$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/2f150563-516d-3fdb-aef9-541f51b900e4.roa File: 2f150563-516d-3fdb-aef9-541f51b900e4.roa (raw, json) Hash identifier: 8LiOgZkyEmNE99gzQaph3cksTngRSUkEvWzNdIwN58Y= Subject key identifier: 4B:0D:FC:D8:85:AF:4C:3B:E8:5D:68:B1:E9:3A:77:23:E7:82:90:C3 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584B9E07CC24D720E234C5D44720 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/2f150563-516d-3fdb-aef9-541f51b900e4.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 6079 IP address blocks: 209.127.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:cc:24:d7:20:e2:34:c5:d4:47:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=fffd19f9-6b9c-43b4-8384-e6dc4666317d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:80:83:3c:1f:4d:17:6b:40:d2:47:73:8c:e2: 29:d1:7b:9c:97:e4:e5:ca:7d:5f:98:c0:b2:af:43: a6:9d:3e:51:67:a5:6b:83:36:f2:76:3b:22:51:ad: 0f:4b:85:43:0d:23:c8:f4:ad:7e:37:d7:cd:0e:ba: 25:9d:9c:9b:46:90:55:bb:4e:c2:42:c9:97:15:4f: c6:91:d7:a0:eb:25:50:89:1b:91:1e:66:36:92:d0: 70:d4:30:e8:36:14:11:f4:34:ba:cb:69:92:6c:5a: 04:03:3c:10:23:46:ef:bd:a7:e8:43:08:df:26:f7: a9:df:2a:d2:e0:ea:e8:47:0a:e6:15:49:e3:34:27: a2:fe:ef:f6:b8:5a:4a:b0:f4:db:9f:a7:d4:39:14: d3:bc:dd:b8:c6:65:40:37:53:57:1a:72:14:b4:e7: cb:3d:8b:0b:63:26:a7:12:42:6b:28:45:4a:a2:cb: c3:b9:8f:e7:fb:ae:c3:51:96:db:74:44:49:07:4a: e9:79:4b:01:d0:ec:e2:1d:2a:aa:8d:ea:3c:97:17: 5f:0c:69:7f:98:79:7a:fb:37:ac:78:7f:e0:54:b6: 89:d4:46:80:a7:60:ac:03:7f:80:a0:45:6a:98:25: a5:6a:34:06:bd:89:2e:47:e5:6a:75:bf:49:25:1a: 86:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:0D:FC:D8:85:AF:4C:3B:E8:5D:68:B1:E9:3A:77:23:E7:82:90:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/2f150563-516d-3fdb-aef9-541f51b900e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 209.127.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:f5:7a:2f:5e:32:6b:88:89:f4:ce:fb:98:09:8c:09:27:7c: 6b:c3:52:f1:0f:4f:14:50:42:dc:62:43:6f:a8:63:6f:51:ce: d7:5d:d4:65:98:92:82:76:52:16:2b:44:6f:1f:5c:bc:cc:a7: 76:2f:4d:5d:33:b1:29:4b:e4:a4:51:0a:c4:1b:d3:14:36:73: 3e:4b:ed:2f:f7:0a:51:6e:0d:cd:19:cd:a7:24:66:56:43:b3: 28:97:02:18:95:92:df:84:36:d0:e4:e1:91:60:db:77:26:0b: 26:7b:56:4b:a7:de:ef:2e:40:83:6c:6b:4b:c0:c6:41:dc:51: ac:a4:41:66:cf:9c:03:ef:c3:1e:11:70:ca:48:be:f8:4b:87: cf:1d:e6:59:c5:00:6f:02:d9:42:f5:50:1f:57:50:ce:a1:78: b2:c7:bc:5c:70:8a:5f:2f:21:e9:47:b3:c9:0b:de:bb:de:09: c0:5e:59:70:d5:81:7e:82:fb:33:f2:6f:13:cc:57:4a:ef:30: 4d:83:d6:36:aa:a4:fb:69:fa:5f:20:ee:13:83:9f:eb:32:b7: ce:f4:49:91:53:ed:28:2a:0b:9c:6c:52:1c:8b:38:c2:40:1e: 48:5f:ec:0e:42:39:61:e4:02:f9:ee:06:3d:09:f1:f9:73:ae: 36:8b:92:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8wk1yDiNMXURyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZmZmZDE5ZjktNmI5Yy00M2I0LTgzODQtZTZkYzQ2NjYzMTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArICDPB9NF2tA0kdzjOIp0Xucl+Tlyn1fmMCy r0OmnT5RZ6VrgzbydjsiUa0PS4VDDSPI9K1+N9fNDrolnZybRpBVu07CQsmXFU/G kdeg6yVQiRuRHmY2ktBw1DDoNhQR9DS6y2mSbFoEAzwQI0bvvafoQwjfJvep3yrS 4OroRwrmFUnjNCei/u/2uFpKsPTbn6fUORTTvN24xmVAN1NXGnIUtOfLPYsLYyan EkJrKEVKosvDuY/n+67DUZbbdERJB0rpeUsB0OziHSqqjeo8lxdfDGl/mHl6+zes eH/gVLaJ1EaAp2CsA3+AoEVqmCWlajQGvYkuR+Vqdb9JJRqGuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsN/NiFr0w76F1osek6dyPngpDDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvMmYxNTA1NjMtNTE2ZC0z ZmRiLWFlZjktNTQxZjUxYjkwMGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0X9oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGH1ei9eMmuIifTO+5gJjAknfGvDUvEPTxRQQtxiQ2+oY29Rztdd1GWY koJ2UhYrRG8fXLzMp3YvTV0zsSlL5KRRCsQb0xQ2cz5L7S/3ClFuDc0ZzackZlZD syiXAhiVkt+ENtDk4ZFg23cmCyZ7Vkun3u8uQINsa0vAxkHcUaykQWbPnAPvwx4R cMpIvvhLh88d5lnFAG8C2UL1UB9XUM6heLLHvFxwil8vIelHs8kL3rveCcBeWXDV gX6C+zPybxPMV0rvME2D1jaqpPtp+l8g7hODn+syt870SZFT7SgqC5xsUhyLOMJA Hkhf7A5COWHkAvnuBj0J8flzrjaLkiw= -----END CERTIFICATE-----Generated at Wed Nov 5 00:30:14 2025 by rpki-client