$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/f2a8dca4-a5cb-3059-b553-5d14fbb5dab7.roa File: f2a8dca4-a5cb-3059-b553-5d14fbb5dab7.roa (raw, json) Hash identifier: XFCSDOGVrzEHhp4xAWGS0gLqXCZoP6j2QXkeiBlQtbk= Subject key identifier: 16:DA:42:99:5C:FD:3D:20:10:3D:E9:01:67:9B:4C:48:41:93:CD:2F Certificate issuer: /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Certificate serial: 010D0C9F4328584BB5C267A1D4C71BE7B23A2080 Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/f2a8dca4-a5cb-3059-b553-5d14fbb5dab7.roa Signing time: Sat 01 Nov 2025 01:00:30 +0000 ROA not before: Sat 01 Nov 2025 01:00:30 +0000 ROA not after: Fri 30 Jan 2026 02:00:30 +0000 asID: 401921 IP address blocks: 69.80.226.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:c2:67:a1:d4:c7:1b:e7:b2:3a:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Validity Not Before: Nov 1 01:00:30 2025 GMT Not After : Jan 30 02:00:30 2026 GMT Subject: CN=ebeea6e0-a35c-4770-8210-7c7d119634f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8f:68:b0:00:ad:89:99:d6:bc:06:37:71:7f: 11:57:a0:c4:34:19:0d:de:22:84:5f:9f:e2:aa:90: 42:01:78:f8:fa:6e:b8:e3:74:fe:54:e2:db:97:a8: 75:55:21:af:c6:3d:b2:0f:cb:91:44:85:93:de:20: 92:c3:84:e4:88:43:bf:a2:93:08:e7:ed:ac:df:6c: 4d:31:12:76:ba:18:22:36:11:f9:69:91:5d:9a:b6: 63:d3:9a:8d:b2:b6:fc:7b:b2:2a:53:d4:e2:3e:e1: 65:14:03:97:84:d7:6d:29:94:51:45:e9:a2:0b:2f: 8e:09:59:88:81:26:fe:f5:ac:06:81:68:a8:64:09: 4e:9b:ee:a1:b4:72:f2:2f:eb:03:3e:8f:19:4f:f0: 00:c1:48:84:ca:83:74:6a:b0:b1:31:06:9b:5c:11: d6:61:cb:a4:9e:2b:80:3a:9e:5e:6b:6c:50:68:83: 7f:9f:d5:68:aa:e3:8c:a5:48:92:a2:83:10:1a:7c: cf:68:19:30:91:51:ce:9a:b7:ce:3f:d7:e5:e7:54: c9:a5:8b:85:d8:49:74:2a:9f:b3:a7:8e:e9:fa:77: b7:fb:30:51:03:cb:66:d7:41:64:f6:08:21:0d:d1: 23:e0:e0:82:75:4e:ff:d3:58:19:56:31:cf:96:97: 09:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:DA:42:99:5C:FD:3D:20:10:3D:E9:01:67:9B:4C:48:41:93:CD:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/f2a8dca4-a5cb-3059-b553-5d14fbb5dab7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl X509v3 Authority Key Identifier: keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer sbgp-ipAddrBlock: critical IPv4: 69.80.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:1e:16:0e:19:29:c7:b7:2f:39:d3:de:45:56:30:a3:86:c9: ba:1d:f6:aa:f0:78:11:a0:00:03:5e:cf:7a:b9:f0:f6:71:76: 7d:96:92:38:8f:3a:c5:6f:ba:0f:6b:90:e1:5c:c4:33:a1:09: 89:bf:5a:11:0e:87:c1:62:c7:36:f2:17:2b:e7:cc:24:a7:4a: 96:f2:3c:f2:bf:02:34:3a:18:6a:de:1b:75:14:3d:a5:ae:cd: 9b:dc:07:84:00:35:15:0e:88:16:d7:76:c3:85:b3:57:27:38: 0c:83:53:20:ba:3b:de:ec:a8:33:48:11:63:4c:08:fe:63:60: 25:27:84:d6:ab:cf:e4:17:7c:20:01:6b:62:cd:e8:da:b4:74: 0b:bc:53:dc:c2:f5:9d:ca:ab:84:13:2f:4d:0e:4d:16:c2:74: e8:72:bd:36:91:8f:cc:23:5e:90:8a:ea:1c:f5:49:3c:59:9f: 4f:d6:91:b6:10:58:b2:02:26:6b:e0:70:b6:32:c6:89:e5:77: cf:09:4c:d3:62:2e:10:b7:7f:96:09:54:4f:fb:b0:5c:8f:42: 61:8b:70:50:5e:e2:df:9b:01:db:dd:b8:16:2b:6f:08:a8:0a: 4f:f5:53:07:ac:89:0e:e2:b2:ea:76:70:07:37:94:56:a5:ed: 82:20:3d:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1wmeh1Mcb57I6IIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM4OGQ1MmEtZjhkZC00YzAyLThjM2UtZTEyODA5Zjkz Y2ZlMB4XDTI1MTEwMTAxMDAzMFoXDTI2MDEzMDAyMDAzMFowLzEtMCsGA1UEAxMk ZWJlZWE2ZTAtYTM1Yy00NzcwLTgyMTAtN2M3ZDExOTYzNGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgI9osACtiZnWvAY3cX8RV6DENBkN3iKEX5/i qpBCAXj4+m6443T+VOLbl6h1VSGvxj2yD8uRRIWT3iCSw4TkiEO/opMI5+2s32xN MRJ2uhgiNhH5aZFdmrZj05qNsrb8e7IqU9TiPuFlFAOXhNdtKZRRRemiCy+OCVmI gSb+9awGgWioZAlOm+6htHLyL+sDPo8ZT/AAwUiEyoN0arCxMQabXBHWYcukniuA Op5ea2xQaIN/n9VoquOMpUiSooMQGnzPaBkwkVHOmrfOP9fl51TJpYuF2El0Kp+z p47p+ne3+zBRA8tm10Fk9gghDdEj4OCCdU7/01gZVjHPlpcJgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbaQplc/T0gED3pAWebTEhBk80vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4 ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4MDlmOTNjZmUvZjJhOGRjYTQtYTVjYi0z MDU5LWI1NTMtNWQxNGZiYjVkYWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDM4OGQ1MmEtZjhkZC00YzAyLThj M2UtZTEyODA5ZjkzY2ZlLzAzODhkNTJhLWY4ZGQtNGMwMi04YzNlLWUxMjgwOWY5 M2NmZS5jcmwwHwYDVR0jBBgwFoAUcbVVsA0KERfSSVFKjETwTz2hZm0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4 MDlmOTNjZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRVDiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQeFg4ZKce3LznT3kVWMKOGybod9qrweBGgAANez3q58PZxdn2WkjiP OsVvug9rkOFcxDOhCYm/WhEOh8FixzbyFyvnzCSnSpbyPPK/AjQ6GGreG3UUPaWu zZvcB4QANRUOiBbXdsOFs1cnOAyDUyC6O97sqDNIEWNMCP5jYCUnhNarz+QXfCAB a2LN6Nq0dAu8U9zC9Z3Kq4QTL00OTRbCdOhyvTaRj8wjXpCK6hz1STxZn0/WkbYQ WLICJmvgcLYyxonld88JTNNiLhC3f5YJVE/7sFyPQmGLcFBe4t+bAdvduBYrbwio Ck/1UwesiQ7isup2cAc3lFal7YIgPZo= -----END CERTIFICATE-----Generated at Wed Nov 5 16:52:27 2025 by rpki-client