$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/0cfd1e43-99b0-3c2f-8b04-f55dd9eb0aa0.roa File: 0cfd1e43-99b0-3c2f-8b04-f55dd9eb0aa0.roa (raw, json) Hash identifier: 0IbE1QuT2s+exuHuqwj/u1xzkbCJmP3XxrK7RPKe8xA= Subject key identifier: 2B:F3:E3:2F:E8:5D:A3:B4:9F:C6:08:71:7F:9E:0F:98:86:0D:95:46 Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e Certificate serial: 010D0C9F4328584B1AD17CF2D95C780CEF467EF0 Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/0cfd1e43-99b0-3c2f-8b04-f55dd9eb0aa0.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 23465 IP address blocks: 208.186.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:7c:f2:d9:5c:78:0c:ef:46:7e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=e0eebde4-e3c1-4799-a074-bc3c8b73979c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:08:7f:62:ac:7f:9d:5c:cf:3c:e1:0e:a9:45: 11:3f:5a:8e:44:73:b5:ed:4f:c9:34:ed:01:be:09: c4:50:8b:91:c1:44:97:eb:07:84:ff:01:a3:20:40: 66:5c:d8:b0:e1:d8:5d:16:a3:75:28:cf:57:bd:28: b6:df:a5:fd:f8:ab:a0:35:4e:f3:95:7d:6d:e9:92: 4a:c7:35:24:7d:21:48:b2:bd:ee:75:14:ea:78:e9: 66:75:cf:d6:f4:e4:e3:6b:e1:51:ad:cb:18:be:6b: 4f:c3:d3:2f:c9:a7:da:4d:cf:76:51:e0:c4:c5:4a: 3f:06:7b:87:70:e3:a6:2c:d1:6d:e3:1b:89:a4:f1: a3:42:fa:90:54:75:a1:4c:ed:d9:24:48:9f:2e:d2: 11:79:8b:32:78:13:0d:14:86:a4:46:da:bd:23:23: df:09:90:fe:36:92:d4:33:8a:1e:1b:d9:35:d4:61: fd:d5:45:06:3c:3e:e2:02:e0:c1:11:56:d9:54:c8: 1c:51:d1:77:81:29:1e:50:e0:e4:ea:cc:88:da:e9: fd:1b:e4:3c:62:80:bf:68:49:e5:20:be:23:ae:3d: 2d:f0:67:15:34:e8:d3:bf:14:5e:ad:c0:7a:30:50: 56:bc:e2:b3:87:43:21:c1:64:5e:f2:46:36:d2:19: 10:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F3:E3:2F:E8:5D:A3:B4:9F:C6:08:71:7F:9E:0F:98:86:0D:95:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/0cfd1e43-99b0-3c2f-8b04-f55dd9eb0aa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl X509v3 Authority Key Identifier: keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer sbgp-ipAddrBlock: critical IPv4: 208.186.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:cc:69:68:03:55:54:82:5b:14:ef:ae:c9:df:52:66:e2:b8: 11:ea:a2:d7:f2:5e:c5:40:19:1d:1d:2c:6a:1f:af:57:d6:b3: af:f7:8d:b5:56:77:c9:01:a5:24:37:8b:e8:5e:d4:1e:3a:04: ec:2a:f3:78:84:46:d5:73:1d:47:14:c3:6f:cb:4f:d5:cc:d9: a9:af:59:e9:3e:f6:32:f0:9c:6f:23:b4:29:95:87:4a:64:fd: c3:37:ed:b9:7a:04:76:5e:13:03:a5:50:33:2e:8c:c0:ce:73: 99:85:5b:83:24:45:ab:c1:45:18:84:01:18:d7:7f:d7:de:d8: 1c:4b:fc:c1:a7:02:49:98:49:4a:80:bf:9d:15:34:d9:d0:39: a9:b3:54:02:49:71:57:86:3e:ec:f0:78:4f:13:8d:29:ba:ec: 93:d9:b1:a8:ae:30:fd:5b:f4:ef:a3:e6:1e:c3:34:b4:1e:40: 22:6d:5f:b2:45:80:b0:49:e2:5b:07:42:07:fd:2d:8c:39:0c: f0:57:57:e8:b0:08:36:d8:25:c2:5b:80:1b:9a:8e:9b:f5:c3: 47:b0:c8:9a:d7:e1:51:85:75:d8:1f:fd:94:b0:5b:44:fb:3c: bd:24:6f:27:70:3e:2e:3d:47:d1:57:75:a9:9b:4e:e7:25:15: 32:36:0d:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0Xzy2Vx4DO9GfvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz MDllMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ZTBlZWJkZTQtZTNjMS00Nzk5LWEwNzQtYmMzYzhiNzM5NzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwh/Yqx/nVzPPOEOqUURP1qORHO17U/JNO0B vgnEUIuRwUSX6weE/wGjIEBmXNiw4dhdFqN1KM9XvSi236X9+KugNU7zlX1t6ZJK xzUkfSFIsr3udRTqeOlmdc/W9OTja+FRrcsYvmtPw9MvyafaTc92UeDExUo/BnuH cOOmLNFt4xuJpPGjQvqQVHWhTO3ZJEifLtIReYsyeBMNFIakRtq9IyPfCZD+NpLU M4oeG9k11GH91UUGPD7iAuDBEVbZVMgcUdF3gSkeUODk6syI2un9G+Q8YoC/aEnl IL4jrj0t8GcVNOjTvxRercB6MFBWvOKzh0MhwWRe8kY20hkQKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvz4y/oXaO0n8YIcX+eD5iGDZVGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvMGNmZDFlNDMtOTliMC0z YzJmLThiMDQtZjU1ZGQ5ZWIwYWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4 ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1 MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw MTY2NTMwOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0LrMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3MaWgDVVSCWxTvrsnfUmbiuBHqotfyXsVAGR0dLGofr1fWs6/3jbVW d8kBpSQ3i+he1B46BOwq83iERtVzHUcUw2/LT9XM2amvWek+9jLwnG8jtCmVh0pk /cM37bl6BHZeEwOlUDMujMDOc5mFW4MkRavBRRiEARjXf9fe2BxL/MGnAkmYSUqA v50VNNnQOamzVAJJcVeGPuzweE8TjSm67JPZsaiuMP1b9O+j5h7DNLQeQCJtX7JF gLBJ4lsHQgf9LYw5DPBXV+iwCDbYJcJbgBuajpv1w0ewyJrX4VGFddgf/ZSwW0T7 PL0kbydwPi49R9FXdambTuclFTI2Dc8= -----END CERTIFICATE-----Generated at Sat Oct 11 10:18:13 2025 by rpki-client