$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/2e712cbf-a526-3fa2-94d8-52657449f5ef.roa File: 2e712cbf-a526-3fa2-94d8-52657449f5ef.roa (raw, json) Hash identifier: yzixnfECkPhAjB3tCtXzT6mWGEhSNRQoHnbsrBEKFqM= Subject key identifier: 17:4A:C2:6B:2B:48:C9:72:18:79:F5:E8:01:D3:D0:11:6E:03:0A:63 Certificate issuer: /CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Certificate serial: 010D0C9F4328584B4E6B9DF7750D84ADD49EA700 Authority key identifier: E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/2e712cbf-a526-3fa2-94d8-52657449f5ef.roa Signing time: Thu 25 Sep 2025 00:37:35 +0000 ROA not before: Thu 25 Sep 2025 00:37:35 +0000 ROA not after: Wed 24 Dec 2025 01:37:35 +0000 asID: 394500 IP address blocks: 208.96.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:6b:9d:f7:75:0d:84:ad:d4:9e:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Validity Not Before: Sep 25 00:37:35 2025 GMT Not After : Dec 24 01:37:35 2025 GMT Subject: CN=81ab6e86-480a-4f61-87d5-29528307374b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:df:2d:36:bb:74:0e:74:61:75:04:d9:e2:29: ff:b4:f9:2e:50:11:cd:c2:68:58:12:47:15:ca:f0: 40:4a:b7:72:5b:c5:94:79:57:64:b7:11:30:a3:ab: 76:1b:12:f7:93:50:b3:4b:3d:8d:48:47:2e:94:e4: 0a:1d:71:09:8a:f1:a4:be:c7:e2:0b:25:19:fd:7b: 8c:72:e2:6e:93:69:4a:11:4a:dd:5f:18:0f:6f:bf: 95:b3:0e:fc:3a:43:45:34:25:a5:5e:4c:ba:0e:d0: a3:07:aa:1e:8b:f0:3e:4b:7e:94:8a:b3:00:0f:bb: 44:c1:41:88:ec:fa:6d:45:ca:89:78:be:d5:f2:8a: fd:8e:20:b1:94:8f:57:e9:a1:9e:e1:2e:46:32:35: 8d:33:57:cc:63:0b:b8:ec:42:75:02:ab:16:f4:2c: c0:39:e3:94:a5:9c:3a:06:29:59:9b:eb:b3:a2:63: fd:e2:90:19:6a:98:c4:ad:76:d1:4f:49:91:49:36: be:d8:95:14:50:f0:1f:96:b3:b8:6a:93:23:0a:a3: 4c:00:90:8a:05:36:e3:77:06:17:c0:a0:60:6d:8f: dc:37:89:06:ad:77:e0:fe:be:35:8a:8f:04:1f:57: aa:2d:b7:75:c7:36:dc:60:a3:5d:4c:15:61:43:fc: 11:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:4A:C2:6B:2B:48:C9:72:18:79:F5:E8:01:D3:D0:11:6E:03:0A:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/2e712cbf-a526-3fa2-94d8-52657449f5ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl X509v3 Authority Key Identifier: keyid:E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer sbgp-ipAddrBlock: critical IPv4: 208.96.