$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/503e3aea-7ff7-3e37-9611-2fa65ee0d6b1.roa File: 503e3aea-7ff7-3e37-9611-2fa65ee0d6b1.roa (raw, json) Hash identifier: 7v58SZc4mHdokypD9oQy+hoQNXq4wfANgn3y+Ff1NzA= Subject key identifier: 79:F5:08:45:10:61:1C:54:36:D2:BF:39:7C:26:95:B5:59:50:2B:8E Certificate issuer: /CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Certificate serial: 010D0C9F4328584B3DB7011A810FC92820439280 Authority key identifier: 21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/503e3aea-7ff7-3e37-9611-2fa65ee0d6b1.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 208.64.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:01:1a:81:0f:c9:28:20:43:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=c2cee22d-fa57-441d-8fab-48f61a007dac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:29:fc:a4:88:9d:d2:89:5b:01:11:db:14:a0: 86:96:e3:10:0f:74:80:bb:0a:fd:f8:1f:9f:92:89: 0f:10:04:a1:59:31:05:a6:3d:56:96:b3:97:26:e9: ac:3f:1d:4c:ce:c8:42:a0:d8:4a:23:7b:fc:14:de: dc:33:06:fe:76:1f:11:2b:f9:c1:45:f4:a9:0f:af: bd:b1:47:9c:ed:ca:f6:3d:7e:25:60:71:b6:56:74: 78:d1:42:fd:4c:93:ea:7b:dc:6d:51:41:1b:31:27: 52:eb:71:ac:a4:90:e0:24:a9:57:97:fc:0a:9b:57: a2:78:d7:37:3a:cb:d6:aa:e3:0a:ed:77:d8:f2:0c: a6:96:41:64:e0:cf:71:98:97:9c:94:b8:e3:07:8e: 3e:75:6e:f2:47:0a:a9:cf:9a:56:86:a4:da:73:81: 71:a3:9f:05:4f:69:73:50:9b:fa:00:9a:5c:e5:0a: f3:97:ae:33:28:6a:25:83:7f:4e:27:fd:b5:ea:7d: d6:54:68:8d:67:6b:b9:3d:18:f8:fd:0f:4e:2e:ac: 4a:81:03:eb:f5:ca:52:18:d1:30:5d:46:d3:9a:a8: b8:42:c1:2a:e7:be:77:17:e0:7a:8b:bb:b0:38:33: af:e0:dc:e7:db:b1:5b:2a:d9:c3:79:63:c4:16:0f: 34:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F5:08:45:10:61:1C:54:36:D2:BF:39:7C:26:95:B5:59:50:2B:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/503e3aea-7ff7-3e37-9611-2fa65ee0d6b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl X509v3 Authority Key Identifier: keyid:21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer sbgp-ipAddrBlock: critical IPv4: 208.64.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:07:5c:b1:6d:66:0c:94:10:ab:4e:a8:25:a2:34:26:0a:e9: 77:28:8c:be:77:80:8c:1f:52:ac:18:4f:16:f5:a7:ec:8c:25: dd:b7:db:f3:99:91:60:45:91:ac:87:e5:5e:54:75:71:20:80: 3b:90:55:62:b5:88:87:69:2b:0d:57:83:6c:a5:b4:41:bb:ac: 8c:9d:71:2d:1a:18:ee:26:38:bb:ca:32:8d:00:59:92:b8:3a: 5d:d9:ce:34:ad:4a:79:1e:51:74:0b:46:77:3e:d3:a1:f9:20: cc:1f:7a:9a:b3:02:a4:16:16:f1:ae:e6:e8:e8:e9:65:cb:c7: de:da:f5:dd:8a:70:1b:d7:65:e7:13:24:1d:68:42:74:0b:40: 7e:68:53:cc:0b:e1:81:7d:1b:f0:b4:8b:d0:f4:3c:30:5d:82: a5:a9:bc:53:8c:9a:6f:ca:ab:86:8b:df:3f:79:6d:25:85:7e: 5a:0e:3e:5c:40:9a:51:52:64:d4:ac:ab:aa:50:c0:06:2f:b5: a6:a8:2f:3f:a6:d2:fd:90:74:a5:5d:84:4d:21:8c:23:27:5a: 88:51:12:09:2c:dd:c5:78:e4:3e:64:fc:85:24:ad:cc:ef:5b: 47:a8:13:9e:5f:a7:f7:35:fe:cd:29:96:a6:aa:d7:2f:a1:95: 9e:a8:29:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9twEagQ/JKCBDkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4N2MwYjMtMzgzYS00MzhjLWFhNDUtMWU1ZGYwZDBl MDYxMB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YzJjZWUyMmQtZmE1Ny00NDFkLThmYWItNDhmNjFhMDA3ZGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCn8pIid0olbARHbFKCGluMQD3SAuwr9+B+f kokPEAShWTEFpj1WlrOXJumsPx1MzshCoNhKI3v8FN7cMwb+dh8RK/nBRfSpD6+9 sUec7cr2PX4lYHG2VnR40UL9TJPqe9xtUUEbMSdS63GspJDgJKlXl/wKm1eieNc3 OsvWquMK7XfY8gymlkFk4M9xmJeclLjjB44+dW7yRwqpz5pWhqTac4Fxo58FT2lz UJv6AJpc5Qrzl64zKGolg39OJ/216n3WVGiNZ2u5PRj4/Q9OLqxKgQPr9cpSGNEw XUbTmqi4QsEq5753F+B6i7uwODOv4Nzn27FbKtnDeWPEFg80RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHn1CEUQYRxUNtK/OXwmlbVZUCuOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3 YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVkZjBkMGUwNjEvNTAzZTNhZWEtN2ZmNy0z ZTM3LTk2MTEtMmZhNjVlZTBkNmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGU4N2MwYjMtMzgzYS00MzhjLWFh NDUtMWU1ZGYwZDBlMDYxLzRlODdjMGIzLTM4M2EtNDM4Yy1hYTQ1LTFlNWRmMGQw ZTA2MS5jcmwwHwYDVR0jBBgwFoAUIbRtv8sZKo0pVPBrIIKDwhIbf9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVk ZjBkMGUwNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EBQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYHXLFtZgyUEKtOqCWiNCYK6XcojL53gIwfUqwYTxb1p+yMJd232/OZ kWBFkayH5V5UdXEggDuQVWK1iIdpKw1Xg2yltEG7rIydcS0aGO4mOLvKMo0AWZK4 Ol3ZzjStSnkeUXQLRnc+06H5IMwfepqzAqQWFvGu5ujo6WXLx97a9d2KcBvXZecT JB1oQnQLQH5oU8wL4YF9G/C0i9D0PDBdgqWpvFOMmm/Kq4aL3z95bSWFfloOPlxA mlFSZNSsq6pQwAYvtaaoLz+m0v2QdKVdhE0hjCMnWohREgks3cV45D5k/IUkrczv W0eoE55fp/c1/s0plqaq1y+hlZ6oKfc= -----END CERTIFICATE-----Generated at Wed Oct 8 19:41:59 2025 by rpki-client