$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/4dfb2ea7-2c14-31ad-98da-0ae7640e2d8f.roa File: 4dfb2ea7-2c14-31ad-98da-0ae7640e2d8f.roa (raw, json) Hash identifier: xh3zkxB3x62FRpVCaVtHliNTft4lBlxcboX12m7FEz4= Subject key identifier: C4:6B:A7:02:5C:A1:E4:02:4D:B8:90:8C:5F:AB:96:99:3A:C3:56:91 Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F4328584B95A78FDB1DCC22CB05048080 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/4dfb2ea7-2c14-31ad-98da-0ae7640e2d8f.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 25649 IP address blocks: 208.86.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:8f:db:1d:cc:22:cb:05:04:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=59bd2023-f3a1-46f0-95ce-36ca5b2772d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9c:ad:6d:65:16:31:67:1c:51:a0:b8:a8:00: 81:e6:00:59:02:df:13:f0:4d:14:60:2c:66:07:06: 24:a9:02:17:b2:a2:5c:05:40:ff:c9:6e:28:6c:0f: 60:dd:c0:28:d9:a9:7d:71:80:1b:48:51:5c:c1:2d: 78:4e:36:24:7a:e9:e1:33:c5:a2:54:3d:17:d6:51: aa:68:46:15:4d:b6:50:d7:74:43:cd:5d:33:74:91: 3f:03:38:fe:2c:d5:24:3f:54:12:32:cf:02:04:a7: be:2f:bb:a6:4d:8c:88:5c:d8:b1:ed:60:45:1b:34: 92:43:86:a0:65:20:ff:c9:b2:e1:4c:48:24:87:d4: 1a:ae:f8:a5:9d:7e:10:a6:3f:4b:3f:1e:03:45:28: ff:25:3d:a3:e7:9c:4d:9a:1f:f8:79:f9:6c:ae:ef: 20:57:db:21:63:56:a6:fd:bb:41:35:f9:c4:da:75: f5:55:da:88:bc:3c:e9:ad:20:18:eb:86:3d:10:e6: 32:97:04:3f:1c:7b:4e:d0:9d:8a:03:48:7f:8d:8c: 29:29:76:86:7c:ed:83:8c:ea:c0:94:17:02:22:5a: 92:ea:c6:8e:94:7c:4f:03:90:87:e5:0c:8d:19:13: 15:e8:78:83:7d:57:da:f4:0b:8f:3b:62:1d:b7:b1: 81:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:6B:A7:02:5C:A1:E4:02:4D:B8:90:8C:5F:AB:96:99:3A:C3:56:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/4dfb2ea7-2c14-31ad-98da-0ae7640e2d8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 208.86.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:7c:19:c4:62:00:07:1a:da:94:67:d8:88:46:9f:a1:b9:ca: c9:a9:38:73:8b:0c:7c:4d:52:be:a1:35:d3:02:00:af:84:e6: fb:93:29:b9:36:c0:e1:39:45:9f:29:3e:0f:2f:bb:c1:b9:a9: f2:21:47:a7:32:e9:fa:36:50:2d:5e:dc:e2:25:5a:f1:90:51: f5:9f:f2:08:65:b5:0f:f8:0e:6f:5c:87:33:d7:30:41:07:0f: c6:6d:89:07:be:c9:76:1c:b2:d3:d8:49:7f:ec:96:83:64:17: 85:75:ad:ee:48:1b:c3:9f:a5:bf:8f:f0:c8:0e:ba:4b:7d:2c: 44:25:59:17:ce:8f:03:79:de:4c:0a:f7:e0:f1:3e:4c:e8:87: a0:41:a9:96:89:73:96:79:ea:cf:a9:e9:99:af:bc:8c:cd:79: de:08:cb:fb:18:b5:d2:d3:c4:88:5c:0e:a8:a3:d0:7d:f2:4b: 97:31:ad:64:8e:89:50:5c:19:43:39:73:4f:1e:4c:38:35:0b: 60:2e:56:d7:0a:d3:30:c9:14:4f:35:9c:c5:e2:fe:aa:19:a1: 93:dc:35:3f:c4:92:49:90:69:97:6e:3a:cf:28:00:f4:78:82: ea:e4:06:75:b1:f9:84:07:6d:f2:70:73:ff:16:91:1a:35:b1: 08:95:b9:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp4/bHcwiywUEgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NTliZDIwMjMtZjNhMS00NmYwLTk1Y2UtMzZjYTViMjc3MmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpytbWUWMWccUaC4qACB5gBZAt8T8E0UYCxm BwYkqQIXsqJcBUD/yW4obA9g3cAo2al9cYAbSFFcwS14TjYkeunhM8WiVD0X1lGq aEYVTbZQ13RDzV0zdJE/Azj+LNUkP1QSMs8CBKe+L7umTYyIXNix7WBFGzSSQ4ag ZSD/ybLhTEgkh9QarvilnX4Qpj9LPx4DRSj/JT2j55xNmh/4eflsru8gV9shY1am /btBNfnE2nX1VdqIvDzprSAY64Y9EOYylwQ/HHtO0J2KA0h/jYwpKXaGfO2DjOrA lBcCIlqS6saOlHxPA5CH5QyNGRMV6HiDfVfa9AuPO2Idt7GBSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRrpwJcoeQCTbiQjF+rlpk6w1aRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvNGRmYjJlYTctMmMxNC0z MWFkLTk4ZGEtMGFlNzY0MGUyZDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FYsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACV8GcRiAAca2pRn2IhGn6G5ysmpOHOLDHxNUr6hNdMCAK+E5vuTKbk2 wOE5RZ8pPg8vu8G5qfIhR6cy6fo2UC1e3OIlWvGQUfWf8ghltQ/4Dm9chzPXMEEH D8ZtiQe+yXYcstPYSX/sloNkF4V1re5IG8Ofpb+P8MgOukt9LEQlWRfOjwN53kwK 9+DxPkzoh6BBqZaJc5Z56s+p6ZmvvIzNed4Iy/sYtdLTxIhcDqij0H3yS5cxrWSO iVBcGUM5c08eTDg1C2AuVtcK0zDJFE81nMXi/qoZoZPcNT/EkkmQaZduOs8oAPR4 gurkBnWx+YQHbfJwc/8WkRo1sQiVua4= -----END CERTIFICATE-----Generated at Wed Nov 5 11:03:50 2025 by rpki-client