$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/ca1046b1-3c53-3a2e-8d66-721b06cf9bcd.roa File: ca1046b1-3c53-3a2e-8d66-721b06cf9bcd.roa (raw, json) Hash identifier: FPwJSiSixzZ6fHKE6f+YtVtTqqtWx3+ZQqzDjzgjJ0c= Subject key identifier: 16:11:06:E7:6D:C8:D7:75:4B:36:AB:4E:F7:93:5C:C2:BE:81:FC:E0 Certificate issuer: /CN=e2135eb7-dbed-4351-942d-90483acb1b22 Certificate serial: 010D0C9F4328584BB1926499F809EE793700CEE0 Authority key identifier: 2F:4E:F1:A1:A1:22:CC:D4:F6:68:2F:88:E4:78:E3:AE:CF:1D:AB:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/ca1046b1-3c53-3a2e-8d66-721b06cf9bcd.roa Signing time: Thu 30 Oct 2025 13:00:38 +0000 ROA not before: Thu 30 Oct 2025 13:00:38 +0000 ROA not after: Wed 28 Jan 2026 14:00:38 +0000 asID: 174 IP address blocks: 208.64.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/e2135eb7-dbed-4351-942d-90483acb1b22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/e2135eb7-dbed-4351-942d-90483acb1b22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:92:64:99:f8:09:ee:79:37:00:ce:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2135eb7-dbed-4351-942d-90483acb1b22 Validity Not Before: Oct 30 13:00:38 2025 GMT Not After : Jan 28 14:00:38 2026 GMT Subject: CN=9f0c1661-0c51-4e22-8c24-dc9819be188f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:de:66:b5:a8:a1:1b:11:c2:82:42:e2:30:16: 1f:62:c6:46:de:fe:df:21:d9:28:4f:28:90:d6:66: d3:41:9b:ab:67:1e:e5:23:4a:bb:51:17:63:0b:12: b1:27:4c:f1:15:7f:0a:8e:21:b0:8e:c6:d6:93:7d: 48:1d:f6:b0:f2:72:fd:c7:a3:bf:23:28:b7:9b:88: a9:a2:7d:27:d1:18:00:60:46:fb:f4:d0:b9:8c:3f: cd:2b:50:dd:b9:1c:12:4e:84:50:0e:d4:36:23:ae: bf:cb:74:1c:f5:1c:02:e9:be:71:91:c0:0c:1d:19: 85:5c:0c:75:7c:23:c3:a5:57:2e:82:c5:c4:8d:7b: f8:47:47:b6:01:b1:5b:36:15:9d:b2:47:04:3c:53: c0:cb:61:21:9e:bc:0b:05:95:97:32:86:0b:ff:68: 3b:27:67:c0:ad:e1:65:68:35:07:26:18:55:84:af: fa:f9:4a:4a:54:8c:c6:1f:fd:c8:9a:d5:89:a0:e6: 6c:2a:ca:80:87:0a:96:a8:12:3f:0a:18:73:8e:11: 78:a1:f3:32:e1:3b:40:a7:d3:1f:68:49:bd:03:ae: 38:a2:92:3f:8c:87:da:9a:5d:1b:f9:0b:ea:02:26: f6:38:bd:40:1e:87:7c:75:43:0e:a7:ad:ee:96:2b: 55:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:11:06:E7:6D:C8:D7:75:4B:36:AB:4E:F7:93:5C:C2:BE:81:FC:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/ca1046b1-3c53-3a2e-8d66-721b06cf9bcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/e2135eb7-dbed-4351-942d-90483acb1b22.crl X509v3 Authority Key Identifier: keyid:2F:4E:F1:A1:A1:22:CC:D4:F6:68:2F:88:E4:78:E3:AE:CF:1D:AB:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22.cer sbgp-ipAddrBlock: critical IPv4: 208.64.