$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/cdde8e7a-4a08-36f0-a460-3660a0f74809.roa File: cdde8e7a-4a08-36f0-a460-3660a0f74809.roa (raw, json) Hash identifier: 729nss3ajWVW6wwIdWCjM8BkzVLn2rkWCCv81few0Ko= Subject key identifier: 61:0E:4C:40:F4:83:CA:77:52:BA:B0:B5:98:8E:7A:3F:9E:4B:85:10 Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Certificate serial: 010D0C9F4328584BBFA5A8012B90734C1F79FCC0 Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/cdde8e7a-4a08-36f0-a460-3660a0f74809.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 14618 IP address blocks: 209.169.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:a8:01:2b:90:73:4c:1f:79:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=135ddedd-bbc3-4c97-96a4-e70c92cfaf9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:30:f3:9e:87:87:a0:78:8d:07:9f:7c:c7:98: fc:57:cc:b6:89:9d:25:8e:0d:d7:ea:d6:9c:34:53: cc:47:6e:b9:e2:ac:1e:0b:2d:47:88:e4:c4:6f:96: 29:0b:3d:6d:28:08:d1:cb:14:b0:9c:12:94:12:d2: 13:15:27:36:94:95:1c:e4:be:f6:f6:e8:93:d6:08: 0d:75:f8:a3:04:4a:02:d5:42:9a:17:cb:89:e3:4f: 70:15:12:7b:0e:19:1f:e6:0a:3c:f5:96:66:09:d4: 75:ab:ca:11:9f:8c:92:e8:c4:a9:6e:7d:7f:bf:43: 40:2d:52:29:7d:64:28:6d:0e:ef:00:ac:a1:18:36: 83:6e:51:35:ed:68:eb:c1:1b:3c:e3:1a:36:7d:89: 19:08:ec:8a:22:df:43:58:0a:50:0c:13:21:c8:76: 77:c1:10:f0:e7:00:02:99:37:39:89:7a:67:ac:19: ee:21:41:da:e9:de:36:4c:12:69:e3:8c:a0:d4:7b: f8:94:6a:cc:10:15:05:73:ab:a9:df:f8:62:ea:15: bb:84:13:2c:df:2e:3e:84:f9:a8:a0:70:9b:a9:cc: 3d:0a:97:be:6c:7b:b3:51:c8:b0:7b:70:c6:c9:c5: d0:6b:d4:0a:cf:c6:97:2e:ea:87:62:e4:2d:40:2a: 3a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:0E:4C:40:F4:83:CA:77:52:BA:B0:B5:98:8E:7A:3F:9E:4B:85:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/cdde8e7a-4a08-36f0-a460-3660a0f74809.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl X509v3 Authority Key Identifier: keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer sbgp-ipAddrBlock: critical IPv4: 209.169.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:f3:1f:eb:ac:35:c3:61:f7:ad:58:20:5c:5f:a1:db:14:d8: 76:c4:14:84:ab:89:f7:2c:bf:02:a8:e5:a6:40:0d:ea:b0:be: b0:9c:e5:57:94:68:10:88:84:b5:b6:b1:f0:ab:aa:f2:d9:92: f6:98:45:0a:bd:92:c3:b9:67:52:77:51:d4:de:28:72:66:dd: 60:74:b5:c7:8f:a9:92:a8:12:24:15:df:36:58:b8:1c:39:46: fd:d8:85:9e:1b:ff:7a:23:11:ea:90:3f:25:aa:6e:22:7e:54: f6:2b:87:72:03:e6:88:ad:16:0d:55:e9:82:1b:59:30:e3:6c: 4e:78:96:a5:fc:55:65:64:12:c1:5a:79:ed:15:70:b3:81:31: 17:3f:8d:6a:68:7e:07:60:39:f2:5e:2c:ed:a9:d5:83:65:5f: fe:64:30:69:a8:c6:12:c4:94:ae:a8:db:4c:1c:e6:3e:23:7a: 65:06:e2:14:bf:50:6f:ea:90:88:49:f0:48:da:f1:d7:48:72: b9:2f:6a:08:cc:06:5a:e8:a4:cb:8d:7a:17:65:b4:68:6e:9a: 6e:36:ee:75:bb:59:40:b0:4b:f0:89:aa:e5:c5:96:33:05:c0: 2c:2b:44:2c:79:e3:8f:9c:99:e8:d0:db:9c:0c:c8:4a:b9:78: 4c:7f:fe:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pagBK5BzTB95/MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw MjhiMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk MTM1ZGRlZGQtYmJjMy00Yzk3LTk2YTQtZTcwYzkyY2ZhZjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzDznoeHoHiNB598x5j8V8y2iZ0ljg3X6tac NFPMR2654qweCy1HiOTEb5YpCz1tKAjRyxSwnBKUEtITFSc2lJUc5L729uiT1ggN dfijBEoC1UKaF8uJ409wFRJ7Dhkf5go89ZZmCdR1q8oRn4yS6MSpbn1/v0NALVIp fWQobQ7vAKyhGDaDblE17WjrwRs84xo2fYkZCOyKIt9DWApQDBMhyHZ3wRDw5wAC mTc5iXpnrBnuIUHa6d42TBJp44yg1Hv4lGrMEBUFc6up3/hi6hW7hBMs3y4+hPmo oHCbqcw9Cpe+bHuzUciwe3DGycXQa9QKz8aXLuqHYuQtQCo6nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEOTED0g8p3UrqwtZiOej+eS4UQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvY2RkZThlN2EtNGEwOC0z NmYwLWE0NjAtMzY2MGEwZjc0ODA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0 NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0an2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjzH+usNcNh961YIFxfodsU2HbEFISrifcsvwKo5aZADeqwvrCc5VeU aBCIhLW2sfCrqvLZkvaYRQq9ksO5Z1J3UdTeKHJm3WB0tcePqZKoEiQV3zZYuBw5 Rv3YhZ4b/3ojEeqQPyWqbiJ+VPYrh3ID5oitFg1V6YIbWTDjbE54lqX8VWVkEsFa ee0VcLOBMRc/jWpofgdgOfJeLO2p1YNlX/5kMGmoxhLElK6o20wc5j4jemUG4hS/ UG/qkIhJ8Eja8ddIcrkvagjMBlropMuNehdltGhumm427nW7WUCwS/CJquXFljMF wCwrRCx544+cmejQ25wMyEq5eEx//tU= -----END CERTIFICATE-----Generated at Wed Nov 5 12:37:27 2025 by rpki-client