$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/9ff67295-2903-37cc-80d5-80d97d8c6b39.roa File: 9ff67295-2903-37cc-80d5-80d97d8c6b39.roa (raw, json) Hash identifier: PNqlGo0FAHOc0HWOKK5xpSskxF95SPU94sNzKPucwBY= Subject key identifier: 38:0D:C6:FD:2B:B4:DD:7B:07:9D:98:28:3D:5F:57:A1:E1:37:D1:C2 Certificate issuer: /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Certificate serial: 010D0C9F4328584B87B2212B1A81A3A6FC2BCFC0 Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/9ff67295-2903-37cc-80d5-80d97d8c6b39.roa Signing time: Wed 15 Oct 2025 13:00:38 +0000 ROA not before: Wed 15 Oct 2025 13:00:38 +0000 ROA not after: Tue 13 Jan 2026 14:00:38 +0000 asID: 8014 IP address blocks: 204.236.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:b2:21:2b:1a:81:a3:a6:fc:2b:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Validity Not Before: Oct 15 13:00:38 2025 GMT Not After : Jan 13 14:00:38 2026 GMT Subject: CN=09421ac0-b533-4988-ad4d-eac1e3226450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:48:f4:70:d1:b9:a0:4b:95:48:b1:bb:b6:3d: 36:9b:01:3e:dd:83:98:36:91:11:af:d6:8c:fc:94: 6c:95:df:bc:dc:35:67:d4:85:94:58:f0:9b:49:d9: ff:9d:f6:97:cd:12:37:a5:f1:ea:e4:d6:e5:42:73: 9c:f4:a9:1b:c0:3c:b7:ba:80:7b:3e:ca:93:b8:a1: 71:a8:00:16:ad:0a:bd:47:a0:15:bd:80:f4:d7:59: 28:2d:3f:db:a1:78:9b:a9:ce:63:48:99:ed:6c:63: c0:e0:b1:9b:e8:67:79:3f:5b:07:73:cc:9e:a6:32: ad:86:96:45:59:ec:c7:9a:c3:2b:7d:25:3f:75:41: 3e:03:6d:86:07:55:59:b6:0c:bb:eb:40:70:40:60: c5:6f:a1:16:a7:ef:32:2e:74:3f:26:e8:12:f6:e4: 6b:01:b9:48:04:4a:3f:d4:0e:32:e2:0a:4f:6d:5a: 05:67:b2:38:49:a4:3f:68:23:b8:07:e3:d2:18:a7: 09:80:2d:e9:c4:f2:bd:05:89:ee:ae:98:25:2b:91: 0e:12:39:d7:ed:38:52:c5:e5:0c:74:cd:66:fd:0d: 15:58:6e:eb:eb:dd:21:b6:4c:de:49:d3:d4:ac:18: 5b:09:ba:58:c7:80:72:50:37:d7:24:d2:b2:44:9c: a8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0D:C6:FD:2B:B4:DD:7B:07:9D:98:28:3D:5F:57:A1:E1:37:D1:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/9ff67295-2903-37cc-80d5-80d97d8c6b39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl X509v3 Authority Key Identifier: keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer sbgp-ipAddrBlock: critical IPv4: 204.236.