$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d42b2abe-b8b5-3d7f-8294-504d45b6fd99.roa File: d42b2abe-b8b5-3d7f-8294-504d45b6fd99.roa (raw, json) Hash identifier: 1+o04ap3QmSkdN4bwyLWUsAdQX8oKt6q+T7T2I5Bivc= Subject key identifier: FD:D6:EA:3A:F3:FF:87:D9:14:6E:C4:D9:68:43:EB:ED:70:77:10:1F Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119 Certificate serial: 010D0C9F4328584BA7CCEA57852FB41C6EE52E00 Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d42b2abe-b8b5-3d7f-8294-504d45b6fd99.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 3925 IP address blocks: 209.66.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:ea:57:85:2f:b4:1c:6e:e5:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119 Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=4cec0f88-96a4-46fb-b03c-9d0b87629d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:14:c1:7c:64:d9:0e:3b:37:f8:fd:18:bd:0a: 7c:dc:b5:b8:1b:a3:3e:d1:fa:6a:38:51:5c:71:70: 00:15:14:ac:d8:ab:0b:3a:0f:52:b9:61:53:e0:4d: e3:5b:06:d9:8c:4b:18:8f:b1:50:72:c7:f6:c8:3a: 57:9b:01:fe:63:96:b5:c0:22:b9:41:10:00:9d:40: 39:da:0f:05:61:e7:23:87:34:17:65:e6:35:96:51: 5d:e8:a0:21:fa:06:ab:52:ae:c7:f3:1f:6e:62:35: c8:0e:b2:7c:b3:1a:6d:95:40:cc:7c:d1:e0:e3:f1: f5:c8:a5:46:5b:7c:4c:bb:4b:c2:0c:4b:96:8c:37: 53:08:bd:f3:bd:15:1d:ca:f8:32:f4:a0:21:41:44: 9d:26:44:15:0c:ff:b5:d8:b0:ac:85:7f:f5:11:10: 5a:90:68:11:ef:04:34:bc:32:02:16:ea:d0:42:e7: 08:18:6e:dc:22:3b:fb:56:7a:41:91:84:41:9e:63: 70:35:58:5b:b1:61:4c:00:a2:47:8b:03:ff:66:45: e5:61:85:7c:8f:b8:a7:45:8a:2e:4a:9f:d6:87:1a: 3d:22:33:94:10:02:e6:ac:96:fe:e6:99:6b:68:0e: fc:7e:1a:5b:f8:d6:f0:e9:75:f9:dc:a0:42:ec:48: 4f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D6:EA:3A:F3:FF:87:D9:14:6E:C4:D9:68:43:EB:ED:70:77:10:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d42b2abe-b8b5-3d7f-8294-504d45b6fd99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl X509v3 Authority Key Identifier: keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer sbgp-ipAddrBlock: critical IPv4: 209.66.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:5b:7f:6d:91:d1:b2:b1:f1:cb:f0:1e:7d:b6:12:d6:ef:59: 0d:a5:5f:eb:8f:af:6f:cc:b6:85:9c:ff:5b:46:88:c8:a7:ea: 6a:48:66:b5:ce:9a:1f:14:0d:b3:79:f6:8b:41:2b:58:3a:a7: b2:65:ec:d7:e7:20:77:0b:91:45:da:4a:16:6c:ee:ac:e1:12: 1b:d4:cf:14:57:c8:60:07:88:cb:43:95:64:e7:c4:dc:35:f7: 52:2b:06:b9:5b:e6:52:d5:24:03:94:7b:82:7d:78:84:2f:28: 79:63:52:62:68:dd:7d:11:47:ba:8d:49:26:45:49:5c:0a:c9: ed:80:cd:6a:75:0d:1b:4c:cf:f4:2d:79:99:d3:f2:9f:21:16: fe:cc:40:0c:0a:77:9a:95:c1:ba:89:ad:ef:1b:c9:92:57:c2: dc:25:8b:97:65:bf:70:ac:ed:7f:15:c2:e4:47:f0:07:1f:bc: 86:00:3e:87:dc:9f:df:50:3d:a5:25:5d:79:e2:61:e7:07:33: a4:bb:42:21:64:a9:1b:8c:d4:82:12:1d:3e:82:27:c2:67:1f: cb:8e:fc:25:f5:97:0b:40:2b:41:85:1d:27:60:81:3b:a7:b7: c6:21:ef:c7:c1:2e:56:86:2a:86:f5:01:5e:63:fb:23:3e:79: 65:a6:ee:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzOpXhS+0HG7lLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh MTE5MB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk NGNlYzBmODgtOTZhNC00NmZiLWIwM2MtOWQwYjg3NjI5ZDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhTBfGTZDjs3+P0YvQp83LW4G6M+0fpqOFFc cXAAFRSs2KsLOg9SuWFT4E3jWwbZjEsYj7FQcsf2yDpXmwH+Y5a1wCK5QRAAnUA5 2g8FYecjhzQXZeY1llFd6KAh+garUq7H8x9uYjXIDrJ8sxptlUDMfNHg4/H1yKVG W3xMu0vCDEuWjDdTCL3zvRUdyvgy9KAhQUSdJkQVDP+12LCshX/1ERBakGgR7wQ0 vDICFurQQucIGG7cIjv7VnpBkYRBnmNwNVhbsWFMAKJHiwP/ZkXlYYV8j7inRYou Sp/Whxo9IjOUEALmrJb+5plraA78fhpb+Nbw6XX53KBC7EhPuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3W6jrz/4fZFG7E2WhD6+1wdxAfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1 ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvZDQyYjJhYmUtYjhiNS0z ZDdmLTgyOTQtNTA0ZDQ1YjZmZDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0UJkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALNbf22R0bKx8cvwHn22EtbvWQ2lX+uPr2/MtoWc/1tGiMin6mpIZrXO mh8UDbN59otBK1g6p7Jl7NfnIHcLkUXaShZs7qzhEhvUzxRXyGAHiMtDlWTnxNw1 91IrBrlb5lLVJAOUe4J9eIQvKHljUmJo3X0RR7qNSSZFSVwKye2AzWp1DRtMz/Qt eZnT8p8hFv7MQAwKd5qVwbqJre8byZJXwtwli5dlv3Cs7X8VwuRH8AcfvIYAPofc n99QPaUlXXniYecHM6S7QiFkqRuM1IISHT6CJ8JnH8uO/CX1lwtAK0GFHSdggTun t8Yh78fBLlaGKob1AV5j+yM+eWWm7tA= -----END CERTIFICATE-----Generated at Tue Nov 4 22:01:19 2025 by rpki-client