$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/42c8111b-72eb-368e-a605-4f13d00564aa.roa File: 42c8111b-72eb-368e-a605-4f13d00564aa.roa (raw, json) Hash identifier: cfVxd9j2wTDu0YWZJ87BEW/u/RVC7UuyfH89pwVYfwM= Subject key identifier: F4:92:D1:50:3E:AE:46:AD:E0:99:EF:C5:DE:96:4C:D0:BE:EE:76:EA Certificate issuer: /CN=3c1b9e2d-457a-403f-9256-27f272ed993d Certificate serial: 010D0C9F4328584B95A78D157E09DAFF3057B780 Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/42c8111b-72eb-368e-a605-4f13d00564aa.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 208.95.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:8d:15:7e:09:da:ff:30:57:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=fbc25b72-8164-4b6d-95a6-1c3020ef8898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:64:bd:77:b8:93:87:54:c6:ff:b6:d3:95:e6: d1:16:26:07:11:04:18:a6:40:a2:1e:c7:4d:17:ee: 03:67:07:6d:84:f3:87:b7:9f:ea:21:d1:35:90:17: 37:50:ae:13:13:82:85:27:60:c2:e1:c3:4a:09:48: 29:1e:b1:f0:86:82:57:19:a9:58:5c:05:51:a3:06: 07:02:75:09:05:a7:a3:c7:ab:8a:e2:3d:2e:cc:31: 3a:60:0c:49:14:51:ca:f1:63:62:ef:93:ea:b4:7f: ae:f1:d4:f2:2b:3a:56:5d:d6:12:71:1d:36:a0:65: fc:03:cd:18:8d:a6:81:fe:ba:9f:68:1e:fa:9e:e0: 2c:69:73:fc:b6:c4:55:d6:6c:f7:60:81:4b:fb:cf: fc:2d:d9:0d:72:7b:91:c3:61:df:87:c0:b9:d2:0e: 6d:c8:83:d3:fb:e6:64:33:62:63:e9:bd:16:e7:e5: de:72:a4:1a:f9:15:43:2d:70:9a:ed:e6:14:6d:08: 0d:8b:2f:47:75:97:4a:1f:fc:00:60:e0:40:2f:93: 43:31:31:d7:60:dc:0b:b3:9b:80:44:f7:8b:e6:2d: 30:e2:24:48:60:e9:7b:96:8f:c1:51:9d:36:96:e5: 45:ce:37:d6:a9:f8:4e:d8:8c:a7:86:bc:10:6d:40: 08:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:92:D1:50:3E:AE:46:AD:E0:99:EF:C5:DE:96:4C:D0:BE:EE:76:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/42c8111b-72eb-368e-a605-4f13d00564aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl X509v3 Authority Key Identifier: keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer sbgp-ipAddrBlock: critical IPv4: 208.95.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:de:07:87:3a:68:0c:7a:db:e5:eb:9c:bf:5c:2b:c3:c2:d2: fa:6b:b1:1d:80:5c:0d:03:8c:b9:b4:c3:7e:c1:57:57:60:a4: 91:48:43:25:11:6e:5e:d0:7f:1d:e8:1d:3b:6a:79:cb:cd:4f: 39:c2:4f:60:f8:e9:7b:77:a1:02:f5:98:67:ae:59:40:1a:63: b6:17:fa:b3:58:d5:86:62:4b:60:81:d2:db:42:a1:46:be:9f: 43:d1:fa:0a:18:7f:e6:30:7e:45:94:f3:d4:00:d5:6f:32:3a: 5c:87:95:0f:92:46:83:2a:b6:e9:c1:6b:c3:a1:91:a1:3c:4e: f4:84:7c:a7:76:6d:40:fc:b5:0f:57:0c:94:db:46:9b:b3:61: 74:d5:28:91:54:c1:8c:b3:1d:fb:ff:2f:2d:36:9b:42:37:eb: 81:80:bf:9b:1e:74:0b:6d:c6:75:d7:9a:fa:94:a4:1d:60:9c: ee:f6:98:34:ed:ad:b2:51:66:59:11:38:25:a6:95:dd:9f:b9: 01:2a:0f:23:33:a8:7c:ae:95:4d:d2:31:d2:91:58:05:53:0f: f1:a2:6a:9f:af:d0:a0:a6:be:1d:4b:2d:53:bc:b2:db:f3:e4: 30:10:92:73:07:a5:4a:59:49:18:d5:a4:b9:b1:91:9e:37:16: 5d:6e:0c:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp40Vfgna/zBXt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MxYjllMmQtNDU3YS00MDNmLTkyNTYtMjdmMjcyZWQ5 OTNkMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZmJjMjViNzItODE2NC00YjZkLTk1YTYtMWMzMDIwZWY4ODk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmS9d7iTh1TG/7bTlebRFiYHEQQYpkCiHsdN F+4DZwdthPOHt5/qIdE1kBc3UK4TE4KFJ2DC4cNKCUgpHrHwhoJXGalYXAVRowYH AnUJBaejx6uK4j0uzDE6YAxJFFHK8WNi75PqtH+u8dTyKzpWXdYScR02oGX8A80Y jaaB/rqfaB76nuAsaXP8tsRV1mz3YIFL+8/8LdkNcnuRw2Hfh8C50g5tyIPT++Zk M2Jj6b0W5+XecqQa+RVDLXCa7eYUbQgNiy9HdZdKH/wAYOBAL5NDMTHXYNwLs5uA RPeL5i0w4iRIYOl7lo/BUZ02luVFzjfWqfhO2IynhrwQbUAIfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSS0VA+rkat4Jnvxd6WTNC+7nbqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFi OWUyZC00NTdhLTQwM2YtOTI1Ni0yN2YyNzJlZDk5M2QvNDJjODExMWItNzJlYi0z NjhlLWE2MDUtNGYxM2QwMDU2NGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2MxYjllMmQtNDU3YS00MDNmLTky NTYtMjdmMjcyZWQ5OTNkLzNjMWI5ZTJkLTQ1N2EtNDAzZi05MjU2LTI3ZjI3MmVk OTkzZC5jcmwwHwYDVR0jBBgwFoAU7t8l0kJMmR/VBLPQ02SetbVqcsMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFiOWUyZC00NTdhLTQwM2YtOTI1Ni0yN2Yy NzJlZDk5M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F82MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABneB4c6aAx62+XrnL9cK8PC0vprsR2AXA0DjLm0w37BV1dgpJFIQyUR bl7Qfx3oHTtqecvNTznCT2D46Xt3oQL1mGeuWUAaY7YX+rNY1YZiS2CB0ttCoUa+ n0PR+goYf+YwfkWU89QA1W8yOlyHlQ+SRoMqtunBa8OhkaE8TvSEfKd2bUD8tQ9X DJTbRpuzYXTVKJFUwYyzHfv/Ly02m0I364GAv5sedAttxnXXmvqUpB1gnO72mDTt rbJRZlkROCWmld2fuQEqDyMzqHyulU3SMdKRWAVTD/Giap+v0KCmvh1LLVO8stvz 5DAQknMHpUpZSRjVpLmxkZ43Fl1uDNU= -----END CERTIFICATE-----Generated at Wed Nov 5 05:40:59 2025 by rpki-client