$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/a9ea7dee-72c8-3f0e-bd32-d30199b38096.roa File: a9ea7dee-72c8-3f0e-bd32-d30199b38096.roa (raw, json) Hash identifier: ap8sMuv4nL05F3VE5NBjWo71rVYBwkLJ075DmiiF94A= Subject key identifier: AF:B0:EA:EA:90:C7:31:C4:1C:66:FC:2C:54:75:A5:5C:84:D1:56:20 Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Certificate serial: 010D0C9F4328584BBFA5A81902DCF560CB32EF00 Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/a9ea7dee-72c8-3f0e-bd32-d30199b38096.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 16509 IP address blocks: 209.169.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:a8:19:02:dc:f5:60:cb:32:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=bea103a7-63bd-4fc3-ac8c-58822c942303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:12:d2:99:cf:a8:ae:41:f5:0e:79:08:e4:ce: 1c:a5:e2:24:26:f8:04:a1:db:12:8d:eb:ce:d5:fd: 60:e8:7b:9b:d8:5b:85:3f:57:d5:17:f6:d1:18:ca: 12:03:8e:32:44:57:8c:8e:66:2f:57:ce:77:aa:e3: ab:e0:25:d1:58:fc:d6:ad:9d:10:b4:db:e4:c9:81: 34:d8:5f:c2:b7:a5:e6:b1:66:69:69:43:3e:41:95: ad:a1:68:4a:89:4f:59:c1:99:21:6f:39:a8:4a:f8: b3:0d:86:08:cc:70:c7:e4:d3:95:a7:40:49:15:97: f6:1f:0d:4e:f6:d7:3c:c6:02:b8:e1:07:55:a9:3a: 24:1f:b9:1d:88:8e:39:cf:4b:78:b2:d5:8b:09:5c: 93:c9:ff:14:8b:82:f4:d0:a0:7f:1f:fa:bc:76:8e: 43:4d:7d:ae:d3:78:f2:91:05:a3:1f:e6:72:e6:10: e0:b6:30:19:f0:4b:33:dd:bc:72:08:71:13:19:e9: 1d:a4:cb:d7:de:e7:3b:44:d5:1e:e6:0c:f4:19:5d: c9:ff:7c:7e:71:d1:90:5c:bf:dd:bc:76:09:d2:91: 3f:c2:b1:0d:a0:3a:43:bc:65:66:fa:5e:b7:15:16: 1f:0a:fe:93:a7:a3:52:ab:3e:2d:7e:23:4c:87:2c: f1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B0:EA:EA:90:C7:31:C4:1C:66:FC:2C:54:75:A5:5C:84:D1:56:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/a9ea7dee-72c8-3f0e-bd32-d30199b38096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl X509v3 Authority Key Identifier: keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer sbgp-ipAddrBlock: critical IPv4: 209.169.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:b3:10:2e:6b:46:14:50:0c:3e:af:8f:1c:c2:bf:36:d7:25: b1:a4:6d:08:b7:b4:96:30:d7:f8:a9:88:ec:81:fc:09:cf:f6: a5:34:64:2c:f4:e8:3a:59:3b:cb:82:ee:98:f4:b7:d1:c4:d1: 02:b9:d1:9d:57:70:28:9a:3e:fa:0a:1d:47:c7:60:7f:69:95: 84:7b:15:56:a2:31:6c:14:da:a6:3b:11:f0:8b:13:ac:57:de: d4:7b:43:9b:3c:65:b4:38:9e:85:e4:67:32:52:74:c3:4b:35: bf:e1:3b:d5:cb:c8:df:56:1f:e4:79:58:e6:b2:cd:86:3c:57: 37:9f:5e:70:6d:12:3b:65:79:3c:2d:e8:ad:3b:14:d4:ae:07: 8e:3d:ed:0d:36:cb:1c:12:88:79:13:84:b7:db:04:a1:66:9a: 5a:90:ab:89:85:8b:b4:fd:a4:98:71:da:c8:ef:9a:bf:9b:8c: f8:30:d2:e9:d8:e8:65:f0:f5:ea:10:4c:c8:0e:ea:5d:d2:10: 38:7e:7d:19:c5:e1:da:9d:9f:27:3a:9c:31:fb:4a:36:3e:e0: 46:35:67:90:48:07:82:06:94:b4:9c:22:6f:5a:0e:82:b3:84: 1d:c8:85:d3:1c:c7:93:35:67:1b:3d:8f:24:db:dc:5a:d0:17: 63:2f:69:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pagZAtz1YMsy7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw MjhiMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk YmVhMTAzYTctNjNiZC00ZmMzLWFjOGMtNTg4MjJjOTQyMzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRLSmc+orkH1DnkI5M4cpeIkJvgEodsSjevO 1f1g6Hub2FuFP1fVF/bRGMoSA44yRFeMjmYvV853quOr4CXRWPzWrZ0QtNvkyYE0 2F/Ct6XmsWZpaUM+QZWtoWhKiU9ZwZkhbzmoSvizDYYIzHDH5NOVp0BJFZf2Hw1O 9tc8xgK44QdVqTokH7kdiI45z0t4stWLCVyTyf8Ui4L00KB/H/q8do5DTX2u03jy kQWjH+Zy5hDgtjAZ8Esz3bxyCHETGekdpMvX3uc7RNUe5gz0GV3J/3x+cdGQXL/d vHYJ0pE/wrENoDpDvGVm+l63FRYfCv6Tp6NSqz4tfiNMhyzxqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+w6uqQxzHEHGb8LFR1pVyE0VYgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvYTllYTdkZWUtNzJjOC0z ZjBlLWJkMzItZDMwMTk5YjM4MDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0 NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0an2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2zEC5rRhRQDD6vjxzCvzbXJbGkbQi3tJYw1/ipiOyB/AnP9qU0ZCz0 6DpZO8uC7pj0t9HE0QK50Z1XcCiaPvoKHUfHYH9plYR7FVaiMWwU2qY7EfCLE6xX 3tR7Q5s8ZbQ4noXkZzJSdMNLNb/hO9XLyN9WH+R5WOayzYY8VzefXnBtEjtleTwt 6K07FNSuB4497Q02yxwSiHkThLfbBKFmmlqQq4mFi7T9pJhx2sjvmr+bjPgw0unY 6GXw9eoQTMgO6l3SEDh+fRnF4dqdnyc6nDH7SjY+4EY1Z5BIB4IGlLScIm9aDoKz hB3IhdMcx5M1Zxs9jyTb3FrQF2MvaWk= -----END CERTIFICATE-----Generated at Wed Nov 5 05:42:01 2025 by rpki-client