$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/3eb230ea-3ac0-3796-85b7-92aa4b94ce2f.roa File: 3eb230ea-3ac0-3796-85b7-92aa4b94ce2f.roa (raw, json) Hash identifier: +NM/m+D6Sx9aMObJthR8EQi4fsgZJs2y27Jzfa5A5Bs= Subject key identifier: DE:3A:DF:D1:69:97:30:71:7C:54:35:E7:05:8A:A2:23:26:28:02:D7 Certificate issuer: /CN=7a2be303-4525-4433-b220-b1c6b5052945 Certificate serial: 010D0C9F4328584B4FDC7ED627AA0955F3C63678 Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/3eb230ea-3ac0-3796-85b7-92aa4b94ce2f.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 52129 IP address blocks: 208.56.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:7e:d6:27:aa:09:55:f3:c6:36:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=87fe773d-5d1f-438d-b124-ac7a1ef43c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:56:d7:ff:7b:29:e2:91:3a:ae:d3:ee:bd:f2: 9c:76:46:17:7e:8b:fd:11:0d:2a:22:53:ed:55:8e: 34:8a:ed:39:d0:0c:15:25:2b:48:a9:83:77:b7:60: a0:26:98:6a:e5:cc:e8:43:68:71:b6:f8:cb:03:35: 45:2b:01:7d:49:81:f5:d6:0f:10:10:b4:65:40:11: 4a:21:17:17:32:70:97:71:7a:5c:b0:e2:75:be:a7: 9f:aa:88:32:e7:94:5a:5b:4d:7c:b6:75:a3:40:9f: 20:b3:bd:b9:0c:d9:e1:03:e9:e8:93:2b:c3:c0:a1: 68:93:76:0e:e1:b7:33:b5:7e:db:84:37:b1:24:11: 0f:42:d6:93:31:db:18:1e:91:b4:a0:ed:dc:cf:0d: 76:96:22:cd:56:83:0d:8e:be:da:d0:ae:5e:3b:bd: a3:0f:24:67:17:43:d6:c0:c6:23:0a:5d:1a:85:99: 9b:af:eb:0a:a7:56:fe:60:8e:62:e3:22:33:5f:7e: 8d:a1:3f:48:62:ec:cc:a0:a8:02:00:75:48:d1:a8: fb:57:50:b2:01:6a:fe:b0:4e:74:fb:ee:ea:ac:21: 11:f7:6d:39:0d:00:ad:06:f9:15:88:8f:54:b9:ef: db:70:74:82:6f:9a:fa:4b:12:6d:89:2a:64:ec:3a: 5e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3A:DF:D1:69:97:30:71:7C:54:35:E7:05:8A:A2:23:26:28:02:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/3eb230ea-3ac0-3796-85b7-92aa4b94ce2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl X509v3 Authority Key Identifier: keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer sbgp-ipAddrBlock: critical IPv4: 208.56.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:46:f0:4a:21:e0:0b:8d:6e:b0:a9:e8:65:aa:cb:72:c3:6c: 96:0e:20:78:4c:7d:a6:fc:eb:9d:a1:93:a9:28:4b:4e:a2:d4: e8:15:75:8b:c7:32:6f:5e:34:77:26:8b:0c:9e:c0:e1:67:db: 2a:32:80:a2:02:e0:9f:15:8b:17:b2:75:0d:ab:db:4a:4b:91: 6f:a3:b3:b9:1d:51:ca:d6:50:33:1b:0b:67:29:de:16:2b:a6: 29:8c:f4:59:68:d6:d2:d4:fa:ec:cc:f4:e9:ad:76:b2:bb:b9: 2a:7f:84:9a:5a:49:09:8a:a8:e3:22:4d:23:47:43:9c:39:87: 84:40:90:38:24:53:37:76:13:f0:7b:bd:54:9c:5b:bf:2f:68: 0b:0d:07:a8:43:f3:5b:50:63:1b:7e:8a:03:4c:67:c9:bc:8c: 62:74:2f:fd:b7:27:49:d6:ca:a4:60:b6:15:a9:50:8d:1e:29: 00:d5:85:57:96:42:93:9c:1f:5f:3d:0a:20:30:1a:d7:4e:67: 0b:d7:5f:91:0a:de:c1:7e:ef:87:5c:66:e2:06:0d:a5:e3:e1: a8:7f:ea:46:fd:de:da:4c:75:16:c1:77:63:f6:ff:f8:f0:cd: 75:57:e5:71:35:00:af:83:6e:b8:bf:02:4d:de:98:9c:da:f9: cb:e4:7f:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3H7WJ6oJVfPGNngwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EyYmUzMDMtNDUyNS00NDMzLWIyMjAtYjFjNmI1MDUy OTQ1MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk ODdmZTc3M2QtNWQxZi00MzhkLWIxMjQtYWM3YTFlZjQzYzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlbX/3sp4pE6rtPuvfKcdkYXfov9EQ0qIlPt VY40iu050AwVJStIqYN3t2CgJphq5czoQ2hxtvjLAzVFKwF9SYH11g8QELRlQBFK IRcXMnCXcXpcsOJ1vqefqogy55RaW018tnWjQJ8gs725DNnhA+nokyvDwKFok3YO 4bcztX7bhDexJBEPQtaTMdsYHpG0oO3czw12liLNVoMNjr7a0K5eO72jDyRnF0PW wMYjCl0ahZmbr+sKp1b+YI5i4yIzX36NoT9IYuzMoKgCAHVI0aj7V1CyAWr+sE50 ++7qrCER9205DQCtBvkViI9Uue/bcHSCb5r6SxJtiSpk7DpeQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4639FplzBxfFQ15wWKoiMmKALXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJi ZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2YjUwNTI5NDUvM2ViMjMwZWEtM2FjMC0z Nzk2LTg1YjctOTJhYTRiOTRjZTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2EyYmUzMDMtNDUyNS00NDMzLWIy MjAtYjFjNmI1MDUyOTQ1LzdhMmJlMzAzLTQ1MjUtNDQzMy1iMjIwLWIxYzZiNTA1 Mjk0NS5jcmwwHwYDVR0jBBgwFoAUcB/v7q15UMvEYiozrSRlUmV13rIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJiZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2 YjUwNTI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0DgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZG8Eoh4AuNbrCp6GWqy3LDbJYOIHhMfab8652hk6koS06i1OgVdYvH Mm9eNHcmiwyewOFn2yoygKIC4J8VixeydQ2r20pLkW+js7kdUcrWUDMbC2cp3hYr pimM9Flo1tLU+uzM9OmtdrK7uSp/hJpaSQmKqOMiTSNHQ5w5h4RAkDgkUzd2E/B7 vVScW78vaAsNB6hD81tQYxt+igNMZ8m8jGJ0L/23J0nWyqRgthWpUI0eKQDVhVeW QpOcH189CiAwGtdOZwvXX5EK3sF+74dcZuIGDaXj4ah/6kb93tpMdRbBd2P2//jw zXVX5XE1AK+Dbri/Ak3emJza+cvkf2g= -----END CERTIFICATE-----Generated at Wed Nov 5 07:35:11 2025 by rpki-client