$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40649684-3dd0-37d5-831b-0b6bdbe312bf.roa File: 40649684-3dd0-37d5-831b-0b6bdbe312bf.roa (raw, json) Hash identifier: ci8B+ApQmJ3cRXwQEgE0SxBUCBNxlKnAWlImPHwuTHo= Subject key identifier: 42:99:9A:91:D3:7B:F0:16:45:B2:85:8A:34:97:62:61:52:86:ED:CF Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AFD4416568E959F02AF313200 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40649684-3dd0-37d5-831b-0b6bdbe312bf.roa Signing time: Tue 26 Aug 2025 22:57:28 +0000 ROA not before: Tue 26 Aug 2025 22:57:28 +0000 ROA not after: Mon 24 Nov 2025 23:57:28 +0000 asID: 31898 IP address blocks: 209.17.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:44:16:56:8e:95:9f:02:af:31:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 26 22:57:28 2025 GMT Not After : Nov 24 23:57:28 2025 GMT Subject: CN=0fb5eade-1f29-42c8-9d4c-bf7c07d6b4d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:48:6b:59:e7:18:d1:7c:b5:25:9d:ee:a2:74: e2:44:19:c3:63:68:14:b1:e5:8f:c6:df:14:e6:fc: 97:b4:cd:64:54:29:ea:a9:8e:5f:2f:31:c5:8e:26: 4b:7a:82:95:09:cd:45:b2:a4:e1:12:59:86:2d:f2: aa:79:8c:07:6e:3e:9c:86:0e:1b:76:17:ec:db:6e: 4b:35:1e:7c:7d:d7:be:f1:7c:99:10:37:62:6a:ab: fd:5a:94:74:74:d2:84:c3:46:a9:a6:03:e6:d1:a4: 8d:d0:22:74:4b:df:9c:b5:77:4f:c6:59:09:a2:fa: c6:a0:98:24:ce:84:76:d1:4c:b0:3c:0d:c9:ad:ac: 18:c3:db:56:9c:b6:17:7e:12:7a:ec:21:87:fc:8a: 60:12:ec:33:f8:ab:e0:7e:21:84:b5:3d:00:00:ab: fb:67:7c:f7:d6:a9:98:55:30:8c:fe:b2:01:67:24: 37:42:0a:43:9a:bc:4e:ff:e8:af:4f:d8:51:7f:33: b9:aa:b5:e0:f6:94:68:43:6f:44:35:1d:9e:4d:3a: 95:91:45:51:d9:da:40:6a:d2:a7:e3:c7:90:2a:f8: ab:11:05:7e:6e:39:e2:b4:b5:78:56:10:dd:79:6a: 4d:ad:0d:b3:1b:a7:19:e5:a2:c0:ba:84:10:c6:8d: 89:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:99:9A:91:D3:7B:F0:16:45:B2:85:8A:34:97:62:61:52:86:ED:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40649684-3dd0-37d5-831b-0b6bdbe312bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 209.17.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:80:28:e4:f7:e1:65:d4:81:72:10:e3:49:fc:9f:3e:c4:d1: 6c:85:ad:c8:82:78:c9:0f:7e:9e:76:ff:95:24:fa:9b:2c:29: c9:ff:8f:c6:eb:32:59:74:18:bb:40:54:85:9f:62:e3:54:54: 18:10:08:81:0a:3f:a4:cd:c5:97:1c:b9:18:98:cc:af:09:02: f9:9e:81:10:51:21:4b:29:2d:23:6f:9a:da:f8:2c:7c:7e:00: 4c:21:be:7d:34:a1:e7:65:1c:29:31:ab:c8:1a:ad:9c:53:32: 89:0b:f6:8a:17:c2:64:8a:96:27:4d:b9:6c:33:73:be:c3:a6: af:4c:9c:cb:4f:24:8e:67:5c:47:ee:51:32:90:81:3b:8b:68: e8:17:be:e5:00:77:09:4e:d2:09:78:22:4e:5e:27:e9:6e:2f: 26:e6:18:50:af:ee:d7:98:d1:d7:7b:fe:25:7e:54:da:06:39: 1c:9f:0a:0e:76:3e:8c:39:bc:b6:72:bd:60:a3:c8:95:c3:15: 81:61:54:fc:9f:e5:8a:26:1f:49:ca:8a:41:e8:b6:04:77:4c: 17:bd:4a:ad:e1:66:0c:f1:8c:4a:54:6b:c2:c2:40:91:2f:a7: 77:17:f2:5e:fa:54:f2:23:e5:63:9e:5c:3d:45:f9:93:32:75: 41:cb:80:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9RBZWjpWfAq8xMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyNjIyNTcyOFoXDTI1MTEyNDIzNTcyOFowLzEtMCsGA1UEAxMk MGZiNWVhZGUtMWYyOS00MmM4LTlkNGMtYmY3YzA3ZDZiNGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0hrWecY0Xy1JZ3uonTiRBnDY2gUseWPxt8U 5vyXtM1kVCnqqY5fLzHFjiZLeoKVCc1FsqThElmGLfKqeYwHbj6chg4bdhfs225L NR58fde+8XyZEDdiaqv9WpR0dNKEw0appgPm0aSN0CJ0S9+ctXdPxlkJovrGoJgk zoR20UywPA3JrawYw9tWnLYXfhJ67CGH/IpgEuwz+KvgfiGEtT0AAKv7Z3z31qmY VTCM/rIBZyQ3QgpDmrxO/+ivT9hRfzO5qrXg9pRoQ29ENR2eTTqVkUVR2dpAatKn 48eQKvirEQV+bjnitLV4VhDdeWpNrQ2zG6cZ5aLAuoQQxo2JcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKZmpHTe/AWRbKFijSXYmFShu3PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDA2NDk2ODQtM2RkMC0z N2Q1LTgzMWItMGI2YmRiZTMxMmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0REwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaAKOT34WXUgXIQ40n8nz7E0WyFrciCeMkPfp52/5Uk+pssKcn/j8br Mll0GLtAVIWfYuNUVBgQCIEKP6TNxZccuRiYzK8JAvmegRBRIUspLSNvmtr4LHx+ AEwhvn00oedlHCkxq8garZxTMokL9ooXwmSKlidNuWwzc77Dpq9MnMtPJI5nXEfu UTKQgTuLaOgXvuUAdwlO0gl4Ik5eJ+luLybmGFCv7teY0dd7/iV+VNoGORyfCg52 Pow5vLZyvWCjyJXDFYFhVPyf5YomH0nKikHotgR3TBe9Sq3hZgzxjEpUa8LCQJEv p3cX8l76VPIj5WOeXD1F+ZMydUHLgNA= -----END CERTIFICATE-----Generated at Wed Nov 5 10:32:08 2025 by rpki-client