$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/4a421b4d-0aa7-395c-9353-3b9096b353b8.roa File: 4a421b4d-0aa7-395c-9353-3b9096b353b8.roa (raw, json) Hash identifier: /oxYhVsn21Nxi1mYGtXrVMtAKGFrUZgOQe+I0x3BRF8= Subject key identifier: 97:20:76:05:4C:B7:56:C4:ED:53:E5:EE:63:15:B0:83:F6:DB:F5:4B Certificate issuer: /CN=9825dda6-0df7-4c35-af65-4bb69cf71053 Certificate serial: 010D0C9F4328584BABFD0809795C6C35F2E3C380 Authority key identifier: 0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/4a421b4d-0aa7-395c-9353-3b9096b353b8.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 29909 IP address blocks: 208.80.204.0/22 maxlen: 22 208.80.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:08:09:79:5c:6c:35:f2:e3:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9825dda6-0df7-4c35-af65-4bb69cf71053 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=3b601b3d-7ab8-4974-85b1-56ddff2b7562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e0:8c:15:3a:db:46:eb:be:07:56:b1:93:0d: 85:dc:d8:b7:06:6b:34:53:d8:af:eb:ae:eb:49:a3: f9:c6:39:ee:5d:ae:36:d6:5d:84:0c:41:77:43:8f: b6:e3:08:a1:76:e5:d7:f8:7f:0e:41:50:25:c4:cc: 6e:b2:e9:a4:46:d8:37:3e:b1:05:3c:cd:01:7d:1f: 2a:a3:7a:e3:b6:e7:bc:2c:7d:61:f1:2e:6c:d3:68: 11:da:e4:3c:d9:32:f3:dd:70:dc:cf:3c:01:27:4f: f5:86:32:05:3f:83:6f:ea:30:8b:c3:e7:13:22:62: e7:ec:46:17:55:db:1e:68:07:e8:37:d7:4a:27:7b: 72:6c:4b:84:3c:17:c3:d9:aa:6d:9c:fc:5c:ba:5e: fe:8d:70:03:23:06:5b:55:b2:5b:39:ff:23:7e:4e: 65:a9:f9:dd:ee:be:fb:e3:a6:ee:ae:ef:bf:82:61: af:23:d7:d3:f8:8a:68:28:6b:79:62:81:18:00:06: a6:71:b0:fb:97:84:4b:85:60:cb:0f:d0:59:f9:4b: f5:ab:b1:a9:4c:d3:66:64:f9:60:fe:cd:17:4a:85: e3:d9:58:d5:84:be:de:bb:dc:06:bd:7f:2c:7b:c6: 85:2d:07:03:32:a3:6a:0f:91:80:d5:8f:ce:cb:84: 0d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:20:76:05:4C:B7:56:C4:ED:53:E5:EE:63:15:B0:83:F6:DB:F5:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/4a421b4d-0aa7-395c-9353-3b9096b353b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl X509v3 Authority Key Identifier: keyid:0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer sbgp-ipAddrBlock: critical IPv4: 208.80.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:ae:0a:e3:86:dd:e5:5e:a3:f5:07:d4:66:1f:35:83:41:70: 58:e5:cb:b7:8b:31:21:f3:1d:9c:71:d9:39:cf:bb:65:9c:5a: 1a:f8:c1:d4:05:09:24:89:4f:7c:ba:4d:8d:17:3d:ab:b0:31: ff:4c:40:f9:f3:63:44:c1:45:c8:1a:da:8f:e1:c9:66:71:fa: 1b:9d:95:2c:37:86:93:50:39:d5:ca:a5:10:40:db:b4:05:e6: df:e4:f3:de:57:b4:fc:7d:ed:c9:3b:d5:b7:ad:41:61:1d:23: bd:a0:e9:c7:da:c2:6e:22:4c:60:25:d7:5b:c8:ec:73:bd:18: 79:c0:e2:e9:e1:1c:1c:fe:f3:50:58:9d:b0:44:7b:a5:8a:2f: 96:c0:3b:63:15:96:30:c9:bd:24:0a:b5:aa:43:21:e4:7c:af: fa:1e:ce:3f:79:60:9e:d3:e4:c0:30:d8:1a:f2:63:8b:08:4f: 47:84:fd:f3:cf:a5:dd:56:2f:34:96:2f:fc:0b:ae:92:54:61: 08:5f:b8:07:6a:04:cd:ca:de:08:cd:b7:54:66:be:64:8d:80: eb:7f:63:44:a0:b2:cb:49:77:d7:5c:9a:54:6e:4a:7d:28:bf: df:a7:9d:52:c3:6b:e1:e3:89:10:cf:07:ba:1f:2c:ae:99:e4: ab:4c:6e:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/QgJeVxsNfLjw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgyNWRkYTYtMGRmNy00YzM1LWFmNjUtNGJiNjljZjcx MDUzMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk M2I2MDFiM2QtN2FiOC00OTc0LTg1YjEtNTZkZGZmMmI3NTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOCMFTrbRuu+B1axkw2F3Ni3Bms0U9iv667r SaP5xjnuXa421l2EDEF3Q4+24wihduXX+H8OQVAlxMxusumkRtg3PrEFPM0BfR8q o3rjtue8LH1h8S5s02gR2uQ82TLz3XDczzwBJ0/1hjIFP4Nv6jCLw+cTImLn7EYX VdseaAfoN9dKJ3tybEuEPBfD2aptnPxcul7+jXADIwZbVbJbOf8jfk5lqfnd7r77 46buru+/gmGvI9fT+IpoKGt5YoEYAAamcbD7l4RLhWDLD9BZ+Uv1q7GpTNNmZPlg /s0XSoXj2VjVhL7eu9wGvX8se8aFLQcDMqNqD5GA1Y/Oy4QNBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcgdgVMt1bE7VPl7mMVsIP22/VLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ODI1 ZGRhNi0wZGY3LTRjMzUtYWY2NS00YmI2OWNmNzEwNTMvNGE0MjFiNGQtMGFhNy0z OTVjLTkzNTMtM2I5MDk2YjM1M2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTgyNWRkYTYtMGRmNy00YzM1LWFm NjUtNGJiNjljZjcxMDUzLzk4MjVkZGE2LTBkZjctNGMzNS1hZjY1LTRiYjY5Y2Y3 MTA1My5jcmwwHwYDVR0jBBgwFoAUD1Z9CXLtC8kPPAwfMwEEOGva3FwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ODI1ZGRhNi0wZGY3LTRjMzUtYWY2NS00YmI2 OWNmNzEwNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIauCuOG3eVeo/UH1GYfNYNBcFjly7eLMSHzHZxx2TnPu2WcWhr4wdQF CSSJT3y6TY0XPauwMf9MQPnzY0TBRcga2o/hyWZx+hudlSw3hpNQOdXKpRBA27QF 5t/k895XtPx97ck71betQWEdI72g6cfawm4iTGAl11vI7HO9GHnA4unhHBz+81BY nbBEe6WKL5bAO2MVljDJvSQKtapDIeR8r/oezj95YJ7T5MAw2BryY4sIT0eE/fPP pd1WLzSWL/wLrpJUYQhfuAdqBM3K3gjNt1RmvmSNgOt/Y0SgsstJd9dcmlRuSn0o v9+nnVLDa+HjiRDPB7ofLK6Z5KtMbm4= -----END CERTIFICATE-----Generated at Mon Nov 3 07:19:34 2025 by rpki-client