$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/297bb316-79a6-3af7-a3db-ad1e4f19895e.roa File: 297bb316-79a6-3af7-a3db-ad1e4f19895e.roa (raw, json) Hash identifier: D4+abZNP3QB7IaElRVUUsmVC9dTnpgBC0x2ccc1ciF8= Subject key identifier: F5:99:B4:10:F8:CD:82:EA:ED:7F:FC:00:06:19:90:74:7A:83:DB:E8 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584B21CC1E4251E0D11FC3F06700 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/297bb316-79a6-3af7-a3db-ad1e4f19895e.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 29968 IP address blocks: 208.20.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:1e:42:51:e0:d1:1f:c3:f0:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=e0ed6859-060a-430d-acb2-f736415661de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bf:54:b7:51:4f:4e:40:60:3a:4c:1d:c7:38: e2:74:26:c1:01:a9:4a:4a:12:ab:5b:7d:79:3d:f3: 89:4c:c5:c3:a4:11:61:73:02:4f:1d:fb:ea:c6:d5: dd:ad:2e:2b:42:d6:52:94:7d:c5:43:62:9a:17:60: 2c:a2:b0:96:23:3c:dd:a1:a8:eb:c4:09:a4:ac:63: dd:25:42:92:56:ce:40:79:50:55:10:73:57:ad:79: 8a:64:ed:1d:5d:2e:e1:78:f6:c1:76:e2:57:f1:04: be:5b:91:77:e9:d9:45:6a:54:0c:5f:d6:0f:6c:0b: 36:1d:d0:ca:29:15:e6:dd:f0:9f:8d:b9:8e:80:bd: 19:26:91:75:7a:1b:a6:34:38:fc:36:e2:1f:10:31: 8a:8a:8e:51:8f:c2:79:7d:59:ff:95:22:90:66:fd: b6:0e:0c:0e:a1:98:18:b0:44:70:9b:61:a4:bb:0b: 34:cf:fc:76:70:a2:0b:64:e5:4e:c4:83:a4:01:64: 34:1f:64:ad:bc:89:18:13:c7:58:85:51:cb:53:88: c3:5b:b0:27:c5:1b:94:9c:a5:e2:fa:c5:94:38:aa: 40:e9:ab:c7:2a:96:7a:39:cf:7d:26:c4:fe:01:38: 3b:fc:da:37:6f:8f:6c:45:44:38:7b:87:76:2d:2c: 38:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:99:B4:10:F8:CD:82:EA:ED:7F:FC:00:06:19:90:74:7A:83:DB:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/297bb316-79a6-3af7-a3db-ad1e4f19895e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 208.20.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:80:59:fc:c1:67:ce:61:bb:5d:a4:a8:91:13:3d:f9:70:12: 59:fa:4f:96:1e:83:e0:00:34:d1:7f:c7:9a:08:f0:48:f8:64: 9e:e4:65:c1:3a:ba:40:a5:11:8e:fd:d4:08:d1:70:09:f2:d7: 15:7f:40:57:63:a1:6b:c5:e2:65:fe:4e:7f:c0:be:ce:52:13: 52:0e:ca:c5:2a:eb:e0:01:9e:f7:90:2d:7a:63:a3:58:54:49: 39:0f:c1:15:61:a8:62:58:c1:e2:cb:c8:fc:60:e0:b6:1f:6f: 04:f4:15:be:dd:3f:51:e2:8a:c4:aa:3a:8d:4a:1d:43:2c:b9: cb:82:ce:e8:f5:f1:ce:e0:e5:1a:09:6a:b8:2f:7b:bf:5c:31: 7e:5c:00:2f:57:c8:54:95:7a:93:47:9e:56:71:e7:80:e2:6d: 02:f2:c6:55:44:5f:11:f2:25:c3:22:4a:10:1c:c3:b8:d2:03: c4:f9:eb:13:01:77:80:5e:7f:25:a5:b7:b1:c7:d9:0e:29:ef: 91:fc:27:be:ca:bb:32:25:fb:62:aa:80:50:c9:b0:76:68:ab: c7:dc:19:b9:14:30:d0:0b:7c:af:68:3d:74:5c:69:eb:29:5c: be:bb:ee:40:36:ec:98:ed:dd:df:d5:b1:9c:7c:4a:a1:7e:c8: 77:ce:60:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzB5CUeDRH8PwZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk ZTBlZDY4NTktMDYwYS00MzBkLWFjYjItZjczNjQxNTY2MWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr9Ut1FPTkBgOkwdxzjidCbBAalKShKrW315 PfOJTMXDpBFhcwJPHfvqxtXdrS4rQtZSlH3FQ2KaF2AsorCWIzzdoajrxAmkrGPd JUKSVs5AeVBVEHNXrXmKZO0dXS7hePbBduJX8QS+W5F36dlFalQMX9YPbAs2HdDK KRXm3fCfjbmOgL0ZJpF1ehumNDj8NuIfEDGKio5Rj8J5fVn/lSKQZv22DgwOoZgY sERwm2Gkuws0z/x2cKILZOVOxIOkAWQ0H2StvIkYE8dYhVHLU4jDW7AnxRuUnKXi +sWUOKpA6avHKpZ6Oc99JsT+ATg7/No3b49sRUQ4e4d2LSw4uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWZtBD4zYLq7X/8AAYZkHR6g9voMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvMjk3YmIzMTYtNzlhNi0z YWY3LWEzZGItYWQxZTRmMTk4OTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0BQiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICAWfzBZ85hu12kqJETPflwEln6T5Yeg+AANNF/x5oI8Ej4ZJ7kZcE6 ukClEY791AjRcAny1xV/QFdjoWvF4mX+Tn/Avs5SE1IOysUq6+ABnveQLXpjo1hU STkPwRVhqGJYweLLyPxg4LYfbwT0Fb7dP1HiisSqOo1KHUMsucuCzuj18c7g5RoJ argve79cMX5cAC9XyFSVepNHnlZx54DibQLyxlVEXxHyJcMiShAcw7jSA8T56xMB d4BefyWlt7HH2Q4p75H8J77KuzIl+2KqgFDJsHZoq8fcGbkUMNALfK9oPXRcaesp XL677kA27Jjt3d/VsZx8SqF+yHfOYJc= -----END CERTIFICATE-----Generated at Fri Oct 10 17:25:50 2025 by rpki-client