$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a0b0a14e-6768-4444-a710-ff902d319040/bff6d528-671e-3c17-b90d-eeec25af51af.roa File: bff6d528-671e-3c17-b90d-eeec25af51af.roa (raw, json) Hash identifier: ruMzxm3kOcwPnkfdqIOvsId7AMM1gwcqtsqvvJPIY0I= Subject key identifier: 65:94:25:0C:07:95:2E:CF:B8:55:96:11:24:E6:53:72:4D:2D:CD:28 Certificate issuer: /CN=a0b0a14e-6768-4444-a710-ff902d319040 Certificate serial: 010D0C9F4328584B821CCA23A52086C62F367180 Authority key identifier: 88:1F:DD:F5:D1:6A:C8:B3:52:3B:D5:27:D9:6C:6F:8E:7F:4C:54:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a0b0a14e-6768-4444-a710-ff902d319040.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a0b0a14e-6768-4444-a710-ff902d319040/bff6d528-671e-3c17-b90d-eeec25af51af.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 14618 IP address blocks: 208.84.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a0b0a14e-6768-4444-a710-ff902d319040/a0b0a14e-6768-4444-a710-ff902d319040.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a0b0a14e-6768-4444-a710-ff902d319040/a0b0a14e-6768-4444-a710-ff902d319040.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a0b0a14e-6768-4444-a710-ff902d319040.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:ca:23:a5:20:86:c6:2f:36:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0b0a14e-6768-4444-a710-ff902d319040 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=95915ab4-91a4-4bdf-8ece-111a979e8213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6e:61:9d:e9:43:17:a8:52:71:43:b6:c7:73: d8:95:88:87:07:fe:7f:c3:64:23:0f:3d:57:d3:dc: 08:bf:41:b5:f4:86:a0:a4:e3:08:cc:93:2c:aa:11: 39:84:ff:82:af:d1:44:53:78:1a:8a:7c:c8:3e:64: ed:c6:1f:fd:47:07:57:28:9c:13:33:79:51:ba:8a: 58:e3:d7:84:b7:4d:80:a6:4c:dd:00:70:fe:49:a8: df:fa:0c:31:ae:e1:58:93:6a:97:13:96:0a:3e:3e: c1:53:b7:e3:b0:af:e6:2d:54:28:a8:e2:d6:2e:0f: 74:62:8b:35:74:2d:6c:9d:6a:69:ed:15:b6:92:32: 25:90:93:a4:83:0c:87:61:cf:14:36:cf:0c:0a:26: 86:21:c6:15:79:28:e9:c7:31:f2:1c:19:72:eb:41: 76:f7:b1:e6:18:43:b6:17:20:1d:92:43:01:3e:07: 9f:4f:d1:f9:31:99:9e:cd:42:04:8f:b8:a4:a8:b2: d8:ee:17:9f:9c:7d:d0:1d:e3:15:a9:09:03:5b:64: fe:5a:09:b5:54:13:b9:48:0b:36:30:4b:2c:ea:6b: 2a:9d:15:56:7b:81:8e:0a:ad:ae:f3:07:ac:0f:d2: d9:b6:9b:dd:e2:9e:d8:5e:32:69:85:45:77:20:78: 2d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:94:25:0C:07:95:2E:CF:B8:55:96:11:24:E6:53:72:4D:2D:CD:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a0b0a14e-6768-4444-a710-ff902d319040/bff6d528-671e-3c17-b90d-eeec25af51af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a0b0a14e-6768-4444-a710-ff902d319040/a0b0a14e-6768-4444-a710-ff902d319040.crl X509v3 Authority Key Identifier: keyid:88:1F:DD:F5:D1:6A:C8:B3:52:3B:D5:27:D9:6C:6F:8E:7F:4C:54:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a0b0a14e-6768-4444-a710-ff902d319040.cer sbgp-ipAddrBlock: critical IPv4: 208.84.