$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/279b99c7-6717-3c8a-974d-137532afc328.roa File: 279b99c7-6717-3c8a-974d-137532afc328.roa (raw, json) Hash identifier: SnXeg4nNGFCRYPLtVbLlJdefFyC4uWkZIim98jTYLEM= Subject key identifier: FE:A9:C2:7B:01:C6:F3:C5:41:8F:26:EA:DB:C3:74:ED:B0:A9:5D:F1 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584B7C87620683EBC4B3F6A52F00 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/279b99c7-6717-3c8a-974d-137532afc328.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 10397 IP address blocks: 208.85.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:62:06:83:eb:c4:b3:f6:a5:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=cd280568-3454-4bb8-a92a-ad4f852f2ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f3:4f:e7:77:b5:1c:99:4e:49:3b:b8:8b:ef: 5a:53:84:e5:a8:fa:c5:99:48:ba:88:7e:39:64:ea: 1c:7f:07:d1:e2:e0:19:50:7d:98:1c:bd:c2:0d:6c: 3f:21:f0:4f:ed:ef:4a:a3:a2:ba:d2:d9:8e:a5:78: 28:00:90:b0:7d:24:91:7f:28:4e:73:73:4e:42:b1: d0:09:e7:cc:56:1e:0d:19:e7:14:e8:2b:16:ce:dd: ff:72:15:d7:5f:88:81:63:52:84:a9:2c:d2:0f:05: 9c:5c:05:a1:62:84:8e:73:61:9f:3b:e9:a2:55:cc: 6b:c5:70:2b:22:e7:78:08:28:4c:05:40:74:d4:f6: 9e:25:42:a5:a4:f7:b8:d1:4f:4e:e8:15:d4:dc:0f: 8d:22:99:df:2a:97:ea:80:0d:c2:d4:26:20:3f:f4: 6a:6d:13:e6:43:b6:70:54:d2:09:f0:4b:6c:d7:e4: 63:74:bb:9f:c8:35:25:43:7d:b1:e5:ac:f4:11:c6: 4d:bc:31:ca:65:f6:2d:ea:e9:29:fb:d9:84:33:25: 1e:01:1a:c6:78:ad:3d:b4:ca:fc:34:27:cf:a9:74: c2:c2:34:34:12:d5:18:39:be:07:28:0f:33:1b:7a: ba:b2:85:7c:a5:a6:2e:29:97:9d:2e:a1:c6:33:ae: e2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A9:C2:7B:01:C6:F3:C5:41:8F:26:EA:DB:C3:74:ED:B0:A9:5D:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/279b99c7-6717-3c8a-974d-137532afc328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 208.85.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:46:f5:0c:95:30:2a:5c:4d:db:97:fa:02:bf:e4:8a:29:18: 62:46:83:cc:5d:73:a6:27:7c:d7:4c:05:1e:ca:39:cb:78:65: 47:ec:7f:55:24:cb:9a:fb:4d:1b:e9:00:ef:93:97:f8:52:16: 8b:c5:ae:6f:d8:5d:5a:a1:29:7f:f1:dc:34:94:07:74:6a:44: 71:8d:79:a2:70:01:9c:e6:46:fc:c9:e9:e6:8e:dc:83:b5:03: 34:76:88:ce:aa:52:fc:81:38:c5:46:72:a5:85:8d:f2:5b:73: 6a:12:bb:81:7d:20:77:23:1b:d9:84:b2:fa:d7:56:97:4f:e0: 09:ec:cc:ff:ab:5f:47:c6:6b:f4:23:07:95:2f:a2:a7:49:c1: 62:f4:c8:f0:64:73:e9:48:50:b5:0a:6d:81:29:9d:3d:7b:ae: 8d:9c:b5:65:32:56:d6:13:84:9b:44:d4:ae:38:17:00:a6:f2: 45:aa:cd:38:ad:92:b8:21:0c:de:0d:11:e2:1a:2e:48:ba:aa: 96:3e:eb:44:95:84:b6:b5:0a:07:be:81:23:2c:5b:95:71:7a: 96:dd:1d:0c:a3:79:34:54:d0:93:2d:bb:68:ae:d4:bd:94:0a: 29:f4:15:a0:9d:b8:09:28:72:7a:f6:ea:cc:af:3e:9f:d8:e7: 3f:14:dc:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h2IGg+vEs/alLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk Y2QyODA1NjgtMzQ1NC00YmI4LWE5MmEtYWQ0Zjg1MmYyY2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifNP53e1HJlOSTu4i+9aU4TlqPrFmUi6iH45 ZOocfwfR4uAZUH2YHL3CDWw/IfBP7e9Ko6K60tmOpXgoAJCwfSSRfyhOc3NOQrHQ CefMVh4NGecU6CsWzt3/chXXX4iBY1KEqSzSDwWcXAWhYoSOc2GfO+miVcxrxXAr Iud4CChMBUB01PaeJUKlpPe40U9O6BXU3A+NIpnfKpfqgA3C1CYgP/RqbRPmQ7Zw VNIJ8Ets1+RjdLufyDUlQ32x5az0EcZNvDHKZfYt6ukp+9mEMyUeARrGeK09tMr8 NCfPqXTCwjQ0EtUYOb4HKA8zG3q6soV8paYuKZedLqHGM67iAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6pwnsBxvPFQY8m6tvDdO2wqV3xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvMjc5Yjk5YzctNjcxNy0z YzhhLTk3NGQtMTM3NTMyYWZjMzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FWBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5G9QyVMCpcTduX+gK/5IopGGJGg8xdc6YnfNdMBR7KOct4ZUfsf1Uk y5r7TRvpAO+Tl/hSFovFrm/YXVqhKX/x3DSUB3RqRHGNeaJwAZzmRvzJ6eaO3IO1 AzR2iM6qUvyBOMVGcqWFjfJbc2oSu4F9IHcjG9mEsvrXVpdP4AnszP+rX0fGa/Qj B5UvoqdJwWL0yPBkc+lIULUKbYEpnT17ro2ctWUyVtYThJtE1K44FwCm8kWqzTit krghDN4NEeIaLki6qpY+60SVhLa1Cge+gSMsW5VxepbdHQyjeTRU0JMtu2iu1L2U Cin0FaCduAkocnr26syvPp/Y5z8U3OA= -----END CERTIFICATE-----Generated at Wed Nov 5 10:01:51 2025 by rpki-client