$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/6c29d9ad-4af2-349c-8d9d-aa11c53aa4e1.roa File: 6c29d9ad-4af2-349c-8d9d-aa11c53aa4e1.roa (raw, json) Hash identifier: oZf+lBW0c8ajAQXda23cePAdg8Oq762bGcdQ5XUCCYg= Subject key identifier: 97:D9:C4:A0:78:EE:1B:77:6F:9D:C9:EC:FB:DE:59:0C:C5:6C:B2:7B Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584BA0D261CEA6BC8267DAAE7C40 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/6c29d9ad-4af2-349c-8d9d-aa11c53aa4e1.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 394996 IP address blocks: 209.38.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:61:ce:a6:bc:82:67:da:ae:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=0fcdadbd-7f1b-4814-9eb7-8b9fc915787a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:38:c5:bd:99:a6:71:49:a4:32:17:de:eb:fc: d2:0e:26:65:41:75:b9:ef:5c:9c:9b:35:86:29:36: 88:ee:3e:a5:a3:1c:50:b4:35:d7:c6:64:e5:a6:81: b7:f0:8b:ef:ff:45:bf:55:4f:e3:30:20:b8:4d:17: 0c:0d:79:86:c8:4c:3b:f3:ea:89:36:d6:1b:1e:20: 8c:ba:a6:21:6a:17:ed:43:16:b2:64:98:13:0c:24: 21:d1:be:a3:ea:47:35:3a:73:f4:cf:44:f5:8f:bb: 91:cf:8a:3a:38:70:08:b9:73:4f:70:11:96:8a:1e: 66:bd:4e:89:d7:b2:16:10:1c:4b:fd:58:05:f0:a2: df:12:a6:5d:64:3c:1c:cf:89:53:d6:d8:7e:e6:09: 80:78:18:d2:52:0b:02:23:ff:78:31:4f:58:17:96: 24:2f:7a:42:5c:6d:41:b2:f3:63:f7:0a:55:e8:6f: 9b:d1:31:b2:c7:f5:50:2b:d5:1d:de:0d:cc:4b:26: 1d:c7:57:60:29:aa:ca:f9:fd:ae:a2:1c:48:6e:eb: dc:c4:2a:1e:ac:da:c3:18:e4:54:e5:40:3f:72:05: b0:b4:ba:cb:9d:95:81:5d:ae:c1:ca:02:2a:71:be: 37:0a:80:a4:2f:6b:13:b9:ee:a3:02:63:2a:95:cc: ab:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D9:C4:A0:78:EE:1B:77:6F:9D:C9:EC:FB:DE:59:0C:C5:6C:B2:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/6c29d9ad-4af2-349c-8d9d-aa11c53aa4e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 209.38.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:5d:d0:e0:8a:15:4e:33:2a:76:6d:ce:61:54:aa:28:b5:dd: 48:20:81:a6:f9:b5:54:ad:3a:eb:04:ca:b5:6a:38:5f:9e:8a: bc:60:90:23:8a:ee:ad:06:8a:2d:80:b1:9a:60:56:24:81:28: 2e:f3:11:97:54:ce:62:7b:d7:4b:69:b0:c7:6f:68:19:c6:41: dc:87:3f:f3:c3:69:7b:ea:b5:66:21:a7:47:73:33:06:67:ef: 8d:87:a8:f1:55:6b:aa:91:82:36:a5:0e:54:88:b4:e9:33:c7: 9c:f8:0c:28:56:27:f1:98:10:b4:be:66:7d:e3:e9:f3:39:22: 7e:4e:0b:da:28:b2:72:7e:56:b1:cf:9f:4c:0d:38:a5:cb:fe: 41:1f:45:ec:97:71:f1:0e:d0:37:57:98:cf:ad:f3:55:03:ee: 4e:86:a2:ba:fa:c1:0b:cf:8e:0e:a0:90:1c:b0:a7:10:89:ef: 42:4e:57:c7:6a:e9:53:db:75:aa:4a:89:05:be:97:e6:4c:a4: 8f:3f:e3:fe:ff:4e:22:ec:79:c0:4d:04:5e:44:8b:8a:8d:10: 78:83:81:76:d1:c9:a4:16:a2:bc:c4:01:5b:56:99:29:ef:8f: bb:b0:01:32:ad:25:85:ac:06:43:73:47:4e:8b:cc:c7:10:84: fb:d2:c1:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0mHOpryCZ9qufEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MGZjZGFkYmQtN2YxYi00ODE0LTllYjctOGI5ZmM5MTU3ODdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzjFvZmmcUmkMhfe6/zSDiZlQXW571ycmzWG KTaI7j6loxxQtDXXxmTlpoG38Ivv/0W/VU/jMCC4TRcMDXmGyEw78+qJNtYbHiCM uqYhahftQxayZJgTDCQh0b6j6kc1OnP0z0T1j7uRz4o6OHAIuXNPcBGWih5mvU6J 17IWEBxL/VgF8KLfEqZdZDwcz4lT1th+5gmAeBjSUgsCI/94MU9YF5YkL3pCXG1B svNj9wpV6G+b0TGyx/VQK9Ud3g3MSyYdx1dgKarK+f2uohxIbuvcxCoerNrDGORU 5UA/cgWwtLrLnZWBXa7BygIqcb43CoCkL2sTue6jAmMqlcyrxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfZxKB47ht3b53J7PveWQzFbLJ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvNmMyOWQ5YWQtNGFmMi0z NDljLThkOWQtYWExMWM1M2FhNGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SYDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNd0OCKFU4zKnZtzmFUqii13Ugggab5tVStOusEyrVqOF+eirxgkCOK 7q0Gii2AsZpgViSBKC7zEZdUzmJ710tpsMdvaBnGQdyHP/PDaXvqtWYhp0dzMwZn 742HqPFVa6qRgjalDlSItOkzx5z4DChWJ/GYELS+Zn3j6fM5In5OC9oosnJ+VrHP n0wNOKXL/kEfReyXcfEO0DdXmM+t81UD7k6Gorr6wQvPjg6gkBywpxCJ70JOV8dq 6VPbdapKiQW+l+ZMpI8/4/7/TiLsecBNBF5Ei4qNEHiDgXbRyaQWorzEAVtWmSnv j7uwATKtJYWsBkNzR06LzMcQhPvSwXc= -----END CERTIFICATE-----Generated at Tue Nov 4 22:41:33 2025 by rpki-client