$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db/a8e126e5-c2de-3fcb-8986-a0c441bf2ffd.roa File: a8e126e5-c2de-3fcb-8986-a0c441bf2ffd.roa (raw, json) Hash identifier: Jdrfqtrg8AfYdbJhjyxZfqc6l25W2vv6GFMHT0yxzDg= Subject key identifier: 34:11:B0:CE:49:2D:6A:89:BF:42:2A:87:D8:B5:4A:5A:53:C4:79:31 Certificate issuer: /CN=5dc32e87-d25f-444f-adc0-e3c94e9679db Certificate serial: 010D0C9F4328584B7CA02DA77E332FDB7D1EA080 Authority key identifier: 9A:9A:36:11:68:63:DC:25:76:34:69:7C:7C:0B:BA:19:88:E5:4C:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db/a8e126e5-c2de-3fcb-8986-a0c441bf2ffd.roa Signing time: Sat 11 Oct 2025 13:50:40 +0000 ROA not before: Sat 11 Oct 2025 13:50:40 +0000 ROA not after: Fri 09 Jan 2026 14:50:40 +0000 asID: 400384 IP address blocks: 208.77.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db/5dc32e87-d25f-444f-adc0-e3c94e9679db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db/5dc32e87-d25f-444f-adc0-e3c94e9679db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:a0:2d:a7:7e:33:2f:db:7d:1e:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dc32e87-d25f-444f-adc0-e3c94e9679db Validity Not Before: Oct 11 13:50:40 2025 GMT Not After : Jan 9 14:50:40 2026 GMT Subject: CN=4c632863-7842-4f14-af9e-993cc7814e38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cb:99:48:aa:34:0e:89:54:22:c6:a5:1e:50: 12:66:b3:fd:7e:0f:a7:03:d9:71:89:fa:c4:8f:41: bc:a3:2e:2c:9e:6f:fd:ee:fd:91:45:1c:42:d1:26: 38:1c:b7:95:2e:b3:39:29:99:cb:c4:1b:12:b2:18: 86:26:d0:ad:9a:07:77:63:6b:d1:55:6e:c9:63:bd: d8:b8:01:41:f1:4f:3d:b4:c7:fc:9f:b5:fc:66:ae: f3:10:51:dc:0d:ef:32:e6:d7:fd:24:d0:5d:e1:b8: 55:27:99:4b:eb:1e:a8:91:16:94:75:fc:a7:08:ba: cf:41:d8:bc:d1:5b:74:77:84:a1:36:3e:25:1e:a9: 91:eb:45:7f:54:0a:d4:d2:06:97:71:8e:ca:a2:81: 57:91:af:b4:de:08:8e:32:59:28:5c:d4:74:c0:55: 6f:32:2b:73:59:98:54:23:03:3e:50:29:58:d0:d8: 23:80:08:2d:1b:d2:81:af:0c:3e:27:c2:ac:d3:fa: ba:13:b0:2a:ed:b9:ec:6b:28:b9:bc:3c:b1:fb:36: 36:75:09:cf:19:6c:bc:ac:2a:53:c9:1f:07:9c:a6: 09:75:4a:fe:91:6c:40:5b:76:77:aa:dc:ea:ad:72: 0d:a6:ea:09:67:b2:a1:cb:37:5e:9b:8d:b8:db:6d: 65:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:11:B0:CE:49:2D:6A:89:BF:42:2A:87:D8:B5:4A:5A:53:C4:79:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db/a8e126e5-c2de-3fcb-8986-a0c441bf2ffd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db/5dc32e87-d25f-444f-adc0-e3c94e9679db.crl X509v3 Authority Key Identifier: keyid:9A:9A:36:11:68:63:DC:25:76:34:69:7C:7C:0B:BA:19:88:E5:4C:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db.cer sbgp-ipAddrBlock: critical IPv4: 208.77.