$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/4b8f80f9-63c7-3bfe-9991-56433a798d18.roa File: 4b8f80f9-63c7-3bfe-9991-56433a798d18.roa (raw, json) Hash identifier: FykmUUSGT6bJo2mtwVp7isHywzAzrtOfiXbg+4cA/DI= Subject key identifier: 9C:D3:E0:7F:14:68:B1:C9:81:05:26:70:2B:34:3B:BB:D8:F5:8F:97 Certificate issuer: /CN=7a2be303-4525-4433-b220-b1c6b5052945 Certificate serial: 010D0C9F4328584B60EBB9AB2563F06C1C81E600 Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/4b8f80f9-63c7-3bfe-9991-56433a798d18.roa Signing time: Wed 01 Oct 2025 15:40:16 +0000 ROA not before: Wed 01 Oct 2025 15:40:16 +0000 ROA not after: Tue 30 Dec 2025 16:40:16 +0000 asID: 8075 IP address blocks: 208.56.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:60:eb:b9:ab:25:63:f0:6c:1c:81:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945 Validity Not Before: Oct 1 15:40:16 2025 GMT Not After : Dec 30 16:40:16 2025 GMT Subject: CN=2d275be8-acfd-4b92-abb1-ba9dd1bd3a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0e:a7:1c:52:5c:79:d5:37:af:b1:55:72:96: cc:a4:f4:a2:c1:42:7e:be:5c:24:e7:d0:4c:67:8f: 50:0e:23:17:88:33:c0:a3:cd:43:e2:8e:8f:69:3b: d2:bf:24:56:53:e1:92:35:75:4f:42:01:a1:a6:8c: 18:33:f8:33:4a:0e:46:a0:ba:f8:df:e5:03:6b:44: e0:ef:3b:40:c2:95:d5:e5:e7:3d:a1:4e:6c:93:1c: b0:ac:4a:59:b9:27:73:3b:ab:03:e3:e5:41:99:03: f9:32:ef:f6:71:1c:2f:26:a8:cd:6d:66:4c:25:fa: b0:07:c7:d7:35:b4:c6:70:1b:a6:bc:f3:e9:63:d6: da:28:8d:d9:de:60:2a:3b:d0:df:cc:cd:62:30:0b: 46:c7:14:16:dc:7b:96:1c:54:4d:13:fb:cb:77:39: 50:79:35:d7:7e:42:c7:73:43:2c:79:64:6b:bf:89: 87:9d:29:a5:d4:b8:e2:2a:42:4d:37:dd:29:7b:33: 8c:1c:26:3c:6e:c2:8a:d1:82:ed:41:7b:30:2a:5f: 9e:07:c9:c0:0e:bc:27:4d:ca:14:eb:98:73:c3:10: bc:6a:03:dc:82:b0:04:e5:80:a3:f8:af:72:58:95: 48:00:d5:cc:d5:12:07:ba:04:e8:bf:d3:f9:e7:76: e9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D3:E0:7F:14:68:B1:C9:81:05:26:70:2B:34:3B:BB:D8:F5:8F:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/4b8f80f9-63c7-3bfe-9991-56433a798d18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl X509v3 Authority Key Identifier: keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer sbgp-ipAddrBlock: critical IPv4: 208.56.