$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/276c1e36-48fa-3db3-a4b0-eaf471d5a90a.roa File: 276c1e36-48fa-3db3-a4b0-eaf471d5a90a.roa (raw, json) Hash identifier: l+QxJHti5+yY+jY9fbYVlRjhYkVKztOsNQS+bsFzPxs= Subject key identifier: 90:64:17:B8:A9:E6:4D:C3:1A:70:D7:34:07:A5:8A:46:5C:F7:1A:C6 Certificate issuer: /CN=208dcf74-3dce-4384-beaf-70319895fc4b Certificate serial: 010D0C9F4328584B970CEE8B3FE24BF0F45B146E Authority key identifier: B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/276c1e36-48fa-3db3-a4b0-eaf471d5a90a.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 8075 IP address blocks: 134.65.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:ee:8b:3f:e2:4b:f0:f4:5b:14:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208dcf74-3dce-4384-beaf-70319895fc4b Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=d4728c9a-b451-42e4-b74e-fb6980f16624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d2:5d:e4:24:5d:f1:61:4c:a3:07:ca:46:7c: a2:a2:2e:40:00:08:83:e9:c4:03:af:9e:4e:d0:1c: 33:69:5e:a6:05:9f:03:0f:f1:84:f2:0f:3a:1c:06: 5a:12:22:37:f5:99:40:3d:12:f2:cc:a4:3d:e6:b1: 27:e9:4b:bd:38:bc:24:03:62:35:b7:62:84:c2:d9: 6b:d0:9a:2e:97:f9:a3:d4:ce:ad:88:07:bc:5f:9e: 7c:62:a2:d4:cd:72:e5:09:fd:77:3f:92:5e:48:b0: bc:dc:2f:1e:72:e0:ef:1a:5f:02:f9:38:c0:1e:33: 89:b7:9d:92:66:07:60:2e:2e:47:44:7d:2a:be:6f: fb:fa:6d:91:4a:50:96:1a:3f:13:6c:88:e7:b2:16: 20:a3:50:64:c3:6b:0a:fd:ed:ba:05:71:c8:30:8c: 3c:5d:66:52:16:b4:ce:19:5a:f8:fa:d4:b1:6d:41: 98:63:45:3d:9e:72:77:7e:16:e5:c5:43:48:21:da: f8:6f:1f:b4:33:fb:96:62:d2:63:dd:3d:1d:0a:4f: be:22:5c:19:bc:02:75:e3:51:d6:95:c0:55:87:4d: 15:53:6b:5c:6b:59:65:b5:a5:4d:ea:36:0f:81:d7: 28:ad:17:75:0f:04:84:89:54:2d:07:b8:78:d0:fc: 65:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:64:17:B8:A9:E6:4D:C3:1A:70:D7:34:07:A5:8A:46:5C:F7:1A:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/276c1e36-48fa-3db3-a4b0-eaf471d5a90a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl X509v3 Authority Key Identifier: keyid:B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer sbgp-ipAddrBlock: critical IPv4: 134.65.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:79:49:49:36:36:d5:4f:ed:3c:cc:db:14:a7:29:50:56:31: 3d:b8:b5:c4:01:ec:5e:c0:83:ca:ff:00:89:c7:8c:8a:ed:7b: 78:5b:ca:85:a5:27:b7:28:cb:6d:a2:5b:82:19:79:c3:48:a6: 33:e7:d2:5f:f0:7c:d5:2d:2b:0a:05:1c:75:7a:45:10:63:73: 87:71:3d:44:20:d2:8c:90:15:57:c1:a2:45:8c:5e:3b:dc:21: 26:f8:45:ca:33:0b:81:74:94:78:6d:34:23:20:76:b2:37:80: 97:85:7d:7b:a1:46:95:d5:54:2b:e1:6f:99:7f:14:23:d6:b6: 6b:e5:c0:10:6d:78:e0:a7:16:13:12:10:43:60:2f:53:45:23: 70:78:f9:91:4f:1f:f9:8b:65:dc:1b:a5:a8:51:97:28:ee:33: 2b:40:14:0f:60:36:6e:01:28:72:d6:e5:4a:e1:d7:c6:98:8b: 3c:c7:28:58:2c:47:ff:cf:61:c4:5c:45:ff:ba:1e:65:86:a5: a1:52:b3:14:38:84:a8:68:49:e8:ba:47:67:7d:e0:ab:2a:3d: d6:db:20:a9:81:d1:d7:37:5d:a5:41:2b:0c:81:99:1d:22:3b: fc:f5:6f:7f:0e:99:18:32:eb:08:33:bf:ec:97:41:19:8a:72: 5e:9d:4f:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDO6LP+JL8PRbFG4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA4ZGNmNzQtM2RjZS00Mzg0LWJlYWYtNzAzMTk4OTVm YzRiMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ZDQ3MjhjOWEtYjQ1MS00MmU0LWI3NGUtZmI2OTgwZjE2NjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutJd5CRd8WFMowfKRnyioi5AAAiD6cQDr55O 0BwzaV6mBZ8DD/GE8g86HAZaEiI39ZlAPRLyzKQ95rEn6Uu9OLwkA2I1t2KEwtlr 0Joul/mj1M6tiAe8X558YqLUzXLlCf13P5JeSLC83C8ecuDvGl8C+TjAHjOJt52S ZgdgLi5HRH0qvm/7+m2RSlCWGj8TbIjnshYgo1Bkw2sK/e26BXHIMIw8XWZSFrTO GVr4+tSxbUGYY0U9nnJ3fhblxUNIIdr4bx+0M/uWYtJj3T0dCk++IlwZvAJ141HW lcBVh00VU2tca1lltaVN6jYPgdcorRd1DwSEiVQtB7h40Pxl/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBkF7ip5k3DGnDXNAelikZc9xrGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMDhk Y2Y3NC0zZGNlLTQzODQtYmVhZi03MDMxOTg5NWZjNGIvMjc2YzFlMzYtNDhmYS0z ZGIzLWE0YjAtZWFmNDcxZDVhOTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjA4ZGNmNzQtM2RjZS00Mzg0LWJl YWYtNzAzMTk4OTVmYzRiLzIwOGRjZjc0LTNkY2UtNDM4NC1iZWFmLTcwMzE5ODk1 ZmM0Yi5jcmwwHwYDVR0jBBgwFoAUtFZe+2BitOcxIpuQ8WaNOb1jB1swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMDhkY2Y3NC0zZGNlLTQzODQtYmVhZi03MDMx OTg5NWZjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhkGoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIp5SUk2NtVP7TzM2xSnKVBWMT24tcQB7F7Ag8r/AInHjIrte3hbyoWl J7coy22iW4IZecNIpjPn0l/wfNUtKwoFHHV6RRBjc4dxPUQg0oyQFVfBokWMXjvc ISb4RcozC4F0lHhtNCMgdrI3gJeFfXuhRpXVVCvhb5l/FCPWtmvlwBBteOCnFhMS EENgL1NFI3B4+ZFPH/mLZdwbpahRlyjuMytAFA9gNm4BKHLW5Urh18aYizzHKFgs R//PYcRcRf+6HmWGpaFSsxQ4hKhoSei6R2d94KsqPdbbIKmB0dc3XaVBKwyBmR0i O/z1b38OmRgy6wgzv+yXQRmKcl6dTyo= -----END CERTIFICATE-----Generated at Wed Nov 5 14:32:31 2025 by rpki-client