$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/45416e8f-5090-3c74-bc82-6bd84a09d526.roa File: 45416e8f-5090-3c74-bc82-6bd84a09d526.roa (raw, json) Hash identifier: HprpKKSic/aj3+ct9qlUr8YfDzyyIZPEK874iERQIF4= Subject key identifier: 80:27:A7:CD:2E:87:81:8A:A1:94:3E:2F:36:DD:3A:7C:9F:24:70:5A Certificate issuer: /CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Certificate serial: 010D0C9F4328584BBB75895CE14737AAE393B7C0 Authority key identifier: 6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/45416e8f-5090-3c74-bc82-6bd84a09d526.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 16509 IP address blocks: 208.88.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:89:5c:e1:47:37:aa:e3:93:b7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=5197f44b-799d-4b2b-b39e-cf639fa88b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1d:f3:69:d0:2d:00:27:a6:50:3c:2f:5d:c7: fb:0e:46:bf:98:7b:1a:5e:5c:62:c9:e7:61:ba:d7: 2d:d7:51:e6:07:3b:37:bd:84:1c:be:55:e8:a5:01: f2:87:b4:32:1a:0c:2e:82:78:f5:2b:f0:25:d1:1f: 8e:4b:b8:32:b5:59:71:7f:52:c9:08:ef:18:24:9b: 96:97:cc:6e:cc:50:23:cb:22:a3:3b:25:a5:9e:c4: 42:4b:18:80:26:d4:7b:e8:92:fb:50:a7:e9:ab:d9: 03:65:ed:df:8d:ea:e4:64:6e:ae:38:1c:1b:9a:9f: 98:94:4e:fd:4b:d8:60:06:be:97:8b:88:30:e0:63: d5:fb:b5:6c:f8:6c:f3:96:12:08:af:b0:a1:22:7d: 14:d5:c7:14:86:4a:c2:35:92:33:38:cd:39:90:a8: fd:c4:6a:a6:20:2b:c3:6a:81:d5:03:1a:a6:bc:7e: 41:ef:9e:74:30:cd:f1:a8:2f:2d:53:5e:0a:9a:95: 4a:0c:c4:a1:73:70:e0:8f:74:4e:40:ab:0d:52:eb: a8:5e:ad:9c:c6:8f:f3:91:e4:2b:a7:a9:09:bc:1b: 83:fe:3a:f4:5a:8b:d0:81:4a:29:05:15:37:3d:7e: b9:f4:53:65:68:59:65:e7:76:24:e9:52:6a:33:38: bb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:27:A7:CD:2E:87:81:8A:A1:94:3E:2F:36:DD:3A:7C:9F:24:70:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/45416e8f-5090-3c74-bc82-6bd84a09d526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl X509v3 Authority Key Identifier: keyid:6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer sbgp-ipAddrBlock: critical IPv4: 208.88.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:95:60:7c:76:32:26:a8:86:f7:7a:01:f8:99:a9:24:39:99: d1:d0:32:ae:6b:77:e5:ea:f2:13:89:29:4f:b5:da:d2:ba:a8: d7:22:d9:02:10:67:ad:a8:0d:2e:09:61:57:da:b5:0e:b9:99: 60:ad:f6:52:17:7a:2d:32:b4:68:70:65:12:5f:05:7b:8d:86: 56:7c:82:14:5e:58:6b:41:82:72:d0:04:46:91:b5:10:8f:0a: c3:4d:a7:9f:35:a3:35:75:89:96:39:f8:52:e3:65:12:db:dc: 8a:f0:f2:4f:77:28:1d:7d:84:f3:20:ff:9f:81:9f:0c:cc:80: 0e:3c:7e:70:a4:24:be:38:94:5f:5b:fc:09:c1:82:ab:b5:82: 03:fc:cf:ff:a6:86:63:71:99:66:c8:cd:ab:28:76:c5:59:ac: c5:25:d2:d1:a4:bc:a4:3a:a1:c6:6c:f8:bf:d1:39:bb:65:e0: eb:e0:24:1f:f3:70:39:16:70:8c:02:e8:45:14:b5:f8:ee:17: 83:06:22:e7:c5:f7:da:ae:82:ab:17:9e:0e:63:0f:b6:3a:1a: 69:13:37:2b:70:8a:a0:17:67:0e:06:5c:68:ed:19:65:52:b1: da:a7:bb:76:a5:05:fc:df:52:c8:a6:cf:af:c2:d4:cf:7f:4c: 6e:07:fb:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dYlc4Uc3quOTt8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2ZGI0ZWItNDA0MS00YWY4LWI2NGQtZjJlOGI3YmMw NDhiMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk NTE5N2Y0NGItNzk5ZC00YjJiLWIzOWUtY2Y2MzlmYTg4YjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhx3zadAtACemUDwvXcf7Dka/mHsaXlxiyedh utct11HmBzs3vYQcvlXopQHyh7QyGgwugnj1K/Al0R+OS7gytVlxf1LJCO8YJJuW l8xuzFAjyyKjOyWlnsRCSxiAJtR76JL7UKfpq9kDZe3fjerkZG6uOBwbmp+YlE79 S9hgBr6Xi4gw4GPV+7Vs+GzzlhIIr7ChIn0U1ccUhkrCNZIzOM05kKj9xGqmICvD aoHVAxqmvH5B7550MM3xqC8tU14KmpVKDMShc3Dgj3ROQKsNUuuoXq2cxo/zkeQr p6kJvBuD/jr0WovQgUopBRU3PX659FNlaFll53Yk6VJqMzi7yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAnp80uh4GKoZQ+LzbdOnyfJHBaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZk YjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4YjdiYzA0OGIvNDU0MTZlOGYtNTA5MC0z Yzc0LWJjODItNmJkODRhMDlkNTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjg2ZGI0ZWItNDA0MS00YWY4LWI2 NGQtZjJlOGI3YmMwNDhiL2I4NmRiNGViLTQwNDEtNGFmOC1iNjRkLWYyZThiN2Jj MDQ4Yi5jcmwwHwYDVR0jBBgwFoAUa8ITUOp05WaWTNRMgjyklz6m1dMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZkYjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4 YjdiYzA0OGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FgiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGVYHx2Miaohvd6AfiZqSQ5mdHQMq5rd+Xq8hOJKU+12tK6qNci2QIQ Z62oDS4JYVfatQ65mWCt9lIXei0ytGhwZRJfBXuNhlZ8ghReWGtBgnLQBEaRtRCP CsNNp581ozV1iZY5+FLjZRLb3Irw8k93KB19hPMg/5+BnwzMgA48fnCkJL44lF9b /AnBgqu1ggP8z/+mhmNxmWbIzasodsVZrMUl0tGkvKQ6ocZs+L/RObtl4OvgJB/z cDkWcIwC6EUUtfjuF4MGIufF99qugqsXng5jD7Y6GmkTNytwiqAXZw4GXGjtGWVS sdqnu3alBfzfUsimz6/C1M9/TG4H+4w= -----END CERTIFICATE-----Generated at Wed Nov 5 12:37:23 2025 by rpki-client