$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/cd93a255-e514-3611-be7c-946b8830ac3e.roa File: cd93a255-e514-3611-be7c-946b8830ac3e.roa (raw, json) Hash identifier: RTeVaglrAqss8xjAEjn+gKohK73cbVeQPPfWv3NT61c= Subject key identifier: EC:85:23:1B:3D:32:5F:C7:A6:8F:85:26:64:BB:5B:FB:4F:DC:93:C2 Certificate issuer: /CN=f04bc7fd-5334-45ee-9a48-3ffb117ad4f3 Certificate serial: 010D0C9F4328584BA39D1258CA4EC47CC5F596C0 Authority key identifier: 7B:60:16:FD:22:79:AD:EC:4E:D4:A0:E7:DB:DC:8D:E3:85:73:A7:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/cd93a255-e514-3611-be7c-946b8830ac3e.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 62827 IP address blocks: 209.209.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:12:58:ca:4e:c4:7c:c5:f5:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04bc7fd-5334-45ee-9a48-3ffb117ad4f3 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=cd011fa4-bfdb-4379-9682-264d9be7cace Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5c:a7:14:fc:dc:98:f6:e9:22:7f:d1:81:37: 99:1b:6a:bc:33:12:15:58:4a:0d:6a:16:12:cf:0b: a7:5b:0c:96:13:01:4f:8f:b3:35:61:c3:7e:df:bb: e8:a0:6a:51:0d:f4:48:c7:5d:63:be:d9:44:80:72: a1:70:1b:b5:55:de:c2:67:02:bb:2f:6f:ee:0c:ef: fb:96:6c:17:46:97:67:1b:38:60:5d:69:23:68:34: 7e:7a:eb:dd:c1:da:59:cc:33:f8:69:84:69:34:f8: af:42:ad:18:2f:3e:ce:b5:22:38:80:bf:a1:ef:a4: 19:0d:79:1c:b6:5c:db:01:a1:a0:93:1e:04:b4:6d: 88:fb:99:43:4b:cb:0d:0a:58:79:bd:05:45:04:64: 72:31:ad:a9:23:a0:23:14:ce:ff:79:a8:61:42:b8: 21:8d:f5:b2:00:60:35:ed:22:23:49:ff:81:71:ae: b6:c1:72:dd:86:cc:2a:d7:6e:ca:8b:89:06:6b:c0: 93:9e:3a:1d:42:ef:1c:6e:cf:f6:15:f4:e2:6a:0a: e3:8d:c5:ce:80:10:6a:3d:5f:6f:58:eb:35:12:dd: 63:34:3b:bd:f4:74:2f:3f:db:20:53:4d:e2:65:85: 0a:49:a6:9c:9f:b0:00:7a:df:dc:6b:8b:f8:73:78: 3f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:85:23:1B:3D:32:5F:C7:A6:8F:85:26:64:BB:5B:FB:4F:DC:93:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/cd93a255-e514-3611-be7c-946b8830ac3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.crl X509v3 Authority Key Identifier: keyid:7B:60:16:FD:22:79:AD:EC:4E:D4:A0:E7:DB:DC:8D:E3:85:73:A7:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f04bc7fd-5334-45ee-9a48-3ffb117ad4f3.cer sbgp-ipAddrBlock: critical IPv4: 209.209.