$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/e31aeda3-8822-3688-86e1-189828bb1476.roa File: e31aeda3-8822-3688-86e1-189828bb1476.roa (raw, json) Hash identifier: K/XQidJEfW5HxDQgNzqoGD4NN+SpbK4rt/pl/EaqmrE= Subject key identifier: 7A:49:8D:75:CE:82:E2:89:6B:74:5C:B4:96:75:4C:4A:54:FB:96:4E Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584BBFA5A293C581400190AEDD00 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/e31aeda3-8822-3688-86e1-189828bb1476.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 174 IP address blocks: 208.19.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:a2:93:c5:81:40:01:90:ae:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=38609ec7-8bf0-4a3c-b3a5-88ae3046c9a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d1:67:97:73:3f:82:43:e9:19:62:6e:33:91: f2:0d:71:b6:37:db:17:57:a5:52:8b:7e:54:d3:84: df:11:d1:cf:e5:51:58:6e:b7:d9:5e:40:ad:84:2c: bc:34:b0:cc:82:00:4c:1f:89:5c:07:dd:a1:66:c7: bd:4b:e1:7d:56:df:0d:9c:28:01:a6:46:40:a4:5c: aa:33:92:64:e1:f5:23:81:8e:93:89:b0:be:e9:8b: 7e:eb:b8:14:31:d9:b3:b0:25:b6:ba:9a:0c:eb:dd: af:bd:1f:49:e8:36:3e:0f:10:bd:80:0d:c4:36:ae: 00:3f:c8:a9:3e:2d:ec:dd:79:f2:ec:ce:18:b3:a7: 81:70:1c:67:5f:aa:47:d5:d8:67:68:95:d9:1f:19: 13:84:05:c4:11:83:6d:f2:66:77:07:0a:f3:32:8d: fc:20:c7:2a:e0:21:ea:91:88:d8:65:a6:bc:ed:ac: 39:a4:2f:7b:8e:45:5a:27:1b:12:5c:b9:ec:6a:89: dd:32:dd:d5:cf:08:9d:63:78:91:00:a7:6f:8f:42: e3:b5:6d:86:98:db:28:a9:bf:ff:c0:9a:74:67:d5: 23:6b:2c:cc:7d:0e:00:84:cf:6f:32:a0:cc:dd:87: aa:f3:b7:ed:ac:f0:56:f3:e9:81:52:54:92:dc:8f: 35:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:49:8D:75:CE:82:E2:89:6B:74:5C:B4:96:75:4C:4A:54:FB:96:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/e31aeda3-8822-3688-86e1-189828bb1476.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 208.19.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:99:4a:10:53:b8:6d:40:ef:86:43:b8:18:c5:9b:72:47:4b: c1:7b:7e:4f:7f:c6:6c:be:79:2f:fc:18:83:89:f8:95:3c:53: 4d:45:12:db:f1:d2:be:70:b8:bd:17:12:16:99:fd:ee:10:23: 66:d2:fd:b6:c0:7f:58:24:54:4a:31:0f:35:39:57:71:bd:dd: 11:45:31:19:a8:30:c6:11:82:ec:30:59:8b:43:76:3d:10:c1: a5:b4:a1:a1:5a:4c:44:fb:e6:91:d4:dd:7e:ba:67:41:d0:f9: 43:fc:8e:76:a0:95:34:fe:46:c6:34:7f:6f:9d:82:8e:56:7f: a7:14:81:0c:73:05:bc:34:77:87:bd:d7:5c:7b:fe:c7:4c:84: ec:53:f4:2e:67:39:61:6e:fa:69:f0:1e:42:98:13:30:18:26: 6c:ea:05:e2:b5:08:cd:80:c9:e8:81:c5:e0:d0:51:b2:32:00: b2:6f:7a:27:59:30:a2:ed:3d:25:8c:97:70:4b:e2:ae:64:b4: 2e:87:d9:cf:78:b3:ea:c1:7c:41:29:60:37:ee:a2:37:2b:1c: 00:7f:56:87:93:52:de:bc:b2:43:ed:3a:01:42:b5:1c:f3:47: b0:17:82:4f:51:e1:b8:d7:46:56:59:be:c0:68:c9:ce:74:88: 7c:a0:24:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/paKTxYFAAZCu3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk Mzg2MDllYzctOGJmMC00YTNjLWIzYTUtODhhZTMwNDZjOWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidFnl3M/gkPpGWJuM5HyDXG2N9sXV6VSi35U 04TfEdHP5VFYbrfZXkCthCy8NLDMggBMH4lcB92hZse9S+F9Vt8NnCgBpkZApFyq M5Jk4fUjgY6TibC+6Yt+67gUMdmzsCW2upoM692vvR9J6DY+DxC9gA3ENq4AP8ip Pi3s3Xny7M4Ys6eBcBxnX6pH1dhnaJXZHxkThAXEEYNt8mZ3BwrzMo38IMcq4CHq kYjYZaa87aw5pC97jkVaJxsSXLnsaondMt3VzwidY3iRAKdvj0LjtW2GmNsoqb// wJp0Z9UjayzMfQ4AhM9vMqDM3Yeq87ftrPBW8+mBUlSS3I81NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpJjXXOguKJa3RctJZ1TEpU+5ZOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvZTMxYWVkYTMtODgyMi0z Njg4LTg2ZTEtMTg5ODI4YmIxNDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0BNoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeZShBTuG1A74ZDuBjFm3JHS8F7fk9/xmy+eS/8GIOJ+JU8U01FEtvx 0r5wuL0XEhaZ/e4QI2bS/bbAf1gkVEoxDzU5V3G93RFFMRmoMMYRguwwWYtDdj0Q waW0oaFaTET75pHU3X66Z0HQ+UP8jnaglTT+RsY0f2+dgo5Wf6cUgQxzBbw0d4e9 11x7/sdMhOxT9C5nOWFu+mnwHkKYEzAYJmzqBeK1CM2AyeiBxeDQUbIyALJveidZ MKLtPSWMl3BL4q5ktC6H2c94s+rBfEEpYDfuojcrHAB/VoeTUt68skPtOgFCtRzz R7AXgk9R4bjXRlZZvsBoyc50iHygJEE= -----END CERTIFICATE-----Generated at Tue Nov 4 21:04:33 2025 by rpki-client