$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/be32ec28-52fd-3c6c-9565-d5dbc2992036.roa File: be32ec28-52fd-3c6c-9565-d5dbc2992036.roa (raw, json) Hash identifier: 9ez0AiSj0j0ng3BmWB4vWFOpjZAgvK/rox5SS/hGQ7Q= Subject key identifier: DD:0B:72:C5:6C:74:3E:DA:23:34:36:84:7C:C1:75:06:2A:D9:4C:1D Certificate issuer: /CN=8b7074c2-7c8f-41ac-8307-74ece44a460c Certificate serial: 010D0C9F4328584BBE4039353902B018F7BD1A00 Authority key identifier: C1:CC:88:BC:4A:C0:09:D7:61:48:C3:D1:C3:B2:52:40:69:D5:9F:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/be32ec28-52fd-3c6c-9565-d5dbc2992036.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 21668 IP address blocks: 208.101.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:39:35:39:02:b0:18:f7:bd:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b7074c2-7c8f-41ac-8307-74ece44a460c Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=75d9d40f-97e0-4d73-bb89-09dabf5c0af0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c8:14:4d:9e:43:a7:02:5e:fd:c4:de:0f:8a: 5b:f3:99:b7:dc:ad:50:d6:9d:26:a7:8d:0b:96:b8: 1a:23:8a:22:7e:7b:67:d8:73:bd:a2:d9:27:d8:f9: 37:32:87:e2:86:e8:f2:6c:f2:da:11:0a:0a:44:66: a9:36:86:df:51:58:fc:5b:92:90:a6:4a:04:74:3a: 20:2d:8e:75:64:6a:c7:c2:2d:7a:cb:d2:4d:4f:4d: e3:03:bc:bd:ed:15:9c:90:b9:ee:28:e7:bc:90:9e: ea:0b:e4:e6:59:52:2b:98:c5:3f:1e:f9:33:0d:1d: 5d:1d:d3:6b:e2:9f:83:f9:eb:24:0b:8e:9e:8a:a4: 66:ab:b4:47:50:41:25:b2:f2:fe:fe:2e:3e:52:1a: 57:58:bd:f0:c9:92:93:b8:d3:48:ef:a0:6b:a8:18: 55:2f:68:21:76:76:c2:37:f7:7e:6f:f3:0c:00:a4: 33:7a:08:55:63:98:be:48:fd:28:36:d1:f5:02:ee: 53:ad:f6:8c:f7:ca:4d:c7:8d:04:b1:2b:ae:47:28: 86:99:e6:c8:7a:63:45:65:e5:7c:80:f2:58:95:ff: 04:4c:34:bb:22:67:04:26:0a:2e:39:0c:54:b0:17: 94:56:4e:cb:a5:74:e3:ee:64:f7:f4:47:aa:59:c0: 8a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:0B:72:C5:6C:74:3E:DA:23:34:36:84:7C:C1:75:06:2A:D9:4C:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/be32ec28-52fd-3c6c-9565-d5dbc2992036.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.crl X509v3 Authority Key Identifier: keyid:C1:CC:88:BC:4A:C0:09:D7:61:48:C3:D1:C3:B2:52:40:69:D5:9F:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer sbgp-ipAddrBlock: critical IPv4: 208.101.