$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/639c1735-1cd0-355a-a116-4129dc8f68b1.roa File: 639c1735-1cd0-355a-a116-4129dc8f68b1.roa (raw, json) Hash identifier: pGgs0/ZaW0c945DPDcFlnWX3wJfb1ANfRBrfCn7A2WQ= Subject key identifier: B9:51:5D:AF:90:E9:44:B4:5E:15:C7:11:2A:31:0F:51:C4:6F:35:DC Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F4328584BB88D13BDDC82A7EE886F0D80 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/639c1735-1cd0-355a-a116-4129dc8f68b1.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 20471 IP address blocks: 209.124.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:13:bd:dc:82:a7:ee:88:6f:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=707b497d-aa3f-4fe5-bd10-4480c692685f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:db:aa:be:bf:77:ed:fd:8c:15:59:39:a0:1f: f0:ae:5b:6f:17:25:c2:66:82:e1:b2:24:27:10:d6: 04:f1:05:0a:09:8f:06:d2:14:8c:4b:54:b2:57:d6: 47:8d:59:56:cc:05:40:ae:a6:2a:d6:49:c8:63:13: 20:da:53:68:52:a5:28:41:a2:a7:ef:2f:51:b1:5d: e5:6d:46:42:9f:9b:52:ef:bd:48:7f:a1:da:31:21: 34:94:a6:6c:c8:45:e3:80:6c:0c:33:12:b4:10:a3: b7:0a:90:c5:c4:18:88:e4:3e:f4:8a:06:11:b1:3c: 85:dc:27:27:ee:c8:bc:c6:43:ad:58:6f:e9:05:e1: 74:fe:9a:a9:86:ec:bb:4d:8a:25:ae:84:90:ae:11: 22:b3:10:9c:91:02:4a:92:bb:fc:0d:91:0e:5c:b5: d1:89:c3:1b:51:8b:ef:c2:1f:f5:c0:38:cd:07:74: 13:b6:6c:4c:69:7a:5b:6d:91:16:61:7c:68:2a:4b: 82:b1:4f:78:fd:53:2c:c5:be:57:59:d9:3d:a8:96: 44:9a:c2:80:6d:55:44:46:56:aa:1d:dd:be:92:67: f7:d2:b2:23:f2:56:c1:e6:79:05:ca:26:69:e3:2f: c9:36:31:f2:03:aa:39:7a:6d:3e:95:8f:77:97:88: 7a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:51:5D:AF:90:E9:44:B4:5E:15:C7:11:2A:31:0F:51:C4:6F:35:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/639c1735-1cd0-355a-a116-4129dc8f68b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 209.124.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:37:7d:2a:4f:e1:08:20:57:6c:dd:1d:44:f1:9d:44:9e:b2: 31:48:aa:81:8c:76:31:c8:95:6a:70:81:bb:b6:7f:e4:1d:e1: 00:46:b6:e1:6c:e3:cc:f2:b0:6e:79:61:3a:72:97:d7:2a:89: 63:c0:10:79:03:d1:df:c6:54:8f:98:12:bc:14:b3:e8:62:5d: 8d:1a:eb:1b:4c:36:f1:7e:e5:03:dc:76:85:3d:43:f1:e9:83: e1:d0:dd:71:e0:93:ac:d9:2d:25:e5:f4:fd:cc:33:34:b8:c4: 58:e3:08:63:46:c5:36:06:73:16:b4:bb:6d:c5:f3:01:3e:d3: 5b:6b:9a:4b:e0:79:4d:ae:53:d1:c9:a2:c2:d1:b5:4e:05:4e: d3:02:fb:33:83:07:68:2e:80:be:dc:96:99:d4:78:a6:5c:e6: d4:08:c0:ff:57:a7:7e:6f:4d:1a:d3:ce:93:39:c2:61:7e:ae: 9b:91:8d:2d:86:85:21:81:b1:15:16:11:4c:37:c4:d0:df:70: f3:79:16:63:fc:07:7a:56:7e:ec:3e:65:be:3c:1f:8a:1f:dd: 96:c5:be:c2:42:37:5f:77:7f:81:4c:3d:e5:8d:b0:38:67:c7: 1f:cb:1c:00:6a:6b:74:5d:9e:3b:37:fe:d3:40:60:3e:54:d8: 72:90:96:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jRO93IKn7ohvDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk NzA3YjQ5N2QtYWEzZi00ZmU1LWJkMTAtNDQ4MGM2OTI2ODVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAituqvr937f2MFVk5oB/wrltvFyXCZoLhsiQn ENYE8QUKCY8G0hSMS1SyV9ZHjVlWzAVArqYq1knIYxMg2lNoUqUoQaKn7y9RsV3l bUZCn5tS771If6HaMSE0lKZsyEXjgGwMMxK0EKO3CpDFxBiI5D70igYRsTyF3Ccn 7si8xkOtWG/pBeF0/pqphuy7TYolroSQrhEisxCckQJKkrv8DZEOXLXRicMbUYvv wh/1wDjNB3QTtmxMaXpbbZEWYXxoKkuCsU94/VMsxb5XWdk9qJZEmsKAbVVERlaq Hd2+kmf30rIj8lbB5nkFyiZp4y/JNjHyA6o5em0+lY93l4h6FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlRXa+Q6US0XhXHESoxD1HEbzXcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvNjM5YzE3MzUtMWNkMC0z NTVhLWExMTYtNDEyOWRjOGY2OGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XwmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADg3fSpP4QggV2zdHUTxnUSesjFIqoGMdjHIlWpwgbu2f+Qd4QBGtuFs 48zysG55YTpyl9cqiWPAEHkD0d/GVI+YErwUs+hiXY0a6xtMNvF+5QPcdoU9Q/Hp g+HQ3XHgk6zZLSXl9P3MMzS4xFjjCGNGxTYGcxa0u23F8wE+01trmkvgeU2uU9HJ osLRtU4FTtMC+zODB2gugL7clpnUeKZc5tQIwP9Xp35vTRrTzpM5wmF+rpuRjS2G hSGBsRUWEUw3xNDfcPN5FmP8B3pWfuw+Zb48H4of3ZbFvsJCN193f4FMPeWNsDhn xx/LHABqa3Rdnjs3/tNAYD5U2HKQlug= -----END CERTIFICATE-----Generated at Wed Nov 5 09:06:12 2025 by rpki-client