$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/8e308c21-96a9-3c5f-9236-af36b607b789.roa File: 8e308c21-96a9-3c5f-9236-af36b607b789.roa (raw, json) Hash identifier: zs4PBinqtelu0/HFVuzCIblQJFY2rStb/iNwolP8S54= Subject key identifier: BB:42:43:5D:E3:1B:B6:CF:61:65:01:18:02:1E:41:FC:B6:A5:9D:80 Certificate issuer: /CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9 Certificate serial: 010D0C9F4328584BA667A044219A78344DAA1940 Authority key identifier: 8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/8e308c21-96a9-3c5f-9236-af36b607b789.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 7127 IP address blocks: 192.212.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:a0:44:21:9a:78:34:4d:aa:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=af12e986-dc11-4881-a6b3-607341973471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:4b:53:62:9c:5e:26:01:43:8e:63:2b:b3:0c: 5b:e2:53:42:74:bd:76:c5:79:a8:f8:e2:27:ff:9e: 6f:46:77:9e:2d:d6:20:69:cf:09:26:94:85:8d:1d: 9f:5c:12:78:d8:e4:bc:1b:17:4c:59:81:04:0a:5a: 45:9f:39:6f:94:04:25:af:8b:a0:b6:ac:48:22:33: b0:8f:b8:32:5c:9f:86:bf:5f:6e:28:6a:83:3a:ef: 51:f5:b7:7e:c0:47:d4:b1:69:ba:41:af:56:bd:a3: 9b:c0:64:e9:2c:67:f7:22:51:a9:de:f7:e4:b4:ac: f7:49:55:40:26:0c:95:29:a4:45:47:ea:d1:e8:56: 84:28:80:86:0c:1c:a5:a1:90:d8:c2:69:d9:69:8f: 61:56:e7:78:ad:96:ae:28:5e:04:03:db:83:d5:60: 90:a7:e6:a0:12:75:a5:27:52:f7:00:6d:56:a1:c6: 91:1e:87:1e:fb:58:e2:7c:12:5d:e8:4e:5a:11:00: c6:3b:dd:3d:7c:87:a9:c6:72:a2:5e:91:df:0b:39: e5:2d:7e:4b:28:fe:e5:b4:ca:a4:ba:48:23:45:c2: 4e:f4:16:87:07:f3:0d:80:f0:25:ea:f8:a7:c1:cf: 70:e0:82:98:3e:bb:43:c3:ba:fe:cd:f8:59:b6:ba: 54:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:42:43:5D:E3:1B:B6:CF:61:65:01:18:02:1E:41:FC:B6:A5:9D:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/8e308c21-96a9-3c5f-9236-af36b607b789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl X509v3 Authority Key Identifier: keyid:8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer sbgp-ipAddrBlock: critical IPv4: 192.212.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:8a:d2:4e:66:16:13:c1:dc:ec:b4:bf:41:e7:46:98:76:cc: 24:95:72:68:53:45:47:9e:a9:44:d3:01:f6:9b:c5:f4:27:8b: 57:be:a2:3b:08:59:96:ad:96:cd:98:42:fe:65:a3:46:c9:7b: 11:40:28:22:96:5b:c0:cf:31:b4:e3:ca:ea:f0:05:80:cf:b1: 6b:09:de:f8:52:0b:b7:33:20:69:3c:a9:2c:91:8f:3b:f4:50: 8f:f4:ae:8a:5a:33:de:98:59:43:da:73:0f:2d:6e:75:c6:99: 37:1e:fc:b9:d1:02:8a:6b:d3:fc:8c:dd:02:8b:d6:6e:81:71: f4:86:c3:49:c7:a5:fd:34:1f:64:ac:8d:32:e0:f1:6e:f3:22: ed:81:a3:da:03:e5:4e:ef:d9:32:b2:50:d0:a1:60:a9:b6:4b: bc:3e:a9:90:fd:7b:16:a7:25:a2:03:da:a3:f8:43:ee:46:af: cd:c8:84:34:e2:d4:25:33:f6:50:ac:ff:81:af:e5:47:4c:6e: 67:11:26:39:b2:22:6c:4e:cd:3c:e3:d2:85:f8:32:ee:b5:34: a2:4e:2e:ca:83:8e:04:fc:3d:97:ec:b8:cb:de:0a:43:51:5e: 85:8f:38:29:a5:10:57:b9:62:29:44:55:61:9f:7a:f5:bb:24: 88:d3:ee:ca -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEumZ6BEIZp4NE2qGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFhOGMyOTktMDNjYS00YjgxLThiYWUtODNiNmQxYjNk N2Q5MB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk YWYxMmU5ODYtZGMxMS00ODgxLWE2YjMtNjA3MzQxOTczNDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50tTYpxeJgFDjmMrswxb4lNCdL12xXmo+OIn /55vRneeLdYgac8JJpSFjR2fXBJ42OS8GxdMWYEEClpFnzlvlAQlr4ugtqxIIjOw j7gyXJ+Gv19uKGqDOu9R9bd+wEfUsWm6Qa9WvaObwGTpLGf3IlGp3vfktKz3SVVA JgyVKaRFR+rR6FaEKICGDByloZDYwmnZaY9hVud4rZauKF4EA9uD1WCQp+agEnWl J1L3AG1WocaRHoce+1jifBJd6E5aEQDGO909fIepxnKiXpHfCznlLX5LKP7ltMqk ukgjRcJO9BaHB/MNgPAl6vinwc9w4IKYPrtDw7r+zfhZtrpUyQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLtCQ13jG7bPYWUBGAIeQfy2pZ2AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYWE4 YzI5OS0wM2NhLTRiODEtOGJhZS04M2I2ZDFiM2Q3ZDkvOGUzMDhjMjEtOTZhOS0z YzVmLTkyMzYtYWYzNmI2MDdiNzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGFhOGMyOTktMDNjYS00YjgxLThi YWUtODNiNmQxYjNkN2Q5LzBhYThjMjk5LTAzY2EtNGI4MS04YmFlLTgzYjZkMWIz ZDdkOS5jcmwwHwYDVR0jBBgwFoAUj/kPBmSwMq4GLXrC40vBjuR5TTwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYWE4YzI5OS0wM2NhLTRiODEtOGJhZS04M2I2 ZDFiM2Q3ZDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBwNQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAA4rSTmYWE8Hc7LS/QedGmHbMJJVyaFNFR56pRNMB9pvF9CeLV76iOwhZ lq2WzZhC/mWjRsl7EUAoIpZbwM8xtOPK6vAFgM+xawne+FILtzMgaTypLJGPO/RQ j/Suiloz3phZQ9pzDy1udcaZNx78udECimvT/IzdAovWboFx9IbDScel/TQfZKyN MuDxbvMi7YGj2gPlTu/ZMrJQ0KFgqbZLvD6pkP17FqclogPao/hD7kavzciENOLU JTP2UKz/ga/lR0xuZxEmObIibE7NPOPShfgy7rU0ok4uyoOOBPw9l+y4y94KQ1Fe hY84KaUQV7liKURVYZ969bskiNPuyg== -----END CERTIFICATE-----Generated at Wed Nov 5 17:15:02 2025 by rpki-client