$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db/d3925e93-93a3-3753-a661-15870140562e.roa File: d3925e93-93a3-3753-a661-15870140562e.roa (raw, json) Hash identifier: +hsFQyXUBc+n0Iqb05v61QQ0eJ4/G3wdt9QchR37LwE= Subject key identifier: 76:E7:12:59:EF:7B:D5:2B:C1:1E:E3:13:C4:DB:4F:2F:4B:6F:A9:53 Certificate issuer: /CN=5dc32e87-d25f-444f-adc0-e3c94e9679db Certificate serial: 010D0C9F4328584B7C9FC4735B91AA1CA9014460 Authority key identifier: 9A:9A:36:11:68:63:DC:25:76:34:69:7C:7C:0B:BA:19:88:E5:4C:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db/d3925e93-93a3-3753-a661-15870140562e.roa Signing time: Sat 11 Oct 2025 13:49:51 +0000 ROA not before: Sat 11 Oct 2025 13:49:51 +0000 ROA not after: Fri 09 Jan 2026 14:49:51 +0000 asID: 400384 IP address blocks: 208.77.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db/5dc32e87-d25f-444f-adc0-e3c94e9679db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db/5dc32e87-d25f-444f-adc0-e3c94e9679db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:9f:c4:73:5b:91:aa:1c:a9:01:44:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dc32e87-d25f-444f-adc0-e3c94e9679db Validity Not Before: Oct 11 13:49:51 2025 GMT Not After : Jan 9 14:49:51 2026 GMT Subject: CN=3eb2476a-2f16-4497-8cfe-61e539d19872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8e:c1:ea:94:16:52:86:76:57:0d:7a:73:76: 9e:de:5c:9e:17:5d:40:3b:20:82:35:5a:da:64:7f: 06:b3:dc:1f:c9:65:54:1d:29:9c:e4:5a:36:09:19: 98:44:8a:58:59:c8:e2:60:21:8c:2e:a1:68:88:5e: 4d:b0:a0:b5:04:48:3b:99:60:02:88:a2:9a:47:33: 63:14:77:61:46:83:6e:1e:06:33:9a:6a:cc:61:9e: e0:42:94:d5:05:4f:f8:27:f1:69:10:23:f7:27:6b: ee:db:ac:05:3e:c8:a8:e0:d2:e6:c5:7f:0f:1d:b6: 5c:42:3f:2b:e5:7b:10:92:b0:cb:58:12:27:22:14: c6:f6:a7:82:2a:06:0a:bf:9e:68:95:25:d3:19:34: 96:fd:7d:c2:e8:e2:29:1c:f7:e9:0a:88:55:c2:e5: 9d:05:f1:c8:48:5e:4f:4c:27:d9:44:c6:1b:2d:55: 21:08:1e:e2:da:91:4f:f9:85:78:30:00:be:39:e3: 4e:fe:ed:d6:d3:af:dd:57:a1:46:eb:5f:f4:af:a4: e7:76:2f:27:ce:88:07:b3:a1:54:49:56:27:ae:f9: 10:81:1b:08:59:b3:dc:eb:55:3f:91:0c:96:b9:b7: 1a:3c:71:8d:44:48:80:75:0c:54:54:42:c1:68:3a: fb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E7:12:59:EF:7B:D5:2B:C1:1E:E3:13:C4:DB:4F:2F:4B:6F:A9:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db/d3925e93-93a3-3753-a661-15870140562e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db/5dc32e87-d25f-444f-adc0-e3c94e9679db.crl X509v3 Authority Key Identifier: keyid:9A:9A:36:11:68:63:DC:25:76:34:69:7C:7C:0B:BA:19:88:E5:4C:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db.cer sbgp-ipAddrBlock: critical IPv4: 208.77.