$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/7c82a209-9386-3901-a7b9-57c1f597512b.roa File: 7c82a209-9386-3901-a7b9-57c1f597512b.roa (raw, json) Hash identifier: v2y35aHHCi4KNLSqpoepJOcWoCd2UpQDy3tNAhyvEeU= Subject key identifier: 35:B8:AC:DB:A1:19:55:0E:08:EE:39:49:D8:0C:76:B9:49:98:99:4F Certificate issuer: /CN=8cf8807c-494e-41ab-842c-c0672d6283b1 Certificate serial: 010D0C9F4328584B4081A7962F93405999EA1220 Authority key identifier: 99:22:B4:C2:53:72:17:E1:3D:05:32:6E:4D:EE:63:68:74:51:84:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/7c82a209-9386-3901-a7b9-57c1f597512b.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 22251 IP address blocks: 208.68.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:a7:96:2f:93:40:59:99:ea:12:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cf8807c-494e-41ab-842c-c0672d6283b1 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=25e714f5-c510-4adc-a85c-0e1b4e5412d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9f:68:3d:1b:e2:02:81:7f:e8:23:fc:f5:47: bd:71:60:9b:91:32:37:f2:7f:51:91:28:8f:bc:1f: 9f:16:bd:16:6b:6e:81:61:4c:18:cb:b0:92:c6:1a: 6d:60:c4:74:77:29:61:44:aa:4b:59:f8:91:30:21: 64:02:65:93:e5:62:04:6f:66:69:50:ce:b8:d0:10: 21:44:ea:de:3b:74:12:26:b3:ac:1d:53:c4:66:ff: 07:89:b5:08:65:9c:78:54:73:ac:14:f3:0d:95:66: 08:9a:d3:e7:15:e4:94:fe:52:7c:2a:29:d3:c0:32: d9:67:62:7e:65:b3:2f:79:fe:62:26:8a:40:4f:4f: e8:a7:f1:f8:27:8b:17:a7:ec:76:0a:44:3b:34:43: 22:de:fd:a3:c7:64:9b:3f:8e:cc:60:46:46:bd:cf: f1:44:08:ff:e5:28:9d:84:30:a6:18:af:15:bb:d4: 0f:44:a9:69:eb:b6:86:e6:32:f9:07:e4:bb:8e:b3: b8:2e:0b:b4:ae:a4:68:19:6d:92:93:ef:d5:ed:78: ce:dc:33:16:c9:56:4f:6b:20:b4:4d:2d:f8:5b:60: 29:21:ee:03:43:b1:35:a3:87:8d:66:ab:0f:82:09: 5f:de:cf:de:ef:e7:d4:7d:db:f1:74:1c:d8:ab:dc: a9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B8:AC:DB:A1:19:55:0E:08:EE:39:49:D8:0C:76:B9:49:98:99:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/7c82a209-9386-3901-a7b9-57c1f597512b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.crl X509v3 Authority Key Identifier: keyid:99:22:B4:C2:53:72:17:E1:3D:05:32:6E:4D:EE:63:68:74:51:84:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer sbgp-ipAddrBlock: critical IPv4: 208.68.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:67:a1:bb:dd:22:11:5e:f4:ed:46:3c:75:b9:78:9f:73:b8: 16:1a:5e:ee:26:d1:2f:c4:4d:3c:51:8a:45:e3:02:3f:a1:87: 90:7f:01:65:48:10:1b:68:c6:0d:93:b0:83:c4:2b:c0:2f:0e: bf:08:9e:8b:06:7b:87:b5:da:80:46:7a:55:13:c7:46:20:3b: 65:ba:81:34:4d:32:86:76:01:5a:17:f1:15:b9:c5:0a:65:46: 79:4d:d7:f6:98:91:cc:d3:7c:3c:0b:1c:ba:11:81:45:20:1a: b7:0c:55:d0:9b:db:e7:83:db:b5:88:d5:49:62:88:1d:19:09: 7c:f2:c4:a4:bd:14:96:73:67:3a:a0:d5:68:d9:85:48:3d:54: 2b:e3:50:a9:3a:42:06:7a:6f:a0:73:f8:31:35:ce:32:39:3c: 98:2c:42:0a:f4:b9:22:89:b0:e4:a9:4e:e2:cc:23:8e:ae:50: 3c:6e:0f:de:8c:7b:a0:ca:41:b3:d0:5d:b1:46:6d:4a:89:72: b1:30:16:f7:fe:5d:48:d2:dc:a9:ab:c5:24:d6:39:7f:ee:01: 38:03:78:5d:f8:18:0b:26:86:12:54:ba:ec:78:ad:aa:74:be: f6:9b:e1:c1:94:31:f4:83:5a:7f:54:09:04:44:fd:35:eb:64: 93:ba:46:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgaeWL5NAWZnqEiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNmODgwN2MtNDk0ZS00MWFiLTg0MmMtYzA2NzJkNjI4 M2IxMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk MjVlNzE0ZjUtYzUxMC00YWRjLWE4NWMtMGUxYjRlNTQxMmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZ9oPRviAoF/6CP89Ue9cWCbkTI38n9RkSiP vB+fFr0Wa26BYUwYy7CSxhptYMR0dylhRKpLWfiRMCFkAmWT5WIEb2ZpUM640BAh ROreO3QSJrOsHVPEZv8HibUIZZx4VHOsFPMNlWYImtPnFeSU/lJ8KinTwDLZZ2J+ ZbMvef5iJopAT0/op/H4J4sXp+x2CkQ7NEMi3v2jx2SbP47MYEZGvc/xRAj/5Sid hDCmGK8Vu9QPRKlp67aG5jL5B+S7jrO4Lgu0rqRoGW2Sk+/V7XjO3DMWyVZPayC0 TS34W2ApIe4DQ7E1o4eNZqsPgglf3s/e7+fUfdvxdBzYq9yp5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDW4rNuhGVUOCO45SdgMdrlJmJlPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84Y2Y4 ODA3Yy00OTRlLTQxYWItODQyYy1jMDY3MmQ2MjgzYjEvN2M4MmEyMDktOTM4Ni0z OTAxLWE3YjktNTdjMWY1OTc1MTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGNmODgwN2MtNDk0ZS00MWFiLTg0 MmMtYzA2NzJkNjI4M2IxLzhjZjg4MDdjLTQ5NGUtNDFhYi04NDJjLWMwNjcyZDYy ODNiMS5jcmwwHwYDVR0jBBgwFoAUmSK0wlNyF+E9BTJuTe5jaHRRhJgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84Y2Y4ODA3Yy00OTRlLTQxYWItODQyYy1jMDY3 MmQ2MjgzYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EQYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9nobvdIhFe9O1GPHW5eJ9zuBYaXu4m0S/ETTxRikXjAj+hh5B/AWVI EBtoxg2TsIPEK8AvDr8InosGe4e12oBGelUTx0YgO2W6gTRNMoZ2AVoX8RW5xQpl RnlN1/aYkczTfDwLHLoRgUUgGrcMVdCb2+eD27WI1UliiB0ZCXzyxKS9FJZzZzqg 1WjZhUg9VCvjUKk6QgZ6b6Bz+DE1zjI5PJgsQgr0uSKJsOSpTuLMI46uUDxuD96M e6DKQbPQXbFGbUqJcrEwFvf+XUjS3KmrxSTWOX/uATgDeF34GAsmhhJUuux4rap0 vvab4cGUMfSDWn9UCQRE/TXrZJO6RtU= -----END CERTIFICATE-----Generated at Sat Oct 11 10:30:14 2025 by rpki-client