$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0fe2b901-899b-3fba-8300-f5c271ee0919.roa File: 0fe2b901-899b-3fba-8300-f5c271ee0919.roa (raw, json) Hash identifier: 9LSZBoA2E4dYhNdT63nVpgkT9P8rtBg9Jf6xRiJzK34= Subject key identifier: 5A:EF:74:25:12:9A:33:9C:C3:A1:B4:5E:2B:F5:83:4E:D3:49:5D:59 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584BA932580872BD003DD4A5FCC0 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0fe2b901-899b-3fba-8300-f5c271ee0919.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 20454 IP address blocks: 209.188.0.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:58:08:72:bd:00:3d:d4:a5:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=f4bd854c-a8a4-4dab-813c-7686a781b2b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:55:c6:25:8e:72:31:12:97:73:96:20:5b:2c: 67:5c:4a:71:d9:2e:0b:24:b2:17:14:2d:45:eb:20: 9f:ec:54:da:4d:38:45:5d:18:84:fc:14:99:c4:2b: 3f:a3:2a:db:40:76:f2:d5:ad:94:ae:24:61:85:12: 5c:3b:3d:c0:8f:3c:fc:d0:bd:f5:f3:68:2b:e8:7d: 23:57:a9:42:a0:77:f5:39:07:71:b7:05:8d:f7:c0: 39:80:2f:e9:cd:bb:db:56:fd:ed:42:3b:3d:24:dc: 1c:74:ae:78:e3:3a:dd:97:a0:8b:1f:1a:b2:ca:e9: a1:83:57:90:09:d5:3d:83:be:a1:fe:5c:c1:e1:d8: 1d:f3:fb:13:e1:26:f6:3e:3c:9e:09:20:6d:ea:87: b4:82:89:0c:94:94:b1:e7:dd:db:30:fd:47:ac:4b: 68:8d:2e:36:a0:b6:69:08:b6:e0:05:45:31:a0:53: a3:e1:80:28:b8:14:0a:6b:b1:78:0f:d7:44:e4:e3: 25:81:1a:05:05:b6:be:f1:52:a8:90:3f:2b:e4:5c: 23:e7:26:6c:ef:1a:7c:5c:18:03:65:f4:35:34:de: f7:80:89:17:60:c5:cf:88:31:7b:11:38:88:f5:01: f7:ff:c5:b2:53:6f:af:e9:1d:6c:d2:26:14:65:2d: 75:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:EF:74:25:12:9A:33:9C:C3:A1:B4:5E:2B:F5:83:4E:D3:49:5D:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0fe2b901-899b-3fba-8300-f5c271ee0919.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 209.188.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:e4:46:ac:3e:9b:79:48:c4:50:7c:65:e0:22:11:13:74:73: 67:76:4b:79:42:77:1a:81:a5:9b:f6:51:89:8f:c4:08:01:2f: 66:e0:d9:20:79:74:82:a4:e2:2f:43:71:5f:f0:35:8d:d3:82: 67:8d:05:e2:70:ea:39:91:0c:71:72:e2:00:a1:5a:52:02:ea: b1:3b:aa:75:2f:08:27:0b:be:f6:f6:52:4a:43:c6:8c:46:f1: 36:1f:13:f7:7e:8d:7f:f9:24:a5:10:53:e3:02:7e:d5:dc:7b: f6:ec:24:69:79:3a:e7:04:ef:c5:d3:6f:04:c8:7f:f8:e7:fd: 30:82:1f:d6:a1:64:f1:c9:04:60:75:9a:6b:4a:93:68:42:b1: 83:c3:06:1f:52:06:4e:99:e5:1b:a2:d6:9b:81:d5:98:43:7e: 1c:20:d8:e2:85:1d:f5:a9:ec:b2:b5:80:e5:50:01:b1:fb:9d: 39:86:2a:7b:cb:bf:a0:a5:d0:f4:3f:7c:62:52:8f:9b:24:da: 75:57:f3:10:25:4c:14:b2:d3:fa:bf:dd:b5:9b:7c:c6:29:be: 89:cb:41:83:20:71:60:4d:d9:a3:6e:d0:aa:19:33:96:ef:cc: 68:1b:2c:28:c3:dc:a2:4d:12:e8:1c:26:3f:c6:57:c3:1b:8e: 1e:10:6f:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMlgIcr0APdSl/MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ZjRiZDg1NGMtYThhNC00ZGFiLTgxM2MtNzY4NmE3ODFiMmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lXGJY5yMRKXc5YgWyxnXEpx2S4LJLIXFC1F 6yCf7FTaTThFXRiE/BSZxCs/oyrbQHby1a2UriRhhRJcOz3Ajzz80L3182gr6H0j V6lCoHf1OQdxtwWN98A5gC/pzbvbVv3tQjs9JNwcdK544zrdl6CLHxqyyumhg1eQ CdU9g76h/lzB4dgd8/sT4Sb2PjyeCSBt6oe0gokMlJSx593bMP1HrEtojS42oLZp CLbgBUUxoFOj4YAouBQKa7F4D9dE5OMlgRoFBba+8VKokD8r5Fwj5yZs7xp8XBgD ZfQ1NN73gIkXYMXPiDF7ETiI9QH3/8WyU2+v6R1s0iYUZS11HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrvdCUSmjOcw6G0Xiv1g07TSV1ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMGZlMmI5MDEtODk5Yi0z ZmJhLTgzMDAtZjVjMjcxZWUwOTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0bwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbkRqw+m3lIxFB8ZeAiERN0c2d2S3lCdxqBpZv2UYmPxAgBL2bg2SB5 dIKk4i9DcV/wNY3TgmeNBeJw6jmRDHFy4gChWlIC6rE7qnUvCCcLvvb2UkpDxoxG 8TYfE/d+jX/5JKUQU+MCftXce/bsJGl5OucE78XTbwTIf/jn/TCCH9ahZPHJBGB1 mmtKk2hCsYPDBh9SBk6Z5Rui1puB1ZhDfhwg2OKFHfWp7LK1gOVQAbH7nTmGKnvL v6Cl0PQ/fGJSj5sk2nVX8xAlTBSy0/q/3bWbfMYpvonLQYMgcWBN2aNu0KoZM5bv zGgbLCjD3KJNEugcJj/GV8Mbjh4Qb1k= -----END CERTIFICATE-----Generated at Tue Nov 4 23:25:05 2025 by rpki-client