$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2bb43b56-9d9f-3f36-9bc2-ded890cb51c6.roa File: 2bb43b56-9d9f-3f36-9bc2-ded890cb51c6.roa (raw, json) Hash identifier: 2tBEtBAB2IaChUA7RnhtWjdA5RQ5CpRw6uA1Ijk8rCQ= Subject key identifier: E2:C3:8D:15:9B:28:6D:2D:30:18:2D:A6:B2:18:62:B9:37:1E:28:1B Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584B995FEFB17FE948D6572C7900 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2bb43b56-9d9f-3f36-9bc2-ded890cb51c6.roa Signing time: Tue 21 Oct 2025 20:59:41 +0000 ROA not before: Tue 21 Oct 2025 20:59:41 +0000 ROA not after: Mon 19 Jan 2026 21:59:41 +0000 asID: 27560 IP address blocks: 208.150.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:5f:ef:b1:7f:e9:48:d6:57:2c:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Oct 21 20:59:41 2025 GMT Not After : Jan 19 21:59:41 2026 GMT Subject: CN=3cd8bd13-6b49-44ab-9199-e89a33b9bae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:96:2d:d7:7f:8f:9a:95:f8:a2:ff:0a:5d:4f: b4:00:f1:7d:7d:6f:60:e7:c8:59:6a:b6:9f:a6:85: 55:e3:1e:8c:d6:ae:84:5a:80:75:7b:b3:63:1d:d3: 0b:66:02:d1:99:bb:ae:32:ce:a1:b2:9e:6f:31:c7: be:57:0c:90:b1:cb:ed:10:53:74:4c:d5:91:73:f9: 27:f9:73:1e:98:47:08:1f:e2:31:69:94:25:20:95: ae:c6:1b:23:d9:72:0c:4d:45:c8:ab:76:3b:eb:bf: ee:ab:a2:a2:45:c7:c1:be:19:54:89:18:20:c1:66: 7a:35:e9:33:16:19:d6:42:71:8d:38:96:03:77:d7: 3a:7a:2b:3b:b6:5e:b3:37:55:52:c6:cb:24:f1:98: 05:74:79:e4:f3:dd:4b:d3:0a:a7:49:59:25:a6:2d: fd:06:4d:08:42:d6:99:1a:e2:e0:26:6d:98:9f:ed: 8f:11:b3:8d:0a:be:20:b0:be:14:b1:6b:b4:40:cc: 76:13:5c:d1:7b:85:25:12:88:f4:2e:a1:8b:42:c3: d2:86:a9:59:2e:6f:b0:43:17:f7:59:21:cf:0c:af: 99:af:9f:b1:d7:da:8e:18:6b:4b:85:a2:7f:e3:3e: 97:91:86:d7:d3:f2:44:df:01:50:ea:4d:52:c5:ed: cf:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C3:8D:15:9B:28:6D:2D:30:18:2D:A6:B2:18:62:B9:37:1E:28:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2bb43b56-9d9f-3f36-9bc2-ded890cb51c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 208.150.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:e7:dd:e4:24:16:05:65:53:77:a0:11:54:99:43:94:11:e3: 5c:08:74:79:06:29:ff:03:eb:3b:38:7b:df:4d:42:9b:fb:3d: b2:b9:f0:58:74:b2:58:46:95:1d:4e:b5:62:c2:4a:36:c5:32: 86:cc:15:2e:74:ac:a1:b2:23:f6:d9:4c:ec:fa:10:d6:35:80: 8b:37:3f:b3:0e:4b:bd:89:28:6d:4a:f3:9f:14:86:ac:2f:de: 66:5f:e0:ec:03:f2:e9:60:27:96:b6:57:c9:ce:19:f2:90:2e: 16:bc:a1:2a:44:a9:65:8d:59:0c:9a:d6:f1:3d:81:9a:be:15: 8f:c9:14:b1:7d:0b:9e:0f:02:a4:cb:87:7b:d1:23:2b:b3:df: 90:f7:2d:45:a2:17:51:d4:64:f5:4e:8a:b3:54:c8:a8:3d:0e: de:cf:ec:ae:ce:ef:6c:8c:47:62:33:a6:87:47:d4:44:6a:f9: c2:b8:6e:37:b5:d0:7f:50:53:4e:1d:7d:a9:50:4a:04:d8:11: cc:b9:4a:74:f4:19:c1:d4:29:be:84:06:8d:51:bd:26:2e:56: a3:d8:3a:ef:b8:a8:bb:55:59:de:00:06:47:d9:35:55:c6:4e: 0c:da:f3:03:28:b9:ae:ec:e2:00:94:3d:6f:52:c0:36:1c:8f: 56:29:d5:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZX++xf+lI1lcseQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MTAyMTIwNTk0MVoXDTI2MDExOTIxNTk0MVowLzEtMCsGA1UEAxMk M2NkOGJkMTMtNmI0OS00NGFiLTkxOTktZTg5YTMzYjliYWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpYt13+PmpX4ov8KXU+0APF9fW9g58hZaraf poVV4x6M1q6EWoB1e7NjHdMLZgLRmbuuMs6hsp5vMce+VwyQscvtEFN0TNWRc/kn +XMemEcIH+IxaZQlIJWuxhsj2XIMTUXIq3Y767/uq6KiRcfBvhlUiRggwWZ6Nekz FhnWQnGNOJYDd9c6eis7tl6zN1VSxssk8ZgFdHnk891L0wqnSVklpi39Bk0IQtaZ GuLgJm2Yn+2PEbONCr4gsL4UsWu0QMx2E1zRe4UlEoj0LqGLQsPShqlZLm+wQxf3 WSHPDK+Zr5+x19qOGGtLhaJ/4z6XkYbX0/JE3wFQ6k1Sxe3PNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLDjRWbKG0tMBgtprIYYrk3HigbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvMmJiNDNiNTYtOWQ5Zi0z ZjM2LTliYzItZGVkODkwY2I1MWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0JZOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPn3eQkFgVlU3egEVSZQ5QR41wIdHkGKf8D6zs4e99NQpv7PbK58Fh0 slhGlR1OtWLCSjbFMobMFS50rKGyI/bZTOz6ENY1gIs3P7MOS72JKG1K858Uhqwv 3mZf4OwD8ulgJ5a2V8nOGfKQLha8oSpEqWWNWQya1vE9gZq+FY/JFLF9C54PAqTL h3vRIyuz35D3LUWiF1HUZPVOirNUyKg9Dt7P7K7O72yMR2IzpodH1ERq+cK4bje1 0H9QU04dfalQSgTYEcy5SnT0GcHUKb6EBo1RvSYuVqPYOu+4qLtVWd4ABkfZNVXG Tgza8wMoua7s4gCUPW9SwDYcj1Yp1XE= -----END CERTIFICATE-----Generated at Sat Oct 25 11:58:08 2025 by rpki-client