$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/4bf02b8f-3329-3f25-af9d-2d641a5a954a.roa File: 4bf02b8f-3329-3f25-af9d-2d641a5a954a.roa (raw, json) Hash identifier: 84UCxwsmiNlYtz3SZs50UXxkQ1ct+tnhAzjHYHeao94= Subject key identifier: D5:78:31:33:4B:41:AB:B1:D6:BB:7A:6A:C4:CA:D2:57:68:45:A8:E3 Certificate issuer: /CN=0c924434-62f4-44d5-b440-476f5c675f3d Certificate serial: 010D0C9F4328584B33F19CC1AA07C1226DB41860 Authority key identifier: 05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/4bf02b8f-3329-3f25-af9d-2d641a5a954a.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 46878 IP address blocks: 208.81.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:9c:c1:aa:07:c1:22:6d:b4:18:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c924434-62f4-44d5-b440-476f5c675f3d Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=c5517c42-9b93-46df-96de-e72170807078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e1:bc:a6:c6:ab:eb:d5:ce:24:90:9e:88:02: 09:8b:87:13:db:51:e4:76:ad:a6:c8:c9:4b:79:c2: 2f:17:db:40:9b:26:ed:b1:ee:f5:dc:68:22:96:06: d7:67:45:e3:b5:5c:d6:8a:cb:91:3e:17:d2:ff:0d: 86:97:23:94:b7:58:05:35:62:b5:d9:5c:d7:91:2f: 55:9f:e7:db:3d:ef:b8:11:84:30:b5:41:19:3a:19: 74:16:3c:d0:6d:54:10:2e:e6:ce:19:86:c4:d4:25: 37:07:30:9f:5d:af:1a:01:f9:be:66:8f:3e:01:00: 49:af:19:3c:6f:3f:ac:c6:79:f7:e6:04:65:51:f0: 21:11:bc:d8:76:24:d1:93:a9:36:6a:23:f1:8c:fb: ff:7e:27:60:26:ee:1c:3d:53:bd:03:08:53:7e:6b: f2:7c:a5:72:0b:1e:c4:2a:5b:4d:3b:f4:52:38:ac: 92:30:a8:20:20:1d:b1:1b:7b:23:c9:f1:6b:17:62: c2:f3:02:49:3c:3d:e3:e1:2a:97:99:a6:ab:98:a3: d5:6b:90:44:d2:ef:0c:0e:fc:b2:91:21:88:ad:dd: 46:20:29:a3:6f:02:43:ee:e2:52:74:92:8b:e3:e7: 07:1d:22:c8:69:54:3a:92:f0:42:56:1c:91:c9:1c: 13:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:78:31:33:4B:41:AB:B1:D6:BB:7A:6A:C4:CA:D2:57:68:45:A8:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/4bf02b8f-3329-3f25-af9d-2d641a5a954a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl X509v3 Authority Key Identifier: keyid:05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer sbgp-ipAddrBlock: critical IPv4: 208.81.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:f6:fe:c4:dd:dc:5f:f7:32:76:75:9e:b1:1f:6a:21:07:bc: 63:4c:4a:b9:b8:5f:5a:7b:12:b3:fb:c2:14:3c:b3:8f:d1:4f: 1e:a1:bb:4e:d4:cb:c6:72:1d:4c:5d:05:7e:63:98:6b:0a:0c: 8c:f0:ca:8b:aa:fe:a8:50:5c:cf:d3:c4:98:38:63:52:99:e6: b0:d0:be:cb:1d:2e:d9:e1:77:06:5d:91:62:fd:41:cc:58:fb: 92:29:32:df:56:67:8b:9b:64:68:5f:5e:c1:ea:ad:f7:e9:94: 66:fe:00:f0:94:08:68:b5:08:cf:67:72:e3:33:32:b1:08:f9: fb:af:ea:02:08:89:c8:a9:c2:0c:e5:71:07:fa:7b:a0:57:83: 02:18:22:e5:9e:d8:db:ce:95:77:0e:e8:c6:d7:28:ed:c9:b6: e3:ac:82:bd:d1:ee:2d:2a:70:11:b9:f2:eb:f7:6e:94:a0:2b: 0c:ea:ee:2a:20:d5:b2:b2:04:85:53:89:42:8a:e6:df:09:80: d0:cc:3c:d5:1e:e3:f2:b7:0d:3d:5b:a6:c0:a4:26:50:73:c8: 18:79:51:80:15:53:08:77:0c:55:86:28:1e:19:63:25:1b:e8: 38:27:87:cd:7e:30:c5:2d:92:38:60:7b:b6:0a:90:b7:c0:ae: 80:d9:bf:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsz8ZzBqgfBIm20GGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM5MjQ0MzQtNjJmNC00NGQ1LWI0NDAtNDc2ZjVjNjc1 ZjNkMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk YzU1MTdjNDItOWI5My00NmRmLTk2ZGUtZTcyMTcwODA3MDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOG8psar69XOJJCeiAIJi4cT21Hkdq2myMlL ecIvF9tAmybtse713GgilgbXZ0XjtVzWisuRPhfS/w2GlyOUt1gFNWK12VzXkS9V n+fbPe+4EYQwtUEZOhl0FjzQbVQQLubOGYbE1CU3BzCfXa8aAfm+Zo8+AQBJrxk8 bz+sxnn35gRlUfAhEbzYdiTRk6k2aiPxjPv/fidgJu4cPVO9AwhTfmvyfKVyCx7E KltNO/RSOKySMKggIB2xG3sjyfFrF2LC8wJJPD3j4SqXmaarmKPVa5BE0u8MDvyy kSGIrd1GICmjbwJD7uJSdJKL4+cHHSLIaVQ6kvBCVhyRyRwTmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNV4MTNLQaux1rt6asTK0ldoRajjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYzky NDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZmNWM2NzVmM2QvNGJmMDJiOGYtMzMyOS0z ZjI1LWFmOWQtMmQ2NDFhNWE5NTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGM5MjQ0MzQtNjJmNC00NGQ1LWI0 NDAtNDc2ZjVjNjc1ZjNkLzBjOTI0NDM0LTYyZjQtNDRkNS1iNDQwLTQ3NmY1YzY3 NWYzZC5jcmwwHwYDVR0jBBgwFoAUBa56uKMq0Of7tmKknnU5XIDc11gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYzkyNDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZm NWM2NzVmM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FH6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABL2/sTd3F/3MnZ1nrEfaiEHvGNMSrm4X1p7ErP7whQ8s4/RTx6hu07U y8ZyHUxdBX5jmGsKDIzwyouq/qhQXM/TxJg4Y1KZ5rDQvssdLtnhdwZdkWL9QcxY +5IpMt9WZ4ubZGhfXsHqrffplGb+APCUCGi1CM9ncuMzMrEI+fuv6gIIicipwgzl cQf6e6BXgwIYIuWe2NvOlXcO6MbXKO3JtuOsgr3R7i0qcBG58uv3bpSgKwzq7iog 1bKyBIVTiUKK5t8JgNDMPNUe4/K3DT1bpsCkJlBzyBh5UYAVUwh3DFWGKB4ZYyUb 6Dgnh81+MMUtkjhge7YKkLfAroDZv0A= -----END CERTIFICATE-----Generated at Fri Oct 10 23:40:21 2025 by rpki-client