$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a1bfb361-9899-3482-a213-5e754c1091f7.roa File: a1bfb361-9899-3482-a213-5e754c1091f7.roa (raw, json) Hash identifier: 03A1GovYONNn2VrtaXBJMe4J6wb+4uKUcVJiEy3USsE= Subject key identifier: 43:08:F2:59:A1:F0:84:DE:7D:CE:AE:2A:E6:7F:2F:11:12:68:55:B2 Certificate issuer: /CN=eb36756e-e433-4732-a707-a9fa13965624 Certificate serial: 010D0C9F4328584BB2F7D01611488947B9562F20 Authority key identifier: 88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a1bfb361-9899-3482-a213-5e754c1091f7.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 3565 IP address blocks: 208.68.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:d0:16:11:48:89:47:b9:56:2f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb36756e-e433-4732-a707-a9fa13965624 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=78581ed2-ee75-4a37-829c-7da9b3a3dee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:72:fb:91:07:33:41:77:74:66:9c:b4:4f:83: 60:5b:f3:81:2a:59:ce:d1:59:53:5b:83:60:64:8d: 65:99:4d:e4:48:aa:1a:4a:b0:56:43:fc:4b:c4:73: ce:ef:d6:97:30:57:c5:54:a6:94:2a:75:6a:13:7a: 29:9c:50:94:6b:91:1b:f8:a5:7f:d2:18:d9:3b:fc: ca:ef:58:ea:dd:53:7f:48:a3:17:d6:99:65:d0:85: b8:5f:9c:c3:63:ea:d1:e6:8e:d8:94:48:3a:45:8c: f2:f4:1b:67:fd:0b:e4:0c:af:12:2b:78:ba:26:a0: 30:16:4b:50:55:4d:f8:cb:d8:46:28:2f:85:7b:d5: d5:88:32:72:8b:f1:85:16:7a:77:03:81:48:01:35: 6e:af:7d:61:ea:0b:25:b1:6e:46:41:14:d3:08:28: bd:5b:a6:d9:4d:7c:99:7f:32:ee:71:74:3a:94:26: 8d:79:2c:e5:92:c9:7f:3e:04:92:e1:ef:1a:cc:c5: c7:ed:17:85:b6:55:22:40:a1:a5:22:04:cc:64:df: ff:ca:a7:36:36:9c:88:4a:e5:c5:3c:ae:a0:35:52: 94:25:b0:ca:c0:7b:5d:16:dc:14:0d:45:b3:33:7f: 31:2a:a0:87:60:18:c7:e8:c3:ce:81:5f:e3:71:9b: 17:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:08:F2:59:A1:F0:84:DE:7D:CE:AE:2A:E6:7F:2F:11:12:68:55:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a1bfb361-9899-3482-a213-5e754c1091f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl X509v3 Authority Key Identifier: keyid:88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer sbgp-ipAddrBlock: critical IPv4: 208.68.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:53:8a:65:45:8b:79:47:c4:f6:f5:24:5d:d3:4f:1a:43:f1: 22:9e:00:91:4e:52:b2:e8:9c:c9:b2:40:96:cb:d9:4e:aa:3a: f2:a5:ae:9e:d6:3c:6c:88:0a:05:91:be:6c:92:79:d7:a5:35: 10:a2:67:8c:50:7f:7e:80:6c:76:65:b9:bf:54:a3:24:ce:98: 2c:57:38:3c:3d:4b:b5:28:36:34:09:f9:0e:6f:3e:e5:14:c3: 17:5c:18:78:c6:88:62:d2:da:75:a8:03:2a:00:1d:c7:14:5b: e2:59:90:61:4e:48:4d:3f:67:ff:5c:15:f7:4d:8e:67:31:a8: ce:0a:41:0e:6f:d9:2d:2a:38:eb:ba:26:45:0b:52:73:2c:cd: 46:e6:f3:c2:1e:f2:5d:e4:d7:8a:f9:d5:fc:cf:62:1f:87:b3: ec:15:9d:58:be:83:90:91:65:e3:9f:e0:00:fe:5b:15:e0:a9: 87:df:37:87:13:b1:15:80:cc:bf:cc:d0:f1:47:47:00:cf:aa: 7c:24:67:3e:41:e4:e9:fd:dd:db:7a:a5:c6:c2:74:08:ef:38: 8e:90:6f:e5:3a:20:e2:1f:54:e5:58:79:63:5f:0d:4a:ce:2e: 46:e9:a6:7c:32:39:53:68:bd:f8:ac:d1:6d:7f:8b:19:2f:9d: 40:4a:9b:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy99AWEUiJR7lWLyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIzNjc1NmUtZTQzMy00NzMyLWE3MDctYTlmYTEzOTY1 NjI0MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk Nzg1ODFlZDItZWU3NS00YTM3LTgyOWMtN2RhOWIzYTNkZWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHL7kQczQXd0Zpy0T4NgW/OBKlnO0VlTW4Ng ZI1lmU3kSKoaSrBWQ/xLxHPO79aXMFfFVKaUKnVqE3opnFCUa5Eb+KV/0hjZO/zK 71jq3VN/SKMX1pll0IW4X5zDY+rR5o7YlEg6RYzy9Btn/QvkDK8SK3i6JqAwFktQ VU34y9hGKC+Fe9XViDJyi/GFFnp3A4FIATVur31h6gslsW5GQRTTCCi9W6bZTXyZ fzLucXQ6lCaNeSzlksl/PgSS4e8azMXH7ReFtlUiQKGlIgTMZN//yqc2NpyISuXF PK6gNVKUJbDKwHtdFtwUDUWzM38xKqCHYBjH6MPOgV/jcZsXPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMI8lmh8ITefc6uKuZ/LxESaFWyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lYjM2 NzU2ZS1lNDMzLTQ3MzItYTcwNy1hOWZhMTM5NjU2MjQvYTFiZmIzNjEtOTg5OS0z NDgyLWEyMTMtNWU3NTRjMTA5MWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZWIzNjc1NmUtZTQzMy00NzMyLWE3 MDctYTlmYTEzOTY1NjI0L2ViMzY3NTZlLWU0MzMtNDczMi1hNzA3LWE5ZmExMzk2 NTYyNC5jcmwwHwYDVR0jBBgwFoAUiA349Y8cCk5qFJhNT4/nj8QP0TIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9lYjM2NzU2ZS1lNDMzLTQ3MzItYTcwNy1hOWZh MTM5NjU2MjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ETfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFTimVFi3lHxPb1JF3TTxpD8SKeAJFOUrLonMmyQJbL2U6qOvKlrp7W PGyICgWRvmySedelNRCiZ4xQf36AbHZlub9UoyTOmCxXODw9S7UoNjQJ+Q5vPuUU wxdcGHjGiGLS2nWoAyoAHccUW+JZkGFOSE0/Z/9cFfdNjmcxqM4KQQ5v2S0qOOu6 JkULUnMszUbm88Ie8l3k14r51fzPYh+Hs+wVnVi+g5CRZeOf4AD+WxXgqYffN4cT sRWAzL/M0PFHRwDPqnwkZz5B5On93dt6pcbCdAjvOI6Qb+U6IOIfVOVYeWNfDUrO LkbppnwyOVNovfis0W1/ixkvnUBKm34= -----END CERTIFICATE-----Generated at Wed Nov 5 12:36:23 2025 by rpki-client