$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/6d76fa3f-7cbd-3821-aa27-07a71ccac26b.roa File: 6d76fa3f-7cbd-3821-aa27-07a71ccac26b.roa (raw, json) Hash identifier: LMjLiNLvIHhtI4kgyt69RDa+18nCBt9V9+yarN8dH3w= Subject key identifier: CB:6B:06:46:08:E0:25:B8:2C:BC:83:62:68:35:19:F2:15:BB:3A:5C Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Certificate serial: 010D0C9F4328584BBB7594F3C9DDE748C61A2928 Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/6d76fa3f-7cbd-3821-aa27-07a71ccac26b.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 394708 IP address blocks: 209.173.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:94:f3:c9:dd:e7:48:c6:1a:29:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=0c8e9639-cc3d-4471-9c5a-a48bb223cd9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1d:01:1a:20:a7:70:cf:6d:1f:78:fa:98:a6: 86:df:93:14:25:08:c9:3d:5e:b3:f8:94:5e:52:06: f0:f1:08:db:e6:83:d4:9f:52:16:7f:3b:96:b6:2d: b9:71:05:cf:17:be:8a:dc:6a:2c:41:6f:b2:31:14: a5:a4:4e:a6:62:12:eb:f3:ac:61:76:e3:bb:d3:29: 24:c8:b2:98:96:83:3e:26:23:70:aa:7f:d9:c4:ff: fe:86:fe:b4:1d:f9:94:ed:54:25:33:02:f7:b4:bb: 34:b9:1c:35:0e:f6:02:02:f9:a9:1a:fc:d1:d9:4f: ba:4e:46:91:34:44:44:aa:6a:39:65:b0:77:11:b8: 52:e4:1f:8a:8f:ac:96:b2:1c:df:5c:5a:cb:2e:1a: 2e:ca:99:22:c3:21:58:cb:65:00:72:9c:43:ce:70: af:c6:c2:b0:0c:d6:a9:3d:71:88:05:3d:d4:da:fc: ad:9d:49:db:29:76:52:9f:cb:1d:54:9a:9d:4e:09: a5:5d:2e:c7:db:4d:f7:19:5d:e4:aa:a5:80:40:b7: 39:85:4d:f9:dc:e2:43:7a:eb:b5:73:ec:a5:7a:81: 4c:10:f9:d9:c8:02:47:b3:ce:44:de:50:10:51:b3: f9:b1:ad:08:fb:25:f1:d7:d5:2e:60:46:5c:0c:53: 9b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:6B:06:46:08:E0:25:B8:2C:BC:83:62:68:35:19:F2:15:BB:3A:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/6d76fa3f-7cbd-3821-aa27-07a71ccac26b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl X509v3 Authority Key Identifier: keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer sbgp-ipAddrBlock: critical IPv4: 209.173.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:2a:5c:17:5e:cc:1a:a6:60:1c:23:e3:3e:a5:dd:87:62:a1: 29:53:9e:6b:70:a3:86:b8:00:3a:f5:1a:d6:9b:3d:fa:0d:38: 20:49:95:92:c6:a2:3c:11:8b:c3:75:f4:f3:1a:f1:7d:2e:ad: 11:98:f5:6b:01:2c:3a:bc:97:ff:40:05:dd:86:da:94:88:dd: 77:cf:c6:ab:5f:23:6e:00:37:fa:a9:9e:cf:48:50:09:33:10: 27:57:33:05:34:56:be:e7:8f:89:12:0d:5d:00:4f:34:35:f6: 80:6e:d9:ce:d5:b8:40:c4:8d:04:cb:19:20:fb:ac:42:fc:dd: f3:3f:4c:04:19:03:22:99:45:38:dd:30:c6:f9:40:8e:03:29: 00:3a:19:5f:61:b2:2d:3a:ad:ff:ce:69:97:04:20:3f:33:96: 60:d2:b8:4e:5f:1e:d0:b7:b6:1c:60:33:4b:11:c2:f0:0e:c4: b4:14:b1:7d:31:d5:5c:c3:ae:d5:3b:8d:94:70:4f:d3:2d:2c: b7:d9:aa:d0:95:f8:3c:5d:ef:0e:58:94:08:68:f5:dd:c0:ae: 5c:a7:37:a7:02:45:aa:9d:68:08:76:0c:c9:7e:72:8f:0a:92: 57:b0:4e:d7:ba:4f:a9:55:3e:9c:7b:6d:58:37:ed:e7:e0:02: ca:2a:e8:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dZTzyd3nSMYaKSgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk N2ZiMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk MGM4ZTk2MzktY2MzZC00NDcxLTljNWEtYTQ4YmIyMjNjZDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyB0BGiCncM9tH3j6mKaG35MUJQjJPV6z+JRe Ugbw8Qjb5oPUn1IWfzuWti25cQXPF76K3GosQW+yMRSlpE6mYhLr86xhduO70ykk yLKYloM+JiNwqn/ZxP/+hv60HfmU7VQlMwL3tLs0uRw1DvYCAvmpGvzR2U+6TkaR NEREqmo5ZbB3EbhS5B+Kj6yWshzfXFrLLhouypkiwyFYy2UAcpxDznCvxsKwDNap PXGIBT3U2vytnUnbKXZSn8sdVJqdTgmlXS7H2033GV3kqqWAQLc5hU353OJDeuu1 c+yleoFMEPnZyAJHs85E3lAQUbP5sa0I+yXx19UuYEZcDFObbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtrBkYI4CW4LLyDYmg1GfIVuzpcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2 ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvNmQ3NmZhM2YtN2NiZC0z ODIxLWFhMjctMDdhNzFjY2FjMjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1 ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1 YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0a28MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4qXBdezBqmYBwj4z6l3YdioSlTnmtwo4a4ADr1GtabPfoNOCBJlZLG ojwRi8N19PMa8X0urRGY9WsBLDq8l/9ABd2G2pSI3XfPxqtfI24AN/qpns9IUAkz ECdXMwU0Vr7nj4kSDV0ATzQ19oBu2c7VuEDEjQTLGSD7rEL83fM/TAQZAyKZRTjd MMb5QI4DKQA6GV9hsi06rf/OaZcEID8zlmDSuE5fHtC3thxgM0sRwvAOxLQUsX0x 1VzDrtU7jZRwT9MtLLfZqtCV+Dxd7w5YlAho9d3ArlynN6cCRaqdaAh2DMl+co8K klewTte6T6lVPpx7bVg37efgAsoq6Hc= -----END CERTIFICATE-----Generated at Tue Nov 4 23:36:53 2025 by rpki-client