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:b6:06:e5:9c:43:aa:eb:3b:be:dd:86:6b:ec:00:06:19:d0: 38:0a:f7:32:86:e5:eb:73:a8:b4:b7:03:4d:3e:39:fa:2d:c6: e4:1d:7e:d9:11:2f:d6:7c:44:42:33:fd:44:3c:87:ad:61:99: 23:2d:20:d9:a4:98:4a:65:cc:5a:59:7d:80:81:f3:2b:d0:d3: 29:cb:dd:a8:e0:e5:61:0c:bd:80:bf:e4:18:e6:0f:60:28:25: be:30:b2:5f:15:a0:0e:93:3b:76:7d:7f:5b:4d:08:07:6a:42: 8f:00:5c:dc:f8:cf:44:bc:76:42:92:a2:bd:a6:39:38:7a:55: b1:fa:34:46:5e:79:f1:7b:bc:55:b5:7e:f0:e4:13:b2:59:f3: 62:af:65:a7:b6:3c:d1:03:b7:4a:e2:9d:41:ee:e8:3d:8a:43: fd:a2:e8:ec:af:d0:44:80:94:fa:1c:2f:f4:3f:97:ea:ce:2e: 91:3a:b5:36:63:55:d7:c2:26:08:5b:28:75:8d:80:74:bb:e6: ca:b9:8c:bd:6a:83:3a:c9:35:96:78:64:4f:28:d1:63:4e:31: 00:41:a7:43:a2:3d:60:b7:d1:fe:43:cd:9b:18:0b:ef:4f:0e: 8d:bf:e4:45:f5:2b:32:0a:84:d9:ee:4c:6c:9c:44:77:02:4a: 32:8e:68:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QDk1OQKwGPe9GgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI3MDc0YzItN2M4Zi00MWFjLTgzMDctNzRlY2U0NGE0 NjBjMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NzVkOWQ0MGYtOTdlMC00ZDczLWJiODktMDlkYWJmNWMwYWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcgUTZ5DpwJe/cTeD4pb85m33K1Q1p0mp40L lrgaI4oifntn2HO9otkn2Pk3MofihujybPLaEQoKRGapNobfUVj8W5KQpkoEdDog LY51ZGrHwi16y9JNT03jA7y97RWckLnuKOe8kJ7qC+TmWVIrmMU/HvkzDR1dHdNr 4p+D+eskC46eiqRmq7RHUEElsvL+/i4+UhpXWL3wyZKTuNNI76BrqBhVL2ghdnbC N/d+b/MMAKQzeghVY5i+SP0oNtH1Au5TrfaM98pNx40EsSuuRyiGmebIemNFZeV8 gPJYlf8ETDS7ImcEJgouOQxUsBeUVk7LpXTj7mT39EeqWcCKdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0LcsVsdD7aIzQ2hHzBdQYq2UwdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84Yjcw NzRjMi03YzhmLTQxYWMtODMwNy03NGVjZTQ0YTQ2MGMvYmUzMmVjMjgtNTJmZC0z YzZjLTk1NjUtZDVkYmMyOTkyMDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGI3MDc0YzItN2M4Zi00MWFjLTgz MDctNzRlY2U0NGE0NjBjLzhiNzA3NGMyLTdjOGYtNDFhYy04MzA3LTc0ZWNlNDRh NDYwYy5jcmwwHwYDVR0jBBgwFoAUwcyIvErACddhSMPRw7JSQGnVnwEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YjcwNzRjMi03YzhmLTQxYWMtODMwNy03NGVj ZTQ0YTQ2MGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0GXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIC2BuWcQ6rrO77dhmvsAAYZ0DgK9zKG5etzqLS3A00+OfotxuQdftkR L9Z8REIz/UQ8h61hmSMtINmkmEplzFpZfYCB8yvQ0ynL3ajg5WEMvYC/5BjmD2Ao Jb4wsl8VoA6TO3Z9f1tNCAdqQo8AXNz4z0S8dkKSor2mOTh6VbH6NEZeefF7vFW1 fvDkE7JZ82KvZae2PNEDt0rinUHu6D2KQ/2i6Oyv0ESAlPocL/Q/l+rOLpE6tTZj VdfCJghbKHWNgHS75sq5jL1qgzrJNZZ4ZE8o0WNOMQBBp0OiPWC30f5DzZsYC+9P Do2/5EX1KzIKhNnuTGycRHcCSjKOaK0= -----END CERTIFICATE-----Generated at Tue Nov 4 22:05:43 2025 by rpki-client