$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/9802dda9-f341-3f6c-b874-a50094f59d5b.roa File: 9802dda9-f341-3f6c-b874-a50094f59d5b.roa (raw, json) Hash identifier: BSJooylbcc1kRLQSTAA0UoaGYprgPdHnGF5RY88lalg= Subject key identifier: F8:19:C3:B2:FE:DC:F1:FF:25:8A:78:A8:58:A3:65:3C:C2:0C:49:43 Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F4328584B95A78FC79070E99547E55960 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/9802dda9-f341-3f6c-b874-a50094f59d5b.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 25649 IP address blocks: 208.74.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:8f:c7:90:70:e9:95:47:e5:59:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=1a873b18-0ddd-454e-934b-77bf50270494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e6:d0:fc:5f:98:3e:c3:4d:c8:91:d6:e5:68: 77:5f:65:65:f7:f0:e4:63:5b:45:5b:0d:f7:9c:8b: e5:41:4c:62:f0:1a:fe:42:43:50:7a:2c:35:d4:d8: a6:05:8b:f9:62:3d:bf:13:5b:4a:78:38:b4:dd:be: 34:f7:f3:83:59:32:26:3e:4f:fe:50:2a:e5:d1:62: 99:ec:b8:b7:f6:c5:c5:25:c7:58:3d:b7:3e:ed:a3: 9f:6b:78:6a:27:61:b6:ad:34:23:df:b6:8e:f8:79: 4a:91:21:e0:34:df:4d:db:fc:57:0b:1e:65:e4:ed: 83:f9:1b:4e:12:13:91:24:5e:f3:92:2f:69:fa:35: de:5c:84:48:48:31:2a:92:52:b9:1a:28:83:e6:3a: e6:85:d8:bd:d4:5e:c4:22:15:d4:8f:69:49:d5:e1: 9b:53:b4:e3:b1:7c:d6:9c:96:4d:0e:d0:c5:8b:6d: ea:96:b1:4d:db:2c:5c:cc:1f:77:31:51:9a:e9:27: 6a:01:21:61:e6:59:78:82:5c:78:7a:79:2a:09:44: ff:6b:72:ea:56:1d:64:20:44:df:04:2e:40:bd:d3: e0:54:cc:88:6c:29:57:62:05:84:78:0f:24:a4:a7: 3f:6a:84:73:88:c0:2f:0a:a7:a9:27:6c:a6:10:3a: 04:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:19:C3:B2:FE:DC:F1:FF:25:8A:78:A8:58:A3:65:3C:C2:0C:49:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/9802dda9-f341-3f6c-b874-a50094f59d5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 208.74.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ae:86:53:a5:97:ae:b3:63:b8:3d:4a:3d:e0:19:55:2f:3b: d0:af:4c:5d:1c:ab:23:ae:55:e9:de:af:15:da:d1:be:a6:1a: ee:02:ac:28:c4:18:db:87:9f:fe:79:35:8a:db:14:fa:37:e3: 65:ef:b7:a0:27:85:1d:34:4c:9d:5f:85:61:81:61:e1:05:b1: e9:9b:8f:3c:bd:f3:f6:ec:51:1d:b0:6a:ce:62:9e:56:53:c2: 66:bd:aa:7a:81:b5:72:a9:4a:62:bd:15:37:76:bb:cc:a8:5b: 4e:19:11:a6:1e:d1:58:88:da:5b:19:99:72:c9:81:2e:89:f3: 9c:cc:17:c7:2f:ec:3d:84:39:d8:c8:a7:57:2c:fa:9f:21:08: 27:b8:78:16:c3:e8:0d:f9:59:0a:45:05:f9:73:6c:80:7d:6b: 1e:a0:ca:5f:20:cb:19:a2:da:6c:0c:55:d2:31:bd:b2:fb:a7: 38:c0:40:97:6c:6f:00:9c:10:5a:f8:6b:7a:07:f3:d5:d9:90: cb:7e:17:46:03:89:ba:2a:ac:d7:f4:c9:2b:db:3a:14:09:69: e1:f2:9f:fe:0d:ff:20:41:4a:35:4b:83:e3:e7:e9:f5:d9:1d: 50:58:e2:dd:65:22:fd:06:28:1c:b9:04:87:fb:e2:b7:98:33: ce:81:3c:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp4/HkHDplUflWWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MWE4NzNiMTgtMGRkZC00NTRlLTkzNGItNzdiZjUwMjcwNDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+bQ/F+YPsNNyJHW5Wh3X2Vl9/DkY1tFWw33 nIvlQUxi8Br+QkNQeiw11NimBYv5Yj2/E1tKeDi03b409/ODWTImPk/+UCrl0WKZ 7Li39sXFJcdYPbc+7aOfa3hqJ2G2rTQj37aO+HlKkSHgNN9N2/xXCx5l5O2D+RtO EhORJF7zki9p+jXeXIRISDEqklK5GiiD5jrmhdi91F7EIhXUj2lJ1eGbU7TjsXzW nJZNDtDFi23qlrFN2yxczB93MVGa6SdqASFh5ll4glx4enkqCUT/a3LqVh1kIETf BC5AvdPgVMyIbClXYgWEeA8kpKc/aoRziMAvCqepJ2ymEDoE1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgZw7L+3PH/JYp4qFijZTzCDElDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvOTgwMmRkYTktZjM0MS0z ZjZjLWI4NzQtYTUwMDk0ZjU5ZDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EoIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGuhlOll66zY7g9Sj3gGVUvO9CvTF0cqyOuVenerxXa0b6mGu4CrCjE GNuHn/55NYrbFPo342Xvt6AnhR00TJ1fhWGBYeEFsembjzy98/bsUR2was5inlZT wma9qnqBtXKpSmK9FTd2u8yoW04ZEaYe0ViI2lsZmXLJgS6J85zMF8cv7D2EOdjI p1cs+p8hCCe4eBbD6A35WQpFBflzbIB9ax6gyl8gyxmi2mwMVdIxvbL7pzjAQJds bwCcEFr4a3oH89XZkMt+F0YDiboqrNf0ySvbOhQJaeHyn/4N/yBBSjVLg+Pn6fXZ HVBY4t1lIv0GKBy5BIf74reYM86BPBE= -----END CERTIFICATE-----Generated at Wed Nov 5 14:06:59 2025 by rpki-client