$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/7a3be63b-63c3-3a1f-ab52-434a39d75c95.roa File: 7a3be63b-63c3-3a1f-ab52-434a39d75c95.roa (raw, json) Hash identifier: t08MpG7jtbruldO+ro2wdmnIetsjCx/gCCs+/rinWvs= Subject key identifier: B5:31:2F:58:6D:CE:36:0C:84:F9:F0:32:4A:18:82:CC:FB:51:33:85 Certificate issuer: /CN=db859a2a-df82-4532-a984-71176499699e Certificate serial: 010D0C9F4328584BAD6250AE61F3C7667BF65480 Authority key identifier: FF:41:AE:1C:A8:12:8D:60:CC:21:3E:5F:ED:61:49:62:AD:36:89:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/7a3be63b-63c3-3a1f-ab52-434a39d75c95.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 208.83.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/db859a2a-df82-4532-a984-71176499699e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/db859a2a-df82-4532-a984-71176499699e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:50:ae:61:f3:c7:66:7b:f6:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db859a2a-df82-4532-a984-71176499699e Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=c568dec7-e1a7-481b-8f63-7f67897d2a35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:75:08:9a:2c:14:a2:cf:23:9e:c0:dd:fd:ed: fe:4b:bf:57:65:19:fa:00:cf:29:93:23:4b:04:83: 37:f7:d0:31:b2:28:7e:c9:d7:8d:8f:50:0d:65:c7: 9c:d8:98:78:5a:b5:7c:f4:ee:31:57:e8:5b:e0:d7: 3a:1e:f1:68:75:82:43:75:1a:57:7b:d1:b6:32:4a: ce:c1:a1:95:3b:e2:95:6d:01:c5:65:64:f0:38:05: 46:53:23:2d:71:07:7d:01:bb:d2:b3:03:3f:e5:02: 9b:dc:0f:24:0e:f3:63:25:14:30:7c:0f:1d:13:73: c0:2d:fb:09:22:e4:20:1c:58:e3:b3:fc:8c:05:dd: 53:bb:fc:44:ac:90:70:9a:6a:9b:ad:45:36:12:8b: b1:e4:7a:2b:a4:a5:70:98:57:6c:ff:52:fa:da:55: a9:39:4c:07:50:85:15:30:2d:de:aa:4d:9a:f4:33: 57:0d:5e:54:76:fb:c3:07:33:ce:a1:ee:03:ae:5b: ab:bf:40:93:bd:df:8c:a1:5a:45:72:44:d5:47:fa: 27:b8:22:28:aa:cb:18:3c:db:43:fe:87:46:d1:41: f7:d5:c4:a2:35:92:89:18:68:08:16:2c:3c:17:c8: 58:e5:b0:fe:c9:3b:25:7f:8e:5a:31:80:cf:21:e0: 88:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:31:2F:58:6D:CE:36:0C:84:F9:F0:32:4A:18:82:CC:FB:51:33:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/7a3be63b-63c3-3a1f-ab52-434a39d75c95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/db859a2a-df82-4532-a984-71176499699e.crl X509v3 Authority Key Identifier: keyid:FF:41:AE:1C:A8:12:8D:60:CC:21:3E:5F:ED:61:49:62:AD:36:89:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e.cer sbgp-ipAddrBlock: critical IPv4: 208.83.