$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/cd834625-5e03-3003-a219-1f2ecf641d36.roa File: cd834625-5e03-3003-a219-1f2ecf641d36.roa (raw, json) Hash identifier: eqHxWcdAuPGVuAmyCZTjD4PM7n3LvNsK9oEuJxcy6X8= Subject key identifier: 0C:5A:38:1C:AF:B8:09:D8:F4:4B:72:E7:23:B6:76:8C:F2:54:D4:82 Certificate issuer: /CN=da6a16ad-9697-4d95-a04c-86394f7b78c8 Certificate serial: 010D0C9F4328584BC270555A582F65C99144F758 Authority key identifier: F4:67:EA:9A:60:B0:9C:4E:6E:AD:2E:BC:5B:9C:08:94:BA:A6:04:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/cd834625-5e03-3003-a219-1f2ecf641d36.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 16509 IP address blocks: 204.10.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/da6a16ad-9697-4d95-a04c-86394f7b78c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/da6a16ad-9697-4d95-a04c-86394f7b78c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:55:5a:58:2f:65:c9:91:44:f7:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da6a16ad-9697-4d95-a04c-86394f7b78c8 Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=e3e55279-eed4-4341-8801-76493f392e35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c3:66:a6:89:80:2e:79:61:f4:71:88:ef:02: 9f:c1:2a:ba:5b:0f:8a:5f:43:54:f5:88:57:ee:94: ac:4f:6a:98:c0:c5:ae:34:09:39:71:51:da:0b:9f: 3c:ae:36:29:7b:58:fe:37:cb:d5:83:0d:cd:75:94: b9:09:81:5b:85:a2:da:de:a6:ba:8c:97:d3:de:5d: 74:44:91:25:25:34:dd:c3:6c:c8:ec:ad:29:f2:3d: ce:5c:64:d2:43:d6:db:fa:52:ab:b3:fd:80:14:04: 43:98:01:3c:45:45:28:53:ec:8d:5d:f0:19:16:e1: 51:bd:a2:8a:00:ca:14:77:ae:73:e3:03:50:63:05: a3:e5:d7:38:f2:18:21:2d:1d:e5:a0:fd:29:32:dd: 6a:8c:c0:e1:0a:c7:4f:f6:de:c3:8d:26:49:b5:12: 60:12:70:88:96:8b:4f:f8:2c:fa:8b:9b:fe:37:ac: ff:21:01:cf:a0:4a:2b:8e:c9:47:84:83:2d:af:16: fe:2e:44:87:9e:a3:9a:4d:e4:9b:38:96:04:ad:e0: f2:aa:7c:c0:3b:9c:43:d0:d6:48:b1:af:6b:c3:3e: f6:5f:67:46:7f:c1:66:87:aa:7e:6e:f1:d1:e5:64: 1f:7a:f4:a8:9c:0d:eb:4a:c0:3a:c0:7a:19:81:e5: 89:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:5A:38:1C:AF:B8:09:D8:F4:4B:72:E7:23:B6:76:8C:F2:54:D4:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/cd834625-5e03-3003-a219-1f2ecf641d36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8/da6a16ad-9697-4d95-a04c-86394f7b78c8.crl X509v3 Authority Key Identifier: keyid:F4:67:EA:9A:60:B0:9C:4E:6E:AD:2E:BC:5B:9C:08:94:BA:A6:04:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da6a16ad-9697-4d95-a04c-86394f7b78c8.cer sbgp-ipAddrBlock: critical IPv4: 204.10.