$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/985211db-3d6b-313f-ad01-983be935ee5a.roa File: 985211db-3d6b-313f-ad01-983be935ee5a.roa (raw, json) Hash identifier: x0OE3ePwQFaAY9x3+jXggI1+d2iaQuu8dhit/E/ig+c= Subject key identifier: 6E:9B:3B:82:98:82:66:BB:C1:49:0C:1C:EE:35:DF:94:DA:4B:D0:29 Certificate issuer: /CN=dd89d034-c049-4b11-917d-e035f703312f Certificate serial: 010D0C9F4328584BA39D1ACA247D3E3D185A4420 Authority key identifier: FD:2D:36:CC:EC:EE:00:DC:29:64:26:A8:7C:2F:AC:E6:1F:0E:B1:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/985211db-3d6b-313f-ad01-983be935ee5a.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 13394 IP address blocks: 204.63.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/dd89d034-c049-4b11-917d-e035f703312f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/dd89d034-c049-4b11-917d-e035f703312f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:1a:ca:24:7d:3e:3d:18:5a:44:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd89d034-c049-4b11-917d-e035f703312f Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=887a2a3d-d282-4612-b564-a24f7da10f32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:30:07:28:ca:fa:1c:0b:c6:22:38:e9:7f:f8: c7:2e:34:bb:82:3b:fc:c4:d1:bb:57:66:95:e0:75: c5:47:13:b6:06:18:c0:50:53:50:02:14:d6:11:5b: 8a:a4:9f:da:97:d4:e4:ed:fd:bc:32:1e:59:53:73: 9f:0f:21:0e:e4:b5:c2:85:0a:bf:ed:7c:5b:51:b4: 83:00:48:2d:1e:e3:fc:6d:bb:e5:cf:09:cd:b5:2d: 49:18:ef:34:2e:ef:26:e9:2f:c8:60:b1:d6:8e:8c: d7:1f:7e:7a:a1:d7:d9:79:2b:18:ca:8a:f9:ac:df: 6d:c4:b8:ee:9f:a3:2e:07:7f:48:87:ab:90:58:6b: c0:51:ff:85:46:52:ea:08:b2:38:7f:16:c6:41:b0: a2:cf:a0:ee:87:fb:18:6f:66:38:79:ff:8b:57:a2: c6:f4:c5:e1:ec:0f:e7:55:f4:2e:8e:32:2d:b4:e9: ac:31:da:c2:ef:62:35:18:dd:69:0e:f2:dc:1e:28: 19:df:b3:c0:ef:be:6f:f5:e6:da:88:1e:8c:cb:39: c5:a3:68:1f:23:7b:56:03:74:2d:79:50:d5:ff:d7: 09:70:a6:ac:d7:d2:57:c1:4b:4d:11:42:d7:25:9f: 63:60:1b:ce:ac:5f:a4:73:f5:78:56:e3:19:0f:1d: da:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:9B:3B:82:98:82:66:BB:C1:49:0C:1C:EE:35:DF:94:DA:4B:D0:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/985211db-3d6b-313f-ad01-983be935ee5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/dd89d034-c049-4b11-917d-e035f703312f.crl X509v3 Authority Key Identifier: keyid:FD:2D:36:CC:EC:EE:00:DC:29:64:26:A8:7C:2F:AC:E6:1F:0E:B1:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f.cer sbgp-ipAddrBlock: critical IPv4: 204.63.