$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/74009bb0-aad4-398c-bdc3-a17edf98c150.roa File: 74009bb0-aad4-398c-bdc3-a17edf98c150.roa (raw, json) Hash identifier: Y3CchIytJIg1I6H2e6nH8w2Lu8h152La8Otwmw0adxI= Subject key identifier: B6:9C:FA:FF:9C:11:38:70:B9:00:BF:FB:B8:20:95:FC:79:5B:19:09 Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F4328584B95A78F8A5722AFE5FF9B6F80 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/74009bb0-aad4-398c-bdc3-a17edf98c150.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 25649 IP address blocks: 192.34.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:8f:8a:57:22:af:e5:ff:9b:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=3e5d6ecf-f29d-4461-b100-955c59c4e00e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b8:69:6f:f7:cd:07:78:66:f1:2c:55:d2:5f: c9:d1:34:8f:2b:ae:62:5d:ee:90:14:ce:62:1d:d8: fe:2b:3b:58:99:67:d7:58:9c:e3:39:66:6a:52:3d: 14:6a:fe:92:e1:7e:fa:3a:fa:2f:18:7e:a2:05:d5: 70:be:91:6c:a4:2e:b5:83:90:bf:36:45:37:ce:e1: a2:84:b2:5a:be:2a:ec:13:f7:c3:5a:80:08:10:c5: 18:6e:00:ac:95:c5:39:69:69:5b:e7:5e:f8:cc:ae: eb:d1:23:4a:0a:23:14:93:10:67:6f:da:d3:2f:21: d7:c3:bc:b4:42:fa:1f:47:85:d6:95:4c:1f:b5:32: e1:a1:46:67:ff:e1:e2:58:c9:b0:fb:66:cc:17:a3: b6:d3:00:01:97:cd:24:c5:9c:56:73:9d:19:d4:84: a8:91:97:c7:82:0d:07:f6:35:1e:91:cc:0a:58:69: 80:bc:3b:46:c0:ba:96:c0:2e:eb:4c:52:4f:04:02: 3d:20:d6:93:10:78:dd:da:33:93:8e:4d:ad:c9:5d: 7a:b3:b8:75:ab:55:bb:41:70:32:5b:cc:9e:6f:8b: 95:dc:d7:f3:a3:5e:8b:0e:e5:01:24:2c:0c:98:bb: fa:36:84:b2:3d:6a:72:9d:e3:0b:e2:8e:fe:98:72: 6d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:9C:FA:FF:9C:11:38:70:B9:00:BF:FB:B8:20:95:FC:79:5B:19:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/74009bb0-aad4-398c-bdc3-a17edf98c150.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 192.34.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:90:85:0c:c7:ba:8b:d8:8a:ca:6f:d5:57:c4:0e:67:b4:bd: 04:2d:d8:c4:13:3f:38:50:19:ce:66:4a:a6:19:91:8d:e4:56: 4c:d9:62:1f:93:52:41:2c:85:8b:06:22:e1:9d:52:62:06:c8: 5d:fd:6a:fa:dd:1d:ea:a7:91:f2:a0:ea:44:f2:cc:54:20:58: a0:40:9c:3f:5a:c7:63:88:59:e6:d2:2d:2b:38:23:60:7a:23: 37:88:2a:af:78:a8:8e:c8:3b:51:5e:60:ba:31:e9:f1:fa:3d: e0:96:67:9e:af:15:ac:90:5d:24:74:76:50:b6:24:0d:36:d4: 51:22:fd:21:a4:c5:2a:9c:94:b5:f0:06:fe:4c:fb:3a:df:0d: 10:62:c4:3c:b1:5e:a6:40:cd:b4:ea:b7:67:a4:b8:9f:27:a7: 94:8c:44:62:a7:f1:72:1d:79:40:c3:b9:cb:c8:29:00:2e:55: f4:b8:78:5d:46:b2:c8:44:9e:11:a3:9f:e7:2b:ff:9b:70:8d: 9d:10:8f:80:a1:69:b4:cd:5b:24:bf:fc:cc:11:54:72:98:1d: 15:bc:bf:99:b0:21:f2:8a:af:6d:8c:43:00:9b:5b:63:f7:20: b2:30:3d:4e:31:e4:5d:c8:5f:3d:f2:0e:51:56:f0:f3:27:4f: 14:73:e3:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp4+KVyKv5f+bb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk M2U1ZDZlY2YtZjI5ZC00NDYxLWIxMDAtOTU1YzU5YzRlMDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bhpb/fNB3hm8SxV0l/J0TSPK65iXe6QFM5i Hdj+KztYmWfXWJzjOWZqUj0Uav6S4X76OvovGH6iBdVwvpFspC61g5C/NkU3zuGi hLJavirsE/fDWoAIEMUYbgCslcU5aWlb5174zK7r0SNKCiMUkxBnb9rTLyHXw7y0 QvofR4XWlUwftTLhoUZn/+HiWMmw+2bMF6O20wABl80kxZxWc50Z1ISokZfHgg0H 9jUekcwKWGmAvDtGwLqWwC7rTFJPBAI9INaTEHjd2jOTjk2tyV16s7h1q1W7QXAy W8yeb4uV3Nfzo16LDuUBJCwMmLv6NoSyPWpyneML4o7+mHJtHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLac+v+cEThwuQC/+7gglfx5WxkJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvNzQwMDliYjAtYWFkNC0z OThjLWJkYzMtYTE3ZWRmOThjMTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwCLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByQhQzHuovYispv1VfEDme0vQQt2MQTPzhQGc5mSqYZkY3kVkzZYh+T UkEshYsGIuGdUmIGyF39avrdHeqnkfKg6kTyzFQgWKBAnD9ax2OIWebSLSs4I2B6 IzeIKq94qI7IO1FeYLox6fH6PeCWZ56vFayQXSR0dlC2JA021FEi/SGkxSqclLXw Bv5M+zrfDRBixDyxXqZAzbTqt2ekuJ8np5SMRGKn8XIdeUDDucvIKQAuVfS4eF1G sshEnhGjn+cr/5twjZ0Qj4ChabTNWyS//MwRVHKYHRW8v5mwIfKKr22MQwCbW2P3 ILIwPU4x5F3IXz3yDlFW8PMnTxRz4zI= -----END CERTIFICATE-----Generated at Wed Nov 5 14:05:41 2025 by rpki-client