$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/bdb2fcdf-1e04-3cb2-9083-b211d9b56700.roa File: bdb2fcdf-1e04-3cb2-9083-b211d9b56700.roa (raw, json) Hash identifier: VWQmnxMNdek8R+JQKNMZ4rK5m2ABrvUhHNkPX+UFdFY= Subject key identifier: E0:E4:A9:D8:72:11:08:C6:A3:30:34:A3:86:0E:9F:56:04:5E:2E:73 Certificate issuer: /CN=329c727b-a867-426a-ad3d-167aed3107dd Certificate serial: 010D0C9F4328584B477C73D431C78DDD44600300 Authority key identifier: 3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/bdb2fcdf-1e04-3cb2-9083-b211d9b56700.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 6327 IP address blocks: 204.209.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:73:d4:31:c7:8d:dd:44:60:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=329c727b-a867-426a-ad3d-167aed3107dd Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=85d47c50-9903-4e27-b9df-26f3aea38896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9f:1e:31:d7:de:22:82:3b:55:e7:8d:f0:dc: f8:81:93:ce:15:d5:0d:a9:e1:1d:24:e4:fd:86:fd: d2:60:14:b1:92:a8:ad:30:e5:ce:fd:8a:69:7f:79: 0e:a5:4a:3a:fe:1a:5a:19:45:0a:85:57:59:9c:75: 0d:57:39:9b:1a:9c:55:8b:7b:78:a9:95:91:89:ec: 44:96:59:34:f8:0c:e0:6a:b4:18:41:75:c0:cb:cc: 79:ef:f8:77:ad:7c:44:ca:86:c5:09:7a:05:ac:2e: 38:0d:9d:89:41:13:cd:50:50:c1:67:f8:93:7a:f4: 2a:3f:6d:f7:01:45:24:4c:a6:13:a3:c4:53:f3:2d: 31:63:11:ce:b0:6b:2b:1c:50:26:b0:ea:92:55:69: 30:0e:c5:e2:4e:00:49:57:92:cb:46:4a:9d:8a:c7: 71:fb:f5:85:d6:dd:a0:12:c4:7e:27:d0:40:c0:73: 22:e0:cc:8a:8d:d3:5d:34:cc:5d:2a:54:8b:df:9f: b1:ee:a5:99:53:9c:9e:77:5f:0f:09:7e:70:9f:b5: aa:4d:31:aa:9e:fb:92:56:13:49:27:f0:35:c0:26: 33:c6:7e:73:65:97:33:2c:d9:4b:06:22:e9:cd:6a: d5:52:94:79:4f:63:e7:a2:e7:3b:7c:1d:19:97:f6: f8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E4:A9:D8:72:11:08:C6:A3:30:34:A3:86:0E:9F:56:04:5E:2E:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/bdb2fcdf-1e04-3cb2-9083-b211d9b56700.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl X509v3 Authority Key Identifier: keyid:3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer sbgp-ipAddrBlock: critical IPv4: 204.209.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:f0:ea:e3:94:a1:83:34:10:17:8b:5f:db:b7:6b:2e:44:2c: 5a:b5:57:39:17:29:59:a6:c0:fd:c6:9e:f9:29:9d:b2:b7:0c: 46:df:f2:99:68:db:e6:ca:aa:f9:37:88:da:e3:36:2c:22:b0: 6a:e1:52:f3:a3:b2:94:3a:ed:2f:a6:03:c4:df:b5:86:27:0f: c2:64:82:7d:29:08:72:6f:f3:81:8d:1c:73:18:d6:ce:4d:1c: 8a:01:03:84:d0:59:50:dc:32:23:7d:93:f3:50:43:52:f2:12: 33:af:af:fd:d8:69:ec:9e:4e:88:e5:3f:5b:84:74:f8:7f:a6: 95:e9:da:87:43:c5:1d:80:3e:4f:a2:3b:c8:5a:ca:1f:ad:4a: 33:da:7d:ce:e5:e9:c7:d3:52:9a:0f:7c:5b:0f:a3:cc:28:a7: f5:ef:d4:4c:63:ab:2e:66:17:92:3b:72:d5:50:7f:b1:d3:35: 19:31:c8:57:05:19:86:6f:28:03:5e:aa:23:63:dc:8c:8f:62: 7c:71:7b:f6:87:a4:f3:cd:b2:2a:99:12:0b:f5:b4:16:8a:b0: b2:45:41:68:96:47:bf:ff:62:26:04:ee:34:54:53:fd:c1:12: f4:3d:e8:22:79:35:b6:e8:b2:d6:d5:aa:a8:63:f8:f8:4d:ac: 8a:dd:4c:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfHPUMceN3URgAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI5YzcyN2ItYTg2Ny00MjZhLWFkM2QtMTY3YWVkMzEw N2RkMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk ODVkNDdjNTAtOTkwMy00ZTI3LWI5ZGYtMjZmM2FlYTM4ODk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ8eMdfeIoI7VeeN8Nz4gZPOFdUNqeEdJOT9 hv3SYBSxkqitMOXO/Yppf3kOpUo6/hpaGUUKhVdZnHUNVzmbGpxVi3t4qZWRiexE llk0+AzgarQYQXXAy8x57/h3rXxEyobFCXoFrC44DZ2JQRPNUFDBZ/iTevQqP233 AUUkTKYTo8RT8y0xYxHOsGsrHFAmsOqSVWkwDsXiTgBJV5LLRkqdisdx+/WF1t2g EsR+J9BAwHMi4MyKjdNdNMxdKlSL35+x7qWZU5yed18PCX5wn7WqTTGqnvuSVhNJ J/A1wCYzxn5zZZczLNlLBiLpzWrVUpR5T2Pnouc7fB0Zl/b45wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODkqdhyEQjGozA0o4YOn1YEXi5zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjlj NzI3Yi1hODY3LTQyNmEtYWQzZC0xNjdhZWQzMTA3ZGQvYmRiMmZjZGYtMWUwNC0z Y2IyLTkwODMtYjIxMWQ5YjU2NzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzI5YzcyN2ItYTg2Ny00MjZhLWFk M2QtMTY3YWVkMzEwN2RkLzMyOWM3MjdiLWE4NjctNDI2YS1hZDNkLTE2N2FlZDMx MDdkZC5jcmwwHwYDVR0jBBgwFoAUPZZSNdHOoxLv1MM8HGrn4fAf9SIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjljNzI3Yi1hODY3LTQyNmEtYWQzZC0xNjdh ZWQzMTA3ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzNHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzw6uOUoYM0EBeLX9u3ay5ELFq1VzkXKVmmwP3GnvkpnbK3DEbf8plo 2+bKqvk3iNrjNiwisGrhUvOjspQ67S+mA8TftYYnD8Jkgn0pCHJv84GNHHMY1s5N HIoBA4TQWVDcMiN9k/NQQ1LyEjOvr/3YaeyeTojlP1uEdPh/ppXp2odDxR2APk+i O8hayh+tSjPafc7l6cfTUpoPfFsPo8wop/Xv1Exjqy5mF5I7ctVQf7HTNRkxyFcF GYZvKANeqiNj3IyPYnxxe/aHpPPNsiqZEgv1tBaKsLJFQWiWR7//YiYE7jRUU/3B EvQ96CJ5NbbostbVqqhj+PhNrIrdTEM= -----END CERTIFICATE-----Generated at Fri Oct 10 20:28:30 2025 by rpki-client