$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/daea1d32-9330-32a9-8559-afb521212b02.roa File: daea1d32-9330-32a9-8559-afb521212b02.roa (raw, json) Hash identifier: dli3cEtgjaOjxDc4wuMs6Gw6t/ZCuSsIpD7gcokMVUs= Subject key identifier: E7:E6:6C:03:D5:F0:1F:65:0E:C7:E3:87:C2:C1:2C:3A:30:45:82:50 Certificate issuer: /CN=dafe2535-2dc5-4d47-b03e-d44eea26032f Certificate serial: 010D0C9F4328584BA9326A68D150BECE84B59200 Authority key identifier: 37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/daea1d32-9330-32a9-8559-afb521212b02.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 3257 IP address blocks: 76.10.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:6a:68:d1:50:be:ce:84:b5:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafe2535-2dc5-4d47-b03e-d44eea26032f Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=3fd44d9a-3c5d-4fe0-a6bf-df0b72d0c91a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:1a:9f:18:54:be:d9:7f:a5:51:4c:e3:5c:11: e3:c8:6d:12:4e:92:33:3c:54:c8:b7:d8:9c:8c:a0: 62:7a:b2:3f:05:94:c0:79:10:16:07:9a:75:05:4b: b4:f9:08:e9:3d:d4:25:46:96:85:18:ba:b1:02:9d: c2:c2:3b:05:66:9a:82:ab:2a:6c:7e:3f:20:e7:f0: 52:03:95:d7:5d:d6:0c:2c:64:e6:6d:bf:7a:43:b4: 30:df:ad:c7:da:b2:34:2e:46:22:fb:38:8e:1b:04: 89:f2:32:ba:99:90:01:ce:c1:2d:55:ff:70:93:75: 93:6f:fc:c3:b6:70:fe:dc:c1:c4:6d:cf:2a:b6:46: da:e4:3c:e7:21:eb:d2:6d:21:eb:0f:a9:5a:6c:ca: 89:56:f9:7e:b7:9d:c0:93:51:59:0d:53:55:55:42: 53:23:6f:6f:20:d0:1f:f7:aa:b5:37:9a:c6:0c:0a: 53:0f:24:d2:f9:95:2f:a8:4d:dd:5c:fd:7f:a9:b5: 62:5f:a3:2b:34:90:0b:26:88:68:8a:31:48:63:ea: e9:b0:93:31:e4:87:42:23:ad:c3:ef:80:00:b6:52: 9b:32:5e:1c:dd:67:a4:f6:b3:e1:99:33:e6:16:d6: 88:d3:36:10:90:2b:eb:c7:b1:69:44:2d:3d:fe:e5: 63:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E6:6C:03:D5:F0:1F:65:0E:C7:E3:87:C2:C1:2C:3A:30:45:82:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/daea1d32-9330-32a9-8559-afb521212b02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl X509v3 Authority Key Identifier: keyid:37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer sbgp-ipAddrBlock: critical IPv4: 76.10.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:40:9a:1e:80:65:0f:0f:9d:fe:fe:3c:f2:52:4a:89:ce:c1: 5d:af:64:1a:34:8a:25:4c:8b:94:c4:65:f8:6c:be:3e:69:ba: fc:7b:18:39:cb:9a:3f:5f:52:2d:8c:67:62:80:f6:49:ef:2e: 9e:88:f2:a9:1f:3a:8a:08:87:ab:17:c5:ea:24:22:f2:2b:7d: f4:f8:55:3c:98:44:05:2e:7d:df:29:da:fa:79:38:74:4b:13: b9:6b:f8:6a:da:bb:24:a2:b9:a0:77:a0:99:30:ac:b5:08:b0: f3:2d:c6:ff:03:22:06:f8:b7:d8:97:09:a7:44:4b:20:40:cb: 75:f9:bd:66:2a:62:09:e1:89:54:99:da:f0:55:74:d3:5a:c1: 64:46:c6:32:e0:cc:44:da:45:42:9c:5a:f8:e7:56:d4:84:66: 8c:27:40:53:91:86:fc:cc:aa:2b:1a:94:6a:2f:b6:77:c8:50: ef:6b:3e:19:dc:df:ab:4e:72:e4:e5:af:6e:59:35:c3:29:b2: cc:89:a4:5c:b4:61:c4:0b:c8:31:90:f2:b3:30:e2:81:50:fa: e1:e9:04:f0:85:34:b0:ed:6f:fa:b6:4c:0b:3b:8a:3c:51:43: a4:8d:cb:e6:6f:12:be:d8:56:50:07:3b:69:71:72:2e:3c:67: eb:dc:8e:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMmpo0VC+zoS1kgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFmZTI1MzUtMmRjNS00ZDQ3LWIwM2UtZDQ0ZWVhMjYw MzJmMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk M2ZkNDRkOWEtM2M1ZC00ZmUwLWE2YmYtZGYwYjcyZDBjOTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hqfGFS+2X+lUUzjXBHjyG0STpIzPFTIt9ic jKBierI/BZTAeRAWB5p1BUu0+QjpPdQlRpaFGLqxAp3CwjsFZpqCqypsfj8g5/BS A5XXXdYMLGTmbb96Q7Qw363H2rI0LkYi+ziOGwSJ8jK6mZABzsEtVf9wk3WTb/zD tnD+3MHEbc8qtkba5DznIevSbSHrD6labMqJVvl+t53Ak1FZDVNVVUJTI29vINAf 96q1N5rGDApTDyTS+ZUvqE3dXP1/qbViX6MrNJALJohoijFIY+rpsJMx5IdCI63D 74AAtlKbMl4c3Wek9rPhmTPmFtaI0zYQkCvrx7FpRC09/uVjSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfmbAPV8B9lDsfjh8LBLDowRYJQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYWZl MjUzNS0yZGM1LTRkNDctYjAzZS1kNDRlZWEyNjAzMmYvZGFlYTFkMzItOTMzMC0z MmE5LTg1NTktYWZiNTIxMjEyYjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGFmZTI1MzUtMmRjNS00ZDQ3LWIw M2UtZDQ0ZWVhMjYwMzJmL2RhZmUyNTM1LTJkYzUtNGQ0Ny1iMDNlLWQ0NGVlYTI2 MDMyZi5jcmwwHwYDVR0jBBgwFoAUN8t1jDs52bn6L7Uc75kQZ5e56xAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYWZlMjUzNS0yZGM1LTRkNDctYjAzZS1kNDRl ZWEyNjAzMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQETArwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1Amh6AZQ8Pnf7+PPJSSonOwV2vZBo0iiVMi5TEZfhsvj5puvx7GDnL mj9fUi2MZ2KA9knvLp6I8qkfOooIh6sXxeokIvIrffT4VTyYRAUufd8p2vp5OHRL E7lr+GrauySiuaB3oJkwrLUIsPMtxv8DIgb4t9iXCadESyBAy3X5vWYqYgnhiVSZ 2vBVdNNawWRGxjLgzETaRUKcWvjnVtSEZownQFORhvzMqisalGovtnfIUO9rPhnc 36tOcuTlr25ZNcMpssyJpFy0YcQLyDGQ8rMw4oFQ+uHpBPCFNLDtb/q2TAs7ijxR Q6SNy+ZvEr7YVlAHO2lxci48Z+vcjgA= -----END CERTIFICATE-----Generated at Wed Nov 5 02:04:41 2025 by rpki-client