$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/3cd741e0-7b5d-334f-9864-61e95e34603b.roa File: 3cd741e0-7b5d-334f-9864-61e95e34603b.roa (raw, json) Hash identifier: WI8nYQ4fvt41uCvTjH9qEZXvII2DS4OFXEtm2dVbnlk= Subject key identifier: FD:53:1F:EA:62:BD:7E:E4:8F:75:6E:2B:83:CB:F8:E2:CB:F4:69:BA Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584B7C419B9F7AC5531CFE773D3C Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/3cd741e0-7b5d-334f-9864-61e95e34603b.roa Signing time: Sat 11 Oct 2025 10:40:08 +0000 ROA not before: Sat 11 Oct 2025 10:40:08 +0000 ROA not after: Fri 09 Jan 2026 11:40:08 +0000 asID: 54252 IP address blocks: 209.178.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:41:9b:9f:7a:c5:53:1c:fe:77:3d:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Oct 11 10:40:08 2025 GMT Not After : Jan 9 11:40:08 2026 GMT Subject: CN=dd4da219-94a5-4a98-bc29-505de50319ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4d:ae:8f:da:34:5c:3c:be:b1:24:00:0a:bc: 75:5f:15:a4:fc:fd:4c:2a:93:dc:dc:04:96:ea:cd: 68:a2:b6:6a:36:2b:31:e2:87:ef:0e:9c:a6:3d:fd: ec:c2:62:3b:05:a2:b3:69:28:f1:dd:53:e9:f1:4d: 72:96:83:a0:43:94:05:fd:4d:c0:f4:ea:35:6c:11: fa:03:8f:6a:4e:8d:0c:2f:ab:9f:7f:97:d8:1c:bf: e3:49:2e:1f:aa:7d:fe:f9:d6:5a:a5:7c:68:42:a1: 5b:4d:c8:f1:84:26:09:29:7e:1a:af:60:56:25:3f: e4:54:12:ca:e6:e5:e0:9d:f7:f1:49:cb:0e:05:28: 8a:47:19:a4:61:13:80:a0:2f:61:f1:2a:74:5d:dc: 11:ca:32:e2:d0:6a:bc:05:ac:00:cb:e8:87:16:ee: fa:82:76:bd:0e:cf:85:dc:8a:ff:ec:c1:39:63:95: 2c:1f:0b:dd:e5:1c:c1:b5:6c:19:7f:d7:b8:43:d6: fc:d3:5e:ca:24:43:6d:4a:8e:42:25:60:72:4b:33: df:12:1e:56:35:c5:53:2d:c4:64:31:e1:a1:45:88: fc:ef:c9:0a:32:b0:f5:f7:6d:0c:66:db:a9:00:74: c6:cd:3d:58:e2:29:9c:f3:74:2b:b4:c9:c9:1e:14: 7d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:53:1F:EA:62:BD:7E:E4:8F:75:6E:2B:83:CB:F8:E2:CB:F4:69:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/3cd741e0-7b5d-334f-9864-61e95e34603b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 209.178.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:37:ad:cd:b3:d9:91:e9:b1:6e:b0:92:50:5f:46:e8:e6:ae: 22:03:29:85:2e:0e:af:25:f6:77:85:74:09:c7:bc:96:99:27: 6c:82:ac:f9:e4:6e:4c:29:ed:f8:9c:6a:f9:69:01:11:70:8b: 68:08:b1:59:6f:6d:aa:77:42:f7:54:d4:2b:81:f7:d8:e2:d5: 8e:61:50:d8:46:d0:7a:57:2c:54:c5:89:ed:7b:77:32:05:c8: 36:c4:bf:33:66:77:98:06:da:e6:15:36:14:09:66:b0:10:dc: 79:e2:80:89:8c:82:92:03:14:74:b0:a9:58:cf:49:e2:28:fd: fc:e7:01:d3:1f:d2:d3:97:b6:0d:6f:b8:73:cc:ab:be:55:e0: ef:25:9c:a9:a6:b8:82:43:37:3b:2d:ab:13:15:2f:a4:88:4d: 89:ba:b4:aa:69:cc:cb:fe:c7:55:9e:e5:68:7b:d5:4d:ee:8f: 9b:69:be:f6:71:05:a4:32:58:e7:8e:2d:9d:f2:c3:7a:8f:3a: 79:e0:9b:ff:41:29:8b:e8:58:4f:05:16:47:70:cb:be:03:87: 1e:b4:d4:75:58:05:55:a7:82:b9:8b:3f:65:8c:1a:ce:aa:46: 80:c0:43:4b:03:a4:24:fa:5e:e8:cc:55:87:c4:91:60:56:fa: 60:21:c3:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8QZufesVTHP53PTwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MTAxMTEwNDAwOFoXDTI2MDEwOTExNDAwOFowLzEtMCsGA1UEAxMk ZGQ0ZGEyMTktOTRhNS00YTk4LWJjMjktNTA1ZGU1MDMxOWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE2uj9o0XDy+sSQACrx1XxWk/P1MKpPc3ASW 6s1oorZqNisx4ofvDpymPf3swmI7BaKzaSjx3VPp8U1yloOgQ5QF/U3A9Oo1bBH6 A49qTo0ML6uff5fYHL/jSS4fqn3++dZapXxoQqFbTcjxhCYJKX4ar2BWJT/kVBLK 5uXgnffxScsOBSiKRxmkYROAoC9h8Sp0XdwRyjLi0Gq8BawAy+iHFu76gna9Ds+F 3Ir/7ME5Y5UsHwvd5RzBtWwZf9e4Q9b8017KJENtSo5CJWBySzPfEh5WNcVTLcRk MeGhRYj878kKMrD1920MZtupAHTGzT1Y4imc83QrtMnJHhR9MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1TH+pivX7kj3VuK4PL+OLL9Gm6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvM2NkNzQxZTAtN2I1ZC0z MzRmLTk4NjQtNjFlOTVlMzQ2MDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bLsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIA3rc2z2ZHpsW6wklBfRujmriIDKYUuDq8l9neFdAnHvJaZJ2yCrPnk bkwp7ficavlpARFwi2gIsVlvbap3QvdU1CuB99ji1Y5hUNhG0HpXLFTFie17dzIF yDbEvzNmd5gG2uYVNhQJZrAQ3HnigImMgpIDFHSwqVjPSeIo/fznAdMf0tOXtg1v uHPMq75V4O8lnKmmuIJDNzstqxMVL6SITYm6tKppzMv+x1We5Wh71U3uj5tpvvZx BaQyWOeOLZ3yw3qPOnngm/9BKYvoWE8FFkdwy74Dhx601HVYBVWngrmLP2WMGs6q RoDAQ0sDpCT6XujMVYfEkWBW+mAhw3g= -----END CERTIFICATE-----Generated at Tue Nov 4 16:34:20 2025 by rpki-client