$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8/df2d6187-b123-3091-b311-ebad0b2b4c4b.roa File: df2d6187-b123-3091-b311-ebad0b2b4c4b.roa (raw, json) Hash identifier: kUuZ/1X7jiFtWFkaAre3oyLZnbJJEui8r9zs07fNxwk= Subject key identifier: 70:85:06:D6:52:38:49:55:E5:4F:10:BB:BC:F2:AF:1D:03:E3:1D:77 Certificate issuer: /CN=c39c90a0-ee66-4964-918e-0296541e3ad8 Certificate serial: 010D0C9F4328584B79F7A9DC0E1CD46157387160 Authority key identifier: C4:E2:8A:79:21:38:3E:E7:EB:2E:97:C7:D7:1E:04:29:97:E1:02:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8/df2d6187-b123-3091-b311-ebad0b2b4c4b.roa Signing time: Fri 10 Oct 2025 14:59:31 +0000 ROA not before: Fri 10 Oct 2025 14:59:31 +0000 ROA not after: Thu 08 Jan 2026 15:59:31 +0000 asID: 401650 IP address blocks: 208.79.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8/c39c90a0-ee66-4964-918e-0296541e3ad8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8/c39c90a0-ee66-4964-918e-0296541e3ad8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:f7:a9:dc:0e:1c:d4:61:57:38:71:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c39c90a0-ee66-4964-918e-0296541e3ad8 Validity Not Before: Oct 10 14:59:31 2025 GMT Not After : Jan 8 15:59:31 2026 GMT Subject: CN=5e716fac-30db-4ec1-9792-d5880758e4aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a7:1a:fb:4d:3d:09:04:16:8e:71:9c:d6:71: 3a:85:ae:00:01:99:29:27:1c:f9:03:74:ba:0f:00: 7d:1f:04:b2:07:6f:c0:c9:f2:81:6c:78:5f:68:66: 0a:6f:b2:c4:dc:87:b7:70:0b:8a:d6:8f:26:81:ca: 1a:b3:6a:d2:66:10:85:a6:d1:0b:36:54:0b:ef:c3: 0c:c3:61:bc:b0:d2:35:da:76:1b:1f:57:4e:4a:b3: 76:f4:cd:6e:75:c0:0e:30:ac:9d:17:b8:ef:5f:4d: 54:c8:b7:d2:56:9b:04:40:c3:aa:e2:91:a0:75:42: cb:e4:3a:e2:99:fb:c2:b3:ae:22:e3:22:de:10:8f: 1d:5e:5a:38:0c:f9:d2:61:a0:88:89:ca:d8:cb:12: 00:ad:09:0f:9d:a9:a8:a5:a7:04:75:62:4b:39:ba: f6:2b:2a:5b:d8:10:f1:d4:45:f7:cf:ed:9c:86:5d: 61:54:b0:b3:fa:c5:cd:b7:da:02:5e:57:40:2a:45: 00:c0:c2:97:11:22:9c:a6:80:0d:62:96:62:87:be: 07:93:69:b6:0e:9b:05:39:6b:95:0a:80:16:50:03: 03:3d:64:9a:cb:75:20:e2:4e:34:b6:b5:2d:99:c1: 1c:33:af:34:e8:20:8a:a5:ee:66:d9:e4:10:b8:c1: 62:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:85:06:D6:52:38:49:55:E5:4F:10:BB:BC:F2:AF:1D:03:E3:1D:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8/df2d6187-b123-3091-b311-ebad0b2b4c4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8/c39c90a0-ee66-4964-918e-0296541e3ad8.crl X509v3 Authority Key Identifier: keyid:C4:E2:8A:79:21:38:3E:E7:EB:2E:97:C7:D7:1E:04:29:97:E1:02:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8.cer sbgp-ipAddrBlock: critical IPv4: 208.79.