$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/ca10f6ee-236c-3990-9aa6-b5221dab876b.roa File: ca10f6ee-236c-3990-9aa6-b5221dab876b.roa (raw, json) Hash identifier: 1Jjpj7Yxk482eUAc2o3c4fJjVtpWuj3qWAa0jxCVNjM= Subject key identifier: E6:30:23:D9:DC:54:7B:22:77:B4:B2:CD:F5:ED:36:CD:07:51:6D:3E Certificate issuer: /CN=37cfb708-8bc0-4a74-971e-28d677315695 Certificate serial: 010D0C9F4328584BA9326041754CB6AD51D0F180 Authority key identifier: AD:56:82:21:E8:9F:5E:3B:60:94:2F:89:79:58:A0:E6:12:08:E8:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/ca10f6ee-236c-3990-9aa6-b5221dab876b.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 395439 IP address blocks: 209.204.0.0/19 maxlen: 19 209.204.0.0/24 maxlen: 24 209.204.1.0/24 maxlen: 24 209.204.2.0/24 maxlen: 24 209.204.3.0/24 maxlen: 24 209.204.4.0/24 maxlen: 24 209.204.5.0/24 maxlen: 24 209.204.6.0/24 maxlen: 24 209.204.7.0/24 maxlen: 24 209.204.8.0/24 maxlen: 24 209.204.9.0/24 maxlen: 24 209.204.10.0/24 maxlen: 24 209.204.11.0/24 maxlen: 24 209.204.12.0/24 maxlen: 24 209.204.13.0/24 maxlen: 24 209.204.14.0/24 maxlen: 24 209.204.15.0/24 maxlen: 24 209.204.16.0/24 maxlen: 24 209.204.17.0/24 maxlen: 24 209.204.18.0/23 maxlen: 23 209.204.20.0/22 maxlen: 22 209.204.24.0/24 maxlen: 24 209.204.25.0/24 maxlen: 24 209.204.26.0/24 maxlen: 24 209.204.27.0/24 maxlen: 24 209.204.28.0/24 maxlen: 24 209.204.29.0/24 maxlen: 24 209.204.30.0/24 maxlen: 24 209.204.31.0/24 maxlen: 24 209.204.48.0/20 maxlen: 20 2605:7bc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/37cfb708-8bc0-4a74-971e-28d677315695.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/37cfb708-8bc0-4a74-971e-28d677315695.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:60:41:75:4c:b6:ad:51:d0:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37cfb708-8bc0-4a74-971e-28d677315695 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=d0dd93fa-f879-403c-8fb9-9dff813420bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:00:d7:e8:2a:0e:8c:6a:06:b1:e4:fb:1a:70: 0c:2b:4c:23:3a:9f:f3:03:84:29:c7:45:db:47:e9: 38:43:c9:91:44:76:83:30:8f:9e:3b:f3:19:f3:30: c0:b9:f1:58:3a:4e:5b:54:18:66:ca:22:af:35:ff: a7:60:7c:5a:c9:09:73:3b:31:1a:da:00:87:5f:eb: c1:0d:49:db:b8:e5:fc:7e:c2:63:d3:cd:df:71:fa: 6c:2a:d0:cf:85:8c:10:7d:43:2f:8a:c0:76:43:0f: f5:4d:ef:eb:0d:7e:6a:ad:3b:93:59:de:60:3f:f9: 75:93:89:32:ee:ba:ae:b8:05:16:c1:f4:75:4b:e3: d1:16:9a:0d:b6:0e:c2:ab:64:96:bb:da:53:8f:4a: 10:04:c5:54:a8:8c:77:9f:11:95:60:b6:c4:29:f4: f3:98:15:fc:f9:0d:8d:b3:9e:e4:02:b6:9a:70:b1: 27:14:94:f1:44:67:58:f1:db:12:f9:3c:14:b0:3e: f3:60:a1:95:d7:79:b6:8b:14:78:29:e0:b5:23:50: 66:21:bc:44:bc:0d:8e:e6:bb:be:65:28:75:c4:35: 15:02:3d:06:c0:69:33:f9:45:bf:dd:01:0c:ab:bf: 81:74:8e:f2:5b:1b:3f:96:eb:6d:e2:50:aa:c6:a9: 41:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:30:23:D9:DC:54:7B:22:77:B4:B2:CD:F5:ED:36:CD:07:51:6D:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/ca10f6ee-236c-3990-9aa6-b5221dab876b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/37cfb708-8bc0-4a74-971e-28d677315695.crl