$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/76f978c5-39cd-3d91-bb1d-04e987ea7c9d.roa File: 76f978c5-39cd-3d91-bb1d-04e987ea7c9d.roa (raw, json) Hash identifier: gbXMZU3bHBzOHt9KswU4cvgqqjmCu6dD2kYiLys2gmw= Subject key identifier: 88:96:CB:D2:F6:12:43:7D:ED:1E:3D:82:03:E8:3D:8C:44:F7:45:9D Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584BB5C26DE190B56F05A7790E00 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/76f978c5-39cd-3d91-bb1d-04e987ea7c9d.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 3561 IP address blocks: 208.138.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:6d:e1:90:b5:6f:05:a7:79:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=d55a2c56-f5ac-4d58-b4e4-7cc94b8976b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:00:5e:12:50:2c:8e:67:9c:16:2a:f2:70:55: fb:e5:21:9e:f5:47:63:04:5d:ce:f4:ad:2e:13:bf: ab:3e:59:6a:83:cb:94:29:5c:69:73:cb:ce:40:fa: e2:22:c2:4e:57:b0:4c:b0:2c:91:ab:51:aa:b9:d8: 5e:ae:63:f5:b4:36:95:3a:83:ce:a4:fe:f6:30:cb: 58:ac:b4:b2:e3:6e:1c:c6:88:36:e0:83:32:ac:97: cb:bb:42:8a:9b:72:fa:12:55:40:98:f6:37:84:a5: 27:e7:57:78:72:22:67:9c:bd:c1:50:66:01:af:84: 8c:52:d6:7b:d7:59:97:14:b1:08:67:9a:68:26:36: 2c:31:50:eb:6f:90:a4:5d:1a:0a:d5:d3:f3:79:07: 6c:a7:1b:d6:0f:86:d0:f8:78:ea:48:ee:f4:af:4a: d4:44:ee:90:6a:6c:4e:4d:57:8d:62:ec:1f:5b:5d: 6a:c0:f0:fd:97:df:4b:62:a1:2e:4c:9e:88:89:6c: 0e:84:77:cc:77:96:b0:ab:5d:ab:d5:5a:b3:f5:ad: 15:ae:be:ce:98:04:13:a7:4d:9b:76:2d:7e:f0:de: 4f:f1:ff:8b:ba:16:bd:bd:d4:a2:71:ad:77:cd:22: 52:3c:1a:91:25:36:59:05:3c:1e:b1:a2:58:10:08: de:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:96:CB:D2:F6:12:43:7D:ED:1E:3D:82:03:E8:3D:8C:44:F7:45:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/76f978c5-39cd-3d91-bb1d-04e987ea7c9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 208.138.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:0f:d1:f9:12:47:8b:79:d9:6a:3b:4b:1d:d6:4c:08:92:b2: 44:81:92:55:24:af:94:d2:1a:17:3d:e7:80:38:bf:ed:d1:a1: f9:d3:5a:1b:8b:f2:65:b4:ee:28:f4:89:59:87:d9:d9:50:4d: ae:4f:6a:f9:d7:2c:9d:8c:60:e6:34:b5:60:36:1e:8f:71:54: 6c:d9:11:4f:54:37:f7:aa:ba:7f:ad:a8:70:7a:d6:f7:1b:55: 9e:49:6b:c1:58:21:ff:5a:43:ec:56:98:01:2e:ee:e5:f0:6f: b7:0e:22:b1:47:d8:70:8d:2d:e1:13:be:4b:90:1a:1f:45:a0: 0e:e5:1b:ea:8e:d4:9a:8e:31:05:58:12:bd:c0:86:69:f4:03: 14:8d:ac:e6:c3:da:67:46:14:83:a7:dc:63:d3:2a:05:1b:48: 0d:44:c5:27:92:bb:9b:d0:f8:19:e7:0c:07:77:ba:21:86:be: 46:a5:a7:62:93:f9:3b:2c:ed:60:3c:ba:83:25:b0:c1:b6:da: b5:72:8e:e0:2f:d3:b5:66:60:f6:3a:b7:2f:d5:91:c1:80:1a: 78:60:b0:c1:7d:b3:af:ae:8a:98:0c:21:e2:dc:9d:ef:a7:6f: 29:5c:58:48:d5:6f:36:14:fb:3e:42:07:be:d2:bd:1e:1c:3c: 6f:02:83:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wm3hkLVvBad5DgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk ZDU1YTJjNTYtZjVhYy00ZDU4LWI0ZTQtN2NjOTRiODk3NmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgBeElAsjmecFirycFX75SGe9UdjBF3O9K0u E7+rPllqg8uUKVxpc8vOQPriIsJOV7BMsCyRq1GqudhermP1tDaVOoPOpP72MMtY rLSy424cxog24IMyrJfLu0KKm3L6ElVAmPY3hKUn51d4ciJnnL3BUGYBr4SMUtZ7 11mXFLEIZ5poJjYsMVDrb5CkXRoK1dPzeQdspxvWD4bQ+HjqSO70r0rURO6QamxO TVeNYuwfW11qwPD9l99LYqEuTJ6IiWwOhHfMd5awq12r1Vqz9a0Vrr7OmAQTp02b di1+8N5P8f+Luha9vdSica13zSJSPBqRJTZZBTwesaJYEAje1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIiWy9L2EkN97R49ggPoPYxE90WdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvNzZmOTc4YzUtMzljZC0z ZDkxLWJiMWQtMDRlOTg3ZWE3YzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0IqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAP0fkSR4t52Wo7Sx3WTAiSskSBklUkr5TSGhc954A4v+3RofnTWhuL 8mW07ij0iVmH2dlQTa5PavnXLJ2MYOY0tWA2Ho9xVGzZEU9UN/equn+tqHB61vcb VZ5Ja8FYIf9aQ+xWmAEu7uXwb7cOIrFH2HCNLeETvkuQGh9FoA7lG+qO1JqOMQVY Er3Ahmn0AxSNrObD2mdGFIOn3GPTKgUbSA1ExSeSu5vQ+BnnDAd3uiGGvkalp2KT +Tss7WA8uoMlsMG22rVyjuAv07VmYPY6ty/VkcGAGnhgsMF9s6+uipgMIeLcne+n bylcWEjVbzYU+z5CB77SvR4cPG8Cg+A= -----END CERTIFICATE-----Generated at Tue Nov 4 21:46:29 2025 by rpki-client