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:14:7d:35:92:7c:2d:3b:8b:d9:43:42:46:9e:86:5f:1f:7c: c0:a3:03:3e:75:99:e9:97:4f:b8:62:0a:0d:b0:92:bc:9a:44: 15:2c:56:14:49:58:b3:2b:d9:66:6b:89:77:ec:9c:19:7d:f2: 38:5a:42:97:98:ba:a9:07:20:2a:c1:5f:64:b7:dd:50:17:d3: 37:e8:3b:75:bf:98:c1:64:3a:52:31:93:47:f4:ed:18:30:04: 1b:cf:9b:16:4f:c7:ba:a3:e5:82:54:50:9c:ef:54:e6:ff:78: e3:76:e0:40:4c:b9:5b:da:50:ca:84:57:83:1e:6c:4e:df:ed: 02:87:97:59:c7:3f:41:a3:c5:9f:dd:e0:f8:1b:a7:6c:9c:b0: 05:00:e5:10:e7:0c:56:b1:1e:79:c6:d0:9c:52:02:8d:6b:bc: b8:87:2a:60:56:17:1c:48:70:f7:a1:00:68:c3:73:ef:15:28: 3c:00:7e:35:54:06:b9:23:d2:44:c3:a5:71:28:e2:7f:87:66: 88:0c:45:ca:8a:5d:77:e5:0c:7c:3a:93:99:52:a5:cd:22:4c: 40:5d:0f:09:3e:27:49:e0:7a:e0:0d:99:be:ed:9d:7a:15:df: 24:14:f0:16:7d:3b:83:ba:a3:a3:ca:fa:93:0f:c6:12:cd:02: fd:aa:6e:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnRJYyk7EfMX1lsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA0YmM3ZmQtNTMzNC00NWVlLTlhNDgtM2ZmYjExN2Fk NGYzMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk Y2QwMTFmYTQtYmZkYi00Mzc5LTk2ODItMjY0ZDliZTdjYWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVynFPzcmPbpIn/RgTeZG2q8MxIVWEoNahYS zwunWwyWEwFPj7M1YcN+37vooGpRDfRIx11jvtlEgHKhcBu1Vd7CZwK7L2/uDO/7 lmwXRpdnGzhgXWkjaDR+euvdwdpZzDP4aYRpNPivQq0YLz7OtSI4gL+h76QZDXkc tlzbAaGgkx4EtG2I+5lDS8sNClh5vQVFBGRyMa2pI6AjFM7/eahhQrghjfWyAGA1 7SIjSf+Bca62wXLdhswq127Ki4kGa8CTnjodQu8cbs/2FfTiagrjjcXOgBBqPV9v WOs1Et1jNDu99HQvP9sgU03iZYUKSaacn7AAet/ca4v4c3g/zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOyFIxs9Ml/Hpo+FJmS7W/tP3JPCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mMDRi YzdmZC01MzM0LTQ1ZWUtOWE0OC0zZmZiMTE3YWQ0ZjMvY2Q5M2EyNTUtZTUxNC0z NjExLWJlN2MtOTQ2Yjg4MzBhYzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjA0YmM3ZmQtNTMzNC00NWVlLTlh NDgtM2ZmYjExN2FkNGYzL2YwNGJjN2ZkLTUzMzQtNDVlZS05YTQ4LTNmZmIxMTdh ZDRmMy5jcmwwHwYDVR0jBBgwFoAUe2AW/SJ5rexO1KDn29yN44VzpwYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mMDRiYzdmZC01MzM0LTQ1ZWUtOWE0OC0zZmZi MTE3YWQ0ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0dFsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoUfTWSfC07i9lDQkaehl8ffMCjAz51memXT7hiCg2wkryaRBUsVhRJ WLMr2WZriXfsnBl98jhaQpeYuqkHICrBX2S33VAX0zfoO3W/mMFkOlIxk0f07Rgw BBvPmxZPx7qj5YJUUJzvVOb/eON24EBMuVvaUMqEV4MebE7f7QKHl1nHP0GjxZ/d 4Pgbp2ycsAUA5RDnDFaxHnnG0JxSAo1rvLiHKmBWFxxIcPehAGjDc+8VKDwAfjVU Brkj0kTDpXEo4n+HZogMRcqKXXflDHw6k5lSpc0iTEBdDwk+J0ngeuANmb7tnXoV 3yQU8BZ9O4O6o6PK+pMPxhLNAv2qbng= -----END CERTIFICATE-----Generated at Wed Nov 5 22:13:36 2025 by rpki-client