$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/35fefc44-ddc5-3699-b205-35ecd350481d.roa File: 35fefc44-ddc5-3699-b205-35ecd350481d.roa (raw, json) Hash identifier: UQAAtWVZYPe/2pUatAgghR/x8WI5lQHsiUbk96ghNEU= Subject key identifier: 21:13:60:2C:8D:AB:DB:34:7E:4D:18:E7:5F:F4:43:1E:1C:58:41:08 Certificate issuer: /CN=7ede7b70-d745-425d-975b-bb0eb6368430 Certificate serial: 010D0C9F4328584BA39D0620E6E7D65E658FBF00 Authority key identifier: 42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/35fefc44-ddc5-3699-b205-35ecd350481d.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 22697 IP address blocks: 209.206.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:06:20:e6:e7:d6:5e:65:8f:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ede7b70-d745-425d-975b-bb0eb6368430 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=fbd41903-a8b8-4ccd-a932-fa218e99eb83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3c:8d:eb:48:b4:88:8a:31:32:5b:09:4c:6f: b1:38:31:ec:b9:e0:96:14:5b:92:d1:fa:d4:58:0e: c7:7f:a7:49:e0:63:ef:c0:c9:f9:7f:51:f8:0e:b5: 6e:42:be:ea:9c:59:3b:89:c8:c4:09:1b:de:fa:6a: 7c:2c:d4:a8:86:b7:7b:ce:db:14:b7:dc:2a:4b:bb: 18:29:cc:f6:60:dc:97:d1:86:86:cc:55:7f:dc:b6: 16:f1:a8:4a:a3:5e:3a:96:c8:25:7c:e0:e7:30:77: 00:3f:14:7f:6c:a0:2b:ee:15:7d:4e:e9:f3:db:65: 52:ff:9d:b3:dd:21:e0:1d:47:0a:d9:ef:d1:3e:73: 4b:04:23:54:d0:10:9e:1b:1f:61:74:39:02:19:2e: ba:83:db:e3:f4:c6:87:ce:94:e1:c5:2d:67:cd:f1: 29:21:5b:63:91:b2:16:25:da:95:54:45:ad:49:27: 46:68:f5:07:f4:cf:95:6d:92:75:9d:74:ae:0b:c6: eb:5d:92:45:a6:d1:06:94:0c:89:56:f6:09:c8:5f: f6:51:c5:6b:a5:18:c2:7e:8c:63:50:69:74:92:91: 96:50:4f:cf:56:c2:3b:90:c9:5b:bb:7b:da:93:37: 67:76:26:b1:45:90:7e:58:33:11:e2:65:23:b4:e2: bb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:13:60:2C:8D:AB:DB:34:7E:4D:18:E7:5F:F4:43:1E:1C:58:41:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/35fefc44-ddc5-3699-b205-35ecd350481d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430/7ede7b70-d745-425d-975b-bb0eb6368430.crl X509v3 Authority Key Identifier: keyid:42:6F:F9:26:1D:D7:83:76:C7:99:96:08:74:48:44:89:11:97:CA:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7ede7b70-d745-425d-975b-bb0eb6368430.cer sbgp-ipAddrBlock: critical IPv4: 209.206.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:2a:3f:ad:da:9b:32:ce:e3:4f:2a:86:4d:96:1e:68:3e:cd: c2:51:4e:fe:a5:ca:80:32:72:aa:ac:2d:65:6a:62:c8:fd:90: 64:b2:dd:f6:b1:14:0c:3c:26:f3:02:00:c5:c7:2f:37:44:dd: cd:7b:e5:48:9b:be:c1:11:0e:78:dd:ea:91:e9:37:bb:01:1e: 44:69:6f:55:ba:70:be:a1:fe:da:ff:1e:87:ab:a6:90:2e:7b: 2f:03:e5:af:87:30:66:12:0a:bb:62:d5:f6:b5:e1:6c:2e:46: f5:a9:9e:b0:c4:bd:fb:33:3d:eb:8f:f2:17:78:d9:6a:ac:d1: 30:63:6f:fd:ab:2a:3f:2c:ab:62:0d:31:63:4d:8d:62:91:3e: a2:e9:97:b0:f7:82:b4:e2:9e:c9:37:4d:52:c7:47:01:3c:0b: b3:2d:0e:fa:2a:fe:e1:32:a3:4c:03:52:3b:05:06:6f:5a:b1: 7c:b1:3c:da:88:73:c4:2e:12:85:ad:ba:f0:b9:a2:22:77:ac: 62:96:65:82:d7:fb:66:09:12:ed:a0:11:d6:c3:cf:4c:dc:de: 9e:a9:de:f1:25:93:77:e1:78:e8:f7:b4:5b:d4:e5:32:98:6a: 0f:a8:82:62:60:93:06:4d:da:3a:a0:53:84:0e:55:27:db:4e: 17:f0:fa:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQYg5ufWXmWPvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2VkZTdiNzAtZDc0NS00MjVkLTk3NWItYmIwZWI2MzY4 NDMwMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZmJkNDE5MDMtYThiOC00Y2NkLWE5MzItZmEyMThlOTllYjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDyN60i0iIoxMlsJTG+xODHsueCWFFuS0frU WA7Hf6dJ4GPvwMn5f1H4DrVuQr7qnFk7icjECRve+mp8LNSohrd7ztsUt9wqS7sY Kcz2YNyX0YaGzFV/3LYW8ahKo146lsglfODnMHcAPxR/bKAr7hV9Tunz22VS/52z 3SHgHUcK2e/RPnNLBCNU0BCeGx9hdDkCGS66g9vj9MaHzpThxS1nzfEpIVtjkbIW JdqVVEWtSSdGaPUH9M+VbZJ1nXSuC8brXZJFptEGlAyJVvYJyF/2UcVrpRjCfoxj UGl0kpGWUE/PVsI7kMlbu3vakzdndiaxRZB+WDMR4mUjtOK7KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCETYCyNq9s0fk0Y51/0Qx4cWEEIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83ZWRl N2I3MC1kNzQ1LTQyNWQtOTc1Yi1iYjBlYjYzNjg0MzAvMzVmZWZjNDQtZGRjNS0z Njk5LWIyMDUtMzVlY2QzNTA0ODFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2VkZTdiNzAtZDc0NS00MjVkLTk3 NWItYmIwZWI2MzY4NDMwLzdlZGU3YjcwLWQ3NDUtNDI1ZC05NzViLWJiMGViNjM2 ODQzMC5jcmwwHwYDVR0jBBgwFoAUQm/5Jh3Xg3bHmZYIdEhEiRGXyggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83ZWRlN2I3MC1kNzQ1LTQyNWQtOTc1Yi1iYjBl YjYzNjg0MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0c4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYqP63amzLO408qhk2WHmg+zcJRTv6lyoAycqqsLWVqYsj9kGSy3fax FAw8JvMCAMXHLzdE3c175UibvsERDnjd6pHpN7sBHkRpb1W6cL6h/tr/HoerppAu ey8D5a+HMGYSCrti1fa14WwuRvWpnrDEvfszPeuP8hd42Wqs0TBjb/2rKj8sq2IN MWNNjWKRPqLpl7D3grTinsk3TVLHRwE8C7MtDvoq/uEyo0wDUjsFBm9asXyxPNqI c8QuEoWtuvC5oiJ3rGKWZYLX+2YJEu2gEdbDz0zc3p6p3vElk3fheOj3tFvU5TKY ag+ogmJgkwZN2jqgU4QOVSfbThfw+u8= -----END CERTIFICATE-----Generated at Wed Nov 5 16:37:37 2025 by rpki-client