$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/02d4c8c1-811c-301f-ae47-61c6c62035fe.roa File: 02d4c8c1-811c-301f-ae47-61c6c62035fe.roa (raw, json) Hash identifier: OOHY7WMaeKTc6MH1PBmlsXJHxtvBdijNzy1bCk35Luw= Subject key identifier: 8E:66:81:81:30:5E:26:E4:CB:99:1B:BA:06:1F:6E:8C:53:D6:95:93 Certificate issuer: /CN=b0217be3-0b99-45d9-9156-e23551753455 Certificate serial: 010D0C9F4328584BBFA59B34B338114E2910FD80 Authority key identifier: 61:F2:92:9F:AE:6F:06:0D:B5:C1:9C:50:85:70:18:63:49:DE:DB:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/02d4c8c1-811c-301f-ae47-61c6c62035fe.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 395019 IP address blocks: 208.76.208.0/22 maxlen: 22 2602:fbfd::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/b0217be3-0b99-45d9-9156-e23551753455.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/b0217be3-0b99-45d9-9156-e23551753455.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:9b:34:b3:38:11:4e:29:10:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0217be3-0b99-45d9-9156-e23551753455 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=8d38f4c6-bbe6-49ec-99fd-2887f1d0c8fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:86:db:f9:7b:69:76:00:30:7e:b6:20:a5:74: 8c:f0:38:f2:a2:5a:45:b4:b5:fb:27:1e:9b:5a:be: 2e:31:fb:4e:86:26:81:d4:f2:c2:72:29:d9:eb:a3: 4b:c7:a1:bb:dd:40:a0:24:9d:79:b3:6c:49:1e:ef: 39:89:a0:65:21:1c:ac:45:90:57:6f:a8:d4:3f:0b: ac:c6:08:4c:c0:82:3d:15:be:f4:b5:25:b7:66:64: ab:b8:23:e8:2c:4a:bb:e2:38:64:04:b4:f1:44:a3: 80:21:16:79:0e:a0:fb:08:94:1e:75:fb:87:29:62: 44:fb:71:f0:c7:84:9e:e9:9e:cd:02:3f:47:cc:6f: e7:89:99:79:7f:ce:e1:f8:aa:cd:3e:94:cf:28:4d: 71:85:b4:f3:44:18:99:7a:42:b6:9a:84:b2:4a:a2: 3b:41:9d:88:6f:99:8a:65:6b:a5:d0:b3:12:ef:5a: b7:57:4e:4a:f6:17:61:26:35:0f:28:cd:dc:f9:a0: 5b:7f:33:d6:12:58:b5:d0:46:24:8d:59:d2:c8:85: 8a:96:f3:84:ba:20:bc:14:0c:ac:66:6c:de:c0:6f: de:ed:eb:6d:ea:1a:0b:17:73:2f:4b:36:de:fc:b8: 11:42:af:b9:cc:f7:e8:4f:f5:c1:77:3e:b8:98:53: f9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:66:81:81:30:5E:26:E4:CB:99:1B:BA:06:1F:6E:8C:53:D6:95:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/02d4c8c1-811c-301f-ae47-61c6c62035fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/b0217be3-0b99-45d9-9156-e23551753455.crl X509v3 Authority Key Identifier: keyid:61:F2:92:9F:AE:6F:06:0D:B5:C1:9C:50:85:70:18:63:49:DE:DB:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455.cer sbgp-ipAddrBlock: critical IPv4: 208.76.208.0/22 IPv6: 