$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/0f7a5bcf-cdc3-3c83-8554-12e3d51e36ca.roa File: 0f7a5bcf-cdc3-3c83-8554-12e3d51e36ca.roa (raw, json) Hash identifier: sbqjI1CN19L73+xN+S/b48WCt5Vt/iMibfwteQxWFgI= Subject key identifier: 4F:17:03:31:15:FB:60:60:AC:27:FB:F9:AF:9D:1D:DE:8D:5A:A1:16 Certificate issuer: /CN=3965685f-104b-41c9-9fe3-53d7fe4d141e Certificate serial: 010D0C9F4328584B8EACEF50FD4A1E0A9304D700 Authority key identifier: 2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/0f7a5bcf-cdc3-3c83-8554-12e3d51e36ca.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 174 IP address blocks: 208.94.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:ef:50:fd:4a:1e:0a:93:04:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3965685f-104b-41c9-9fe3-53d7fe4d141e Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=8bd28271-c6be-4373-8655-bcc0e598123a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cf:35:7d:b2:66:07:89:44:fd:bf:ff:62:34: 7a:d7:e9:ba:df:7b:c7:9e:a4:23:2c:1c:ca:4b:2e: e4:59:9f:b1:66:73:f2:1a:e4:b7:fb:2d:49:b0:ee: 2e:92:f5:68:85:54:72:71:86:1d:c1:7c:fc:54:0c: 2c:43:67:d0:d3:63:6c:f8:24:f1:26:84:fe:52:49: 39:f6:d9:f0:90:61:a1:cf:04:ce:41:4e:f6:ad:5b: c2:f7:84:f2:3b:ef:66:f9:2c:6c:8c:d7:9e:11:5a: 34:68:c9:8b:46:5c:87:d7:20:dc:f1:20:0b:92:4d: c4:6a:12:53:ee:d4:42:c8:5a:22:bc:13:db:45:45: 34:f7:43:c6:5a:93:0e:1e:75:b1:d3:d8:a3:4b:63: 82:98:ec:8b:ee:74:77:0b:fd:b9:0d:3f:70:b5:f0: fc:b2:aa:b3:54:32:09:44:ca:37:95:56:80:1a:a5: 55:cb:4b:ce:de:12:60:81:5e:c9:4d:1f:92:d8:1e: 99:ed:be:5d:72:f5:5e:1e:4b:6e:dd:35:43:8b:c0: da:b9:45:ce:5a:4e:7e:7a:b9:4e:44:1e:34:62:24: 21:b6:60:80:66:9e:6a:51:b9:f9:9a:ee:0d:9c:45: 6f:7f:ef:b2:8b:88:b6:a8:23:b1:bf:c5:97:a9:e8: bf:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:17:03:31:15:FB:60:60:AC:27:FB:F9:AF:9D:1D:DE:8D:5A:A1:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/0f7a5bcf-cdc3-3c83-8554-12e3d51e36ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl X509v3 Authority Key Identifier: keyid:2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer sbgp-ipAddrBlock: critical IPv4: 208.94.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:b1:b9:36:d5:7e:cf:36:69:53:9b:e2:d8:74:3a:16:af:cd: 1e:b0:7b:20:c8:f8:a7:6e:1e:54:f0:29:32:99:d3:95:93:22: b5:29:aa:f0:63:5c:f7:0e:a7:bf:ca:70:66:5e:8b:ac:a3:84: 61:a7:06:89:ca:fd:24:ca:12:1a:fd:d0:05:01:9f:0f:9b:3d: ef:49:14:b3:3c:8a:43:78:67:2e:dc:85:08:e0:f2:ba:67:9b: a2:90:57:72:7e:4c:ad:88:86:67:b0:55:85:d9:2b:5a:bc:de: cb:22:bd:3a:33:21:fc:bc:88:0b:94:4d:38:81:8e:f0:fa:ad: 4f:06:fb:95:2e:95:5c:3e:65:d9:16:4a:28:00:ee:71:ae:4c: c1:e2:6e:65:ef:45:e6:68:f1:26:7c:35:02:47:d3:38:9a:a7: 50:f5:f5:50:84:53:9c:9d:5f:03:1c:94:2a:80:f3:c5:70:33: b5:ee:7d:eb:1d:ad:77:bd:e7:3a:f9:0b:91:e9:2d:4c:35:4d: 16:c4:83:7e:ba:f7:b0:f1:42:a7:52:97:17:8a:d1:31:81:3f: 33:77:a4:d4:1a:e1:ec:6f:ef:97:03:6a:e2:83:25:44:5a:87: 86:56:49:60:fd:65:08:7a:d5:fc:7c:4c:f1:1a:e7:44:57:1b: 48:87:93:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrO9Q/UoeCpME1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2NTY4NWYtMTA0Yi00MWM5LTlmZTMtNTNkN2ZlNGQx NDFlMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk OGJkMjgyNzEtYzZiZS00MzczLTg2NTUtYmNjMGU1OTgxMjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc81fbJmB4lE/b//YjR61+m633vHnqQjLBzK Sy7kWZ+xZnPyGuS3+y1JsO4ukvVohVRycYYdwXz8VAwsQ2fQ02Ns+CTxJoT+Ukk5 9tnwkGGhzwTOQU72rVvC94TyO+9m+SxsjNeeEVo0aMmLRlyH1yDc8SALkk3EahJT 7tRCyFoivBPbRUU090PGWpMOHnWx09ijS2OCmOyL7nR3C/25DT9wtfD8sqqzVDIJ RMo3lVaAGqVVy0vO3hJggV7JTR+S2B6Z7b5dcvVeHktu3TVDi8DauUXOWk5+erlO RB40YiQhtmCAZp5qUbn5mu4NnEVvf++yi4i2qCOxv8WXqei/9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8XAzEV+2BgrCf7+a+dHd6NWqEWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1 Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3ZmU0ZDE0MWUvMGY3YTViY2YtY2RjMy0z YzgzLTg1NTQtMTJlM2Q1MWUzNmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk2NTY4NWYtMTA0Yi00MWM5LTlm ZTMtNTNkN2ZlNGQxNDFlLzM5NjU2ODVmLTEwNGItNDFjOS05ZmUzLTUzZDdmZTRk MTQxZS5jcmwwHwYDVR0jBBgwFoAULU7sB30FdPaOk41H3eOCV9QL398wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3 ZmU0ZDE0MWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0F6MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGxuTbVfs82aVOb4th0OhavzR6weyDI+KduHlTwKTKZ05WTIrUpqvBj XPcOp7/KcGZei6yjhGGnBonK/STKEhr90AUBnw+bPe9JFLM8ikN4Zy7chQjg8rpn m6KQV3J+TK2IhmewVYXZK1q83ssivTozIfy8iAuUTTiBjvD6rU8G+5UulVw+ZdkW SigA7nGuTMHibmXvReZo8SZ8NQJH0ziap1D19VCEU5ydXwMclCqA88VwM7Xufesd rXe95zr5C5HpLUw1TRbEg36697DxQqdSlxeK0TGBPzN3pNQa4exv75cDauKDJURa h4ZWSWD9ZQh61fx8TPEa50RXG0iHk14= -----END CERTIFICATE-----Generated at Sun Oct 26 04:22:14 2025 by rpki-client