$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/2218f8f8-b5bd-3481-8397-51e1a1f24c54.roa File: 2218f8f8-b5bd-3481-8397-51e1a1f24c54.roa (raw, json) Hash identifier: uGR3Slvu5fdcNzwYX2ej5eJC27vHeqHx/yQZL/2vmx4= Subject key identifier: 96:8F:CE:FD:F3:3A:43:F6:D4:60:BD:14:85:45:EF:A3:0E:3A:BB:B1 Certificate issuer: /CN=d6d41513-869c-41f2-9319-11d1e8b95e2b Certificate serial: 010D0C9F4328584B944222299A24524DABACE700 Authority key identifier: B4:29:02:33:DF:93:BC:99:FE:07:E1:A7:D2:13:FA:C2:B9:A8:40:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/2218f8f8-b5bd-3481-8397-51e1a1f24c54.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 395657 IP address blocks: 208.94.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/d6d41513-869c-41f2-9319-11d1e8b95e2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/d6d41513-869c-41f2-9319-11d1e8b95e2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:22:29:9a:24:52:4d:ab:ac:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d41513-869c-41f2-9319-11d1e8b95e2b Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=d391ad02-3e78-4d48-b416-1c49f2b6674a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4b:c7:f5:73:87:15:23:3e:a1:44:f6:2d:9d: 5f:5c:ac:12:9a:07:36:5f:25:f9:ef:e0:a1:46:c2: 4f:f2:90:b1:4f:a1:c6:34:ca:d6:02:30:59:45:f9: 8f:f4:0b:b6:16:15:98:c1:2e:9c:c4:bd:2d:db:28: 1d:bc:1b:9d:0e:3b:8f:b2:ab:e7:a1:2f:c0:5a:2b: b3:a7:d5:e8:fe:3d:65:37:91:b6:94:89:cd:14:6f: 04:6e:ff:a6:c7:64:65:54:ed:51:6c:43:40:48:4b: 24:fb:4b:74:9d:06:34:02:f9:b4:70:f0:96:44:eb: 63:27:1c:55:dd:bd:ab:8d:0c:a9:5d:fa:96:a8:9e: 04:5d:a7:12:de:7f:b4:84:8a:ad:9f:ef:09:d7:b7: a5:66:fd:9d:4a:0d:19:13:0a:a2:be:8a:19:57:bd: ae:98:74:2e:02:8e:ec:22:94:91:4d:8b:29:e7:a8: 6d:f7:f2:0f:f4:c6:01:a5:bd:ba:b4:76:18:a0:e4: 22:ff:91:4e:d3:d0:c6:05:d3:ae:be:ba:04:7e:28: ff:07:58:68:71:67:20:55:94:bf:93:83:ef:af:0e: 23:4a:fa:64:f0:6e:29:3c:5b:67:72:61:23:ad:3f: 2c:f8:75:d4:18:5c:29:3e:2c:b7:47:05:0a:fb:5e: 91:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8F:CE:FD:F3:3A:43:F6:D4:60:BD:14:85:45:EF:A3:0E:3A:BB:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/2218f8f8-b5bd-3481-8397-51e1a1f24c54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/d6d41513-869c-41f2-9319-11d1e8b95e2b.crl X509v3 Authority Key Identifier: keyid:B4:29:02:33:DF:93:BC:99:FE:07:E1:A7:D2:13:FA:C2:B9:A8:40:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b.cer sbgp-ipAddrBlock: critical IPv4: 208.94.