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:a6:40:6e:cd:c9:c4:2b:a5:0e:68:25:54:65:1e:4c:ea:ab: 29:0c:9a:23:29:ec:d1:39:c8:bf:5e:b0:b4:2b:2f:47:54:20: ea:3f:66:f5:d3:1d:7c:0e:4d:72:d7:65:e4:3c:e6:c4:13:14: 67:43:07:56:7e:2c:39:99:aa:5b:71:0b:c7:7d:03:28:3a:88: df:fc:c1:44:8f:21:a8:39:f1:31:d8:fb:27:7d:8c:8e:e0:ce: 6a:2a:56:80:0c:b2:06:61:89:7a:fd:66:7e:b0:2f:85:02:3f: 28:4a:e0:1d:34:6f:5b:ca:15:83:29:2a:f0:71:d8:77:6d:23: 86:ab:29:b0:78:0c:0f:b8:32:01:83:1c:69:4e:41:a0:a9:e1: 6b:77:47:ca:23:d6:a0:4a:40:04:8d:c3:db:ef:21:a3:c3:49: 7a:fa:0d:04:2c:66:d2:07:b3:e4:aa:0b:22:5a:9f:0c:bf:59: 1e:83:ec:96:53:a9:bf:64:d7:24:a0:65:8a:da:dc:fc:77:1b: 65:88:9d:96:40:e4:e5:6f:f5:ff:be:45:16:9a:1d:35:e6:7a: 0e:0c:42:cd:39:59:4d:bf:43:90:fe:b4:88:3d:65:88:98:23: fc:f4:d5:b1:e3:30:79:b7:fc:d3:33:3b:50:44:ac:0c:56:1e: 5b:a9:e6:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxkmSZ+AnueTcAzuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIxMzVlYjctZGJlZC00MzUxLTk0MmQtOTA0ODNhY2Ix YjIyMB4XDTI1MTAzMDEzMDAzOFoXDTI2MDEyODE0MDAzOFowLzEtMCsGA1UEAxMk OWYwYzE2NjEtMGM1MS00ZTIyLThjMjQtZGM5ODE5YmUxODhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk95mtaihGxHCgkLiMBYfYsZG3v7fIdkoTyiQ 1mbTQZurZx7lI0q7URdjCxKxJ0zxFX8KjiGwjsbWk31IHfaw8nL9x6O/Iyi3m4ip on0n0RgAYEb79NC5jD/NK1DduRwSToRQDtQ2I66/y3Qc9RwC6b5xkcAMHRmFXAx1 fCPDpVcugsXEjXv4R0e2AbFbNhWdskcEPFPAy2EhnrwLBZWXMoYL/2g7J2fAreFl aDUHJhhVhK/6+UpKVIzGH/3ImtWJoOZsKsqAhwqWqBI/ChhzjhF4ofMy4TtAp9Mf aEm9A644opI/jIfaml0b+QvqAib2OL1AHod8dUMOp63ulitVMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYRBudtyNd1SzarTveTXMK+gfzgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lMjEz NWViNy1kYmVkLTQzNTEtOTQyZC05MDQ4M2FjYjFiMjIvY2ExMDQ2YjEtM2M1My0z YTJlLThkNjYtNzIxYjA2Y2Y5YmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTIxMzVlYjctZGJlZC00MzUxLTk0 MmQtOTA0ODNhY2IxYjIyL2UyMTM1ZWI3LWRiZWQtNDM1MS05NDJkLTkwNDgzYWNi MWIyMi5jcmwwHwYDVR0jBBgwFoAUL07xoaEizNT2aC+I5Hjjrs8dq4MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lMjEzNWViNy1kYmVkLTQzNTEtOTQyZC05MDQ4 M2FjYjFiMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EDcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADemQG7NycQrpQ5oJVRlHkzqqykMmiMp7NE5yL9esLQrL0dUIOo/ZvXT HXwOTXLXZeQ85sQTFGdDB1Z+LDmZqltxC8d9Ayg6iN/8wUSPIag58THY+yd9jI7g zmoqVoAMsgZhiXr9Zn6wL4UCPyhK4B00b1vKFYMpKvBx2HdtI4arKbB4DA+4MgGD HGlOQaCp4Wt3R8oj1qBKQASNw9vvIaPDSXr6DQQsZtIHs+SqCyJanwy/WR6D7JZT qb9k1ySgZYra3Px3G2WInZZA5OVv9f++RRaaHTXmeg4MQs05WU2/Q5D+tIg9ZYiY I/z01bHjMHm3/NMzO1BErAxWHlup5vA= -----END CERTIFICATE-----Generated at Tue Nov 4 21:09:59 2025 by rpki-client