$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/0cea5f41-9cfb-326e-b57b-fa434d8b6539.roa File: 0cea5f41-9cfb-326e-b57b-fa434d8b6539.roa (raw, json) Hash identifier: /dD3Qj+yT+vsuM9om6rT9AGXVU4tsy8tc97zyfpi2Po= Subject key identifier: 99:A4:15:AF:56:12:94:67:51:90:95:0B:36:1B:81:6B:D1:CA:FD:33 Certificate issuer: /CN=3c1b9e2d-457a-403f-9256-27f272ed993d Certificate serial: 010D0C9F4328584B95A79058E0B4D8BF7593CD00 Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/0cea5f41-9cfb-326e-b57b-fa434d8b6539.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 208.95.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:90:58:e0:b4:d8:bf:75:93:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=c6370c8c-7eeb-4201-9843-8564ce6d09d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:42:37:89:9b:28:81:6c:10:ad:cf:21:74:9b: f1:e7:d0:dc:8f:f0:38:f4:18:49:10:28:ea:62:73: 38:7d:1a:ac:06:10:71:dc:de:43:a4:43:2a:ee:ff: f6:d9:9f:01:f5:9c:1c:19:70:6b:b0:45:f9:12:78: f2:62:6a:5e:22:3d:d6:a0:43:15:33:7c:a5:b0:df: 67:e9:39:5f:ae:91:08:9f:74:e7:95:bc:8e:76:5c: 67:78:be:c6:85:47:65:8e:d5:79:ac:f9:79:5e:96: fc:b9:d5:ed:f4:d0:ec:a2:f3:ef:2d:e2:fc:db:d9: 33:1b:46:83:c9:4c:8c:50:39:e2:bd:32:c6:5d:bc: fa:b9:f8:b5:96:cb:47:b4:8c:3c:07:78:cb:f5:ab: c6:81:df:ef:e9:e8:d8:39:4d:ee:89:4a:d0:8c:4f: 78:3c:ad:63:e3:cf:3f:85:7d:d8:b6:22:39:b3:43: 60:46:1f:9c:43:fb:8d:99:63:cc:e4:ff:96:6b:aa: 49:d5:9a:bb:9b:e4:5b:bd:61:d9:75:4f:1b:21:2b: d0:29:ec:2e:a1:78:3e:18:7a:3c:ee:71:39:5d:6f: 91:d8:1c:1c:3f:30:a5:ca:fc:06:af:fb:ab:f8:42: c7:3a:b2:ed:50:de:e3:38:40:ee:04:0b:e2:7a:b9: e9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A4:15:AF:56:12:94:67:51:90:95:0B:36:1B:81:6B:D1:CA:FD:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/0cea5f41-9cfb-326e-b57b-fa434d8b6539.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl X509v3 Authority Key Identifier: keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer sbgp-ipAddrBlock: critical IPv4: 208.95.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:45:d1:c1:28:2c:b7:24:2b:3e:9c:b3:b8:63:66:06:34:d2: 15:28:a6:e2:7f:d6:15:30:2d:06:0b:89:78:5b:2b:5e:9e:35: 8f:3a:51:9c:5f:5b:8b:cb:2d:78:43:30:c8:0f:e8:1d:73:31: b1:9d:9c:62:db:af:1a:be:98:bd:1c:fe:37:b2:6d:db:6b:86: 95:6b:b4:58:0a:29:5c:60:dd:76:3f:5e:9f:b7:c0:36:25:47: 36:3e:7a:c0:72:f8:44:11:d9:56:01:f6:81:c7:ae:d0:bf:96: 74:66:f5:45:3b:19:23:8b:96:66:9b:01:2f:1c:a0:de:5c:29: 51:a5:21:fc:6a:06:d1:c4:a4:ae:92:cc:d4:5b:70:aa:fa:7f: 23:02:0b:f9:88:8b:6f:17:fc:53:21:e5:77:8c:db:2c:97:70: 77:c1:d0:1c:3d:0f:1e:a1:17:0f:a2:03:78:fa:f1:65:5c:7f: d5:76:81:f4:72:95:33:f2:36:38:3d:60:7b:8d:48:89:f5:1d: 74:f4:5c:9c:43:d9:85:aa:af:6a:94:e1:18:d9:af:3b:2e:c9: 1b:37:dc:d8:55:d4:7e:c0:32:b6:00:5f:04:8f:a5:27:ae:98: 69:db:23:76:9a:b4:19:77:ca:6d:c4:6f:cf:13:be:84:9c:2f: f6:c4:17:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5BY4LTYv3WTzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MxYjllMmQtNDU3YS00MDNmLTkyNTYtMjdmMjcyZWQ5 OTNkMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YzYzNzBjOGMtN2VlYi00MjAxLTk4NDMtODU2NGNlNmQwOWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0I3iZsogWwQrc8hdJvx59Dcj/A49BhJECjq YnM4fRqsBhBx3N5DpEMq7v/22Z8B9ZwcGXBrsEX5EnjyYmpeIj3WoEMVM3ylsN9n 6TlfrpEIn3TnlbyOdlxneL7GhUdljtV5rPl5Xpb8udXt9NDsovPvLeL829kzG0aD yUyMUDnivTLGXbz6ufi1lstHtIw8B3jL9avGgd/v6ejYOU3uiUrQjE94PK1j488/ hX3YtiI5s0NgRh+cQ/uNmWPM5P+Wa6pJ1Zq7m+RbvWHZdU8bISvQKewuoXg+GHo8 7nE5XW+R2BwcPzClyvwGr/ur+ELHOrLtUN7jOEDuBAviernpKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmkFa9WEpRnUZCVCzYbgWvRyv0zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFi OWUyZC00NTdhLTQwM2YtOTI1Ni0yN2YyNzJlZDk5M2QvMGNlYTVmNDEtOWNmYi0z MjZlLWI1N2ItZmE0MzRkOGI2NTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2MxYjllMmQtNDU3YS00MDNmLTky NTYtMjdmMjcyZWQ5OTNkLzNjMWI5ZTJkLTQ1N2EtNDAzZi05MjU2LTI3ZjI3MmVk OTkzZC5jcmwwHwYDVR0jBBgwFoAU7t8l0kJMmR/VBLPQ02SetbVqcsMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFiOWUyZC00NTdhLTQwM2YtOTI1Ni0yN2Yy NzJlZDk5M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F82MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNF0cEoLLckKz6cs7hjZgY00hUopuJ/1hUwLQYLiXhbK16eNY86UZxf W4vLLXhDMMgP6B1zMbGdnGLbrxq+mL0c/jeybdtrhpVrtFgKKVxg3XY/Xp+3wDYl RzY+esBy+EQR2VYB9oHHrtC/lnRm9UU7GSOLlmabAS8coN5cKVGlIfxqBtHEpK6S zNRbcKr6fyMCC/mIi28X/FMh5XeM2yyXcHfB0Bw9Dx6hFw+iA3j68WVcf9V2gfRy lTPyNjg9YHuNSIn1HXT0XJxD2YWqr2qU4RjZrzsuyRs33NhV1H7AMrYAXwSPpSeu mGnbI3aatBl3ym3Eb88TvoScL/bEFw4= -----END CERTIFICATE-----Generated at Wed Nov 5 05:45:32 2025 by rpki-client