X509v3 Authority Key Identifier: keyid:AD:56:82:21:E8:9F:5E:3B:60:94:2F:89:79:58:A0:E6:12:08:E8:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695.cer sbgp-ipAddrBlock: critical IPv4: 209.204.0.0/19 209.204.48.0/20 IPv6: 2605:7bc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:4e:80:af:65:e5:1a:39:fa:70:a9:07:66:e1:83:97:6f:4e: 31:ea:ac:a9:27:a9:03:6a:78:69:20:45:0a:03:1c:a0:cd:a1: 31:83:cc:45:b3:38:6e:ae:17:0f:09:dd:42:55:78:52:3d:a0: 64:77:a9:45:8d:92:d2:4f:02:41:c5:d9:52:09:5d:f5:e6:37: d4:0e:90:aa:c2:b8:26:4d:38:0e:d2:a9:7e:10:1f:37:17:ec: 34:29:15:03:76:bb:47:86:4e:07:77:5a:6b:df:3e:c2:7b:87: 00:0e:84:49:95:14:fb:f2:b7:5a:bc:42:d3:fa:97:ef:2f:8e: b9:a6:13:43:90:1c:2a:a2:6b:65:28:ac:45:f7:c7:47:bb:98: 6a:5c:20:69:67:17:5b:21:7a:a0:b8:7b:cb:fc:d6:29:4d:82: a4:7f:d0:3c:23:10:c0:b0:13:70:3c:e5:76:50:c3:7e:30:be: b7:8e:32:31:91:f3:63:a5:17:22:81:28:bd:eb:25:b1:27:60: 29:dc:e7:e5:70:ac:a1:9a:85:df:d7:ce:d2:d1:69:eb:f5:76: 1b:10:f5:20:62:85:6b:4b:15:eb:65:33:d1:8e:57:ad:18:d7: de:1a:14:48:ce:00:56:c5:8e:85:8b:1d:7f:22:7a:76:ad:c3: 99:35:7d:e7 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEupMmBBdUy2rVHQ8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzdjZmI3MDgtOGJjMC00YTc0LTk3MWUtMjhkNjc3MzE1 Njk1MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ZDBkZDkzZmEtZjg3OS00MDNjLThmYjktOWRmZjgxMzQyMGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQDX6CoOjGoGseT7GnAMK0wjOp/zA4Qpx0Xb R+k4Q8mRRHaDMI+eO/MZ8zDAufFYOk5bVBhmyiKvNf+nYHxayQlzOzEa2gCHX+vB DUnbuOX8fsJj083fcfpsKtDPhYwQfUMvisB2Qw/1Te/rDX5qrTuTWd5gP/l1k4ky 7rquuAUWwfR1S+PRFpoNtg7Cq2SWu9pTj0oQBMVUqIx3nxGVYLbEKfTzmBX8+Q2N s57kAraacLEnFJTxRGdY8dsS+TwUsD7zYKGV13m2ixR4KeC1I1BmIbxEvA2O5ru+ ZSh1xDUVAj0GwGkz+UW/3QEMq7+BdI7yWxs/lutt4lCqxqlBQQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFOYwI9ncVHsid7SyzfXtNs0HUW0+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zN2Nm YjcwOC04YmMwLTRhNzQtOTcxZS0yOGQ2NzczMTU2OTUvY2ExMGY2ZWUtMjM2Yy0z OTkwLTlhYTYtYjUyMjFkYWI4NzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzdjZmI3MDgtOGJjMC00YTc0LTk3 MWUtMjhkNjc3MzE1Njk1LzM3Y2ZiNzA4LThiYzAtNGE3NC05NzFlLTI4ZDY3NzMx NTY5NS5jcmwwHwYDVR0jBBgwFoAUrVaCIeifXjtglC+JeVig5hII6DwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zN2NmYjcwOC04YmMwLTRhNzQtOTcxZS0yOGQ2 NzczMTU2OTUuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQF0cwAAwQE 0cwwMA0EAgACMAcDBQAmBXvAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGROgK9l5Ro5+nCpB2bhg5dvTjHq rKknqQNqeGkgRQoDHKDNoTGDzEWzOG6uFw8J3UJVeFI9oGR3qUWNktJPAkHF2VIJ XfXmN9QOkKrCuCZNOA7SqX4QHzcX7DQpFQN2u0eGTgd3WmvfPsJ7hwAOhEmVFPvy t1q8QtP6l+8vjrmmE0OQHCqia2UorEX3x0e7mGpcIGlnF1sheqC4e8v81ilNgqR/ 0DwjEMCwE3A85XZQw34wvreOMjGR82OlFyKBKL3rJbEnYCnc5+VwrKGahd/XztLR aev1dhsQ9SBihWtLFetlM9GOV60Y194aFEjOAFbFjoWLHX8ienatw5k1fec= -----END CERTIFICATE-----Generated at Wed Nov 5 22:13:44 2025 by rpki-client