$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/4ce101df-91a7-3b36-ba7a-55112fc67dd7.roa File: 4ce101df-91a7-3b36-ba7a-55112fc67dd7.roa (raw, json) Hash identifier: 9Knl6qR84hGqtdt0a8TKU/A1swn/2z72qGAedIR8t8s= Subject key identifier: 50:20:64:8C:68:AD:91:FD:CC:A1:2A:D5:56:D2:B4:50:1F:3A:B9:D7 Certificate issuer: /CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b Certificate serial: 010D0C9F4328584B9E07D31323DAFD4A478E1C70 Authority key identifier: 19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/4ce101df-91a7-3b36-ba7a-55112fc67dd7.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 14549 IP address blocks: 208.86.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:d3:13:23:da:fd:4a:47:8e:1c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=56b5846e-2d9f-44f7-a2b2-d6c9ad364e6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7c:3a:75:e8:7c:82:21:b8:b9:2e:6b:23:87: 14:62:35:8c:dc:f6:76:e3:2c:4a:be:ba:1e:b1:18: 84:7c:bd:7b:30:85:0e:20:9f:22:12:71:d4:35:68: 26:5e:a9:19:e6:5e:d3:ef:ed:02:a7:69:3f:aa:01: 02:e0:d8:55:1b:7b:40:4c:54:d5:16:61:4a:97:97: 9e:08:4f:a1:cc:58:1e:64:78:21:b9:32:cb:25:e4: e4:38:8b:d1:d7:3a:12:8a:26:1a:7a:91:01:82:f3: 83:95:c1:e9:25:79:1f:72:a0:5b:fe:4c:2d:20:8b: e3:81:4f:3c:26:1b:76:b8:18:79:b8:3e:08:99:74: df:00:61:50:1d:98:9c:24:20:c2:cf:37:9c:2d:81: 37:28:90:b0:3f:71:57:fe:ae:3b:e8:89:2f:58:b1: df:bc:92:26:7b:7c:f5:f5:fa:a0:e0:1e:8c:39:82: b2:19:6b:28:83:87:15:4e:43:cc:83:1b:e9:66:44: 94:d9:8c:a1:f6:35:14:cd:ec:d9:f9:4a:fa:3a:e9: d8:8f:62:c1:7e:99:7a:3f:94:41:03:b4:7a:16:15: 1b:05:c7:2c:1e:08:39:be:25:29:a4:82:ae:6d:1a: 62:de:4c:89:cd:5a:3c:39:12:c6:4d:30:5c:e9:17: af:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:20:64:8C:68:AD:91:FD:CC:A1:2A:D5:56:D2:B4:50:1F:3A:B9:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/4ce101df-91a7-3b36-ba7a-55112fc67dd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl X509v3 Authority Key Identifier: keyid:19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer sbgp-ipAddrBlock: critical IPv4: 208.86.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:6d:c1:6d:61:93:4b:5a:05:d1:9e:62:a4:b6:ed:30:9b:99: 49:c0:8b:4a:cf:75:9c:e5:fa:d1:8a:6e:45:51:a2:ac:96:8b: a4:b2:b1:6f:de:22:33:53:e3:43:4b:04:e4:85:75:7e:98:5e: 69:56:ab:70:7d:a0:af:34:03:c6:08:43:7a:0c:f0:14:c0:61: 82:84:47:a3:48:f5:53:73:61:26:38:db:61:6c:7e:fb:7c:21: 02:2d:b5:15:21:6f:78:78:58:29:6f:7d:13:87:c1:d5:37:b5: 01:50:a0:6b:18:c8:59:32:21:9a:4c:fc:ee:69:1f:6d:13:be: a5:cf:52:97:29:58:8f:a9:cf:b8:ba:15:42:86:68:ce:f7:5c: 94:f8:26:63:73:7b:c2:ce:98:33:ef:5e:34:d6:77:d2:44:38: 69:4e:56:32:9a:5b:b3:13:d6:e2:96:32:b4:2e:3f:cf:0c:80: 3c:c9:b1:8b:43:30:a1:86:f2:74:62:f4:a9:c0:91:9c:93:c0: 92:bf:32:12:13:a3:50:8c:6b:7c:1b:d0:46:c1:e9:6f:4f:3e: 50:63:72:81:0d:71:8e:ee:0a:1e:95:70:73:f9:8e:db:02:23: 60:0c:a1:af:8d:42:38:bb:fd:02:f6:75:02:11:ed:60:a2:12: fa:b0:ac:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB9MTI9r9SkeOHHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMzNGY2OGItMmY3Zi00ZWYzLWJkZWUtNWEwZTJkNjhh MDNiMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NTZiNTg0NmUtMmQ5Zi00NGY3LWEyYjItZDZjOWFkMzY0ZTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3w6deh8giG4uS5rI4cUYjWM3PZ24yxKvroe sRiEfL17MIUOIJ8iEnHUNWgmXqkZ5l7T7+0Cp2k/qgEC4NhVG3tATFTVFmFKl5ee CE+hzFgeZHghuTLLJeTkOIvR1zoSiiYaepEBgvODlcHpJXkfcqBb/kwtIIvjgU88 Jht2uBh5uD4ImXTfAGFQHZicJCDCzzecLYE3KJCwP3FX/q476IkvWLHfvJIme3z1 9fqg4B6MOYKyGWsog4cVTkPMgxvpZkSU2Yyh9jUUzezZ+Ur6OunYj2LBfpl6P5RB A7R6FhUbBccsHgg5viUppIKubRpi3kyJzVo8ORLGTTBc6Rev6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAgZIxorZH9zKEq1VbStFAfOrnXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYzM0 ZjY4Yi0yZjdmLTRlZjMtYmRlZS01YTBlMmQ2OGEwM2IvNGNlMTAxZGYtOTFhNy0z YjM2LWJhN2EtNTUxMTJmYzY3ZGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGMzNGY2OGItMmY3Zi00ZWYzLWJk ZWUtNWEwZTJkNjhhMDNiLzBjMzRmNjhiLTJmN2YtNGVmMy1iZGVlLTVhMGUyZDY4 YTAzYi5jcmwwHwYDVR0jBBgwFoAUGT96sPm60yA6FwWVB8+TKk6ScCwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYzM0ZjY4Yi0yZjdmLTRlZjMtYmRlZS01YTBl MmQ2OGEwM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABtwW1hk0taBdGeYqS27TCbmUnAi0rPdZzl+tGKbkVRoqyWi6SysW/e IjNT40NLBOSFdX6YXmlWq3B9oK80A8YIQ3oM8BTAYYKER6NI9VNzYSY422Fsfvt8 IQIttRUhb3h4WClvfROHwdU3tQFQoGsYyFkyIZpM/O5pH20TvqXPUpcpWI+pz7i6 FUKGaM73XJT4JmNze8LOmDPvXjTWd9JEOGlOVjKaW7MT1uKWMrQuP88MgDzJsYtD MKGG8nRi9KnAkZyTwJK/MhITo1CMa3wb0EbB6W9PPlBjcoENcY7uCh6VcHP5jtsC I2AMoa+NQji7/QL2dQIR7WCiEvqwrMo= -----END CERTIFICATE-----Generated at Wed Nov 5 13:17:24 2025 by rpki-client