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:a3:c9:96:07:4f:c4:f5:36:3e:20:dd:d6:d3:ec:89:5d:32: 2c:9a:44:8f:f1:37:95:a4:b3:06:c7:84:70:bf:6a:ff:45:c1: 84:39:1f:3d:ac:42:2b:fd:fd:f8:92:67:c6:64:96:87:82:fa: ad:1f:25:69:07:09:a3:89:4e:ff:b2:c9:50:40:fe:89:1c:77: da:9c:e6:6d:23:f0:be:79:75:ce:c3:43:5e:c0:95:dd:74:ac: 41:11:49:d7:eb:db:19:85:1d:b9:1a:2a:b3:03:21:5d:ee:f9: 57:a3:90:64:37:d4:50:7b:93:5c:eb:7a:51:76:84:26:1d:ec: 80:20:8e:54:75:fb:6e:10:0b:38:cc:46:b6:79:d5:e0:0c:6e: 44:94:56:a7:cb:be:b4:e0:93:60:dc:d9:14:0d:01:6f:8b:16: 99:48:54:c6:13:70:c6:4e:4a:10:19:f7:56:75:2f:6d:c2:fe: c3:dd:eb:14:96:dd:bd:fc:d0:a9:ff:cc:8a:6e:2c:d5:bb:18: 6f:fa:77:d3:88:20:f5:1f:76:b3:eb:2e:f7:22:c7:3d:69:6d: f5:47:a8:dd:60:7e:4a:d0:0d:1a:80:bf:ba:11:6f:67:fb:bd: c5:4c:54:31:10:c9:db:28:f6:73:1d:8e:46:8a:d2:e0:15:49: a4:a9:42:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8n8RzW5GqHKkBRGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjMzJlODctZDI1Zi00NDRmLWFkYzAtZTNjOTRlOTY3 OWRiMB4XDTI1MTAxMTEzNDk1MVoXDTI2MDEwOTE0NDk1MVowLzEtMCsGA1UEAxMk M2ViMjQ3NmEtMmYxNi00NDk3LThjZmUtNjFlNTM5ZDE5ODcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh47B6pQWUoZ2Vw16c3ae3lyeF11AOyCCNVra ZH8Gs9wfyWVUHSmc5Fo2CRmYRIpYWcjiYCGMLqFoiF5NsKC1BEg7mWACiKKaRzNj FHdhRoNuHgYzmmrMYZ7gQpTVBU/4J/FpECP3J2vu26wFPsio4NLmxX8PHbZcQj8r 5XsQkrDLWBInIhTG9qeCKgYKv55olSXTGTSW/X3C6OIpHPfpCohVwuWdBfHISF5P TCfZRMYbLVUhCB7i2pFP+YV4MAC+OeNO/u3W06/dV6FG61/0r6Tndi8nzogHs6FU SVYnrvkQgRsIWbPc61U/kQyWubcaPHGNREiAdQxUVELBaDr7LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbnElnve9UrwR7jE8TbTy9Lb6lTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81ZGMz MmU4Ny1kMjVmLTQ0NGYtYWRjMC1lM2M5NGU5Njc5ZGIvZDM5MjVlOTMtOTNhMy0z NzUzLWE2NjEtMTU4NzAxNDA1NjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNWRjMzJlODctZDI1Zi00NDRmLWFk YzAtZTNjOTRlOTY3OWRiLzVkYzMyZTg3LWQyNWYtNDQ0Zi1hZGMwLWUzYzk0ZTk2 NzlkYi5jcmwwHwYDVR0jBBgwFoAUmpo2EWhj3CV2NGl8fAu6GYjlTEowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi81ZGMzMmU4Ny1kMjVmLTQ0NGYtYWRjMC1lM2M5 NGU5Njc5ZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0E2lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqjyZYHT8T1Nj4g3dbT7IldMiyaRI/xN5WkswbHhHC/av9FwYQ5Hz2s Qiv9/fiSZ8ZkloeC+q0fJWkHCaOJTv+yyVBA/okcd9qc5m0j8L55dc7DQ17Ald10 rEERSdfr2xmFHbkaKrMDIV3u+VejkGQ31FB7k1zrelF2hCYd7IAgjlR1+24QCzjM RrZ51eAMbkSUVqfLvrTgk2Dc2RQNAW+LFplIVMYTcMZOShAZ91Z1L23C/sPd6xSW 3b380Kn/zIpuLNW7GG/6d9OIIPUfdrPrLvcixz1pbfVHqN1gfkrQDRqAv7oRb2f7 vcVMVDEQydso9nMdjkaK0uAVSaSpQhs= -----END CERTIFICATE-----Generated at Tue Oct 14 08:08:31 2025 by rpki-client