$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3495d15c-fa42-330f-b8d8-37281c835c5c.roa File: 3495d15c-fa42-330f-b8d8-37281c835c5c.roa (raw, json) Hash identifier: g47+mSGomDAZ4Qg9cQN7rg4AJFenfO5cHrFeVlI1Iik= Subject key identifier: BF:70:D0:53:15:96:82:9C:96:3A:1C:06:8B:A4:0F:4C:1A:20:0A:1E Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584BA932605612F4D139759EB280 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3495d15c-fa42-330f-b8d8-37281c835c5c.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 22612 IP address blocks: 209.188.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:60:56:12:f4:d1:39:75:9e:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=c0f9edfc-a767-498c-9548-d5a1aca41f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:27:62:6c:09:67:20:be:b4:2f:9d:dc:b4:4b: cf:fe:f1:71:48:f9:d3:1e:10:e4:73:77:70:bd:9c: 35:d4:ee:7c:fe:c9:1e:5f:c6:48:3c:70:1c:e4:a5: b8:06:6e:1d:f6:2d:15:47:ba:7c:6f:12:23:16:81: f7:94:0f:77:b2:11:0c:35:12:3c:f8:97:94:94:51: a1:74:f9:1d:6c:28:4c:8a:7f:81:96:75:83:a7:34: ca:04:f9:bc:ec:ff:08:05:f9:2c:05:e7:4b:4b:9d: fd:d3:17:e5:ac:88:19:de:2d:71:91:e3:bf:aa:cb: a6:9d:75:8e:58:55:c7:4a:34:34:84:35:7d:23:0d: b1:f3:c9:95:b6:d4:ae:e7:c7:8c:5c:13:e4:45:14: 40:0a:51:ba:07:72:f0:14:2f:bb:2f:b5:da:23:99: 7a:60:6a:0d:37:2b:1a:46:84:35:9b:bf:72:a2:f1: 75:20:15:fa:79:20:75:df:0a:9d:1d:13:3c:b0:3d: a5:f9:c5:c7:72:11:ad:f6:9f:f8:8e:bc:73:49:51: 87:84:83:ff:51:0f:90:eb:c9:53:d5:20:3a:b3:59: 31:f3:5c:45:d5:9c:aa:03:88:89:fe:c8:cc:9e:31: 62:af:bb:db:c9:a3:fa:2c:ea:37:46:fe:a6:08:f1: ed:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:70:D0:53:15:96:82:9C:96:3A:1C:06:8B:A4:0F:4C:1A:20:0A:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3495d15c-fa42-330f-b8d8-37281c835c5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 209.188.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:0d:82:12:8b:bf:ec:6c:28:0d:d9:44:a2:a7:ce:82:a0:85: e6:1c:9c:c5:e1:2b:62:19:0c:ed:90:2d:13:c3:fe:a4:53:5b: 70:96:05:57:74:96:19:9a:ae:ee:2d:88:7e:1a:7c:f7:e0:a3: 5a:c8:18:90:7a:ba:e4:ae:aa:6a:92:4a:26:61:45:1b:1f:f2: b6:49:ee:85:c5:1f:5f:7e:73:fe:95:bc:b2:2b:14:1d:3b:60: da:ea:87:dc:e1:44:c7:ed:46:f4:5e:25:63:91:b9:a7:34:23: 18:f4:cc:83:96:00:7c:74:31:73:06:07:06:53:d4:4b:e2:6d: e3:31:68:da:c6:c5:4f:6c:42:18:4b:31:4f:85:d8:87:12:95: 81:26:f4:76:f6:20:f2:4e:9c:65:23:5b:a5:b7:ba:24:53:14: e0:ae:5c:c1:4b:ea:8f:4c:c8:b6:ae:b0:e6:a9:97:a6:60:c2: 94:a7:dd:d4:60:01:64:f3:94:77:3e:09:63:cc:7f:ee:25:69: 1f:73:ce:27:53:fb:2f:ff:9f:e8:70:0b:a5:50:fb:b6:89:a8: 8b:9e:bc:3e:b9:b5:74:9f:7f:21:0d:58:c0:78:99:1a:74:49: 48:97:ae:89:27:af:9c:2f:39:d0:03:24:da:c4:c7:89:b8:6d: 29:c7:8c:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMmBWEvTROXWesoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk YzBmOWVkZmMtYTc2Ny00OThjLTk1NDgtZDVhMWFjYTQxZjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSdibAlnIL60L53ctEvP/vFxSPnTHhDkc3dw vZw11O58/skeX8ZIPHAc5KW4Bm4d9i0VR7p8bxIjFoH3lA93shEMNRI8+JeUlFGh dPkdbChMin+BlnWDpzTKBPm87P8IBfksBedLS5390xflrIgZ3i1xkeO/qsumnXWO WFXHSjQ0hDV9Iw2x88mVttSu58eMXBPkRRRAClG6B3LwFC+7L7XaI5l6YGoNNysa RoQ1m79yovF1IBX6eSB13wqdHRM8sD2l+cXHchGt9p/4jrxzSVGHhIP/UQ+Q68lT 1SA6s1kx81xF1ZyqA4iJ/sjMnjFir7vbyaP6LOo3Rv6mCPHt7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9w0FMVloKcljocBoukD0waIAoeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMzQ5NWQxNWMtZmE0Mi0z MzBmLWI4ZDgtMzcyODFjODM1YzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bwVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYNghKLv+xsKA3ZRKKnzoKgheYcnMXhK2IZDO2QLRPD/qRTW3CWBVd0 lhmaru4tiH4afPfgo1rIGJB6uuSuqmqSSiZhRRsf8rZJ7oXFH19+c/6VvLIrFB07 YNrqh9zhRMftRvReJWORuac0Ixj0zIOWAHx0MXMGBwZT1EvibeMxaNrGxU9sQhhL MU+F2IcSlYEm9Hb2IPJOnGUjW6W3uiRTFOCuXMFL6o9MyLausOapl6ZgwpSn3dRg AWTzlHc+CWPMf+4laR9zzidT+y//n+hwC6VQ+7aJqIuevD65tXSffyENWMB4mRp0 SUiXroknr5wvOdADJNrEx4m4bSnHjCs= -----END CERTIFICATE-----Generated at Tue Nov 4 23:30:28 2025 by rpki-client