$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/ff6facde-6cf7-3b4c-8f2e-3d975f5fe77d.roa File: ff6facde-6cf7-3b4c-8f2e-3d975f5fe77d.roa (raw, json) Hash identifier: X5PvWVSDZxQAuFc0SzCI7q2VAAy3Ar7nNVCKE1qybRQ= Subject key identifier: 78:24:99:3E:DF:35:A7:4D:37:02:BC:62:07:6C:C5:66:84:C4:D2:5D Certificate issuer: /CN=329c727b-a867-426a-ad3d-167aed3107dd Certificate serial: 010D0C9F4328584B477C738DB5BADD0215CB7600 Authority key identifier: 3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/ff6facde-6cf7-3b4c-8f2e-3d975f5fe77d.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 10482 IP address blocks: 204.209.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:73:8d:b5:ba:dd:02:15:cb:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=329c727b-a867-426a-ad3d-167aed3107dd Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=bd6670e2-6495-44b4-b375-b204b1aebffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4e:68:45:7b:0d:b2:e7:6d:15:b4:82:8e:17: 46:02:cc:2b:f9:0d:d2:ec:49:eb:73:3c:55:89:d3: 0a:c6:e3:8d:c1:1b:66:54:32:46:70:b6:a1:c8:fa: b6:8c:5b:00:38:24:0a:1e:ff:5d:5a:1b:ef:89:d6: bb:24:9a:f7:d5:47:1d:54:7d:ef:df:e9:ea:c5:d7: c9:8c:db:04:bd:7e:aa:8f:f8:9c:41:de:0a:05:fa: ef:f2:26:61:6a:d4:0b:34:9c:a0:58:58:6e:30:a0: 1c:c9:08:62:2b:bb:58:54:1b:42:55:28:11:17:02: 2b:01:30:29:39:36:22:5e:1e:fb:d3:ec:58:77:6e: 4a:f8:80:dc:75:ba:a8:4d:bc:5e:b5:76:a3:cb:b5: bf:ce:35:87:a9:48:a4:51:d8:99:e9:6c:b0:40:ce: fe:7b:76:bc:fb:77:f6:df:cb:06:a7:fd:c6:ac:f4: ca:6b:29:10:0b:9d:6b:77:5f:af:c3:df:f8:44:20: bb:40:22:64:31:df:ea:b7:cf:1e:c6:4c:d2:63:8b: 1e:fa:72:fb:7f:0a:7b:1e:0b:da:ce:85:fe:a8:16: bc:4e:06:83:d8:40:99:d5:22:d7:37:8c:15:f3:ee: 41:47:1f:1b:0e:24:bd:2a:80:cf:41:53:22:7c:c4: 81:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:24:99:3E:DF:35:A7:4D:37:02:BC:62:07:6C:C5:66:84:C4:D2:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/ff6facde-6cf7-3b4c-8f2e-3d975f5fe77d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl X509v3 Authority Key Identifier: keyid:3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer sbgp-ipAddrBlock: critical IPv4: 204.209.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:60:ef:21:5e:03:9b:aa:e4:11:3f:e9:3e:13:cc:60:a1:e3: 26:da:ea:8a:00:21:90:5d:b3:7a:4a:54:61:d6:17:0a:8d:dc: f6:a5:99:ef:0d:08:47:e3:fc:fc:1e:ef:4d:00:24:58:82:0f: b1:e9:7b:d6:48:3a:3f:e6:a5:ef:60:d3:40:4d:dc:13:af:0b: 40:28:ea:9b:b7:e4:53:67:46:2d:ed:23:4b:c3:6f:94:72:a5: 9d:5a:2f:75:7e:b4:a2:1a:84:f2:ae:63:cf:b2:7f:fc:0e:95: 89:2e:d9:bf:6a:f6:d4:d9:4f:2c:67:be:74:1c:12:5d:3a:4a: b9:55:ac:b0:61:e7:71:2d:a0:ce:50:00:4d:e1:78:dd:b0:42: de:24:ac:81:c0:bb:2f:b4:6c:3b:cb:63:65:50:6f:48:5e:fa: ca:42:ca:6b:af:90:9b:5a:c4:9a:9a:16:aa:dd:86:ef:bb:6c: c7:80:27:30:04:78:97:14:3d:00:d2:65:0a:3d:96:a5:9e:45: 01:7a:f9:dc:a3:c7:87:c0:d6:8c:f1:20:59:58:9a:e9:d3:2c: da:d8:d1:af:df:c6:46:c8:80:62:b8:b3:7f:9a:94:34:af:84: f6:c9:2f:d4:e2:29:2b:85:68:33:c4:d6:22:5d:fe:77:a4:e3: b3:83:b6:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfHONtbrdAhXLdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI5YzcyN2ItYTg2Ny00MjZhLWFkM2QtMTY3YWVkMzEw N2RkMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk YmQ2NjcwZTItNjQ5NS00NGI0LWIzNzUtYjIwNGIxYWViZmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkU5oRXsNsudtFbSCjhdGAswr+Q3S7EnrczxV idMKxuONwRtmVDJGcLahyPq2jFsAOCQKHv9dWhvvida7JJr31UcdVH3v3+nqxdfJ jNsEvX6qj/icQd4KBfrv8iZhatQLNJygWFhuMKAcyQhiK7tYVBtCVSgRFwIrATAp OTYiXh770+xYd25K+IDcdbqoTbxetXajy7W/zjWHqUikUdiZ6WywQM7+e3a8+3f2 38sGp/3GrPTKaykQC51rd1+vw9/4RCC7QCJkMd/qt88exkzSY4se+nL7fwp7Hgva zoX+qBa8TgaD2ECZ1SLXN4wV8+5BRx8bDiS9KoDPQVMifMSB0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgkmT7fNadNNwK8YgdsxWaExNJdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjlj NzI3Yi1hODY3LTQyNmEtYWQzZC0xNjdhZWQzMTA3ZGQvZmY2ZmFjZGUtNmNmNy0z YjRjLThmMmUtM2Q5NzVmNWZlNzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzI5YzcyN2ItYTg2Ny00MjZhLWFk M2QtMTY3YWVkMzEwN2RkLzMyOWM3MjdiLWE4NjctNDI2YS1hZDNkLTE2N2FlZDMx MDdkZC5jcmwwHwYDVR0jBBgwFoAUPZZSNdHOoxLv1MM8HGrn4fAf9SIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjljNzI3Yi1hODY3LTQyNmEtYWQzZC0xNjdh ZWQzMTA3ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzNHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5g7yFeA5uq5BE/6T4TzGCh4yba6ooAIZBds3pKVGHWFwqN3Palme8N CEfj/Pwe700AJFiCD7Hpe9ZIOj/mpe9g00BN3BOvC0Ao6pu35FNnRi3tI0vDb5Ry pZ1aL3V+tKIahPKuY8+yf/wOlYku2b9q9tTZTyxnvnQcEl06SrlVrLBh53EtoM5Q AE3heN2wQt4krIHAuy+0bDvLY2VQb0he+spCymuvkJtaxJqaFqrdhu+7bMeAJzAE eJcUPQDSZQo9lqWeRQF6+dyjx4fA1ozxIFlYmunTLNrY0a/fxkbIgGK4s3+alDSv hPbJL9TiKSuFaDPE1iJd/nek47ODttY= -----END CERTIFICATE-----Generated at Wed Nov 5 17:37:35 2025 by rpki-client