$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/fd61c542-e49b-3305-9aaf-bbcb9608f778.roa File: fd61c542-e49b-3305-9aaf-bbcb9608f778.roa (raw, json) Hash identifier: eV3wIqtCaR0Cg0kQHzNZNLv6G0SfoYV2LdkcIMY7dLE= Subject key identifier: 1C:5E:05:4D:46:FE:13:64:1D:1E:04:2B:EE:AD:23:9A:8E:9E:17:B0 Certificate issuer: /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582 Certificate serial: 010D0C9F4328584BA39D08B156F7C3AB1314E848 Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/fd61c542-e49b-3305-9aaf-bbcb9608f778.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 1273 IP address blocks: 206.128.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:08:b1:56:f7:c3:ab:13:14:e8:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=bfac0831-f769-47d3-8aea-26b9615117e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6f:d4:ab:21:a6:0d:55:8d:97:49:64:b9:27: 0b:50:74:14:26:46:f5:3a:9c:a4:c1:8b:72:d5:2f: 4f:c9:85:85:6b:d3:5d:c0:19:81:8a:1f:29:8c:03: 66:40:49:f0:85:b0:eb:d3:66:fd:44:b5:19:f2:7b: 9b:96:b1:9b:b7:16:e2:07:96:51:10:9a:78:48:14: 6b:b1:0c:b6:89:23:34:34:4f:35:ef:e5:97:93:e1: 2d:33:04:00:a3:ac:f7:1f:b2:f8:ad:f7:83:38:ab: 3c:61:65:76:e8:d7:a9:8f:8f:9e:18:9f:3b:9a:e4: d1:16:51:e4:8c:60:b2:69:2c:36:e9:cb:fe:4e:ff: a0:8d:b3:84:20:64:10:5e:c4:ad:fe:f1:f9:51:3d: 65:34:c1:60:6a:b3:99:e3:55:ba:df:ff:bd:80:dc: 0f:cd:37:8b:f3:3c:f0:cd:42:a5:c9:40:54:05:1a: 4d:b8:af:a4:fe:cf:cd:db:bc:b9:37:c5:62:db:e1: e1:c9:d5:49:c2:69:cd:f0:8b:5a:9e:02:2b:39:00: 3a:d5:84:3d:84:cc:2b:34:c5:c0:cf:50:bb:1d:3c: 40:8f:e4:46:d2:df:17:8b:1a:76:fd:9c:73:97:19: d3:81:26:1a:e2:4a:b5:74:70:87:21:dc:3e:63:6e: ba:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:5E:05:4D:46:FE:13:64:1D:1E:04:2B:EE:AD:23:9A:8E:9E:17:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/fd61c542-e49b-3305-9aaf-bbcb9608f778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl X509v3 Authority Key Identifier: keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer sbgp-ipAddrBlock: critical IPv4: 206.128.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:74:f1:a6:57:19:f2:a2:dc:b4:5e:b8:99:e4:14:b9:c1:9f: 5e:26:5b:bd:81:d5:65:8b:e0:2f:bc:64:2d:c2:b4:b3:06:01: 15:b0:94:85:81:7a:77:b7:98:13:71:95:86:cd:bb:63:cb:3e: 2e:ed:1a:9f:e6:29:03:7a:41:6d:1e:97:29:c5:09:bd:48:7c: 7d:96:63:82:ba:30:1f:a5:d9:5f:7a:08:31:5d:2c:fa:cd:8a: 64:e0:b6:ed:e7:c6:88:c6:57:a2:01:0d:70:86:83:a8:40:e6: d5:b2:ce:f0:ca:2b:ad:a6:5f:d3:51:03:d2:6b:87:bc:00:40: e0:65:b3:10:68:ce:7a:5f:97:e5:23:3d:f7:e0:83:9f:3d:8b: 4d:15:c6:38:5c:f5:c1:e7:37:c2:43:73:44:61:09:1a:94:42: d2:14:19:90:06:6d:e9:07:4c:9f:6c:92:02:45:5f:33:eb:09: f0:05:60:5a:87:70:4e:c9:cb:b2:48:69:d6:a3:73:ed:f9:26: b7:7d:29:dc:b6:de:d7:71:c0:cb:5e:cf:8f:20:4e:f5:cf:32: eb:9f:73:96:3d:84:e1:dd:59:b2:25:ce:27:6d:61:70:08:ad: ee:80:f9:f7:b7:fd:8c:ee:5e:d4:29:85:1c:ae:75:91:0a:8c: e0:0e:e4:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnQixVvfDqxMU6EgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMyZDM4NzYtMjllNi00MmY1LWI3NmYtMjNiYjQ4YmE4 NTgyMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YmZhYzA4MzEtZjc2OS00N2QzLThhZWEtMjZiOTYxNTExN2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2/UqyGmDVWNl0lkuScLUHQUJkb1OpykwYty 1S9PyYWFa9NdwBmBih8pjANmQEnwhbDr02b9RLUZ8nublrGbtxbiB5ZREJp4SBRr sQy2iSM0NE817+WXk+EtMwQAo6z3H7L4rfeDOKs8YWV26Nepj4+eGJ87muTRFlHk jGCyaSw26cv+Tv+gjbOEIGQQXsSt/vH5UT1lNMFgarOZ41W63/+9gNwPzTeL8zzw zUKlyUBUBRpNuK+k/s/N27y5N8Vi2+HhydVJwmnN8ItangIrOQA61YQ9hMwrNMXA z1C7HTxAj+RG0t8Xixp2/ZxzlxnTgSYa4kq1dHCHIdw+Y266rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxeBU1G/hNkHR4EK+6tI5qOnhewMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJk Mzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2JiNDhiYTg1ODIvZmQ2MWM1NDItZTQ5Yi0z MzA1LTlhYWYtYmJjYjk2MDhmNzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWMyZDM4NzYtMjllNi00MmY1LWI3 NmYtMjNiYjQ4YmE4NTgyL2FjMmQzODc2LTI5ZTYtNDJmNS1iNzZmLTIzYmI0OGJh ODU4Mi5jcmwwHwYDVR0jBBgwFoAUDEkkReUZkCywPx/BY7zBtY7YpJ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJkMzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2Ji NDhiYTg1ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzoAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH908aZXGfKi3LReuJnkFLnBn14mW72B1WWL4C+8ZC3CtLMGARWwlIWB ene3mBNxlYbNu2PLPi7tGp/mKQN6QW0elynFCb1IfH2WY4K6MB+l2V96CDFdLPrN imTgtu3nxojGV6IBDXCGg6hA5tWyzvDKK62mX9NRA9Jrh7wAQOBlsxBoznpfl+Uj Pffgg589i00Vxjhc9cHnN8JDc0RhCRqUQtIUGZAGbekHTJ9skgJFXzPrCfAFYFqH cE7Jy7JIadajc+35Jrd9Kdy23tdxwMtez48gTvXPMuufc5Y9hOHdWbIlzidtYXAI re6A+fe3/YzuXtQphRyudZEKjOAO5M4= -----END CERTIFICATE-----Generated at Wed Nov 5 00:59:26 2025 by rpki-client