$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/25a095b0-1a57-39b5-85ff-c7fa347fc1aa.roa File: 25a095b0-1a57-39b5-85ff-c7fa347fc1aa.roa (raw, json) Hash identifier: 3T/+jJqjs5UA3R6StRR2RrZg39psULsvU3HJF3qdrRI= Subject key identifier: A4:61:E8:2E:8C:BC:D2:95:3A:0C:CE:00:90:8B:22:84:F6:A6:3B:CA Certificate issuer: /CN=3965685f-104b-41c9-9fe3-53d7fe4d141e Certificate serial: 010D0C9F4328584EC0A71AEFD0A12AABAE981F80 Authority key identifier: 2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/25a095b0-1a57-39b5-85ff-c7fa347fc1aa.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 1239 IP address blocks: 208.94.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:1a:ef:d0:a1:2a:ab:ae:98:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3965685f-104b-41c9-9fe3-53d7fe4d141e Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=f44deb71-cddc-4bc0-ac5e-aaea14814dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:82:0c:39:a5:17:75:b8:32:70:53:b8:c2:99: c0:3e:38:fd:38:84:eb:84:95:cf:5d:77:1a:5c:2e: 75:21:33:d6:d7:36:be:09:95:b3:9e:aa:ad:81:8e: 5b:ec:47:f1:36:ee:14:1d:fe:32:57:80:97:43:70: 40:c9:30:a9:98:ed:fa:69:2b:a5:3e:7d:fa:f8:3f: 90:75:b0:bf:1e:b5:6e:7b:b3:f8:34:12:26:be:26: 65:c3:96:00:a1:be:62:3b:38:d6:32:23:0e:18:3b: 0b:fd:f8:af:18:95:5b:7f:f3:68:80:84:7e:f4:34: 59:71:8a:6c:d4:9c:a6:6a:da:e5:53:7b:8f:ad:0c: d1:2a:01:6e:86:ea:e6:ae:2b:28:bc:9d:1f:ce:f7: fd:c9:9f:96:54:92:c0:d4:e4:16:97:28:17:7d:d9: 17:f0:43:23:f6:f1:cd:59:40:33:86:f7:e5:65:ff: b6:b8:6b:1b:ac:fc:74:64:ff:38:8a:a8:f3:62:26: 95:2a:0e:18:61:a2:10:29:53:9c:ac:1d:b5:b6:3a: c6:25:41:7a:9f:9f:39:b0:fe:13:55:92:d2:35:9a: fd:a3:1d:91:86:8e:8f:4b:9e:09:42:bf:39:06:55: 5e:34:bf:3c:47:8c:1a:e6:b8:9a:34:c4:8d:9b:fa: 47:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:61:E8:2E:8C:BC:D2:95:3A:0C:CE:00:90:8B:22:84:F6:A6:3B:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/25a095b0-1a57-39b5-85ff-c7fa347fc1aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl X509v3 Authority Key Identifier: keyid:2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer sbgp-ipAddrBlock: critical IPv4: 208.94.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:b0:7b:68:20:8c:66:10:06:e8:35:9d:66:26:85:fc:bf:7c: b8:f6:c8:a5:14:ed:e3:af:a3:de:00:e7:4e:1b:c1:ed:80:cd: 81:83:47:62:79:4f:38:c7:6f:c3:3a:51:38:d6:4d:d1:71:63: ee:39:cd:c2:ab:fe:e9:b9:bc:8e:fb:f7:3b:a8:74:70:8c:e9: f6:70:8e:9f:96:4d:48:7b:55:6c:af:b0:8e:14:79:24:1e:97: a0:4c:a7:14:24:2b:48:e9:82:2d:b7:47:0a:02:6a:7e:25:cb: af:07:7a:24:33:be:2a:f4:ce:b0:07:2d:cf:f9:fd:d7:34:08: 18:0a:ee:59:f2:5b:c0:da:c4:3e:a7:04:dd:e8:27:1d:f1:87: a6:c3:a0:e7:a3:3c:8d:1f:a2:b9:ef:c8:86:be:38:5a:5a:4f: ee:6d:fc:aa:8b:c0:fd:c9:85:9e:a7:4f:db:71:25:d2:9c:9d: 1a:67:58:1d:be:69:ff:d9:7b:f5:25:39:90:c1:af:34:39:66: 9f:b4:77:07:d5:e4:34:d3:1c:f2:c4:63:24:fb:90:4f:23:d7: d8:d0:ba:d4:3d:d1:5d:76:a8:05:4c:91:79:cf:ff:36:a3:9e: da:0a:98:e7:38:09:7f:a9:9e:8d:d6:d9:8d:7b:46:5e:12:8f: fa:62:a4:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Apxrv0KEqq66YH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2NTY4NWYtMTA0Yi00MWM5LTlmZTMtNTNkN2ZlNGQx NDFlMB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk ZjQ0ZGViNzEtY2RkYy00YmMwLWFjNWUtYWFlYTE0ODE0ZGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYIMOaUXdbgycFO4wpnAPjj9OITrhJXPXXca XC51ITPW1za+CZWznqqtgY5b7EfxNu4UHf4yV4CXQ3BAyTCpmO36aSulPn36+D+Q dbC/HrVue7P4NBImviZlw5YAob5iOzjWMiMOGDsL/fivGJVbf/NogIR+9DRZcYps 1JymatrlU3uPrQzRKgFuhurmrisovJ0fzvf9yZ+WVJLA1OQWlygXfdkX8EMj9vHN WUAzhvflZf+2uGsbrPx0ZP84iqjzYiaVKg4YYaIQKVOcrB21tjrGJUF6n585sP4T VZLSNZr9ox2Rho6PS54JQr85BlVeNL88R4wa5riaNMSNm/pHHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRh6C6MvNKVOgzOAJCLIoT2pjvKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1 Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3ZmU0ZDE0MWUvMjVhMDk1YjAtMWE1Ny0z OWI1LTg1ZmYtYzdmYTM0N2ZjMWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk2NTY4NWYtMTA0Yi00MWM5LTlm ZTMtNTNkN2ZlNGQxNDFlLzM5NjU2ODVmLTEwNGItNDFjOS05ZmUzLTUzZDdmZTRk MTQxZS5jcmwwHwYDVR0jBBgwFoAULU7sB30FdPaOk41H3eOCV9QL398wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3 ZmU0ZDE0MWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0F6MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqwe2ggjGYQBug1nWYmhfy/fLj2yKUU7eOvo94A504bwe2AzYGDR2J5 TzjHb8M6UTjWTdFxY+45zcKr/um5vI779zuodHCM6fZwjp+WTUh7VWyvsI4UeSQe l6BMpxQkK0jpgi23RwoCan4ly68HeiQzvir0zrAHLc/5/dc0CBgK7lnyW8DaxD6n BN3oJx3xh6bDoOejPI0fornvyIa+OFpaT+5t/KqLwP3JhZ6nT9txJdKcnRpnWB2+ af/Ze/UlOZDBrzQ5Zp+0dwfV5DTTHPLEYyT7kE8j19jQutQ90V12qAVMkXnP/zaj ntoKmOc4CX+pno3W2Y17Rl4Sj/pipEs= -----END CERTIFICATE-----Generated at Fri Aug 7 20:35:49 2026 by rpki-client