$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a526353f-2ddc-3457-bc41-da1cd1cc0f3c.roa File: a526353f-2ddc-3457-bc41-da1cd1cc0f3c.roa (raw, json) Hash identifier: XfOP5nfdEa+N/SOiPYurHGCr0uO3tLKjLqGtdSc7bjY= Subject key identifier: EF:0B:5F:8F:55:E6:73:0B:EF:61:89:2F:EE:75:43:35:8F:3D:30:86 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584B8BE231817C625E367197CD40 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a526353f-2ddc-3457-bc41-da1cd1cc0f3c.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 17378 IP address blocks: 208.69.108.0/22 maxlen: 24 208.88.240.0/22 maxlen: 24 209.59.0.0/19 maxlen: 24 209.92.7.0/24 maxlen: 24 209.92.39.0/24 maxlen: 24 209.92.44.0/24 maxlen: 24 209.92.53.0/24 maxlen: 24 209.92.56.0/24 maxlen: 24 209.92.62.0/24 maxlen: 24 209.92.68.0/24 maxlen: 24 209.92.70.0/23 maxlen: 24 209.92.74.0/23 maxlen: 24 209.92.79.0/24 maxlen: 24 209.92.88.0/24 maxlen: 24 209.92.90.0/23 maxlen: 24 209.92.137.0/24 maxlen: 24 209.92.224.0/21 maxlen: 24 209.177.16.0/22 maxlen: 24 216.27.0.0/18 maxlen: 24 216.27.64.0/19 maxlen: 24 216.46.48.0/20 maxlen: 24 216.48.112.0/20 maxlen: 24 216.58.224.0/19 maxlen: 24 216.150.128.0/19 maxlen: 24 216.182.80.0/20 maxlen: 24 216.211.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:31:81:7c:62:5e:36:71:97:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=c686cab2-7cbd-413c-be9c-85cdffacf8d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c8:73:65:9b:e7:40:8b:d3:85:8b:7a:6c:6a: 88:75:16:f8:80:dc:7b:75:90:24:d0:04:44:40:c5: 0e:0a:c3:49:ea:2c:49:43:09:be:73:05:2d:79:35: 3b:4f:0d:89:5e:34:f6:7b:77:9f:c4:8f:5b:34:2a: 4d:ae:68:c0:69:b5:b3:51:d2:57:83:47:14:e1:5a: 1a:4c:6d:62:18:51:bf:c7:31:53:4a:9e:5b:5e:75: 8f:a5:e6:f7:49:bf:27:77:cd:cf:bf:80:ad:55:a4: d1:ba:b9:27:47:5a:95:08:95:20:d9:49:9a:07:89: d0:98:39:a6:6d:33:18:ff:d8:3b:64:24:85:9f:0b: 2a:c2:c6:c4:79:78:93:34:55:94:a0:8c:18:2a:60: d0:a7:5c:7d:f9:79:5f:a3:98:2e:a6:83:c8:34:35: 26:4d:00:7a:3c:8d:bf:77:c5:d7:62:d0:32:ab:53: d4:d2:2e:75:89:c1:fc:c4:c1:68:97:51:08:97:6b: 32:9e:09:14:2f:a7:20:99:87:96:91:5f:64:da:43: 32:15:cf:d9:94:11:2f:96:2b:25:9c:62:5f:28:f5: 83:f2:f9:53:f1:42:df:8f:00:63:5f:77:e3:3f:03: 42:66:bf:56:e1:ce:f1:ac:e0:23:d6:4c:de:5c:ed: 30:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:0B:5F:8F:55:E6:73:0B:EF:61:89:2F:EE:75:43:35:8F:3D:30:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a526353f-2ddc-3457-bc41-da1cd1cc0f3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 208.69.108.0/22 208.88.240.0/22 209.59.0.0/19 209.92.7.0/24 209.92.39.0/24 209.92.44.0/24 209.92.53.0/24 209.92.56.0/24 209.92.62.0/24 209.92.68.0/24 209.92.70.0/23 209.92.74.0/23 209.92.79.0/24 209.92.88.0/24 209.92.90.0/23 209.92.137.0/24 209.92.224.0/21 209.177.16.0/22 216.27.0.0-216.27.95.255 216.46.48.0/20 216.48.112.0/20 216.58.224.0/19 216.150.128.0/19 216.182.80.0/20 216.211.