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:8e:bd:2f:86:3d:66:8e:2e:45:02:58:88:94:d1:02:75:60: 38:56:d4:3c:4a:93:63:c2:e7:8d:69:40:11:d6:e8:6d:ac:59: a6:2f:e7:6e:c3:10:e9:28:d9:80:76:13:e4:00:3b:cd:57:e4: 37:2b:b4:94:52:68:b2:30:c3:b1:40:7c:bf:42:28:72:f1:c6: 6e:f4:d4:57:48:70:4d:e4:08:79:8f:58:6c:18:cd:1b:bf:88: b9:4b:de:a2:c2:99:c0:92:bf:15:87:d0:3c:19:2f:c3:67:d6: 65:df:9a:ce:47:1b:f5:a0:8d:77:e0:07:85:b3:04:79:f1:26: 79:e9:11:97:d4:86:66:0a:49:5a:4b:d5:6e:91:1a:ed:46:94: dd:7a:81:c4:5d:94:92:ec:0e:cc:65:e4:66:34:cc:a9:60:76: e4:5d:6e:be:99:b4:70:cf:58:25:99:67:8f:47:19:67:bc:a1: 3b:ff:b5:42:d8:e3:c2:62:23:6d:e7:73:53:0d:d2:12:fe:a3: 1b:2a:cd:eb:ef:f4:b3:5c:37:df:ab:a0:95:1f:70:36:d8:2c: 15:a7:d9:7c:ea:cc:f6:c6:60:fb:c5:f6:06:6d:67:4e:c3:1b: 41:32:32:46:c1:2e:bb:3a:f2:fa:b4:78:a7:bc:97:74:f0:dd: f7:d6:9b:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHMojpSCGxi82cYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTBiMGExNGUtNjc2OC00NDQ0LWE3MTAtZmY5MDJkMzE5 MDQwMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk OTU5MTVhYjQtOTFhNC00YmRmLThlY2UtMTExYTk3OWU4MjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm5hnelDF6hScUO2x3PYlYiHB/5/w2QjDz1X 09wIv0G19IagpOMIzJMsqhE5hP+Cr9FEU3gainzIPmTtxh/9RwdXKJwTM3lRuopY 49eEt02ApkzdAHD+Sajf+gwxruFYk2qXE5YKPj7BU7fjsK/mLVQoqOLWLg90Yos1 dC1snWpp7RW2kjIlkJOkgwyHYc8UNs8MCiaGIcYVeSjpxzHyHBly60F297HmGEO2 FyAdkkMBPgefT9H5MZmezUIEj7ikqLLY7hefnH3QHeMVqQkDW2T+Wgm1VBO5SAs2 MEss6msqnRVWe4GOCq2u8wesD9LZtpvd4p7YXjJphUV3IHgtzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWUJQwHlS7PuFWWESTmU3JNLc0oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMGIw YTE0ZS02NzY4LTQ0NDQtYTcxMC1mZjkwMmQzMTkwNDAvYmZmNmQ1MjgtNjcxZS0z YzE3LWI5MGQtZWVlYzI1YWY1MWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTBiMGExNGUtNjc2OC00NDQ0LWE3 MTAtZmY5MDJkMzE5MDQwL2EwYjBhMTRlLTY3NjgtNDQ0NC1hNzEwLWZmOTAyZDMx OTA0MC5jcmwwHwYDVR0jBBgwFoAUiB/d9dFqyLNSO9Un2Wxvjn9MVBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMGIwYTE0ZS02NzY4LTQ0NDQtYTcxMC1mZjkw MmQzMTkwNDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuOvS+GPWaOLkUCWIiU0QJ1YDhW1DxKk2PC541pQBHW6G2sWaYv527D EOko2YB2E+QAO81X5DcrtJRSaLIww7FAfL9CKHLxxm701FdIcE3kCHmPWGwYzRu/ iLlL3qLCmcCSvxWH0DwZL8Nn1mXfms5HG/WgjXfgB4WzBHnxJnnpEZfUhmYKSVpL 1W6RGu1GlN16gcRdlJLsDsxl5GY0zKlgduRdbr6ZtHDPWCWZZ49HGWe8oTv/tULY 48JiI23nc1MN0hL+oxsqzevv9LNcN9+roJUfcDbYLBWn2XzqzPbGYPvF9gZtZ07D G0EyMkbBLrs68vq0eKe8l3Tw3ffWm7I= -----END CERTIFICATE-----Generated at Sun Oct 19 23:22:45 2025 by rpki-client