$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/25a095b0-1a57-39b5-85ff-c7fa347fc1aa.roa File: 25a095b0-1a57-39b5-85ff-c7fa347fc1aa.roa (raw, json) Hash identifier: ZffkBe1AsYwT8+RdrchqJKsnJB3QM3kQ9CjKjAcPAMM= Subject key identifier: 17:BE:F7:63:A1:F0:AC:1D:40:B0:FE:A3:9C:10:87:B9:E9:DB:50:30 Certificate issuer: /CN=3965685f-104b-41c9-9fe3-53d7fe4d141e Certificate serial: 010D0C9F4328584F6292CAB23A62E8F9F647C420 Authority key identifier: 2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/25a095b0-1a57-39b5-85ff-c7fa347fc1aa.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 1239 IP address blocks: 208.94.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:ca:b2:3a:62:e8:f9:f6:47:c4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3965685f-104b-41c9-9fe3-53d7fe4d141e Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=f3f18bd6-f271-4c78-a425-664f1414b55c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c6:5c:24:08:99:96:47:f2:a9:64:49:0a:45: 63:46:20:8b:fa:0d:66:9b:60:77:a3:c5:42:ae:3c: ac:1a:ff:c6:31:50:47:91:6e:da:9e:3f:d5:df:11: 61:3e:6b:3b:63:57:2b:7d:5b:3b:7e:f5:19:03:6c: e1:97:6b:00:9d:ce:9e:06:89:6b:35:f8:73:ff:52: 12:c2:56:0c:28:82:12:65:f3:b4:66:83:09:4c:9c: 19:7e:30:64:8a:c0:0d:54:07:60:12:3d:3b:ec:16: 15:55:00:e2:bb:ff:bc:c6:0c:11:0e:3a:8d:d5:aa: 54:67:c3:e4:15:21:1a:2b:6b:41:c5:51:e3:a2:19: 95:f8:a2:97:d6:15:82:7c:c4:03:0d:4b:2e:87:de: 22:28:26:e2:50:bd:58:93:7e:a1:e6:69:d0:02:00: 8f:80:a9:90:b8:e4:6c:4f:4c:a6:6a:36:a2:a1:32: 09:ab:0d:5f:91:63:23:38:e4:b5:28:28:c4:cc:b6: d0:8c:a5:4a:84:84:bb:fc:c5:8c:6a:b3:e9:41:14: 1b:db:8c:5b:5c:ea:1b:07:d0:d8:19:36:55:5d:91: 22:71:00:47:30:44:1b:83:25:2c:f1:db:2f:bf:2f: d3:1e:a4:8f:c5:96:23:bf:ff:90:50:8b:c0:69:66: bf:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:BE:F7:63:A1:F0:AC:1D:40:B0:FE:A3:9C:10:87:B9:E9:DB:50:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/25a095b0-1a57-39b5-85ff-c7fa347fc1aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl X509v3 Authority Key Identifier: keyid:2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer sbgp-ipAddrBlock: critical IPv4: 208.94.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:4f:44:60:bb:77:fc:5b:bb:bf:dd:5d:b1:a9:97:87:3a:ac: ff:ae:38:d9:7e:fd:81:eb:8a:f4:0b:83:0a:f0:b9:ab:13:ed: b3:53:58:41:1e:48:81:13:01:08:ff:62:e6:70:a8:ce:58:db: 05:79:c1:6a:b1:26:16:95:a4:df:e4:59:1d:2a:1f:5f:e1:eb: d2:6a:fe:ec:7f:9b:93:eb:95:39:7b:32:de:52:f5:26:ae:97: b9:44:24:6b:b3:ba:cc:b9:bd:29:05:e6:14:36:24:d7:17:43: 8e:06:31:fb:09:21:80:ad:24:14:77:cf:b2:2f:e9:95:c1:c2: 35:33:eb:51:bc:7e:72:15:59:9d:91:4a:b7:78:19:65:92:d0: 02:a6:9c:4b:95:71:b5:ae:67:80:b4:82:1a:c0:44:e5:39:7a: 78:02:e6:93:7d:eb:66:01:68:56:fb:3c:6f:f2:99:2b:f3:3c: 83:22:33:e1:13:0d:6c:1f:04:20:d3:35:12:6e:ff:42:98:58: 18:8b:d3:c3:2a:36:d6:bc:62:35:b6:2b:b3:df:3b:25:b5:5f: e1:38:e6:20:54:52:d6:43:e9:e8:bd:6e:92:13:b9:e4:dc:fc: 17:e4:df:d3:f2:1f:13:c3:f3:fd:a5:87:22:aa:9e:7c:6e:27: 5e:dc:cc:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iksqyOmLo+fZHxCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2NTY4NWYtMTA0Yi00MWM5LTlmZTMtNTNkN2ZlNGQx NDFlMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZjNmMThiZDYtZjI3MS00Yzc4LWE0MjUtNjY0ZjE0MTRiNTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMZcJAiZlkfyqWRJCkVjRiCL+g1mm2B3o8VC rjysGv/GMVBHkW7anj/V3xFhPms7Y1crfVs7fvUZA2zhl2sAnc6eBolrNfhz/1IS wlYMKIISZfO0ZoMJTJwZfjBkisANVAdgEj077BYVVQDiu/+8xgwRDjqN1apUZ8Pk FSEaK2tBxVHjohmV+KKX1hWCfMQDDUsuh94iKCbiUL1Yk36h5mnQAgCPgKmQuORs T0ymajaioTIJqw1fkWMjOOS1KCjEzLbQjKVKhIS7/MWMarPpQRQb24xbXOobB9DY GTZVXZEicQBHMEQbgyUs8dsvvy/THqSPxZYjv/+QUIvAaWa/CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBe+92Oh8KwdQLD+o5wQh7np21AwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1 Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3ZmU0ZDE0MWUvMjVhMDk1YjAtMWE1Ny0z OWI1LTg1ZmYtYzdmYTM0N2ZjMWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk2NTY4NWYtMTA0Yi00MWM5LTlm ZTMtNTNkN2ZlNGQxNDFlLzM5NjU2ODVmLTEwNGItNDFjOS05ZmUzLTUzZDdmZTRk MTQxZS5jcmwwHwYDVR0jBBgwFoAULU7sB30FdPaOk41H3eOCV9QL398wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3 ZmU0ZDE0MWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0F6MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdPRGC7d/xbu7/dXbGpl4c6rP+uONl+/YHrivQLgwrwuasT7bNTWEEe SIETAQj/YuZwqM5Y2wV5wWqxJhaVpN/kWR0qH1/h69Jq/ux/m5PrlTl7Mt5S9Sau l7lEJGuzusy5vSkF5hQ2JNcXQ44GMfsJIYCtJBR3z7Iv6ZXBwjUz61G8fnIVWZ2R Srd4GWWS0AKmnEuVcbWuZ4C0ghrAROU5engC5pN962YBaFb7PG/ymSvzPIMiM+ET DWwfBCDTNRJu/0KYWBiL08MqNta8YjW2K7PfOyW1X+E45iBUUtZD6ei9bpITueTc /Bfk39PyHxPD8/2lhyKqnnxuJ17czJo= -----END CERTIFICATE-----Generated at Sat Oct 10 15:38:42 2026 by rpki-client