$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8/d8d9475d-3273-347c-bebb-562c1777f770.roa File: d8d9475d-3273-347c-bebb-562c1777f770.roa (raw, json) Hash identifier: T5pnCHMMOaSnUOiLn+MA43J8ruCLl8MiXgheCNBH0ow= Subject key identifier: 4D:D0:A1:2E:B0:CA:D1:85:C2:73:0B:CD:41:C6:3D:70:41:64:67:C3 Certificate issuer: /CN=cfb7045d-2d5f-4c56-bfa4-e35f745a61f8 Certificate serial: 010D0C9F4328584B7DECA3ADEB2AB0CA1B3C6440 Authority key identifier: 87:08:FA:CC:1A:BD:61:90:0F:41:14:19:3A:6A:01:FD:DA:5E:6B:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8/d8d9475d-3273-347c-bebb-562c1777f770.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 6939 IP address blocks: 208.65.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:a3:ad:eb:2a:b0:ca:1b:3c:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfb7045d-2d5f-4c56-bfa4-e35f745a61f8 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=4823bff5-8e41-4dab-9dec-4b34ad310f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ad:9b:f8:cf:d2:2d:8b:a9:dd:0d:85:31:f0: 6d:eb:b1:3a:76:fb:c5:2c:9d:61:96:53:17:31:60: a0:dc:5b:63:d6:12:24:83:ce:af:a4:77:e5:e3:47: fb:52:21:15:09:da:64:79:fc:70:6b:7a:b5:82:8d: 3f:e9:ee:16:f5:ae:1e:91:84:85:0c:0f:7f:ce:32: c2:37:da:50:52:1e:3d:04:a0:78:d5:54:c2:92:7a: c4:e0:ea:f7:02:82:8b:87:73:1b:c4:a4:23:d1:c6: 1b:4e:e9:8d:51:9a:16:34:f7:56:a0:5a:eb:11:9e: 4a:b5:f6:55:9b:22:e9:d9:15:c3:7f:a7:6c:58:be: 38:50:77:34:44:b5:01:c1:e9:fa:64:61:57:64:f9: 94:d2:0e:70:87:bd:0b:d5:16:f5:5d:ab:26:1e:64: 4f:b4:c8:5d:47:9e:72:1a:00:8e:c2:8d:da:81:86: b4:21:29:f8:53:ff:41:29:00:15:b5:3b:77:7d:fd: d1:95:b6:46:68:29:78:62:18:35:29:2a:29:15:79: e3:28:61:24:cb:39:40:b9:7a:9c:67:d5:5d:c2:b9: be:20:08:d3:81:3e:31:a5:f7:e7:9b:b6:57:d2:ff: 76:e1:10:b5:e2:27:63:fc:42:a0:22:6a:45:63:4d: b9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D0:A1:2E:B0:CA:D1:85:C2:73:0B:CD:41:C6:3D:70:41:64:67:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8/d8d9475d-3273-347c-bebb-562c1777f770.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8.crl X509v3 Authority Key Identifier: keyid:87:08:FA:CC:1A:BD:61:90:0F:41:14:19:3A:6A:01:FD:DA:5E:6B:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8.cer sbgp-ipAddrBlock: critical IPv4: 208.65.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:b6:59:65:20:97:9a:88:6c:5d:7c:67:06:4e:a9:f3:9b:1d: 72:82:33:1d:9c:7b:27:53:6f:a1:6d:78:b3:f7:8e:08:df:c1: f0:d4:fd:3e:9e:25:a9:d8:f7:8a:35:e0:f2:42:6c:77:78:2e: 8c:ae:e4:52:e0:e4:aa:98:0f:3c:56:d2:75:ff:db:24:83:54: 96:fb:3e:d3:3f:b5:ca:f8:95:0b:c0:6d:07:01:ce:ad:ff:18: bf:13:4e:87:6c:7f:b9:e6:8c:ac:38:4f:e0:0d:35:fe:aa:ca: 81:81:a8:8a:18:13:3c:f8:35:95:34:97:eb:c0:ac:b4:38:be: 91:78:80:22:e4:c9:90:7d:33:4e:dc:9c:88:0f:53:05:27:e0: 32:79:24:26:68:b8:49:f4:02:18:f4:80:a1:26:54:75:d0:57: db:4d:18:b3:8a:c3:92:72:7b:31:da:4e:f5:49:77:a1:45:a9: 8f:68:2c:38:11:31:3b:11:37:81:f6:9d:70:44:4f:09:b5:db: 15:6b:07:ed:37:03:3e:da:a3:fe:df:86:df:6f:f7:76:d5:5c: 40:57:ef:52:bd:be:28:4c:fb:38:79:09:48:a4:4d:65:37:9c: b4:a1:5e:32:62:2a:95:b8:08:55:0f:bb:a1:9b:0a:1c:8c:58: d6:cc:73:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97KOt6yqwyhs8ZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZiNzA0NWQtMmQ1Zi00YzU2LWJmYTQtZTM1Zjc0NWE2 MWY4MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk NDgyM2JmZjUtOGU0MS00ZGFiLTlkZWMtNGIzNGFkMzEwZjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqq2b+M/SLYup3Q2FMfBt67E6dvvFLJ1hllMX MWCg3Ftj1hIkg86vpHfl40f7UiEVCdpkefxwa3q1go0/6e4W9a4ekYSFDA9/zjLC N9pQUh49BKB41VTCknrE4Or3AoKLh3MbxKQj0cYbTumNUZoWNPdWoFrrEZ5KtfZV myLp2RXDf6dsWL44UHc0RLUBwen6ZGFXZPmU0g5wh70L1Rb1XasmHmRPtMhdR55y GgCOwo3agYa0ISn4U/9BKQAVtTt3ff3RlbZGaCl4Yhg1KSopFXnjKGEkyzlAuXqc Z9Vdwrm+IAjTgT4xpffnm7ZX0v924RC14idj/EKgImpFY025vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3QoS6wytGFwnMLzUHGPXBBZGfDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jZmI3 MDQ1ZC0yZDVmLTRjNTYtYmZhNC1lMzVmNzQ1YTYxZjgvZDhkOTQ3NWQtMzI3My0z NDdjLWJlYmItNTYyYzE3NzdmNzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2ZiNzA0NWQtMmQ1Zi00YzU2LWJm YTQtZTM1Zjc0NWE2MWY4L2NmYjcwNDVkLTJkNWYtNGM1Ni1iZmE0LWUzNWY3NDVh NjFmOC5jcmwwHwYDVR0jBBgwFoAUhwj6zBq9YZAPQRQZOmoB/dpea44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jZmI3MDQ1ZC0yZDVmLTRjNTYtYmZhNC1lMzVm NzQ1YTYxZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EH/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGG2WWUgl5qIbF18ZwZOqfObHXKCMx2ceydTb6FteLP3jgjfwfDU/T6e JanY94o14PJCbHd4Loyu5FLg5KqYDzxW0nX/2ySDVJb7PtM/tcr4lQvAbQcBzq3/ GL8TTodsf7nmjKw4T+ANNf6qyoGBqIoYEzz4NZU0l+vArLQ4vpF4gCLkyZB9M07c nIgPUwUn4DJ5JCZouEn0Ahj0gKEmVHXQV9tNGLOKw5JyezHaTvVJd6FFqY9oLDgR MTsRN4H2nXBETwm12xVrB+03Az7ao/7fht9v93bVXEBX71K9vihM+zh5CUikTWU3 nLShXjJiKpW4CFUPu6GbChyMWNbMc4Q= -----END CERTIFICATE-----Generated at Mon Oct 20 04:06:41 2025 by rpki-client