$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/e78bd739-80ba-3bbd-8cb7-a364b867df6f.roa File: e78bd739-80ba-3bbd-8cb7-a364b867df6f.roa (raw, json) Hash identifier: g0wfhgVvWZrDGDxZZdR3HujOsvIV8CUupxWjrmABXEE= Subject key identifier: 51:D6:DE:B3:CE:20:35:15:00:D3:70:E6:5B:8E:F6:D5:81:65:E5:02 Certificate issuer: /CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2 Certificate serial: 010D0C9F4328584BBA10350005711C5F2D8E3980 Authority key identifier: D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/e78bd739-80ba-3bbd-8cb7-a364b867df6f.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 20205 IP address blocks: 192.211.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:35:00:05:71:1c:5f:2d:8e:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=0c537197-2afe-41b8-96b9-928a32af3c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:63:cc:25:e4:9d:7c:f7:f7:01:e2:2d:39:06: f8:e6:03:51:bd:6a:49:24:25:9a:15:f3:63:4a:5d: d1:25:b2:f2:21:fb:d2:89:89:ee:49:29:a3:0d:7f: 9c:bc:57:a8:e7:8c:c6:2f:99:02:3c:92:56:94:e3: 5e:0f:5e:6b:f3:71:76:34:cd:69:08:7d:b2:5b:0a: 7c:45:2a:b4:1a:71:9b:57:fe:e9:19:6c:cb:e1:44: 98:c9:a3:ca:4f:8b:75:9a:16:9d:7b:10:51:40:62: 47:37:7e:a5:8a:57:54:a1:df:5e:a9:60:b0:12:5f: 38:a7:7c:88:dd:cf:3d:ff:c2:12:7d:22:4a:e0:98: 4f:21:e5:ef:4f:ad:30:ff:89:85:2f:c3:0b:0c:d5: 86:bc:d0:03:26:bd:97:2b:37:8c:64:2f:26:5f:32: d5:43:8e:d8:95:33:1f:29:da:38:19:40:e6:2f:cf: 65:76:8a:26:86:41:f5:bf:2f:f8:c2:60:8c:5d:19: 12:31:24:c5:3b:7c:5a:36:8a:0b:61:9e:13:d7:72: 08:53:9a:24:cb:01:5e:66:87:b2:21:ea:34:0d:9c: 8f:a1:8b:b5:a0:62:60:f2:70:b2:f4:96:6d:6e:cb: 94:5d:c6:63:2b:1c:c5:78:75:2b:df:37:8e:c3:d0: 32:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D6:DE:B3:CE:20:35:15:00:D3:70:E6:5B:8E:F6:D5:81:65:E5:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/e78bd739-80ba-3bbd-8cb7-a364b867df6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl X509v3 Authority Key Identifier: keyid:D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer sbgp-ipAddrBlock: critical IPv4: 192.211.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:57:18:76:59:a2:18:d0:a2:4b:77:6c:dc:4b:e9:b8:98:ff: c5:d4:00:ce:73:0f:2f:55:b8:63:4c:0d:07:4b:93:6c:8b:cf: 9d:c6:7f:c8:20:c9:4a:fa:2b:37:68:07:ac:9d:b4:a9:97:cd: b3:49:bd:8b:2c:5b:60:c2:79:76:36:d1:d8:1e:55:67:95:24: fe:91:e2:14:45:bc:b6:a3:ee:a5:ac:95:fb:f5:ec:32:f1:06: a6:5f:e7:6c:9e:f0:85:da:4e:7f:c1:94:86:50:cd:52:96:e8: f9:46:a0:e1:50:fd:14:c8:c4:b9:0a:69:1c:37:47:c4:af:ea: a5:dc:48:fe:11:ca:d4:9e:2e:b9:65:8c:8a:3d:8a:8a:e3:e9: 24:ef:27:fd:97:ad:52:59:59:5f:b0:e8:47:cb:d2:3c:f2:4c: 62:81:93:65:ef:67:82:bb:9c:15:06:64:36:c7:20:c1:4e:9c: 7f:16:29:c6:12:ad:e9:08:c4:1f:ab:7d:ec:a4:fd:23:8f:96: 34:21:5c:f7:12:93:bf:d4:f8:a6:95:3a:fb:23:47:5f:a8:bd: 21:3d:3d:dd:b9:40:62:71:e5:f7:0e:22:29:0c:c7:31:b1:27: a8:9b:34:89:24:69:e1:c6:e6:16:e4:d6:3b:6e:d3:c4:e0:01: a0:4c:59:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EDUABXEcXy2OOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWVkNDVlOTctOTBjMi00ODNkLWE2OGItMmRkMmM4MzI2 NmEyMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk MGM1MzcxOTctMmFmZS00MWI4LTk2YjktOTI4YTMyYWYzYzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWPMJeSdfPf3AeItOQb45gNRvWpJJCWaFfNj Sl3RJbLyIfvSiYnuSSmjDX+cvFeo54zGL5kCPJJWlONeD15r83F2NM1pCH2yWwp8 RSq0GnGbV/7pGWzL4USYyaPKT4t1mhadexBRQGJHN36lildUod9eqWCwEl84p3yI 3c89/8ISfSJK4JhPIeXvT60w/4mFL8MLDNWGvNADJr2XKzeMZC8mXzLVQ47YlTMf Kdo4GUDmL89ldoomhkH1vy/4wmCMXRkSMSTFO3xaNooLYZ4T13IIU5okywFeZoey Ieo0DZyPoYu1oGJg8nCy9JZtbsuUXcZjKxzFeHUr3zeOw9AypQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHW3rPOIDUVANNw5luO9tWBZeUCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZWQ0 NWU5Ny05MGMyLTQ4M2QtYTY4Yi0yZGQyYzgzMjY2YTIvZTc4YmQ3MzktODBiYS0z YmJkLThjYjctYTM2NGI4NjdkZjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWVkNDVlOTctOTBjMi00ODNkLWE2 OGItMmRkMmM4MzI2NmEyLzllZDQ1ZTk3LTkwYzItNDgzZC1hNjhiLTJkZDJjODMy NjZhMi5jcmwwHwYDVR0jBBgwFoAU2Na/N7W2TtQdeVXNk36mXgCJn/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85ZWQ0NWU5Ny05MGMyLTQ4M2QtYTY4Yi0yZGQy YzgzMjY2YTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwNMLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpXGHZZohjQokt3bNxL6biY/8XUAM5zDy9VuGNMDQdLk2yLz53Gf8gg yUr6KzdoB6ydtKmXzbNJvYssW2DCeXY20dgeVWeVJP6R4hRFvLaj7qWslfv17DLx BqZf52ye8IXaTn/BlIZQzVKW6PlGoOFQ/RTIxLkKaRw3R8Sv6qXcSP4RytSeLrll jIo9iorj6STvJ/2XrVJZWV+w6EfL0jzyTGKBk2XvZ4K7nBUGZDbHIMFOnH8WKcYS rekIxB+rfeyk/SOPljQhXPcSk7/U+KaVOvsjR1+ovSE9Pd25QGJx5fcOIikMxzGx J6ibNIkkaeHG5hbk1jtu08TgAaBMWfA= -----END CERTIFICATE-----Generated at Wed Nov 5 07:56:03 2025 by rpki-client