2602:fbfd::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:d1:c1:e3:62:e4:9c:3d:34:3d:d1:56:65:af:66:45:4b:18: 90:80:76:ec:8d:0d:cc:71:00:3e:30:40:5c:a7:f1:60:53:7b: e0:0f:0e:43:0f:8e:e1:2f:ae:a2:4c:ce:7d:a4:fc:96:f2:7f: 33:60:6a:f0:f2:69:73:47:c0:d5:dc:10:01:e4:85:85:4c:de: 5f:88:cb:54:da:c1:d4:dc:cb:46:5e:b1:ef:6c:4c:8c:b5:e5: f3:e2:fb:59:6e:8e:52:3d:79:f2:ec:90:67:a7:51:f7:6f:a1: 15:cc:80:2f:0a:83:41:bc:8c:51:41:c4:fb:48:33:a7:bd:25: 8b:82:b3:7c:16:78:87:ee:e9:4a:9d:62:b6:ea:6f:b0:de:9d: bc:f8:6c:9e:1c:74:76:94:68:a3:72:52:1c:c2:c2:6b:a7:15: 4c:77:25:49:07:48:c1:96:b8:41:97:2b:af:30:d5:27:03:7c: 63:67:fb:66:fb:d0:98:a5:de:77:63:c6:ae:55:8b:03:28:6d: 5d:46:99:77:22:e2:ef:3b:11:93:66:0f:d3:dc:55:2e:14:fe: 36:35:df:78:cd:b0:11:f1:18:22:a1:00:fd:57:71:70:76:80: c4:67:23:a5:40:49:e2:14:48:b0:0b:a5:b2:85:08:23:d9:a8: 56:72:a5:6a -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEu/pZs0szgRTikQ/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyMTdiZTMtMGI5OS00NWQ5LTkxNTYtZTIzNTUxNzUz NDU1MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk OGQzOGY0YzYtYmJlNi00OWVjLTk5ZmQtMjg4N2YxZDBjOGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkobb+XtpdgAwfrYgpXSM8DjyolpFtLX7Jx6b Wr4uMftOhiaB1PLCcinZ66NLx6G73UCgJJ15s2xJHu85iaBlIRysRZBXb6jUPwus xghMwII9Fb70tSW3ZmSruCPoLEq74jhkBLTxRKOAIRZ5DqD7CJQedfuHKWJE+3Hw x4Se6Z7NAj9HzG/niZl5f87h+KrNPpTPKE1xhbTzRBiZekK2moSySqI7QZ2Ib5mK ZWul0LMS71q3V05K9hdhJjUPKM3c+aBbfzPWEli10EYkjVnSyIWKlvOEuiC8FAys ZmzewG/e7ett6hoLF3MvSzbe/LgRQq+5zPfoT/XBdz64mFP51wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFI5mgYEwXibky5kbugYfboxT1pWTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMDIx N2JlMy0wYjk5LTQ1ZDktOTE1Ni1lMjM1NTE3NTM0NTUvMDJkNGM4YzEtODExYy0z MDFmLWFlNDctNjFjNmM2MjAzNWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjAyMTdiZTMtMGI5OS00NWQ5LTkx NTYtZTIzNTUxNzUzNDU1L2IwMjE3YmUzLTBiOTktNDVkOS05MTU2LWUyMzU1MTc1 MzQ1NS5jcmwwHwYDVR0jBBgwFoAUYfKSn65vBg21wZxQhXAYY0ne2zYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMDIxN2JlMy0wYjk5LTQ1ZDktOTE1Ni1lMjM1 NTE3NTM0NTUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQC0EzQMA4E AgACMAgDBgQmAvv9ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBB0cHjYuScPTQ90VZlr2ZFSxiQgHbsjQ3M cQA+MEBcp/FgU3vgDw5DD47hL66iTM59pPyW8n8zYGrw8mlzR8DV3BAB5IWFTN5f iMtU2sHU3MtGXrHvbEyMteXz4vtZbo5SPXny7JBnp1H3b6EVzIAvCoNBvIxRQcT7 SDOnvSWLgrN8FniH7ulKnWK26m+w3p28+GyeHHR2lGijclIcwsJrpxVMdyVJB0jB lrhBlyuvMNUnA3xjZ/tm+9CYpd53Y8auVYsDKG1dRpl3IuLvOxGTZg/T3FUuFP42 Nd94zbAR8RgioQD9V3FwdoDEZyOlQEniFEiwC6WyhQgj2ahWcqVq -----END CERTIFICATE-----Generated at Wed Nov 5 17:50:52 2025 by rpki-client