$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/dfd5a6d2-b508-3685-8fff-cf6ce2050d0d.roa File: dfd5a6d2-b508-3685-8fff-cf6ce2050d0d.roa (raw, json) Hash identifier: +YijlQ/wD6T4EV1Cwta7uDFjgLDaBERGXxLU9C/dmHg= Subject key identifier: BE:FE:EA:4B:09:4D:75:EF:D2:54:8F:E3:E5:B5:E8:57:9C:7C:93:51 Certificate issuer: /CN=378928e8-c134-40aa-9858-3838053cbbe9 Certificate serial: 010D0C9F4328584B0746B70310C451D0EA489280 Authority key identifier: 05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/dfd5a6d2-b508-3685-8fff-cf6ce2050d0d.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 12261 IP address blocks: 208.118.192.0/22 maxlen: 22 208.118.196.0/22 maxlen: 22 208.118.200.0/22 maxlen: 22 208.118.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:b7:03:10:c4:51:d0:ea:48:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=378928e8-c134-40aa-9858-3838053cbbe9 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=63639950-2b03-4b0c-9c90-4c63c01a3665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0e:83:f3:65:47:62:e0:36:c7:a9:42:1b:92: 10:19:a9:47:06:d0:0d:9e:ed:03:12:fd:34:b7:6c: 7c:60:71:e7:f4:35:98:bf:ce:32:86:46:76:c1:f1: d4:bd:1d:1c:1a:69:5f:13:68:94:1e:69:de:bf:d8: 30:a7:52:0a:9f:81:94:da:2d:b1:2c:63:f8:35:14: 96:25:6f:c6:36:ac:c0:d2:46:70:3a:ba:72:e1:89: 1e:e9:38:91:b9:1f:58:01:85:9c:5a:58:12:2b:de: ae:28:f2:df:f7:97:f0:bf:20:08:19:c3:34:db:7c: 5f:35:d3:9f:d6:18:b9:fd:6a:35:a2:78:50:2a:b2: 32:a2:36:7f:1c:0d:d9:39:31:05:b2:7b:b7:f7:3a: 24:e6:59:9a:06:e2:7c:8b:7e:f1:6e:a6:e5:e7:51: 01:d7:8d:e0:38:69:b9:5f:1f:9c:74:f8:30:ec:ac: 23:d1:d9:12:6a:06:7d:6e:61:57:ef:bb:9a:c2:48: ef:05:8f:39:87:46:ad:00:b9:fc:2d:4a:27:c2:6c: 17:d9:32:4b:f8:77:b6:81:13:90:87:41:ba:d9:33: a5:d3:0a:32:57:46:b6:40:65:c2:5a:19:0a:19:91: 31:d3:f7:2c:4d:2a:7a:24:f2:f3:1b:d5:52:9c:c0: 21:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:FE:EA:4B:09:4D:75:EF:D2:54:8F:E3:E5:B5:E8:57:9C:7C:93:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/dfd5a6d2-b508-3685-8fff-cf6ce2050d0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.crl X509v3 Authority Key Identifier: keyid:05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer sbgp-ipAddrBlock: critical IPv4: 208.118.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:5c:a7:06:be:ba:84:38:34:31:ea:43:fc:5f:05:38:4b:d0: a5:c0:8a:c6:b3:ed:bd:78:ef:e3:75:0a:00:2e:65:81:29:bd: 75:c4:c7:aa:84:17:71:c7:b4:2a:d7:8f:0a:55:ba:e4:64:86: 03:e8:b0:ca:d3:24:1e:ba:8a:6b:e9:6e:6a:99:8a:f5:48:51: 1d:e9:24:01:f9:8e:c7:f8:9e:dc:b7:d1:6e:11:37:02:2b:dd: 78:5f:da:15:da:87:18:4f:d5:86:61:89:0d:56:9a:1d:95:f7: 21:f9:d7:a5:13:7b:37:a8:ec:20:b3:82:ce:fb:5f:a6:1c:30: e6:8b:c7:da:ad:83:ba:c2:c9:1b:28:92:f9:08:4d:65:48:c2: 99:09:76:b0:cc:3b:4a:10:34:0c:96:1d:e7:e4:45:46:5b:7f: e8:47:56:95:d1:a2:16:16:26:19:66:1a:08:7c:38:68:0c:b4: 0b:5f:5c:aa:2f:68:cb:24:53:5f:d8:86:3c:7e:8d:00:da:90: 3a:06:68:e2:4f:70:11:a3:69:76:60:5b:c6:e0:a6:46:a0:15: 75:c2:54:de:f4:99:54:fd:f1:f5:3c:79:99:7b:b8:3b:a9:8e: 06:1e:29:5f:e7:1e:af:8e:97:a0:05:e7:e9:a7:54:32:ee:14: c1:0e:b2:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRrcDEMRR0OpIkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzc4OTI4ZTgtYzEzNC00MGFhLTk4NTgtMzgzODA1M2Ni YmU5MB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk NjM2Mzk5NTAtMmIwMy00YjBjLTljOTAtNGM2M2MwMWEzNjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQ6D82VHYuA2x6lCG5IQGalHBtANnu0DEv00 t2x8YHHn9DWYv84yhkZ2wfHUvR0cGmlfE2iUHmnev9gwp1IKn4GU2i2xLGP4NRSW JW/GNqzA0kZwOrpy4Yke6TiRuR9YAYWcWlgSK96uKPLf95fwvyAIGcM023xfNdOf 1hi5/Wo1onhQKrIyojZ/HA3ZOTEFsnu39zok5lmaBuJ8i37xbqbl51EB143gOGm5 Xx+cdPgw7Kwj0dkSagZ9bmFX77uawkjvBY85h0atALn8LUonwmwX2TJL+He2gROQ h0G62TOl0woyV0a2QGXCWhkKGZEx0/csTSp6JPLzG9VSnMAhCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7+6ksJTXXv0lSP4+W16FecfJNRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNzg5 MjhlOC1jMTM0LTQwYWEtOTg1OC0zODM4MDUzY2JiZTkvZGZkNWE2ZDItYjUwOC0z Njg1LThmZmYtY2Y2Y2UyMDUwZDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzc4OTI4ZTgtYzEzNC00MGFhLTk4 NTgtMzgzODA1M2NiYmU5LzM3ODkyOGU4LWMxMzQtNDBhYS05ODU4LTM4MzgwNTNj YmJlOS5jcmwwHwYDVR0jBBgwFoAUBYTnTjebSl6FC+Qck2G4ZCYVGJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNzg5MjhlOC1jMTM0LTQwYWEtOTg1OC0zODM4 MDUzY2JiZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0HbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExcpwa+uoQ4NDHqQ/xfBThL0KXAisaz7b147+N1CgAuZYEpvXXEx6qE F3HHtCrXjwpVuuRkhgPosMrTJB66imvpbmqZivVIUR3pJAH5jsf4nty30W4RNwIr 3Xhf2hXahxhP1YZhiQ1Wmh2V9yH516UTezeo7CCzgs77X6YcMOaLx9qtg7rCyRso kvkITWVIwpkJdrDMO0oQNAyWHefkRUZbf+hHVpXRohYWJhlmGgh8OGgMtAtfXKov aMskU1/Yhjx+jQDakDoGaOJPcBGjaXZgW8bgpkagFXXCVN70mVT98fU8eZl7uDup jgYeKV/nHq+Ol6AF5+mnVDLuFMEOsv4= -----END CERTIFICATE-----Generated at Sat Oct 11 16:50:13 2025 by rpki-client