:0f:25:86:e2:cf:0b: cb:f2:0e:98:04:2e:a2:86:52:5a:1e:14:9d:41:d6: ed:d6:db:e4:ce:af:90:87:45:14:05:65:44:83:d3: e5:c4:ea:a0:7b:00:a6:f8:fb:e3:69:0d:48:5e:22: 3b:b2:80:94:4b:52:32:97:e9:d2:c8:e5:be:8f:47: e2:4f:da:92:9b:23:53:25:45:df:57:55:3b:76:94: 83:9b:29:34:24:93:c1:4e:a2:ea:3a:a4:b6:4b:c0: 56:23:91:a1:3b:0a:33:8d:41:6c:7d:ee:d5:04:23: 83:3c:5f:66:b1:3c:c7:e2:1a:c8:55:9c:d2:b8:c6: cb:76:c8:77:ca:9b:11:2f:17:09:8e:64:1d:83:1b: 00:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E7:09:C8:8C:11:3B:11:FD:74:4A:07:90:A5:3F:8D:89:5E:A7:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/0dfd6515-bdb1-3df5-93f0-d5778b70020f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl X509v3 Authority Key Identifier: keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer sbgp-ipAddrBlock: critical IPv4: 209.169.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:0d:88:27:0b:81:db:d4:c7:cc:19:c1:60:56:e2:3f:b1:e9: d9:3e:5e:18:6f:09:0a:6c:f2:aa:07:39:10:41:45:71:cd:e2: 53:da:12:da:86:e6:19:32:77:32:13:25:5e:a9:72:da:ed:99: 91:5b:25:fd:f6:2f:4c:f3:ea:e9:0e:da:77:02:3e:d0:78:80: 45:67:19:e8:2c:df:fd:75:cc:33:14:28:e9:95:49:9f:a7:53: d7:a8:9c:f3:b9:ca:4e:d6:29:e8:3f:c2:c4:00:5f:d9:fd:49: fd:91:73:06:fe:25:c4:47:f2:e3:2a:78:e8:75:8d:18:41:ed: e2:c3:fc:5f:5f:3a:dc:2e:e4:23:35:1c:39:7a:0f:45:4b:70: 42:54:00:9d:af:22:4b:d9:c5:6f:9d:5c:b8:9e:25:7a:d8:16: 7d:f5:fc:0e:5d:60:0e:53:a6:85:05:fa:b2:76:63:25:ad:ce: e3:be:2a:ec:e3:90:90:4f:ea:ce:05:40:cf:c9:62:53:f4:86: 71:7e:f1:4b:d0:53:47:4b:7b:00:96:fb:dc:47:2f:77:c1:b7: dd:fd:14:02:65:c7:d1:e6:f8:8b:b1:2e:95:67:44:9a:e1:fc: de:fd:f5:3d:0d:48:ed:d3:16:62:01:5f:41:4b:dc:0a:87:04: 71:b6:63:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pafvSJQWA1SUvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw MjhiMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk MzkwNGRkODgtNWUyOS00NDgwLTk2ZDAtYzMyNGU2NjliYjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8aqckrW8p8VMw6sgvIeIvDRskr6QlXSlltK E0wisx0BS6ALvn+EbyQIZHzj9ACSMCkiS1iJPZNLyqFY2AXRid4QkU4ZXiwSUEkc URzEE7bos/TskZB7hFWf3cf/e8Txamy7DQba2n6RD32CW2/yMAkPJYbizwvL8g6Y BC6ihlJaHhSdQdbt1tvkzq+Qh0UUBWVEg9PlxOqgewCm+PvjaQ1IXiI7soCUS1Iy l+nSyOW+j0fiT9qSmyNTJUXfV1U7dpSDmyk0JJPBTqLqOqS2S8BWI5GhOwozjUFs fe7VBCODPF9msTzH4hrIVZzSuMbLdsh3ypsRLxcJjmQdgxsA9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEHnCciMETsR/XRKB5ClP42JXqeQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvMGRmZDY1MTUtYmRiMS0z ZGY1LTkzZjAtZDU3NzhiNzAwMjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0 NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0an1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALANiCcLgdvUx8wZwWBW4j+x6dk+XhhvCQps8qoHORBBRXHN4lPaEtqG 5hkydzITJV6pctrtmZFbJf32L0zz6ukO2ncCPtB4gEVnGegs3/11zDMUKOmVSZ+n U9eonPO5yk7WKeg/wsQAX9n9Sf2Rcwb+JcRH8uMqeOh1jRhB7eLD/F9fOtwu5CM1 HDl6D0VLcEJUAJ2vIkvZxW+dXLieJXrYFn31/A5dYA5TpoUF+rJ2YyWtzuO+Kuzj kJBP6s4FQM/JYlP0hnF+8UvQU0dLewCW+9xHL3fBt939FAJlx9Hm+IuxLpVnRJrh /N799T0NSO3TFmIBX0FL3AqHBHG2Y4Q= -----END CERTIFICATE-----Generated at Wed Nov 5 07:59:45 2025 by rpki-client