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:a0:ec:28:e0:4f:df:ed:e7:a7:35:92:8f:b9:b4:85:6d:e2: 6b:39:0f:a8:58:58:cc:10:f1:01:0d:43:f7:a3:f7:ea:29:68: 9d:79:33:31:3f:1c:a3:30:14:43:af:af:0e:5c:d4:aa:b2:b4: 62:a6:65:41:fe:1d:25:79:2f:08:fd:18:0c:84:4c:e8:66:57: 5b:e2:38:2e:e7:84:2b:d7:cf:54:f2:ea:de:c0:9c:16:99:07: 13:35:58:99:bb:a8:91:77:03:39:47:63:8f:30:9a:49:23:72: d4:50:d6:7c:fb:d2:c2:f2:89:83:ae:c7:a0:8e:31:8c:cb:e2: 78:93:19:59:61:8e:81:e7:5c:1d:d0:ae:72:cc:5e:c9:60:92: 33:8a:d8:4a:80:9f:7d:1d:63:f0:b8:d9:d7:51:cd:68:35:41: d6:dc:de:73:cf:f8:00:38:a4:66:0d:07:d2:90:6d:3a:85:4b: 05:46:e4:fd:a3:ca:50:76:3d:c1:da:a8:9d:bd:02:27:4c:a2: 23:be:96:6a:91:40:e2:76:0c:5e:a2:5d:e0:ac:05:ac:fc:a4: fa:08:a6:eb:79:45:e5:be:10:e6:2c:dd:03:b4:5a:15:1f:6a: ce:fb:c1:39:d3:25:ef:af:ef:da:ff:b6:b9:60:75:41:15:ee: b4:c0:89:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQiIpmiRSTaus5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNDE1MTMtODY5Yy00MWYyLTkzMTktMTFkMWU4Yjk1 ZTJiMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk ZDM5MWFkMDItM2U3OC00ZDQ4LWI0MTYtMWM0OWYyYjY2NzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUvH9XOHFSM+oUT2LZ1fXKwSmgc2XyX57+Ch RsJP8pCxT6HGNMrWAjBZRfmP9Au2FhWYwS6cxL0t2ygdvBudDjuPsqvnoS/AWiuz p9Xo/j1lN5G2lInNFG8Ebv+mx2RlVO1RbENASEsk+0t0nQY0Avm0cPCWROtjJxxV 3b2rjQypXfqWqJ4EXacS3n+0hIqtn+8J17elZv2dSg0ZEwqivooZV72umHQuAo7s IpSRTYsp56ht9/IP9MYBpb26tHYYoOQi/5FO09DGBdOuvroEfij/B1hocWcgVZS/ k4Pvrw4jSvpk8G4pPFtncmEjrT8s+HXUGFwpPiy3RwUK+16RwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJaPzv3zOkP21GC9FIVF76MOOruxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNmQ0 MTUxMy04NjljLTQxZjItOTMxOS0xMWQxZThiOTVlMmIvMjIxOGY4ZjgtYjViZC0z NDgxLTgzOTctNTFlMWExZjI0YzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDZkNDE1MTMtODY5Yy00MWYyLTkz MTktMTFkMWU4Yjk1ZTJiL2Q2ZDQxNTEzLTg2OWMtNDFmMi05MzE5LTExZDFlOGI5 NWUyYi5jcmwwHwYDVR0jBBgwFoAUtCkCM9+TvJn+B+Gn0hP6wrmoQE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNmQ0MTUxMy04NjljLTQxZjItOTMxOS0xMWQx ZThiOTVlMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F7sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFag7CjgT9/t56c1ko+5tIVt4ms5D6hYWMwQ8QENQ/ej9+opaJ15MzE/ HKMwFEOvrw5c1KqytGKmZUH+HSV5Lwj9GAyETOhmV1viOC7nhCvXz1Ty6t7AnBaZ BxM1WJm7qJF3AzlHY48wmkkjctRQ1nz70sLyiYOux6COMYzL4niTGVlhjoHnXB3Q rnLMXslgkjOK2EqAn30dY/C42ddRzWg1Qdbc3nPP+AA4pGYNB9KQbTqFSwVG5P2j ylB2PcHaqJ29AidMoiO+lmqRQOJ2DF6iXeCsBaz8pPoIput5ReW+EOYs3QO0WhUf as77wTnTJe+v79r/trlgdUEV7rTAidg= -----END CERTIFICATE-----Generated at Tue Oct 21 02:52:07 2025 by rpki-client