$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa File: 2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa (raw, json) Hash identifier: NgoQUWBK/XrLwIGSx5SbKNvjj8g5Xnlk48V64571AAU= Subject key identifier: FF:0B:BB:E3:88:86:23:DA:94:2C:13:0A:32:B2:AE:3A:34:1B:5D:BB Certificate issuer: /CN=8e5312d0-770c-4d40-8042-53d0eadc436b Certificate serial: 010D0C9F4328584B6631FF522311B8D1F498B300 Authority key identifier: 3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 21976 IP address blocks: 192.135.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:ff:52:23:11:b8:d1:f4:98:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5312d0-770c-4d40-8042-53d0eadc436b Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=7fc09dbb-c29d-4cb7-80b2-c1fb6a89a196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7b:df:f9:c6:3d:b4:f3:ca:64:06:b0:1d:b4: 3c:57:82:02:7d:bb:a8:8c:ce:d1:eb:df:e2:05:9e: 90:a1:f5:18:b2:07:8b:60:53:e8:26:a3:32:3b:19: d6:42:d3:c0:ab:25:0b:c6:2f:2f:a4:20:f0:17:8c: b1:1c:9a:30:87:90:19:e0:2b:44:1c:a1:6e:e4:1f: 0c:5f:c6:f8:53:0b:44:01:c6:e7:8e:85:e7:2b:08: 02:ab:f6:f9:73:0d:27:36:df:29:b3:63:83:71:0a: 7b:db:3d:ed:d3:a5:fe:62:1d:83:18:60:46:13:8a: d5:58:14:77:82:e0:b5:da:10:50:19:ab:e4:b7:c7: 21:7b:00:6c:31:2f:13:a6:dc:dc:50:3e:b9:b8:50: 7d:c9:a6:30:a0:f1:69:7b:c9:f5:ea:dc:f2:fb:43: a8:f6:9f:7c:9c:3a:72:b8:cb:e2:e3:96:e0:cd:67: 30:ab:8d:38:64:cf:16:e3:cf:a7:44:ba:c2:7c:52: fe:6f:6f:69:b9:f1:ea:95:af:1f:36:32:71:6c:3e: 0f:b2:80:6f:94:af:b5:e7:83:b3:72:4b:f3:27:46: 58:27:90:8b:55:18:ac:65:c4:d2:df:d6:56:6d:48: f3:6d:62:1a:9a:2d:77:84:e4:4c:09:d9:16:1b:d7: ca:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:0B:BB:E3:88:86:23:DA:94:2C:13:0A:32:B2:AE:3A:34:1B:5D:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.crl X509v3 Authority Key Identifier: keyid:3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer sbgp-ipAddrBlock: critical IPv4: 192.135.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:6d:2f:ff:90:44:e0:33:16:4f:e2:a7:7c:7d:44:4d:75:9d: e6:be:64:1e:83:26:0f:72:ed:0f:39:15:1c:69:9c:c8:ff:ae: 67:dc:f7:90:db:a9:cd:da:5e:16:9d:2d:70:6b:18:a7:08:e4: a6:f1:e4:a5:96:ad:a4:83:d4:1d:e3:d6:cc:c6:6e:7f:6d:05: c6:1b:57:75:51:a1:df:46:15:39:19:e5:c8:1d:10:c1:a8:49: 10:01:d8:5b:49:a2:c6:64:37:92:86:a5:96:9b:4a:8e:35:0a: b5:16:9d:a9:54:8b:ad:8b:34:2f:0b:37:bd:61:21:a5:79:51: 70:47:d5:27:33:27:b1:7b:6b:37:73:d8:1e:6e:57:2d:d1:89: 2d:62:5f:b1:2d:56:f3:d2:dd:37:b2:4c:76:f3:c4:1f:45:8d: 79:a3:58:11:3e:8d:0b:fc:db:b1:ba:d0:87:f0:83:77:b3:2f: 00:23:a7:27:88:da:5a:e0:db:81:85:e0:30:e4:86:32:09:ce: ad:33:35:80:a0:d2:52:5f:f4:d8:ad:b8:0c:72:35:c2:87:cc: 88:63:d3:b2:af:ef:0f:ee:4e:fe:be:70:80:d2:12:27:86:a8: 94:04:50:7d:24:18:8e:56:e8:6f:79:e3:a5:b4:30:a7:db:f8: 76:79:4b:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMf9SIxG40fSYswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MzEyZDAtNzcwYy00ZDQwLTgwNDItNTNkMGVhZGM0 MzZiMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk N2ZjMDlkYmItYzI5ZC00Y2I3LTgwYjItYzFmYjZhODlhMTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3vf+cY9tPPKZAawHbQ8V4ICfbuojM7R69/i BZ6QofUYsgeLYFPoJqMyOxnWQtPAqyULxi8vpCDwF4yxHJowh5AZ4CtEHKFu5B8M X8b4UwtEAcbnjoXnKwgCq/b5cw0nNt8ps2ODcQp72z3t06X+Yh2DGGBGE4rVWBR3 guC12hBQGavkt8chewBsMS8TptzcUD65uFB9yaYwoPFpe8n16tzy+0Oo9p98nDpy uMvi45bgzWcwq404ZM8W48+nRLrCfFL+b29pufHqla8fNjJxbD4PsoBvlK+154Oz ckvzJ0ZYJ5CLVRisZcTS39ZWbUjzbWIami13hORMCdkWG9fKqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8Lu+OIhiPalCwTCjKyrjo0G127MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTUz MTJkMC03NzBjLTRkNDAtODA0Mi01M2QwZWFkYzQzNmIvMmRkYmJmMzItZGU4Yy0z YWViLTkzZDgtODBlYmZkMTU2MDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU1MzEyZDAtNzcwYy00ZDQwLTgw NDItNTNkMGVhZGM0MzZiLzhlNTMxMmQwLTc3MGMtNGQ0MC04MDQyLTUzZDBlYWRj NDM2Yi5jcmwwHwYDVR0jBBgwFoAUP3aJvQwX92PDUxjSibUKRzfWiQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTUzMTJkMC03NzBjLTRkNDAtODA0Mi01M2Qw ZWFkYzQzNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIfRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5tL/+QROAzFk/ip3x9RE11nea+ZB6DJg9y7Q85FRxpnMj/rmfc95Db qc3aXhadLXBrGKcI5Kbx5KWWraSD1B3j1szGbn9tBcYbV3VRod9GFTkZ5cgdEMGo SRAB2FtJosZkN5KGpZabSo41CrUWnalUi62LNC8LN71hIaV5UXBH1SczJ7F7azdz 2B5uVy3RiS1iX7EtVvPS3TeyTHbzxB9FjXmjWBE+jQv827G60Ifwg3ezLwAjpyeI 2lrg24GF4DDkhjIJzq0zNYCg0lJf9NituAxyNcKHzIhj07Kv7w/uTv6+cIDSEieG qJQEUH0kGI5W6G9546W0MKfb+HZ5S5c= -----END CERTIFICATE-----Generated at Fri Oct 10 09:54:50 2025 by rpki-client