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:b2:a2:03:91:f9:50:d4:d5:3d:46:b7:f4:e5:c4:3e:3c:66: c7:73:61:fa:e8:08:e8:7e:31:5c:cd:a2:ca:a2:ba:26:e8:db: d6:39:23:1c:4e:fe:16:c5:a4:25:6c:61:f9:66:44:02:1c:cb: 82:64:76:c2:6d:a3:2b:ba:75:26:97:00:29:df:1c:21:f7:54: 46:d2:be:5e:73:ef:94:4d:df:fe:f2:17:32:e0:a6:44:d5:f5: 62:61:d3:a0:ea:c9:e2:93:da:6f:90:75:c6:38:0a:b4:81:e7: ae:20:a3:04:5c:6f:e2:23:35:60:16:a5:31:1d:3e:98:18:d1: 32:35:cb:04:e2:c1:0d:01:9f:50:07:8f:15:dd:76:90:74:9c: a5:7d:ca:84:b9:de:7d:bc:bc:d0:81:b8:d0:c9:65:26:28:5a: fc:fe:dd:23:4f:01:7c:6d:2d:0b:53:73:44:47:59:76:a9:7f: 9e:98:59:d1:c6:12:25:80:bc:0a:68:d1:1c:53:52:b1:f3:ad: a7:a3:e9:33:a4:16:bf:46:2e:16:9d:fc:2e:cb:c8:9a:9a:39: 17:f9:7c:ac:b1:54:37:7f:df:38:ca:83:e9:cc:3d:b7:93:e6: f2:68:41:ae:2b:53:42:9d:46:aa:fc:e4:69:87:ae:d2:e5:8f: 59:0b:2a:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOa533dQ2ErdSepwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU2ZDJhMmUtOWFjNy00ZDI5LWJkMTUtNzU4NzRkNDlk ZjY2MB4XDTI1MDkyNTAwMzczNVoXDTI1MTIyNDAxMzczNVowLzEtMCsGA1UEAxMk ODFhYjZlODYtNDgwYS00ZjYxLTg3ZDUtMjk1MjgzMDczNzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjt8tNrt0DnRhdQTZ4in/tPkuUBHNwmhYEkcV yvBASrdyW8WUeVdktxEwo6t2GxL3k1CzSz2NSEculOQKHXEJivGkvsfiCyUZ/XuM cuJuk2lKEUrdXxgPb7+Vsw78OkNFNCWlXky6DtCjB6oei/A+S36UirMAD7tEwUGI 7PptRcqJeL7V8or9jiCxlI9X6aGe4S5GMjWNM1fMYwu47EJ1AqsW9CzAOeOUpZw6 BilZm+uzomP94pAZapjErXbRT0mRSTa+2JUUUPAflrO4apMjCqNMAJCKBTbjdwYX wKBgbY/cN4kGrXfg/r41io8EH1eqLbd1xzbcYKNdTBVhQ/wRVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdKwmsrSMlyGHn16AHT0BFuAwpjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yNTZk MmEyZS05YWM3LTRkMjktYmQxNS03NTg3NGQ0OWRmNjYvMmU3MTJjYmYtYTUyNi0z ZmEyLTk0ZDgtNTI2NTc0NDlmNWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjU2ZDJhMmUtOWFjNy00ZDI5LWJk MTUtNzU4NzRkNDlkZjY2LzI1NmQyYTJlLTlhYzctNGQyOS1iZDE1LTc1ODc0ZDQ5 ZGY2Ni5jcmwwHwYDVR0jBBgwFoAU50wJluiEUMDP1YbVRi9w7tJXlQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yNTZkMmEyZS05YWM3LTRkMjktYmQxNS03NTg3 NGQ0OWRmNjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0GC8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeyogOR+VDU1T1Gt/TlxD48ZsdzYfroCOh+MVzNosqiuibo29Y5IxxO /hbFpCVsYflmRAIcy4JkdsJtoyu6dSaXACnfHCH3VEbSvl5z75RN3/7yFzLgpkTV 9WJh06DqyeKT2m+QdcY4CrSB564gowRcb+IjNWAWpTEdPpgY0TI1ywTiwQ0Bn1AH jxXddpB0nKV9yoS53n28vNCBuNDJZSYoWvz+3SNPAXxtLQtTc0RHWXapf56YWdHG EiWAvApo0RxTUrHzraej6TOkFr9GLhad/C7LyJqaORf5fKyxVDd/3zjKg+nMPbeT 5vJoQa4rU0KdRqr85GmHrtLlj1kLKgk= -----END CERTIFICATE-----Generated at Thu Oct 9 00:59:13 2025 by rpki-client