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:6a:09:bc:e8:f5:d3:ab:4c:5d:06:68:57:01:ab:89:5a:e7: 10:3d:60:db:82:a4:6c:f0:59:c8:ac:02:dc:18:f5:e0:da:43: b7:40:96:32:95:f2:31:43:ae:18:0f:3c:4f:e2:bd:48:76:ec: 3f:f5:cd:30:60:e0:a8:89:d9:09:c0:41:8e:eb:cc:e9:88:f0: 4b:3c:cb:e9:55:b0:f5:d1:05:9a:c7:1b:bb:cd:5d:8b:07:3e: 97:8b:2d:b1:04:32:fd:f6:74:aa:f0:f2:80:b2:8c:39:e9:55: 55:a9:55:cb:3e:71:ec:20:58:11:88:78:ba:a7:ce:fa:4b:b0: 1a:27:2b:1f:8c:cc:d6:ae:c1:15:2d:6a:35:a1:9b:2c:76:8d: 14:f9:12:e9:1b:b1:f5:9b:47:e6:49:df:78:e7:ed:28:83:f8: ff:ef:3e:bb:5b:76:94:88:64:4d:21:e6:24:e0:f1:c1:86:ed: 5a:56:b8:34:98:5e:a2:30:a4:fd:96:71:16:e2:f2:8e:32:1f: 68:eb:38:55:f0:23:f4:d4:e3:fd:2a:b1:ee:1c:85:92:7e:97: 40:17:1d:5f:f2:6f:52:ad:9b:cf:70:69:99:c1:04:21:85:6d: 1d:22:f3:d2:49:55:f5:6a:4a:6f:c9:4c:a6:78:1d:27:99:70: a7:9e:c7:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtg67mrJWPwbByB5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EyYmUzMDMtNDUyNS00NDMzLWIyMjAtYjFjNmI1MDUy OTQ1MB4XDTI1MTAwMTE1NDAxNloXDTI1MTIzMDE2NDAxNlowLzEtMCsGA1UEAxMk MmQyNzViZTgtYWNmZC00YjkyLWFiYjEtYmE5ZGQxYmQzYTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow6nHFJcedU3r7FVcpbMpPSiwUJ+vlwk59BM Z49QDiMXiDPAo81D4o6PaTvSvyRWU+GSNXVPQgGhpowYM/gzSg5GoLr43+UDa0Tg 7ztAwpXV5ec9oU5skxywrEpZuSdzO6sD4+VBmQP5Mu/2cRwvJqjNbWZMJfqwB8fX NbTGcBumvPPpY9baKI3Z3mAqO9DfzM1iMAtGxxQW3HuWHFRNE/vLdzlQeTXXfkLH c0MseWRrv4mHnSml1LjiKkJNN90pezOMHCY8bsKK0YLtQXswKl+eB8nADrwnTcoU 65hzwxC8agPcgrAE5YCj+K9yWJVIANXM1RIHugTov9P553bpSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzT4H8UaLHJgQUmcCs0O7vY9Y+XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJi ZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2YjUwNTI5NDUvNGI4ZjgwZjktNjNjNy0z YmZlLTk5OTEtNTY0MzNhNzk4ZDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2EyYmUzMDMtNDUyNS00NDMzLWIy MjAtYjFjNmI1MDUyOTQ1LzdhMmJlMzAzLTQ1MjUtNDQzMy1iMjIwLWIxYzZiNTA1 Mjk0NS5jcmwwHwYDVR0jBBgwFoAUcB/v7q15UMvEYiozrSRlUmV13rIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJiZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2 YjUwNTI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DgCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhqCbzo9dOrTF0GaFcBq4la5xA9YNuCpGzwWcisAtwY9eDaQ7dAljKV 8jFDrhgPPE/ivUh27D/1zTBg4KiJ2QnAQY7rzOmI8Es8y+lVsPXRBZrHG7vNXYsH PpeLLbEEMv32dKrw8oCyjDnpVVWpVcs+cewgWBGIeLqnzvpLsBonKx+MzNauwRUt ajWhmyx2jRT5EukbsfWbR+ZJ33jn7SiD+P/vPrtbdpSIZE0h5iTg8cGG7VpWuDSY XqIwpP2WcRbi8o4yH2jrOFXwI/TU4/0qse4chZJ+l0AXHV/yb1Ktm89waZnBBCGF bR0i89JJVfVqSm/JTKZ4HSeZcKeexyQ= -----END CERTIFICATE-----Generated at Fri Oct 10 21:29:53 2025 by rpki-client