$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/91aea890-0b43-3899-bfc5-bab3755a801e.roa File: 91aea890-0b43-3899-bfc5-bab3755a801e.roa (raw, json) Hash identifier: c0UvV2Yr8eM0I1NKnNQkw1Lnta68Sg7OhVCq9N5eBPQ= Subject key identifier: 8B:42:A5:B6:B2:14:1F:79:67:7D:AD:86:C0:11:2C:47:71:D8:6C:C0 Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F4328584AEE26809C953A26EC7AE3E880 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/91aea890-0b43-3899-bfc5-bab3755a801e.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 12129 IP address blocks: 209.124.52.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:80:9c:95:3a:26:ec:7a:e3:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=def66ae1-5b1a-4682-9402-3755658fd5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:50:00:96:7f:50:a2:d6:c8:2c:c4:b6:d4:c7: ab:b7:4d:6a:7f:5f:42:be:aa:f2:70:fc:b8:fa:47: 6f:53:f8:8e:9f:52:30:eb:60:1e:89:31:0d:d6:8c: 4f:16:5b:79:f3:69:07:61:ac:6f:14:65:b5:07:f9: bd:91:32:66:f3:8c:18:07:22:05:67:81:e5:e9:b0: a4:02:40:37:17:c7:4e:fe:be:ec:0c:02:29:61:79: 6e:0c:34:d2:f5:4a:90:41:c8:15:21:f6:de:37:a0: 53:77:ef:0b:ce:66:2b:73:7e:2d:70:aa:db:18:fb: eb:9c:f4:84:9b:ca:35:89:dd:ab:ad:57:14:dd:06: c5:c7:5d:4d:e8:45:93:bf:cb:31:ac:bf:01:47:b3: 7d:a6:48:06:92:35:b6:a6:1a:5b:84:f0:9c:0a:6b: 3b:03:2c:40:14:4b:a8:3e:8e:c4:7b:97:10:c8:a9: 0b:15:a4:28:07:25:88:8c:20:44:05:54:b0:39:ea: 8e:4c:3f:6b:3e:52:08:df:a8:50:17:3a:2f:76:f3: c3:75:98:41:ff:1c:32:a9:41:e5:c2:de:82:85:f3: 8c:45:c4:a3:42:4e:72:7b:9c:52:db:e2:33:df:e8: 14:c9:11:1e:a1:c8:8a:11:5d:ce:76:23:4b:36:d6: de:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:42:A5:B6:B2:14:1F:79:67:7D:AD:86:C0:11:2C:47:71:D8:6C:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/91aea890-0b43-3899-bfc5-bab3755a801e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 209.124.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:ab:2c:d4:a5:36:7c:58:2d:6d:b4:22:94:ba:a0:b5:93:93: 8c:e2:01:7e:e8:ee:37:be:df:1d:07:72:70:be:08:de:1c:4d: be:6e:81:92:dd:60:35:41:61:85:6d:56:93:b5:c1:13:dd:04: 3b:e0:78:7c:fd:d7:a0:0d:b9:f5:76:96:fc:2c:ce:13:0a:39: 2a:50:cf:93:d2:cb:1d:56:bd:6c:fa:37:53:f2:ba:1e:f3:7d: 8e:c9:4a:a2:78:ad:ff:ce:81:c6:69:ca:0e:f2:0e:41:06:87: e4:15:32:d0:7a:63:04:d7:69:96:45:04:bb:ce:d0:d2:f5:56: a8:8e:77:8e:14:dd:7b:b4:05:46:85:4e:f6:6a:51:f9:e9:ef: ae:bd:31:90:d1:cb:6f:42:ce:0a:ea:0b:b8:3a:ea:05:9f:d3: 6c:1d:77:16:e4:db:8a:f3:18:b5:83:64:75:1d:01:a9:78:83: f6:a7:b7:5d:69:39:73:80:33:2a:01:1b:8f:2e:02:7a:4f:53: 32:a6:54:76:13:c7:77:dd:9a:5b:5b:4b:23:c1:19:7a:36:c5: af:81:64:35:06:27:22:17:df:b6:57:a6:71:28:bf:56:ea:85: 9f:35:b9:73:33:e5:c8:ca:d6:02:10:05:b0:c2:76:94:7a:d9: 69:17:18:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruJoCclTom7Hrj6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk ZGVmNjZhZTEtNWIxYS00NjgyLTk0MDItMzc1NTY1OGZkNWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVAAln9QotbILMS21Mert01qf19CvqrycPy4 +kdvU/iOn1Iw62AeiTEN1oxPFlt582kHYaxvFGW1B/m9kTJm84wYByIFZ4Hl6bCk AkA3F8dO/r7sDAIpYXluDDTS9UqQQcgVIfbeN6BTd+8LzmYrc34tcKrbGPvrnPSE m8o1id2rrVcU3QbFx11N6EWTv8sxrL8BR7N9pkgGkjW2phpbhPCcCms7AyxAFEuo Po7Ee5cQyKkLFaQoByWIjCBEBVSwOeqOTD9rPlII36hQFzovdvPDdZhB/xwyqUHl wt6ChfOMRcSjQk5ye5xS2+Iz3+gUyREeociKEV3OdiNLNtbeswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItCpbayFB95Z32thsARLEdx2GzAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvOTFhZWE4OTAtMGI0My0z ODk5LWJmYzUtYmFiMzc1NWE4MDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Xw0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCrLNSlNnxYLW20IpS6oLWTk4ziAX7o7je+3x0HcnC+CN4cTb5ugZLd YDVBYYVtVpO1wRPdBDvgeHz916ANufV2lvwszhMKOSpQz5PSyx1WvWz6N1Pyuh7z fY7JSqJ4rf/OgcZpyg7yDkEGh+QVMtB6YwTXaZZFBLvO0NL1VqiOd44U3Xu0BUaF TvZqUfnp7669MZDRy29CzgrqC7g66gWf02wddxbk24rzGLWDZHUdAal4g/ant11p OXOAMyoBG48uAnpPUzKmVHYTx3fdmltbSyPBGXo2xa+BZDUGJyIX37ZXpnEov1bq hZ81uXMz5cjK1gIQBbDCdpR62WkXGEE= -----END CERTIFICATE-----Generated at Wed Nov 5 02:41:39 2025 by rpki-client