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:c2:c4:08:1b:cb:eb:3f:51:85:7c:75:81:b8:33:40:69:ba: 70:22:cd:45:e7:0d:95:3f:83:b2:0e:ce:7f:9d:30:c4:b9:1b: 0e:c4:cf:db:c1:d4:3d:72:90:9a:b1:4e:04:05:a9:80:d5:85: 3d:7c:57:d6:4b:c8:a2:59:41:3c:a0:c3:17:4e:84:7a:e6:7a: c2:d2:c5:6a:58:9f:a1:39:9d:97:6a:56:19:17:86:e9:c8:b5: 2d:ba:ee:a3:71:9b:d9:02:23:90:7d:ef:3a:3f:8b:52:2f:44: 4b:05:2e:9d:b7:be:cf:c0:2f:91:e5:bc:63:7c:f8:59:8a:a5: e3:98:76:ac:64:45:a3:c5:af:de:5c:3a:9f:d5:ec:35:3b:40: 28:49:b2:53:9a:9f:27:1f:c5:99:69:a2:f1:f9:fb:5a:64:dd: e7:8e:f9:ff:d1:0d:28:29:a2:3f:47:d3:27:e0:54:dc:35:c1: 54:73:c9:e1:01:8f:be:97:82:3c:73:aa:18:73:e5:e6:32:bc: c7:59:db:d8:f5:59:9a:6f:52:4b:62:01:48:f4:97:15:e5:b9: fe:23:f7:76:ea:75:6d:7a:a3:b7:6d:b5:3c:8a:cd:33:9d:c5: 47:5a:a3:07:6f:2a:9e:13:4d:a3:ea:01:e3:d6:3f:2b:60:65: f3:06:66:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvCcFVaWC9lyZFE91gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE2YTE2YWQtOTY5Ny00ZDk1LWEwNGMtODYzOTRmN2I3 OGM4MB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk ZTNlNTUyNzktZWVkNC00MzQxLTg4MDEtNzY0OTNmMzkyZTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8NmpomALnlh9HGI7wKfwSq6Ww+KX0NU9YhX 7pSsT2qYwMWuNAk5cVHaC588rjYpe1j+N8vVgw3NdZS5CYFbhaLa3qa6jJfT3l10 RJElJTTdw2zI7K0p8j3OXGTSQ9bb+lKrs/2AFARDmAE8RUUoU+yNXfAZFuFRvaKK AMoUd65z4wNQYwWj5dc48hghLR3loP0pMt1qjMDhCsdP9t7DjSZJtRJgEnCIlotP +Cz6i5v+N6z/IQHPoEorjslHhIMtrxb+LkSHnqOaTeSbOJYEreDyqnzAO5xD0NZI sa9rwz72X2dGf8Fmh6p+bvHR5WQfevSonA3rSsA6wHoZgeWJgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxaOByvuAnY9Ety5yO2dozyVNSCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTZh MTZhZC05Njk3LTRkOTUtYTA0Yy04NjM5NGY3Yjc4YzgvY2Q4MzQ2MjUtNWUwMy0z MDAzLWEyMTktMWYyZWNmNjQxZDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGE2YTE2YWQtOTY5Ny00ZDk1LWEw NGMtODYzOTRmN2I3OGM4L2RhNmExNmFkLTk2OTctNGQ5NS1hMDRjLTg2Mzk0Zjdi NzhjOC5jcmwwHwYDVR0jBBgwFoAU9GfqmmCwnE5urS68W5wIlLqmBFgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTZhMTZhZC05Njk3LTRkOTUtYTA0Yy04NjM5 NGY3Yjc4YzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzApgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7CxAgby+s/UYV8dYG4M0BpunAizUXnDZU/g7IOzn+dMMS5Gw7Ez9vB 1D1ykJqxTgQFqYDVhT18V9ZLyKJZQTygwxdOhHrmesLSxWpYn6E5nZdqVhkXhunI tS267qNxm9kCI5B97zo/i1IvREsFLp23vs/AL5HlvGN8+FmKpeOYdqxkRaPFr95c Op/V7DU7QChJslOanycfxZlpovH5+1pk3eeO+f/RDSgpoj9H0yfgVNw1wVRzyeEB j76Xgjxzqhhz5eYyvMdZ29j1WZpvUktiAUj0lxXluf4j93bqdW16o7dttTyKzTOd xUdaowdvKp4TTaPqAePWPytgZfMGZk4= -----END CERTIFICATE-----Generated at Thu Nov 6 06:22:28 2025 by rpki-client