$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/f0ee9cc8-ea03-32d8-8af2-6bd0b4ecec99.roa File: f0ee9cc8-ea03-32d8-8af2-6bd0b4ecec99.roa (raw, json) Hash identifier: 0pOQKeZ3NoVjVfuFZxFTUWguiJxlEPNkwSMALSVFrys= Subject key identifier: 14:A3:D5:DC:57:A2:C4:26:53:FA:36:C9:E0:23:E4:1F:91:01:98:7F Certificate issuer: /CN=208dcf74-3dce-4384-beaf-70319895fc4b Certificate serial: 010D0C9F4328584B970CEEB0B00A2FE7EF29D280 Authority key identifier: B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/f0ee9cc8-ea03-32d8-8af2-6bd0b4ecec99.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 14618 IP address blocks: 134.65.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:ee:b0:b0:0a:2f:e7:ef:29:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208dcf74-3dce-4384-beaf-70319895fc4b Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=ee792457-1dd1-4f7e-abd6-231cc494d6c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:dc:ee:3c:af:42:13:57:8e:d1:df:07:b6:fd: 37:28:9d:9e:a1:31:0e:05:3b:f9:1c:cb:68:e7:b3: 8b:93:e1:54:dc:34:39:bc:eb:0c:fb:ab:1d:4f:f3: 1a:97:04:36:75:a4:e7:b0:13:64:f9:06:5d:89:fd: cb:d0:7d:5e:90:e6:fb:e1:46:46:d4:f2:3c:fb:e0: bb:1b:d1:b0:4b:f1:84:f8:b5:81:04:5c:73:c1:97: c7:a9:98:e2:55:4a:03:a6:25:f1:46:05:bd:ad:80: 05:22:88:7a:88:4a:59:10:14:71:58:ed:8a:98:4d: df:fc:de:58:87:85:2a:39:13:47:db:5a:4e:8b:64: 33:59:db:6f:e8:e8:a0:30:f0:c2:c2:3e:08:9c:36: 70:2e:7a:7b:7d:16:5f:2c:76:25:5f:6c:82:3d:25: 7a:7b:25:94:cb:3e:54:0f:04:d3:0b:ab:79:72:ce: 1d:05:e0:91:18:d6:3d:c6:03:3c:e2:23:b9:e8:20: 31:e0:d5:4e:b0:d1:2a:71:c0:4e:42:e3:54:dc:f7: 18:32:17:8e:1d:70:1c:93:fb:95:be:da:d0:95:db: 1b:ba:5f:58:3a:de:8f:05:55:1e:22:12:64:90:d3: 17:f6:bd:d4:ac:dc:3d:b6:37:49:08:7b:4d:72:b8: bb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A3:D5:DC:57:A2:C4:26:53:FA:36:C9:E0:23:E4:1F:91:01:98:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/f0ee9cc8-ea03-32d8-8af2-6bd0b4ecec99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl X509v3 Authority Key Identifier: keyid:B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer sbgp-ipAddrBlock: critical IPv4: 134.65.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:de:c8:d1:51:58:dd:ee:c7:80:c6:35:cc:bf:ce:a0:70:49: 27:e2:8d:f2:e6:8b:a8:1e:93:7e:71:75:dd:23:bb:de:c3:05: fa:d7:ee:4a:fe:10:42:0a:a6:38:a9:3a:ef:26:48:71:15:b8: d5:c7:fa:64:41:1a:8b:1c:dd:3c:20:e9:da:d1:b9:8e:73:c2: 44:59:b8:63:8c:c9:81:f6:3c:4f:c9:78:b1:e2:02:be:2d:90: 6f:dd:41:f9:4e:28:7a:e2:ac:9d:17:bf:9f:26:4b:0b:1d:26: 63:1c:f1:d5:6b:ab:74:02:d9:70:94:2c:81:af:1e:19:1f:8e: a7:b6:00:42:f7:77:56:53:21:9d:34:5a:e9:72:cb:c3:8f:e3: 68:e5:1c:f1:fc:10:14:d5:df:6b:54:16:89:ad:51:23:52:e3: 3d:12:dd:6d:51:1b:e4:2e:d0:dd:df:48:30:a5:48:ff:97:76: 0c:9c:90:21:e0:20:83:3c:6f:1f:60:67:27:d9:6e:bb:40:8a: 93:83:6a:bb:4a:b3:e0:e9:1d:e1:d0:cf:bd:83:a6:0a:df:99: 42:96:c0:22:b9:b4:2d:90:65:47:32:19:50:9b:9e:9c:e5:1f: dc:5a:8e:2a:b0:86:d0:5c:73:f4:31:d3:97:d2:2f:59:e6:af: 4d:7f:a5:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDO6wsAov5+8p0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA4ZGNmNzQtM2RjZS00Mzg0LWJlYWYtNzAzMTk4OTVm YzRiMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ZWU3OTI0NTctMWRkMS00ZjdlLWFiZDYtMjMxY2M0OTRkNmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdzuPK9CE1eO0d8Htv03KJ2eoTEOBTv5HMto 57OLk+FU3DQ5vOsM+6sdT/MalwQ2daTnsBNk+QZdif3L0H1ekOb74UZG1PI8++C7 G9GwS/GE+LWBBFxzwZfHqZjiVUoDpiXxRgW9rYAFIoh6iEpZEBRxWO2KmE3f/N5Y h4UqORNH21pOi2QzWdtv6OigMPDCwj4InDZwLnp7fRZfLHYlX2yCPSV6eyWUyz5U DwTTC6t5cs4dBeCRGNY9xgM84iO56CAx4NVOsNEqccBOQuNU3PcYMheOHXAck/uV vtrQldsbul9YOt6PBVUeIhJkkNMX9r3UrNw9tjdJCHtNcri7eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSj1dxXosQmU/o2yeAj5B+RAZh/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMDhk Y2Y3NC0zZGNlLTQzODQtYmVhZi03MDMxOTg5NWZjNGIvZjBlZTljYzgtZWEwMy0z MmQ4LThhZjItNmJkMGI0ZWNlYzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjA4ZGNmNzQtM2RjZS00Mzg0LWJl YWYtNzAzMTk4OTVmYzRiLzIwOGRjZjc0LTNkY2UtNDM4NC1iZWFmLTcwMzE5ODk1 ZmM0Yi5jcmwwHwYDVR0jBBgwFoAUtFZe+2BitOcxIpuQ8WaNOb1jB1swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMDhkY2Y3NC0zZGNlLTQzODQtYmVhZi03MDMx OTg5NWZjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChkGoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3eyNFRWN3ux4DGNcy/zqBwSSfijfLmi6gek35xdd0ju97DBfrX7kr+ EEIKpjipOu8mSHEVuNXH+mRBGosc3Twg6drRuY5zwkRZuGOMyYH2PE/JeLHiAr4t kG/dQflOKHrirJ0Xv58mSwsdJmMc8dVrq3QC2XCULIGvHhkfjqe2AEL3d1ZTIZ00 Wulyy8OP42jlHPH8EBTV32tUFomtUSNS4z0S3W1RG+Qu0N3fSDClSP+XdgyckCHg IIM8bx9gZyfZbrtAipODartKs+DpHeHQz72DpgrfmUKWwCK5tC2QZUcyGVCbnpzl H9xajiqwhtBcc/Qx05fSL1nmr01/pQg= -----END CERTIFICATE-----Generated at Wed Nov 5 07:59:47 2025 by rpki-client