$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/11274dc3-d729-310f-a5b6-e526a7179fc6.roa File: 11274dc3-d729-310f-a5b6-e526a7179fc6.roa (raw, json) Hash identifier: pYYuucOHXnxo9Z/VjP5Wl55DM0+Q+2dqZoROmtu9vX4= Subject key identifier: 77:97:EE:E3:15:83:6F:98:DD:0B:64:19:11:8C:49:4B:BC:A5:D5:92 Certificate issuer: /CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b Certificate serial: 010D0C9F4328584B68FC986CD9215DD61C989580 Authority key identifier: 19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/11274dc3-d729-310f-a5b6-e526a7179fc6.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 22218 IP address blocks: 204.8.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:98:6c:d9:21:5d:d6:1c:98:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=68d8b885-2390-403c-9d98-49d643ca7e28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:48:02:53:ec:3c:b3:0c:ad:b2:66:95:0f:a5: b4:13:01:63:23:bf:aa:24:cc:82:9e:57:67:b8:7c: 3b:b7:26:d6:f8:83:a9:f6:1f:6b:bb:87:8e:41:bf: 42:bc:12:f0:2d:88:e1:63:8d:53:8f:88:5d:89:6e: 7d:3f:4d:0a:b0:91:fb:d0:22:b0:c3:b6:1c:36:65: 9a:61:f5:08:60:78:8f:77:e9:e2:ae:28:e9:53:0f: 88:01:6c:b8:06:23:a9:1e:2f:94:3d:2e:2a:5b:19: e3:c9:64:d2:7a:79:bd:2e:ca:ce:2d:79:ad:a1:c6: 28:64:7b:0c:03:95:d9:ae:b1:f3:57:0a:b2:72:4c: fb:83:53:3e:c7:88:99:52:49:80:47:55:92:9f:38: 3a:e0:bd:0d:4a:e1:6a:f6:a3:c0:50:c7:f4:6d:b6: 02:81:68:83:dc:d8:1c:aa:dd:7e:70:73:e5:5f:01: db:6d:30:37:ad:82:ec:63:10:79:4f:9e:a6:ca:21: 48:40:14:8a:66:60:65:f1:a3:27:30:d4:6b:19:2e: d1:b1:46:d9:1d:51:75:cb:ee:02:c5:0d:34:a3:e9: 23:6e:40:57:aa:9c:83:1d:be:17:a7:6a:01:5c:f7: d2:fe:a9:2a:11:db:2a:25:83:84:90:4f:5a:f2:3e: 81:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:97:EE:E3:15:83:6F:98:DD:0B:64:19:11:8C:49:4B:BC:A5:D5:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/11274dc3-d729-310f-a5b6-e526a7179fc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl X509v3 Authority Key Identifier: keyid:19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer sbgp-ipAddrBlock: critical IPv4: 204.8.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:c9:6c:8d:aa:d5:f2:f3:1a:8d:0e:cc:89:1f:2f:ae:4b:cd: 6a:b5:da:10:27:22:8b:30:e1:35:74:fb:01:90:f3:b9:09:88: 22:e8:5b:f8:fe:60:e8:ec:45:c0:3e:f5:03:27:c7:64:8c:e4: a3:62:25:d5:d5:be:e1:53:0c:20:01:18:e5:bf:02:00:4c:4b: 7d:f4:89:9d:33:b7:2d:31:b7:bb:ab:49:31:d0:1d:7a:a0:1a: a9:a4:ae:b6:84:5f:35:c9:1e:75:3e:85:3c:11:a9:72:c4:e9: 5a:3a:f7:d1:e9:4e:90:39:6a:d6:81:0d:24:71:04:db:9b:99: 2f:03:48:76:12:cf:e9:9b:7b:07:3d:fa:8b:d1:75:d0:42:4d: 7f:ec:95:62:67:64:29:df:8e:c6:d5:ce:21:31:af:50:1f:1f: db:e7:5a:7e:bb:fb:2c:56:7f:0b:11:84:67:38:25:d1:cc:d4: c6:e2:6f:c0:cd:63:32:0f:1f:7b:bf:bd:3d:14:b8:25:bd:11: d2:f4:0f:82:b9:ec:26:f1:f1:38:02:f2:10:75:77:55:4c:bc: 24:ae:2b:1d:fb:65:5a:63:84:c1:78:8f:28:bb:f6:37:6f:55: 91:2f:a0:81:64:e9:14:f9:a5:37:21:09:07:75:79:8e:1d:7a: 58:cf:e2:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/Jhs2SFd1hyYlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMzNGY2OGItMmY3Zi00ZWYzLWJkZWUtNWEwZTJkNjhh MDNiMB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk NjhkOGI4ODUtMjM5MC00MDNjLTlkOTgtNDlkNjQzY2E3ZTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUgCU+w8swytsmaVD6W0EwFjI7+qJMyCnldn uHw7tybW+IOp9h9ru4eOQb9CvBLwLYjhY41Tj4hdiW59P00KsJH70CKww7YcNmWa YfUIYHiPd+nirijpUw+IAWy4BiOpHi+UPS4qWxnjyWTSenm9LsrOLXmtocYoZHsM A5XZrrHzVwqyckz7g1M+x4iZUkmAR1WSnzg64L0NSuFq9qPAUMf0bbYCgWiD3Ngc qt1+cHPlXwHbbTA3rYLsYxB5T56myiFIQBSKZmBl8aMnMNRrGS7RsUbZHVF1y+4C xQ00o+kjbkBXqpyDHb4Xp2oBXPfS/qkqEdsqJYOEkE9a8j6BowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHeX7uMVg2+Y3QtkGRGMSUu8pdWSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYzM0 ZjY4Yi0yZjdmLTRlZjMtYmRlZS01YTBlMmQ2OGEwM2IvMTEyNzRkYzMtZDcyOS0z MTBmLWE1YjYtZTUyNmE3MTc5ZmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGMzNGY2OGItMmY3Zi00ZWYzLWJk ZWUtNWEwZTJkNjhhMDNiLzBjMzRmNjhiLTJmN2YtNGVmMy1iZGVlLTVhMGUyZDY4 YTAzYi5jcmwwHwYDVR0jBBgwFoAUGT96sPm60yA6FwWVB8+TKk6ScCwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYzM0ZjY4Yi0yZjdmLTRlZjMtYmRlZS01YTBl MmQ2OGEwM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAgoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvJbI2q1fLzGo0OzIkfL65LzWq12hAnIosw4TV0+wGQ87kJiCLoW/j+ YOjsRcA+9QMnx2SM5KNiJdXVvuFTDCABGOW/AgBMS330iZ0zty0xt7urSTHQHXqg GqmkrraEXzXJHnU+hTwRqXLE6Vo699HpTpA5ataBDSRxBNubmS8DSHYSz+mbewc9 +ovRddBCTX/slWJnZCnfjsbVziExr1AfH9vnWn67+yxWfwsRhGc4JdHM1Mbib8DN YzIPH3u/vT0UuCW9EdL0D4K57Cbx8TgC8hB1d1VMvCSuKx37ZVpjhMF4jyi79jdv VZEvoIFk6RT5pTchCQd1eY4deljP4uU= -----END CERTIFICATE-----Generated at Mon Oct 20 13:55:57 2025 by rpki-client