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:84:8e:0a:b7:97:f3:2c:c8:56:09:f9:03:73:78:b5:c4:0f: 19:ae:d4:4a:4a:69:76:aa:1e:c8:6c:b1:ea:7b:ec:a0:fb:7c: 2f:38:aa:c4:da:f4:47:5e:6c:e7:3c:ea:24:19:05:d8:1f:c5: 3b:d6:a6:b3:a1:11:93:80:08:82:16:e3:a6:4f:68:90:bf:43: 9c:e9:47:80:48:b8:96:d8:41:1a:99:54:cc:c0:bc:51:f5:c7: 23:88:85:8e:9d:7f:66:33:ea:8b:f7:e1:1b:5a:b5:59:b7:19: 66:c4:48:0b:60:b9:7d:dc:05:88:c9:5f:b3:02:fb:53:43:80: f0:3a:35:0d:48:06:84:d9:4e:7b:fc:6f:66:a5:a2:89:98:44: 60:06:95:32:09:36:e0:91:ee:16:50:45:54:bb:01:4f:24:0b: bf:33:7c:18:b2:36:e6:3d:9c:a9:52:7a:55:51:b3:a6:fc:a7: bc:4e:1f:2f:56:22:4e:d6:65:fc:74:87:20:91:9a:9f:9a:ec: 42:da:66:ee:3f:ca:2c:9d:6c:45:78:2d:23:e6:52:db:68:7c: f2:54:76:1d:82:a8:52:9d:52:f2:6e:33:25:49:f4:d7:25:2e: 13:89:47:4d:de:6b:bd:4d:6f:5d:b6:58:ac:14:4f:f4:c0:09: c1:af:b8:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8oC2nfjMv230eoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjMzJlODctZDI1Zi00NDRmLWFkYzAtZTNjOTRlOTY3 OWRiMB4XDTI1MTAxMTEzNTA0MFoXDTI2MDEwOTE0NTA0MFowLzEtMCsGA1UEAxMk NGM2MzI4NjMtNzg0Mi00ZjE0LWFmOWUtOTkzY2M3ODE0ZTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMuZSKo0DolUIsalHlASZrP9fg+nA9lxifrE j0G8oy4snm/97v2RRRxC0SY4HLeVLrM5KZnLxBsSshiGJtCtmgd3Y2vRVW7JY73Y uAFB8U89tMf8n7X8Zq7zEFHcDe8y5tf9JNBd4bhVJ5lL6x6okRaUdfynCLrPQdi8 0Vt0d4ShNj4lHqmR60V/VArU0gaXcY7KooFXka+03giOMlkoXNR0wFVvMitzWZhU IwM+UClY0NgjgAgtG9KBrww+J8Ks0/q6E7Aq7bnsayi5vDyx+zY2dQnPGWy8rCpT yR8HnKYJdUr+kWxAW3Z3qtzqrXINpuoJZ7Khyzdem424221luwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQRsM5JLWqJv0Iqh9i1SlpTxHkxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81ZGMz MmU4Ny1kMjVmLTQ0NGYtYWRjMC1lM2M5NGU5Njc5ZGIvYThlMTI2ZTUtYzJkZS0z ZmNiLTg5ODYtYTBjNDQxYmYyZmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNWRjMzJlODctZDI1Zi00NDRmLWFk YzAtZTNjOTRlOTY3OWRiLzVkYzMyZTg3LWQyNWYtNDQ0Zi1hZGMwLWUzYzk0ZTk2 NzlkYi5jcmwwHwYDVR0jBBgwFoAUmpo2EWhj3CV2NGl8fAu6GYjlTEowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi81ZGMzMmU4Ny1kMjVmLTQ0NGYtYWRjMC1lM2M5 NGU5Njc5ZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0E2nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyEjgq3l/MsyFYJ+QNzeLXEDxmu1EpKaXaqHshssep77KD7fC84qsTa 9EdebOc86iQZBdgfxTvWprOhEZOACIIW46ZPaJC/Q5zpR4BIuJbYQRqZVMzAvFH1 xyOIhY6df2Yz6ov34RtatVm3GWbESAtguX3cBYjJX7MC+1NDgPA6NQ1IBoTZTnv8 b2aloomYRGAGlTIJNuCR7hZQRVS7AU8kC78zfBiyNuY9nKlSelVRs6b8p7xOHy9W Ik7WZfx0hyCRmp+a7ELaZu4/yiydbEV4LSPmUttofPJUdh2CqFKdUvJuMyVJ9Ncl LhOJR03ea71Nb122WKwUT/TACcGvuKU= -----END CERTIFICATE-----Generated at Tue Oct 14 08:08:43 2025 by rpki-client