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:54:29:98:3b:9d:cc:2c:a0:9f:21:07:81:55:e7:c3:51:83: 1b:c8:ee:d1:ba:59:9b:9d:94:93:3f:35:de:50:0f:2e:be:00: 2f:d3:3a:18:4f:a5:2d:15:5b:15:63:9f:ac:4b:0d:5a:d6:f3: 51:ec:c6:27:09:d9:d9:9a:60:86:99:24:ee:94:4e:5c:9e:8c: 65:56:20:93:64:86:b6:67:8c:e9:9a:11:14:0f:b2:2a:21:0e: 64:c0:24:87:63:95:20:55:03:c7:00:7d:ba:f1:da:66:47:52: b9:90:b2:0f:e3:ec:14:49:30:8e:05:40:4a:ba:f5:52:67:a0: 09:db:1b:c5:cb:c8:3c:14:97:08:29:d1:33:c9:4d:8a:fa:c2: 16:f5:99:a1:d3:8b:11:90:50:80:35:67:fd:29:fc:7f:e7:4e: eb:c4:2b:f9:e8:7d:bd:f2:3a:c4:82:cc:ef:5e:9a:09:8f:ac: 57:c8:c7:a4:fd:21:2f:35:af:5e:be:19:10:d2:cb:3d:15:35: e9:5e:24:61:d5:e7:53:c9:b7:19:6b:83:80:f1:41:33:51:6b: d5:fb:05:d2:c4:24:bf:ea:c9:41:0d:ea:43:4d:0e:10:a0:c5: fd:52:12:44:ff:63:68:17:b5:7a:60:db:d0:96:48:d0:10:ff: 23:8f:ad:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt596ncDhzUYVc4cWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM5YzkwYTAtZWU2Ni00OTY0LTkxOGUtMDI5NjU0MWUz YWQ4MB4XDTI1MTAxMDE0NTkzMVoXDTI2MDEwODE1NTkzMVowLzEtMCsGA1UEAxMk NWU3MTZmYWMtMzBkYi00ZWMxLTk3OTItZDU4ODA3NThlNGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaca+009CQQWjnGc1nE6ha4AAZkpJxz5A3S6 DwB9HwSyB2/AyfKBbHhfaGYKb7LE3Ie3cAuK1o8mgcoas2rSZhCFptELNlQL78MM w2G8sNI12nYbH1dOSrN29M1udcAOMKydF7jvX01UyLfSVpsEQMOq4pGgdULL5Dri mfvCs64i4yLeEI8dXlo4DPnSYaCIicrYyxIArQkPnamopacEdWJLObr2Kypb2BDx 1EX3z+2chl1hVLCz+sXNt9oCXldAKkUAwMKXESKcpoANYpZih74Hk2m2DpsFOWuV CoAWUAMDPWSay3Ug4k40trUtmcEcM6806CCKpe5m2eQQuMFifwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCFBtZSOElV5U8Qu7zyrx0D4x13MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMzlj OTBhMC1lZTY2LTQ5NjQtOTE4ZS0wMjk2NTQxZTNhZDgvZGYyZDYxODctYjEyMy0z MDkxLWIzMTEtZWJhZDBiMmI0YzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzM5YzkwYTAtZWU2Ni00OTY0LTkx OGUtMDI5NjU0MWUzYWQ4L2MzOWM5MGEwLWVlNjYtNDk2NC05MThlLTAyOTY1NDFl M2FkOC5jcmwwHwYDVR0jBBgwFoAUxOKKeSE4PufrLpfH1x4EKZfhAmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMzljOTBhMC1lZTY2LTQ5NjQtOTE4ZS0wMjk2 NTQxZTNhZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0E+wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxUKZg7ncwsoJ8hB4FV58NRgxvI7tG6WZudlJM/Nd5QDy6+AC/TOhhP pS0VWxVjn6xLDVrW81HsxicJ2dmaYIaZJO6UTlyejGVWIJNkhrZnjOmaERQPsioh DmTAJIdjlSBVA8cAfbrx2mZHUrmQsg/j7BRJMI4FQEq69VJnoAnbG8XLyDwUlwgp 0TPJTYr6whb1maHTixGQUIA1Z/0p/H/nTuvEK/nofb3yOsSCzO9emgmPrFfIx6T9 IS81r16+GRDSyz0VNeleJGHV51PJtxlrg4DxQTNRa9X7BdLEJL/qyUEN6kNNDhCg xf1SEkT/Y2gXtXpg29CWSNAQ/yOPrfg= -----END CERTIFICATE-----Generated at Wed Oct 15 06:12:54 2025 by rpki-client