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:7d:c7:76:ee:b9:1b:24:24:62:47:97:a3:2a:ba:fc:65:a9: 08:9b:96:c8:99:0c:2b:96:90:55:e5:99:a6:26:c9:16:80:ff: ff:2c:6a:61:bd:1a:b1:c8:54:ed:ff:16:8a:b1:71:dd:0e:97: 1e:51:e9:8b:16:45:8c:89:a8:31:c9:63:cc:9a:da:65:e1:99: c2:9b:88:a1:5e:47:81:bc:c5:5f:a9:a0:69:0c:0e:39:3f:e1: 6c:77:4a:3b:23:c1:39:c4:c6:df:a7:5b:35:fb:35:2c:a3:97: 1d:8a:22:ee:39:bd:5f:73:13:3f:67:14:cd:1f:87:49:ec:21: fd:0c:1a:03:a6:37:94:6a:3a:e4:23:1e:79:6f:50:c6:bc:3f: 08:df:ce:0a:f7:52:e5:04:f3:44:30:78:fe:92:e5:5a:2f:af: 3b:57:f9:36:78:ea:e6:2a:e2:58:5c:e6:1b:56:d1:c6:7b:e7: c7:a1:a4:78:5b:96:84:60:43:e5:7b:6d:eb:a5:69:2c:ee:f6: 38:3e:a0:17:cf:d6:6a:ed:39:fe:16:53:40:7c:b0:2c:5b:80: 38:be:25:56:20:07:7b:fc:f1:0b:15:ed:34:6b:e4:aa:48:18: 96:4c:40:88:32:ac:e1:49:1b:79:db:39:50:97:73:c1:f0:fb: 17:b0:59:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYlCuYfPHZnv2VIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI4NTlhMmEtZGY4Mi00NTMyLWE5ODQtNzExNzY0OTk2 OTllMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk YzU2OGRlYzctZTFhNy00ODFiLThmNjMtN2Y2Nzg5N2QyYTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXUImiwUos8jnsDd/e3+S79XZRn6AM8pkyNL BIM399Axsih+ydeNj1ANZcec2Jh4WrV89O4xV+hb4Nc6HvFodYJDdRpXe9G2MkrO waGVO+KVbQHFZWTwOAVGUyMtcQd9AbvSswM/5QKb3A8kDvNjJRQwfA8dE3PALfsJ IuQgHFjjs/yMBd1Tu/xErJBwmmqbrUU2Eoux5HorpKVwmFds/1L62lWpOUwHUIUV MC3eqk2a9DNXDV5UdvvDBzPOoe4Drlurv0CTvd+MoVpFckTVR/onuCIoqssYPNtD /odG0UH31cSiNZKJGGgIFiw8F8hY5bD+yTslf45aMYDPIeCI2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUxL1htzjYMhPnwMkoYgsz7UTOFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kYjg1 OWEyYS1kZjgyLTQ1MzItYTk4NC03MTE3NjQ5OTY5OWUvN2EzYmU2M2ItNjNjMy0z YTFmLWFiNTItNDM0YTM5ZDc1Yzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGI4NTlhMmEtZGY4Mi00NTMyLWE5 ODQtNzExNzY0OTk2OTllL2RiODU5YTJhLWRmODItNDUzMi1hOTg0LTcxMTc2NDk5 Njk5ZS5jcmwwHwYDVR0jBBgwFoAU/0GuHKgSjWDMIT5f7WFJYq02iV4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kYjg1OWEyYS1kZjgyLTQ1MzItYTk4NC03MTE3 NjQ5OTY5OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FMPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADV9x3buuRskJGJHl6MquvxlqQiblsiZDCuWkFXlmaYmyRaA//8samG9 GrHIVO3/Foqxcd0Olx5R6YsWRYyJqDHJY8ya2mXhmcKbiKFeR4G8xV+poGkMDjk/ 4Wx3SjsjwTnExt+nWzX7NSyjlx2KIu45vV9zEz9nFM0fh0nsIf0MGgOmN5RqOuQj HnlvUMa8Pwjfzgr3UuUE80QweP6S5VovrztX+TZ46uYq4lhc5htW0cZ758ehpHhb loRgQ+V7beulaSzu9jg+oBfP1mrtOf4WU0B8sCxbgDi+JVYgB3v88QsV7TRr5KpI GJZMQIgyrOFJG3nbOVCXc8Hw+xewWR0= -----END CERTIFICATE-----Generated at Wed Nov 5 07:59:36 2025 by rpki-client