$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/a80f3319-a1a9-3f01-8d00-4f5d083b6ff6.roa File: a80f3319-a1a9-3f01-8d00-4f5d083b6ff6.roa (raw, json) Hash identifier: eWhzyK7deutkoX2mzOUVFtjC2llMaOBDehsVCZa35PU= Subject key identifier: 81:82:3F:08:29:A0:AB:6F:D1:DA:E9:81:D4:AE:4D:58:D5:75:80:46 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584B21CC1E1B3DBB73A68742025C Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/a80f3319-a1a9-3f01-8d00-4f5d083b6ff6.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 13536 IP address blocks: 208.20.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:1e:1b:3d:bb:73:a6:87:42:02:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=a934d03e-a391-4f0b-87c4-702337cdb020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:76:cf:2e:57:9b:8b:53:47:a3:04:ac:16:6c: 79:3e:7a:05:63:cd:0f:ff:b4:8f:2d:6a:2f:c4:df: fe:98:fd:5f:c4:43:18:22:f4:13:e3:d9:3e:fe:1c: 6a:7f:70:2c:46:98:13:04:f0:e6:89:2d:dc:3d:a3: ee:16:0e:3e:37:84:10:ce:62:e9:8b:46:2b:3d:a4: 84:0d:d5:a0:89:34:88:04:9e:9e:12:38:26:25:e7: 5f:12:b7:21:2a:f6:5b:8d:68:81:31:10:00:78:a1: 04:08:36:d6:92:70:8a:fe:61:a5:17:18:09:c2:4c: 9a:5c:09:10:13:53:1c:38:a2:97:ea:7e:17:15:0e: be:75:70:1a:55:21:be:b9:3b:03:1b:32:43:2f:dd: 9c:e6:6b:57:12:0a:95:12:35:d4:94:bf:bc:3d:0f: 4d:49:34:d6:d1:84:67:1d:b6:02:90:1b:39:25:42: a4:f9:29:09:c5:e3:fc:be:1e:21:f7:b1:95:5c:54: 84:19:0e:fa:da:63:eb:17:84:50:ad:a2:1e:cb:0d: 1e:68:58:7e:ca:29:a6:05:40:e5:b1:2b:6b:42:3c: dc:05:8a:fa:f7:26:b8:4c:a8:7a:2e:ed:f1:83:93: ac:36:d8:ae:be:be:61:06:85:5c:5d:4a:22:89:f6: 1e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:82:3F:08:29:A0:AB:6F:D1:DA:E9:81:D4:AE:4D:58:D5:75:80:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/a80f3319-a1a9-3f01-8d00-4f5d083b6ff6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 208.20.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:db:a6:6a:22:66:a5:da:c9:b8:64:ed:18:a5:2e:73:e2:a3: 85:da:a8:2f:c0:cc:03:f4:a6:f1:cc:48:9d:1f:68:af:b4:e8: cc:86:5f:0b:6b:0d:d2:a2:4f:8e:07:af:85:d8:d9:56:29:59: da:46:5f:c4:de:76:64:2e:25:0e:6e:c1:0a:c7:92:15:64:08: 3b:ef:5f:6e:74:c6:b7:d2:83:8a:f5:52:3a:8f:5d:0a:0c:54: 03:12:d4:00:ce:ff:a2:65:70:70:64:62:ac:2d:c6:a6:4b:11: 83:14:e8:a5:68:f0:4b:5f:01:34:29:72:a1:93:e9:08:25:87: b3:88:64:80:25:e6:e8:b2:33:dd:0d:51:ad:c7:78:7f:59:3a: 63:f5:26:d9:08:b1:b7:df:ce:02:74:ab:a0:b3:18:d8:ad:c9: c3:47:9b:26:22:71:97:db:61:4f:56:54:6b:c8:fc:d2:4c:2a: 73:5a:f0:e4:15:50:d1:eb:4a:32:bf:30:85:c3:13:51:33:07: ae:b9:0d:e6:83:55:0a:87:c9:6a:70:b1:af:5d:b4:a3:9f:61: ae:51:73:e4:6f:fd:98:81:98:7c:7d:41:1c:fa:b3:20:ad:14: 47:47:b0:4c:b3:15:33:a8:66:2a:3f:f0:45:0d:f1:11:c2:11: f2:1e:c2:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzB4bPbtzpodCAlwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk YTkzNGQwM2UtYTM5MS00ZjBiLTg3YzQtNzAyMzM3Y2RiMDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHbPLlebi1NHowSsFmx5PnoFY80P/7SPLWov xN/+mP1fxEMYIvQT49k+/hxqf3AsRpgTBPDmiS3cPaPuFg4+N4QQzmLpi0YrPaSE DdWgiTSIBJ6eEjgmJedfErchKvZbjWiBMRAAeKEECDbWknCK/mGlFxgJwkyaXAkQ E1McOKKX6n4XFQ6+dXAaVSG+uTsDGzJDL92c5mtXEgqVEjXUlL+8PQ9NSTTW0YRn HbYCkBs5JUKk+SkJxeP8vh4h97GVXFSEGQ762mPrF4RQraIeyw0eaFh+yimmBUDl sStrQjzcBYr69ya4TKh6Lu3xg5OsNtiuvr5hBoVcXUoiifYeZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGCPwgpoKtv0drpgdSuTVjVdYBGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvYTgwZjMzMTktYTFhOS0z ZjAxLThkMDAtNGY1ZDA4M2I2ZmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0BQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvbpmoiZqXaybhk7RilLnPio4XaqC/AzAP0pvHMSJ0faK+06MyGXwtr DdKiT44Hr4XY2VYpWdpGX8TedmQuJQ5uwQrHkhVkCDvvX250xrfSg4r1UjqPXQoM VAMS1ADO/6JlcHBkYqwtxqZLEYMU6KVo8EtfATQpcqGT6Qglh7OIZIAl5uiyM90N Ua3HeH9ZOmP1JtkIsbffzgJ0q6CzGNitycNHmyYicZfbYU9WVGvI/NJMKnNa8OQV UNHrSjK/MIXDE1EzB665DeaDVQqHyWpwsa9dtKOfYa5Rc+Rv/ZiBmHx9QRz6syCt FEdHsEyzFTOoZio/8EUN8RHCEfIewlY= -----END CERTIFICATE-----Generated at Fri Oct 10 17:25:48 2025 by rpki-client