$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/88ea6281-809c-3c51-8957-69ac4b778b8b.roa File: 88ea6281-809c-3c51-8957-69ac4b778b8b.roa (raw, json) Hash identifier: ujOJJNev5F3QAr6PQ0kwi7ykj+AnBWFOpiD/rduI1/Y= Subject key identifier: 30:DF:D0:02:6A:95:9B:C5:60:9A:3B:D8:35:8C:0F:6F:64:BB:07:A2 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584BB88D212B5D0C3F4026E6F980 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/88ea6281-809c-3c51-8957-69ac4b778b8b.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 13576 IP address blocks: 209.151.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:21:2b:5d:0c:3f:40:26:e6:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=b7e50f74-0a40-49c5-b85c-9af76af26d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8c:9c:11:e5:2a:bc:b2:32:62:9a:0c:c5:e3: a0:33:06:a9:f9:e2:8a:82:e9:73:db:e4:4c:ed:4f: a0:0c:84:5e:30:07:ae:cc:b3:ec:78:9e:3c:8b:da: 79:27:21:b0:bf:4a:1d:1a:4e:c7:3b:8d:dd:a2:68: 72:08:de:94:d6:54:21:9f:58:73:22:cb:b8:16:7f: 9c:90:73:82:48:81:d3:8d:41:41:74:90:75:68:98: 83:ff:8a:44:e0:27:e3:8a:6d:12:58:d4:0b:52:d8: da:00:09:c8:a2:51:fc:88:00:4f:23:1d:06:3c:a0: bb:68:20:c9:4e:d4:3c:6d:80:24:7f:f4:e1:a8:39: a7:61:8d:94:07:66:a8:d4:c3:30:41:a0:25:82:d9: 34:2c:14:ec:6c:85:d7:53:b9:f4:5d:ec:c0:ea:14: b6:05:b2:e8:55:1b:b2:8b:9a:9d:00:c4:bf:83:54: d2:5c:68:fd:30:6f:18:60:43:47:41:ca:22:82:3f: 23:63:08:13:c4:72:b6:e9:8a:59:84:60:37:6f:65: 81:fa:39:84:2e:c2:a9:63:a2:b0:a6:f0:ae:1e:4e: 87:58:55:66:cc:bf:b6:80:02:45:f3:96:29:7a:bf: 2d:53:dc:a4:9a:68:df:94:e2:8f:b8:8f:7e:40:7d: 97:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:DF:D0:02:6A:95:9B:C5:60:9A:3B:D8:35:8C:0F:6F:64:BB:07:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/88ea6281-809c-3c51-8957-69ac4b778b8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 209.151.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:1a:aa:31:4f:ed:75:df:51:91:62:ce:d3:04:fc:04:18:c2: e8:d6:71:19:f3:61:d7:11:c0:00:3d:56:e6:24:7f:94:33:6b: bc:9e:4e:6b:ea:7a:3a:4a:7b:64:10:f2:52:46:e4:14:8d:1d: ac:33:7e:d2:d9:22:61:fc:b5:02:88:84:0a:74:d4:cd:26:13: 93:cb:ba:88:99:21:b8:20:9a:e3:51:8b:67:d9:7c:47:2e:6e: d0:86:30:a1:49:06:69:96:6c:9d:62:d6:73:9a:9e:48:76:ae: 3b:f3:17:2d:d3:22:9e:d5:bb:f0:d8:85:0c:c2:65:5f:b6:09: a7:77:d4:9c:c3:cd:7b:c3:21:d9:19:ab:0e:ca:d4:1c:76:ce: 66:34:a6:e6:e4:c0:64:1e:f0:af:de:23:fd:88:5c:6a:d3:5d: b1:c2:18:ac:d6:90:87:5b:6a:ef:96:b3:ec:4b:71:85:71:b5: 1c:d5:76:5a:0d:df:03:6e:8a:70:9a:dd:d1:06:6c:12:87:04: 25:ca:80:8b:02:3c:ec:a3:c9:85:c8:15:a7:4d:e5:31:9c:40: f9:4c:d9:d5:97:fd:0a:4c:7f:86:e7:c4:56:f2:04:b0:f4:a1: 7d:8d:7d:45:0e:08:32:1a:d4:7e:3b:ae:cf:91:39:29:ac:b6: 8a:e6:ba:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jSErXQw/QCbm+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk YjdlNTBmNzQtMGE0MC00OWM1LWI4NWMtOWFmNzZhZjI2ZDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYycEeUqvLIyYpoMxeOgMwap+eKKgulz2+RM 7U+gDIReMAeuzLPseJ48i9p5JyGwv0odGk7HO43domhyCN6U1lQhn1hzIsu4Fn+c kHOCSIHTjUFBdJB1aJiD/4pE4Cfjim0SWNQLUtjaAAnIolH8iABPIx0GPKC7aCDJ TtQ8bYAkf/ThqDmnYY2UB2ao1MMwQaAlgtk0LBTsbIXXU7n0XezA6hS2BbLoVRuy i5qdAMS/g1TSXGj9MG8YYENHQcoigj8jYwgTxHK26YpZhGA3b2WB+jmELsKpY6Kw pvCuHk6HWFVmzL+2gAJF85Yper8tU9ykmmjflOKPuI9+QH2XEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDf0AJqlZvFYJo72DWMD29kuweiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvODhlYTYyODEtODA5Yy0z YzUxLTg5NTctNjlhYzRiNzc4YjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Ze8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0aqjFP7XXfUZFiztME/AQYwujWcRnzYdcRwAA9VuYkf5Qza7yeTmvq ejpKe2QQ8lJG5BSNHawzftLZImH8tQKIhAp01M0mE5PLuoiZIbggmuNRi2fZfEcu btCGMKFJBmmWbJ1i1nOankh2rjvzFy3TIp7Vu/DYhQzCZV+2Cad31JzDzXvDIdkZ qw7K1Bx2zmY0pubkwGQe8K/eI/2IXGrTXbHCGKzWkIdbau+Ws+xLcYVxtRzVdloN 3wNuinCa3dEGbBKHBCXKgIsCPOyjyYXIFadN5TGcQPlM2dWX/QpMf4bnxFbyBLD0 oX2NfUUOCDIa1H47rs+ROSmstormuoM= -----END CERTIFICATE-----Generated at Wed Nov 5 01:32:00 2025 by rpki-client