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:40:10:91:c9:83:c1:f2:d5:8a:f0:61:0e:92:3a:a3:0a:78: 1c:71:1d:2d:74:db:05:96:67:e5:27:6d:e4:96:4e:a6:59:a4: 1a:50:0e:8b:f9:9d:38:dc:a7:56:9c:b0:d6:09:e3:bb:7a:aa: f8:56:e7:78:19:85:b0:4c:4f:22:45:03:9f:e2:21:0a:31:61: a4:20:b6:39:32:e9:03:a2:e7:c0:e4:41:28:83:f9:ce:4a:f0: 6a:06:04:9f:64:8c:ae:09:ca:76:a1:c8:01:ec:72:f7:81:91: 16:c1:67:00:fe:8e:73:0b:9b:4f:d5:a1:98:c5:86:99:75:cf: 4f:88:d8:b8:3f:cc:28:9a:0b:ba:80:06:d0:2c:be:c4:52:2f: cd:c0:b7:db:99:7a:ae:c6:99:0b:db:43:04:aa:54:80:e0:4a: f1:f3:f6:af:91:29:9b:2a:86:e6:45:34:a1:4b:e4:22:23:19: 23:0f:1d:86:7e:3f:88:58:67:d1:e2:46:3a:ec:74:6c:6d:c7: c5:7c:f9:de:a9:6e:1c:e5:2f:91:ff:88:1f:a3:fc:6e:52:88: 64:14:46:61:41:a5:12:e8:3e:d6:14:23:14:c0:6b:b4:f3:eb: 5a:95:a6:e3:f3:1c:28:4c:9e:6d:e7:20:76:b4:4e:5a:26:c3: 0a:35:1a:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuHsiErGoGjpvwrz8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNiZDMwM2ItNzM4ZC00Yzc3LTljNTUtMzIwZmNmYTkz Zjc1MB4XDTI1MTAxNTEzMDAzOFoXDTI2MDExMzE0MDAzOFowLzEtMCsGA1UEAxMk MDk0MjFhYzAtYjUzMy00OTg4LWFkNGQtZWFjMWUzMjI2NDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUj0cNG5oEuVSLG7tj02mwE+3YOYNpERr9aM /JRsld+83DVn1IWUWPCbSdn/nfaXzRI3pfHq5NblQnOc9KkbwDy3uoB7PsqTuKFx qAAWrQq9R6AVvYD011koLT/boXibqc5jSJntbGPA4LGb6Gd5P1sHc8yepjKthpZF WezHmsMrfSU/dUE+A22GB1VZtgy760BwQGDFb6EWp+8yLnQ/JugS9uRrAblIBEo/ 1A4y4gpPbVoFZ7I4SaQ/aCO4B+PSGKcJgC3pxPK9BYnurpglK5EOEjnX7ThSxeUM dM1m/Q0VWG7r690htkzeSdPUrBhbCbpYx4ByUDfXJNKyRJyoLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgNxv0rtN17B52YKD1fV6HhN9HCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lM2Jk MzAzYi03MzhkLTRjNzctOWM1NS0zMjBmY2ZhOTNmNzUvOWZmNjcyOTUtMjkwMy0z N2NjLTgwZDUtODBkOTdkOGM2YjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTNiZDMwM2ItNzM4ZC00Yzc3LTlj NTUtMzIwZmNmYTkzZjc1L2UzYmQzMDNiLTczOGQtNGM3Ny05YzU1LTMyMGZjZmE5 M2Y3NS5jcmwwHwYDVR0jBBgwFoAUDvcTBpHWvRytSMfJLYkdltxTTVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lM2JkMzAzYi03MzhkLTRjNzctOWM1NS0zMjBm Y2ZhOTNmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzOxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVAEJHJg8Hy1YrwYQ6SOqMKeBxxHS102wWWZ+UnbeSWTqZZpBpQDov5 nTjcp1acsNYJ47t6qvhW53gZhbBMTyJFA5/iIQoxYaQgtjky6QOi58DkQSiD+c5K 8GoGBJ9kjK4JynahyAHscveBkRbBZwD+jnMLm0/VoZjFhpl1z0+I2Lg/zCiaC7qA BtAsvsRSL83At9uZeq7GmQvbQwSqVIDgSvHz9q+RKZsqhuZFNKFL5CIjGSMPHYZ+ P4hYZ9HiRjrsdGxtx8V8+d6pbhzlL5H/iB+j/G5SiGQURmFBpRLoPtYUIxTAa7Tz 61qVpuPzHChMnm3nIHa0Tlomwwo1Gi4= -----END CERTIFICATE-----Generated at Mon Oct 20 18:23:18 2025 by rpki-client