$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/f82fc5d7-4c78-3149-849d-64462b0104bd.roa File: f82fc5d7-4c78-3149-849d-64462b0104bd.roa (raw, json) Hash identifier: d9K9IwmCRIRK2YkzYXS/S1ajYb760TPOayv+PX8BvUc= Subject key identifier: D9:E7:4D:D0:17:B0:4B:5B:80:B1:70:C5:34:35:3A:2B:FA:CB:1D:B4 Certificate issuer: /CN=10aa04f0-7421-4813-bfda-269303d05d1d Certificate serial: 010D0C9F4328584BA39D21342A6E1E389F6A2320 Authority key identifier: 4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/f82fc5d7-4c78-3149-849d-64462b0104bd.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 77 IP address blocks: 128.244.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:21:34:2a:6e:1e:38:9f:6a:23:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10aa04f0-7421-4813-bfda-269303d05d1d Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=0ec63ce1-0bfc-4ec1-893e-2481314eea23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:55:69:b4:50:9c:03:53:d3:f7:cf:2a:8f:8f: 5a:47:e3:45:35:ab:78:7f:c4:2e:dc:fb:8b:57:48: 59:72:91:ed:e9:48:0f:e6:03:61:3d:b9:0d:af:00: a7:0a:31:75:0f:1f:98:9b:1c:f7:01:9c:d0:12:dd: 2b:2e:a8:59:03:bb:38:14:c5:f1:5a:1d:06:ec:55: 7c:e4:a2:d7:c6:15:35:9f:79:5d:00:7b:b9:4d:6f: c2:cf:9e:94:0d:a8:63:6b:14:33:8e:e9:62:bd:69: 3e:3e:21:9c:9f:92:59:27:39:5e:ee:9d:89:6d:83: b3:27:53:94:b2:e2:ae:fb:8e:bd:df:70:79:ad:35: c1:72:1f:46:b4:f6:b7:86:ba:10:df:4d:72:60:4d: 2c:2a:2a:9d:99:33:28:95:15:c7:b4:30:56:2f:e7: 2e:7b:0b:33:ea:14:bb:93:62:99:ad:cb:e0:ba:fc: 36:80:e6:b5:13:20:a2:ed:c7:86:8b:3c:79:76:e9: 51:fb:46:cc:cb:af:12:ab:e6:2b:25:a3:60:f7:f3: 6e:89:5a:8f:4f:78:79:a9:be:b9:24:70:67:c1:e6: 37:0d:c8:90:64:79:ad:97:51:e6:b7:93:d2:d2:ae: a0:c3:84:d3:1d:56:9e:e8:0b:21:17:00:6e:f9:41: 91:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E7:4D:D0:17:B0:4B:5B:80:B1:70:C5:34:35:3A:2B:FA:CB:1D:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/f82fc5d7-4c78-3149-849d-64462b0104bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl X509v3 Authority Key Identifier: keyid:4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer sbgp-ipAddrBlock: critical IPv4: 128.244.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:bf:ac:5f:53:d4:cd:74:41:72:a0:15:43:e3:cd:1d:62:15: b6:2e:d6:60:75:95:c0:c5:e5:9d:1d:c7:2b:cc:dd:3d:71:d2: a9:3a:d6:fe:b0:6b:cc:7e:50:64:e1:e8:91:61:93:9f:87:18: 45:c4:ba:54:86:5d:74:1e:25:74:21:08:fc:5a:5b:5d:bc:dc: b3:4f:f5:6d:d5:d1:a3:c7:b7:8a:25:e2:1a:dc:bb:6e:d0:ae: 06:3a:82:5c:a6:c6:3c:eb:cb:17:0e:47:cb:1a:0b:eb:f3:b1: 73:99:10:d6:a4:1b:30:22:bc:8f:b7:a9:b5:9a:5e:18:f3:fc: f6:76:dc:a9:70:a3:ad:ad:cc:61:da:01:a8:dc:b6:f2:d5:ee: ed:b4:77:bf:96:24:6c:b3:0d:63:f8:4d:33:20:fc:0d:74:42: 96:0a:22:1e:1e:07:26:9c:8c:24:72:3f:37:dd:68:27:ba:d3: 22:cc:6d:08:02:d0:3b:92:e3:7e:d3:a1:1d:a9:68:44:65:8f: 0d:c2:0e:97:bf:a2:ba:e0:f0:56:0d:13:01:ef:fa:ef:b7:d3: 85:0f:45:98:75:9c:fe:9b:fb:84:cc:cc:bc:00:c6:b9:ab:9a: 24:72:ab:22:45:2a:0b:77:13:cf:fa:fe:d0:56:90:7d:8b:f4: e2:9d:5d:a3 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEujnSE0Km4eOJ9qIyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTBhYTA0ZjAtNzQyMS00ODEzLWJmZGEtMjY5MzAzZDA1 ZDFkMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MGVjNjNjZTEtMGJmYy00ZWMxLTg5M2UtMjQ4MTMxNGVlYTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1VptFCcA1PT988qj49aR+NFNat4f8Qu3PuL V0hZcpHt6UgP5gNhPbkNrwCnCjF1Dx+Ymxz3AZzQEt0rLqhZA7s4FMXxWh0G7FV8 5KLXxhU1n3ldAHu5TW/Cz56UDahjaxQzjulivWk+PiGcn5JZJzle7p2JbYOzJ1OU suKu+46933B5rTXBch9GtPa3hroQ301yYE0sKiqdmTMolRXHtDBWL+cuewsz6hS7 k2KZrcvguvw2gOa1EyCi7ceGizx5dulR+0bMy68Sq+YrJaNg9/NuiVqPT3h5qb65 JHBnweY3DciQZHmtl1Hmt5PS0q6gw4TTHVae6AshFwBu+UGRWQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNnnTdAXsEtbgLFwxTQ1Oiv6yx20MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMGFh MDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkzMDNkMDVkMWQvZjgyZmM1ZDctNGM3OC0z MTQ5LTg0OWQtNjQ0NjJiMDEwNGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTBhYTA0ZjAtNzQyMS00ODEzLWJm ZGEtMjY5MzAzZDA1ZDFkLzEwYWEwNGYwLTc0MjEtNDgxMy1iZmRhLTI2OTMwM2Qw NWQxZC5jcmwwHwYDVR0jBBgwFoAUTGfGK5MkpuRq99aLqn2ln2oTfgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMGFhMDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkz MDNkMDVkMWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgPQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAMr+sX1PUzXRBcqAVQ+PNHWIVti7WYHWVwMXlnR3HK8zdPXHSqTrW/rBr zH5QZOHokWGTn4cYRcS6VIZddB4ldCEI/FpbXbzcs0/1bdXRo8e3iiXiGty7btCu BjqCXKbGPOvLFw5HyxoL6/Oxc5kQ1qQbMCK8j7eptZpeGPP89nbcqXCjra3MYdoB qNy28tXu7bR3v5YkbLMNY/hNMyD8DXRClgoiHh4HJpyMJHI/N91oJ7rTIsxtCALQ O5LjftOhHaloRGWPDcIOl7+iuuDwVg0TAe/677fThQ9FmHWc/pv7hMzMvADGuaua JHKrIkUqC3cTz/r+0FaQfYv04p1dow== -----END CERTIFICATE-----Generated at Wed Nov 5 13:05:27 2025 by rpki-client