$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/dc2f8723-1a25-3bb3-8ab1-b25662ba1a77.roa File: dc2f8723-1a25-3bb3-8ab1-b25662ba1a77.roa (raw, json) Hash identifier: 71jMHh/gL78xH3kXOIGaehsdyqrDOyGJahuz/iKES54= Subject key identifier: A5:37:C0:7C:69:50:97:67:32:38:6B:51:2F:F6:AD:2F:03:62:6A:AD Certificate issuer: /CN=208dcf74-3dce-4384-beaf-70319895fc4b Certificate serial: 010D0C9F4328584B970CEE9DAE91F56C5A24EC6A Authority key identifier: B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/dc2f8723-1a25-3bb3-8ab1-b25662ba1a77.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 134.65.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:ee:9d:ae:91:f5:6c:5a:24:ec:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208dcf74-3dce-4384-beaf-70319895fc4b Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=b539ba63-6097-4a84-afee-73d58f57fc4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:33:a8:a4:d3:cb:38:ae:34:60:de:2b:30:d8: 69:9f:6d:d9:af:59:e4:19:74:f8:b8:7a:2c:8b:36: 3b:eb:4d:c3:61:ef:b6:5f:fa:11:6c:f4:a7:f0:40: 96:90:e6:23:a1:66:f0:5d:d3:cf:b6:7d:5b:41:70: 33:19:9a:d2:d6:3a:4c:fa:bf:0f:d7:66:ef:be:f9: 06:f6:84:41:ab:2e:06:38:53:c7:48:eb:15:d9:88: 2f:76:55:f6:8a:5b:94:cf:ae:53:10:46:63:b5:86: 88:61:3f:01:01:2d:d2:bf:07:5b:c5:6c:86:46:49: ce:7f:a4:98:79:a9:ce:48:c7:9d:57:15:a4:92:d1: 90:cb:96:79:c4:c0:28:42:2d:d6:09:b7:10:46:6d: 5e:e9:29:77:f9:01:8b:6f:57:48:bb:d3:f2:1f:f2: 30:a2:98:62:4f:3b:c1:df:74:7d:e1:fb:7e:db:df: ab:f6:5a:37:0b:99:61:99:d5:7c:1c:a0:63:84:b4: 53:3a:de:ae:67:dc:a3:af:9f:c2:3f:14:92:3e:8e: 69:a7:97:a9:4c:a5:1d:ee:a2:65:21:6f:a8:48:5e: 35:13:ab:9e:6c:4a:fc:63:ad:fb:89:b0:cc:45:2a: d2:fe:86:76:25:1b:40:e2:f4:05:99:5a:ca:c8:6f: ee:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:37:C0:7C:69:50:97:67:32:38:6B:51:2F:F6:AD:2F:03:62:6A:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/dc2f8723-1a25-3bb3-8ab1-b25662ba1a77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl X509v3 Authority Key Identifier: keyid:B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer sbgp-ipAddrBlock: critical IPv4: 134.65.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:25:5a:f3:45:4d:ca:37:e0:7a:5f:6b:64:13:34:03:8a:58: 99:57:f2:66:5b:ac:42:09:2f:1c:f1:06:0d:21:84:b8:bc:f7: fe:1e:ad:06:03:a5:c7:7e:5c:f4:cf:30:e7:37:d1:ee:88:34: 2e:54:85:73:17:a1:71:b6:02:e6:ac:a7:a6:cc:f2:19:2b:a5: 5f:0e:85:4c:0e:1e:f2:05:c8:ce:fc:36:34:99:4a:2a:e0:d0: 01:6b:55:27:b2:0b:62:91:09:79:2b:99:b3:e7:6e:07:5a:d0: 90:0e:2f:82:f0:93:e3:89:52:6d:9e:b0:9c:02:99:dd:58:a3: 24:95:89:59:de:e7:41:db:fe:21:08:32:c1:1f:3b:83:1a:12: 2c:9c:d4:ce:cf:e7:9b:a9:77:50:db:91:f1:f9:af:3b:d5:77: 37:83:4d:94:e3:b6:b4:60:9b:8f:4b:48:c6:97:43:5b:03:c4: 80:be:f7:00:76:99:a9:d5:e2:e6:77:b9:d7:0e:df:69:5f:4a: 52:68:7b:20:19:ec:81:6d:eb:fc:7b:0f:aa:6f:6e:91:f4:ba: e9:33:05:9e:40:78:4d:51:87:73:58:c1:9f:aa:05:d5:02:a0: 9b:7b:6c:e0:5a:80:89:41:eb:7b:12:44:c2:21:83:77:d1:95: 6d:c5:e4:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDO6drpH1bFok7GowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA4ZGNmNzQtM2RjZS00Mzg0LWJlYWYtNzAzMTk4OTVm YzRiMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk YjUzOWJhNjMtNjA5Ny00YTg0LWFmZWUtNzNkNThmNTdmYzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijOopNPLOK40YN4rMNhpn23Zr1nkGXT4uHos izY7603DYe+2X/oRbPSn8ECWkOYjoWbwXdPPtn1bQXAzGZrS1jpM+r8P12bvvvkG 9oRBqy4GOFPHSOsV2YgvdlX2iluUz65TEEZjtYaIYT8BAS3SvwdbxWyGRknOf6SY eanOSMedVxWkktGQy5Z5xMAoQi3WCbcQRm1e6Sl3+QGLb1dIu9PyH/IwophiTzvB 33R94ft+29+r9lo3C5lhmdV8HKBjhLRTOt6uZ9yjr5/CPxSSPo5pp5epTKUd7qJl IW+oSF41E6uebEr8Y637ibDMRSrS/oZ2JRtA4vQFmVrKyG/uBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKU3wHxpUJdnMjhrUS/2rS8DYmqtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMDhk Y2Y3NC0zZGNlLTQzODQtYmVhZi03MDMxOTg5NWZjNGIvZGMyZjg3MjMtMWEyNS0z YmIzLThhYjEtYjI1NjYyYmExYTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjA4ZGNmNzQtM2RjZS00Mzg0LWJl YWYtNzAzMTk4OTVmYzRiLzIwOGRjZjc0LTNkY2UtNDM4NC1iZWFmLTcwMzE5ODk1 ZmM0Yi5jcmwwHwYDVR0jBBgwFoAUtFZe+2BitOcxIpuQ8WaNOb1jB1swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMDhkY2Y3NC0zZGNlLTQzODQtYmVhZi03MDMx OTg5NWZjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChkGoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQlWvNFTco34Hpfa2QTNAOKWJlX8mZbrEIJLxzxBg0hhLi89/4erQYD pcd+XPTPMOc30e6INC5UhXMXoXG2Auasp6bM8hkrpV8OhUwOHvIFyM78NjSZSirg 0AFrVSeyC2KRCXkrmbPnbgda0JAOL4Lwk+OJUm2esJwCmd1YoySViVne50Hb/iEI MsEfO4MaEiyc1M7P55upd1DbkfH5rzvVdzeDTZTjtrRgm49LSMaXQ1sDxIC+9wB2 manV4uZ3udcO32lfSlJoeyAZ7IFt6/x7D6pvbpH0uukzBZ5AeE1Rh3NYwZ+qBdUC oJt7bOBagIlB63sSRMIhg3fRlW3F5Es= -----END CERTIFICATE-----Generated at Wed Nov 5 05:48:23 2025 by rpki-client