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:01:0b:f1:44:9d:93:b8:a4:99:71:e3:cf:67:63:36:84:33: d6:9d:bd:dc:47:c7:42:21:7c:5b:e9:61:d9:00:57:0c:a5:c3: 0f:47:01:b1:81:2c:a8:e2:32:38:76:de:32:32:28:6e:2a:61: 5f:2a:ee:d9:b6:58:f3:0b:2d:98:b0:8c:56:59:bf:be:80:74: 53:4d:38:73:47:1b:90:38:fb:2e:15:4f:8e:87:df:7e:a9:bd: 1e:c2:b6:9c:ee:67:cf:7b:18:d1:15:2a:c2:6e:76:23:70:fc: b3:54:40:11:ed:9a:66:b6:fc:16:4f:22:28:1d:56:7c:9d:30: 0d:48:a6:60:84:9b:1f:22:2b:16:39:9d:40:06:7a:dc:44:ac: eb:4a:d3:ad:2b:87:2a:02:61:1c:e9:50:d5:bd:d6:8c:64:0d: fc:c2:4d:ef:e7:84:27:41:0f:31:da:15:8e:94:6f:34:fb:39: cf:f1:0b:83:e4:3d:42:e2:9e:bb:c6:70:68:4d:c8:c4:49:4a: c0:dc:93:62:6e:65:7d:25:4d:1f:71:7c:1f:89:30:0d:de:b2: 38:a7:38:1c:89:71:94:61:ab:01:ad:5a:47:33:86:f9:4f:a1: 12:44:65:a8:e2:65:07:ae:cb:0b:52:17:49:09:76:3c:70:91: 27:0c:af:17 -----BEGIN CERTIFICATE----- MIIG3zCCBcegAwIBAgIUAQ0Mn0MoWEuL4jGBfGJeNnGXzUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk YzY4NmNhYjItN2NiZC00MTNjLWJlOWMtODVjZGZmYWNmOGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjchzZZvnQIvThYt6bGqIdRb4gNx7dZAk0ARE QMUOCsNJ6ixJQwm+cwUteTU7Tw2JXjT2e3efxI9bNCpNrmjAabWzUdJXg0cU4Voa TG1iGFG/xzFTSp5bXnWPpeb3Sb8nd83Pv4CtVaTRurknR1qVCJUg2UmaB4nQmDmm bTMY/9g7ZCSFnwsqwsbEeXiTNFWUoIwYKmDQp1x9+Xlfo5gupoPINDUmTQB6PI2/ d8XXYtAyq1PU0i51icH8xMFol1EIl2syngkUL6cgmYeWkV9k2kMyFc/ZlBEvlisl nGJfKPWD8vlT8ULfjwBjX3fjPwNCZr9W4c7xrOAj1kzeXO0wRQIDAQABo4ID8TCC A+0wHQYDVR0OBBYEFO8LX49V5nML72GJL+51QzWPPTCGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvYTUyNjM1M2YtMmRkYy0z NDU3LWJjNDEtZGExY2QxY2MwZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMIG6BggrBgEFBQcBBwEB/wSBqjCBpzCBpAQCAAEwgZ0DBALQ RWwDBALQWPADBAXROwADBADRXAcDBADRXCcDBADRXCwDBADRXDUDBADRXDgDBADR XD4DBADRXEQDBAHRXEYDBAHRXEoDBADRXE8DBADRXFgDBAHRXFoDBADRXIkDBAPR XOADBALRsRAwCwMDANgbAwQF2BtAAwQE2C4wAwQE2DBwAwQF2DrgAwQF2JaAAwQE 2LZQAwQE2NOAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEoBC/FEnZO4pJlx489nYzaEM9advdxHx0IhfFvp YdkAVwylww9HAbGBLKjiMjh23jIyKG4qYV8q7tm2WPMLLZiwjFZZv76AdFNNOHNH G5A4+y4VT46H336pvR7CtpzuZ897GNEVKsJudiNw/LNUQBHtmma2/BZPIigdVnyd MA1IpmCEmx8iKxY5nUAGetxErOtK060rhyoCYRzpUNW91oxkDfzCTe/nhCdBDzHa FY6UbzT7Oc/xC4PkPULinrvGcGhNyMRJSsDck2JuZX0lTR9xfB+JMA3esjinOByJ cZRhqwGtWkczhvlPoRJEZajiZQeuywtSF0kJdjxwkScMrxc= -----END CERTIFICATE-----Generated at Mon Oct 20 09:23:10 2025 by rpki-client