$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/82b61c78-069c-3046-82d7-7ecea8a4fbf6.roa File: 82b61c78-069c-3046-82d7-7ecea8a4fbf6.roa (raw, json) Hash identifier: LJnJxvrd3lVNaihLp6/uJq/+lkXbxzSPAmnfzVrQkD4= Subject key identifier: CE:58:35:73:26:0F:09:28:A6:92:3A:9F:66:D5:EF:11:8E:00:5B:DF Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e Certificate serial: 010D0C9F4328584B1AD17D383EC5A311E27FB340 Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/82b61c78-069c-3046-82d7-7ecea8a4fbf6.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 23465 IP address blocks: 208.187.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:7d:38:3e:c5:a3:11:e2:7f:b3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=56dcb506-977b-41b3-b3f3-df63748d5cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7f:49:4e:ad:1b:cb:dc:61:ee:92:ce:ea:94: a1:07:17:ad:5e:bc:20:9a:79:26:f1:a8:3b:c5:15: 9a:d9:5e:6f:ae:29:06:cf:16:27:c2:98:f8:51:63: b3:9d:e1:04:6a:39:30:da:bf:cf:42:74:45:1f:54: 3a:f7:d8:0e:92:50:6e:ce:51:1b:73:73:97:75:d7: cf:c3:ae:ad:0d:8a:fd:37:c0:8f:15:8a:a5:46:29: fc:71:aa:91:fe:5f:88:67:8e:7e:15:8e:72:0d:cc: f5:63:35:f7:7d:7f:40:79:fb:16:ec:2e:08:cf:62: 85:7a:bc:6b:9c:71:20:5f:1e:3c:86:33:e9:35:3d: 26:ee:6e:17:4a:ea:47:6f:69:8c:a7:28:a6:9b:f4: e7:6b:09:2c:a6:ff:2d:d8:39:b6:54:b3:6c:b2:3c: 25:05:11:ec:45:5c:84:43:c8:11:fc:de:74:eb:aa: 10:d7:85:d6:e4:88:16:9c:07:d2:95:68:8d:ee:1d: ed:f7:bc:f0:f5:e1:bb:6a:a8:5a:b9:b4:d7:8a:6a: 67:cd:b8:ce:f3:32:3e:a6:3c:fa:1f:fe:dc:60:b1: dc:56:93:33:06:0e:70:8f:9c:8a:8c:82:1d:2c:03: 1e:28:5b:64:cf:39:ce:95:16:bd:3a:42:5d:28:d4: 35:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:58:35:73:26:0F:09:28:A6:92:3A:9F:66:D5:EF:11:8E:00:5B:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/82b61c78-069c-3046-82d7-7ecea8a4fbf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl X509v3 Authority Key Identifier: keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer sbgp-ipAddrBlock: critical IPv4: 208.187.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e1:43:f9:66:28:c9:68:b9:0c:04:df:29:72:e8:3c:77:df:f2: 44:6b:b3:62:3f:b0:15:ed:c6:f6:a0:36:d0:74:99:57:73:9b: 87:1f:93:07:b1:06:02:15:90:c5:93:98:0d:78:79:58:7d:33: fa:18:59:52:a9:8e:d6:47:17:d0:4c:c0:11:fd:89:70:ad:46: 81:66:a8:f2:33:09:1b:1f:6e:2e:8d:65:e0:07:3e:42:55:b9: de:9d:4d:18:0a:ef:0f:29:c1:0d:be:8c:eb:66:88:21:4a:26: df:9a:99:cc:c7:9c:d9:62:f5:02:c2:c5:d0:b8:90:67:d5:8d: b4:2c:3b:f2:06:a3:d1:43:e8:3c:4e:73:22:a7:be:19:33:d7: de:f6:ec:2d:87:43:08:b0:19:bc:9e:3f:76:d8:aa:75:46:5a: 92:9e:b2:fb:ec:e8:33:de:2c:85:da:16:c5:2a:e9:7a:94:82: 6d:86:6d:2e:36:af:aa:d3:2d:40:1e:ac:1c:1e:43:75:61:d6: 8d:70:83:94:a4:89:46:d8:3e:cb:e5:82:e2:ab:3a:0b:8a:38: 95:ab:48:6e:4b:50:eb:46:f6:5c:3c:59:36:be:e3:2f:90:7c: b3:12:fb:c4:69:b8:b8:c8:f9:58:97:bc:fa:a7:50:b7:90:c2: f7:fd:23:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0X04PsWjEeJ/s0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz MDllMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NTZkY2I1MDYtOTc3Yi00MWIzLWIzZjMtZGY2Mzc0OGQ1Y2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq39JTq0by9xh7pLO6pShBxetXrwgmnkm8ag7 xRWa2V5vrikGzxYnwpj4UWOzneEEajkw2r/PQnRFH1Q699gOklBuzlEbc3OXddfP w66tDYr9N8CPFYqlRin8caqR/l+IZ45+FY5yDcz1YzX3fX9AefsW7C4Iz2KFerxr nHEgXx48hjPpNT0m7m4XSupHb2mMpyimm/Tnawkspv8t2Dm2VLNssjwlBRHsRVyE Q8gR/N5066oQ14XW5IgWnAfSlWiN7h3t97zw9eG7aqhaubTXimpnzbjO8zI+pjz6 H/7cYLHcVpMzBg5wj5yKjIIdLAMeKFtkzznOlRa9OkJdKNQ1hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5YNXMmDwkoppI6n2bV7xGOAFvfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvODJiNjFjNzgtMDY5Yy0z MDQ2LTgyZDctN2VjZWE4YTRmYmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4 ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1 MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw MTY2NTMwOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Lt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOFD+WYoyWi5DATfKXLoPHff8kRrs2I/sBXtxvagNtB0mVdzm4cfkwex BgIVkMWTmA14eVh9M/oYWVKpjtZHF9BMwBH9iXCtRoFmqPIzCRsfbi6NZeAHPkJV ud6dTRgK7w8pwQ2+jOtmiCFKJt+amczHnNli9QLCxdC4kGfVjbQsO/IGo9FD6DxO cyKnvhkz19727C2HQwiwGbyeP3bYqnVGWpKesvvs6DPeLIXaFsUq6XqUgm2GbS42 r6rTLUAerBweQ3Vh1o1wg5SkiUbYPsvlguKrOguKOJWrSG5LUOtG9lw8WTa+4y+Q fLMS+8RpuLjI+ViXvPqnULeQwvf9I+o= -----END CERTIFICATE-----Generated at Sat Oct 11 10:10:02 2025 by rpki-client