$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/a9c7de46-993e-3970-9c3d-f28d8a4026a6.roa File: a9c7de46-993e-3970-9c3d-f28d8a4026a6.roa (raw, json) Hash identifier: aqn0sqqXhCEM6JpX73iwjNRW6Xqw/gY1Pw4zqSOs2/k= Subject key identifier: 7A:BB:82:65:D0:0A:B2:A8:63:FF:CD:17:01:0C:FA:DD:5A:05:47:60 Certificate issuer: /CN=3c1b9e2d-457a-403f-9256-27f272ed993d Certificate serial: 010D0C9F4328584B99D78CAD7B58477F34091480 Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/a9c7de46-993e-3970-9c3d-f28d8a4026a6.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 14618 IP address blocks: 208.95.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:8c:ad:7b:58:47:7f:34:09:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=deac96f8-6e5c-42d9-b2d0-8e937dbf0bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:db:c9:ac:06:e3:85:b9:8c:2e:a8:cf:bf:3a: 8c:a0:15:a5:aa:02:b8:57:36:20:a6:d3:b8:87:a7: 6a:9a:14:79:8a:6b:b4:05:ec:25:8e:cf:68:4b:39: ba:9d:65:f4:e3:ff:25:06:fd:8e:85:99:76:79:fc: 01:68:aa:56:f6:58:4d:eb:8a:1c:46:91:82:21:b1: 72:da:7e:dc:71:a7:2e:38:b4:9f:6c:fa:08:0a:e3: 9d:4e:1a:a6:29:db:dd:68:b8:4d:1e:a0:7e:69:97: ab:42:54:56:84:c4:0e:e9:d5:9e:f6:6d:2f:86:f8: 71:b7:cd:05:68:72:e4:de:53:88:67:54:6d:d5:9a: a9:d6:24:af:c3:22:47:3f:78:40:d1:41:c7:e0:dd: 2e:f6:a5:65:4c:5a:af:b5:b6:b8:dd:5e:bb:75:56: ca:de:74:5c:81:d1:e4:7a:f2:d4:61:0a:6e:05:6b: f3:8b:1a:dc:bb:cf:5b:c7:1b:62:02:66:22:ab:ac: 2a:b3:d4:7e:c7:99:43:75:d2:d5:8e:bd:0d:3d:63: 38:e7:ee:3c:fb:aa:cc:82:b4:47:33:3b:10:6b:88: 46:7b:4d:96:32:49:17:a6:a5:87:5f:16:2a:ca:78: 6e:e7:7a:8e:e9:cc:7b:b6:aa:45:b6:ca:fd:9f:9b: 23:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:BB:82:65:D0:0A:B2:A8:63:FF:CD:17:01:0C:FA:DD:5A:05:47:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/a9c7de46-993e-3970-9c3d-f28d8a4026a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl X509v3 Authority Key Identifier: keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer sbgp-ipAddrBlock: critical IPv4: 208.95.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:fa:a7:78:04:49:73:71:26:af:64:99:6b:38:a9:94:d7:1a: 96:8f:49:08:82:d6:ad:61:20:d1:e2:a6:13:a9:d7:90:99:54: dd:31:3f:45:42:aa:1f:11:31:46:99:ca:be:bb:74:55:9b:9b: 3f:26:b1:57:30:58:91:5c:95:dd:15:61:99:fe:1f:19:62:f0: c0:e8:89:87:bb:a6:1a:e7:4c:5d:b9:18:5d:ff:ed:8a:44:98: 71:40:f1:9e:95:9f:46:09:f4:04:88:fb:c6:4c:49:7b:79:ab: 88:fa:25:6a:7c:ba:ac:4b:7c:fa:9f:69:fb:b0:74:5e:33:d5: bf:a6:4b:dd:3e:4d:ab:4d:66:df:13:d4:96:e3:c6:c9:fc:a4: 60:e6:d3:0a:94:d8:93:bc:e2:f8:d0:66:c8:e0:3d:dd:f2:f9: 60:d8:b8:cd:59:50:26:66:96:04:43:b0:6e:a0:30:d6:67:18: fa:66:4e:f9:16:8d:ad:3c:11:e3:d3:2f:16:af:99:ef:d9:04: 05:96:e3:64:fe:72:ac:02:1a:4f:61:42:76:01:99:ad:0b:9d: c2:7c:b4:93:b8:3f:c2:1a:2d:18:11:28:cf:ea:8c:d7:cf:c1: 10:4c:af:e5:9d:dc:d9:03:94:45:ae:7d:8e:f6:1b:b0:25:20: 15:50:a6:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ14yte1hHfzQJFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MxYjllMmQtNDU3YS00MDNmLTkyNTYtMjdmMjcyZWQ5 OTNkMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZGVhYzk2ZjgtNmU1Yy00MmQ5LWIyZDAtOGU5MzdkYmYwYmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9vJrAbjhbmMLqjPvzqMoBWlqgK4VzYgptO4 h6dqmhR5imu0Bewljs9oSzm6nWX04/8lBv2OhZl2efwBaKpW9lhN64ocRpGCIbFy 2n7ccacuOLSfbPoICuOdThqmKdvdaLhNHqB+aZerQlRWhMQO6dWe9m0vhvhxt80F aHLk3lOIZ1Rt1Zqp1iSvwyJHP3hA0UHH4N0u9qVlTFqvtba43V67dVbK3nRcgdHk evLUYQpuBWvzixrcu89bxxtiAmYiq6wqs9R+x5lDddLVjr0NPWM45+48+6rMgrRH MzsQa4hGe02WMkkXpqWHXxYqynhu53qO6cx7tqpFtsr9n5sjYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHq7gmXQCrKoY//NFwEM+t1aBUdgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFi OWUyZC00NTdhLTQwM2YtOTI1Ni0yN2YyNzJlZDk5M2QvYTljN2RlNDYtOTkzZS0z OTcwLTljM2QtZjI4ZDhhNDAyNmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2MxYjllMmQtNDU3YS00MDNmLTky NTYtMjdmMjcyZWQ5OTNkLzNjMWI5ZTJkLTQ1N2EtNDAzZi05MjU2LTI3ZjI3MmVk OTkzZC5jcmwwHwYDVR0jBBgwFoAU7t8l0kJMmR/VBLPQ02SetbVqcsMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFiOWUyZC00NTdhLTQwM2YtOTI1Ni0yN2Yy NzJlZDk5M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F81MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEn6p3gESXNxJq9kmWs4qZTXGpaPSQiC1q1hINHiphOp15CZVN0xP0VC qh8RMUaZyr67dFWbmz8msVcwWJFcld0VYZn+Hxli8MDoiYe7phrnTF25GF3/7YpE mHFA8Z6Vn0YJ9ASI+8ZMSXt5q4j6JWp8uqxLfPqfafuwdF4z1b+mS90+TatNZt8T 1Jbjxsn8pGDm0wqU2JO84vjQZsjgPd3y+WDYuM1ZUCZmlgRDsG6gMNZnGPpmTvkW ja08EePTLxavme/ZBAWW42T+cqwCGk9hQnYBma0LncJ8tJO4P8IaLRgRKM/qjNfP wRBMr+Wd3NkDlEWufY72G7AlIBVQpmk= -----END CERTIFICATE-----Generated at Wed Nov 5 05:42:20 2025 by rpki-client