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:5c:4a:3a:7b:23:70:c6:eb:c6:51:73:b5:95:6f:02:83:60: c5:b3:46:db:1e:13:40:61:eb:b7:c7:da:78:21:a8:52:45:a0: 31:1a:90:8e:1e:7a:60:56:be:e8:1c:a7:56:6a:fc:bf:3f:46: 9c:e1:f0:e3:dc:f9:89:38:e2:d8:23:81:3e:8e:14:a7:09:e5: ac:0c:0f:4d:6e:1c:1c:58:24:11:89:b2:a5:29:ac:ea:ad:55: 79:40:95:41:62:70:f5:57:9c:0f:0e:9d:96:f0:7e:88:83:a7: 60:83:43:8a:b7:e9:67:91:aa:d8:19:87:92:fc:b2:9d:21:12: 0f:7f:3d:d3:e7:f5:64:7c:3a:3c:7e:b4:a4:b1:3d:a2:05:ad: c6:c1:ca:3e:4d:4f:ad:37:87:04:4d:f3:10:6e:6c:ac:64:d4: 17:fb:24:d0:fb:20:e5:1f:9c:53:3d:5c:e9:b1:9d:14:c4:11: 84:d5:8e:e0:2d:d6:d9:86:f5:75:a2:e2:5a:5c:fe:61:e4:a1: 56:33:d4:77:d5:6f:9f:b9:75:de:bb:d0:30:1e:7f:45:c5:53: e7:6d:43:10:c0:29:d3:f1:6a:4a:8d:f4:41:fd:af:68:9b:9e: 8d:ca:69:36:d6:54:28:c9:74:4c:c6:3b:0d:86:07:7f:2b:7b: a4:4e:e0:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnRrKJH0+PRhaRCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ4OWQwMzQtYzA0OS00YjExLTkxN2QtZTAzNWY3MDMz MTJmMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ODg3YTJhM2QtZDI4Mi00NjEyLWI1NjQtYTI0ZjdkYTEwZjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjAHKMr6HAvGIjjpf/jHLjS7gjv8xNG7V2aV 4HXFRxO2BhjAUFNQAhTWEVuKpJ/al9Tk7f28Mh5ZU3OfDyEO5LXChQq/7XxbUbSD AEgtHuP8bbvlzwnNtS1JGO80Lu8m6S/IYLHWjozXH356odfZeSsYyor5rN9txLju n6MuB39Ih6uQWGvAUf+FRlLqCLI4fxbGQbCiz6Duh/sYb2Y4ef+LV6LG9MXh7A/n VfQujjIttOmsMdrC72I1GN1pDvLcHigZ37PA775v9ebaiB6MyznFo2gfI3tWA3Qt eVDV/9cJcKas19JXwUtNEULXJZ9jYBvOrF+kc/V4VuMZDx3aFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6bO4KYgma7wUkMHO4135TaS9ApMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDg5 ZDAzNC1jMDQ5LTRiMTEtOTE3ZC1lMDM1ZjcwMzMxMmYvOTg1MjExZGItM2Q2Yi0z MTNmLWFkMDEtOTgzYmU5MzVlZTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGQ4OWQwMzQtYzA0OS00YjExLTkx N2QtZTAzNWY3MDMzMTJmL2RkODlkMDM0LWMwNDktNGIxMS05MTdkLWUwMzVmNzAz MzEyZi5jcmwwHwYDVR0jBBgwFoAU/S02zOzuANwpZCaofC+s5h8OsfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDg5ZDAzNC1jMDQ5LTRiMTEtOTE3ZC1lMDM1 ZjcwMzMxMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzD/WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItcSjp7I3DG68ZRc7WVbwKDYMWzRtseE0Bh67fH2nghqFJFoDEakI4e emBWvugcp1Zq/L8/Rpzh8OPc+Yk44tgjgT6OFKcJ5awMD01uHBxYJBGJsqUprOqt VXlAlUFicPVXnA8OnZbwfoiDp2CDQ4q36WeRqtgZh5L8sp0hEg9/PdPn9WR8Ojx+ tKSxPaIFrcbByj5NT603hwRN8xBubKxk1Bf7JND7IOUfnFM9XOmxnRTEEYTVjuAt 1tmG9XWi4lpc/mHkoVYz1HfVb5+5dd670DAef0XFU+dtQxDAKdPxakqN9EH9r2ib no3KaTbWVCjJdEzGOw2GB38re6RO4Bo= -----END CERTIFICATE-----Generated at Wed Nov 5 02:55:20 2025 by rpki-client