$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/38034f38-ee51-39ae-8b7b-9c9ac94d3590.roa File: 38034f38-ee51-39ae-8b7b-9c9ac94d3590.roa (raw, json) Hash identifier: Jnm2TGcKqSrL4X0RxOO9UFvaAZ7o8GZYVgpPFF+4FTE= Subject key identifier: 14:1A:9C:A7:19:82:0C:36:17:1F:BE:77:4C:DF:AE:5A:09:44:E7:F9 Certificate issuer: /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Certificate serial: 010D0C9F4328584B2066CFEC372B38FA64CCF840 Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/38034f38-ee51-39ae-8b7b-9c9ac94d3590.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 21782 IP address blocks: 67.209.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:cf:ec:37:2b:38:fa:64:cc:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=abeb3758-c463-4b46-a781-071120279897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:77:24:30:84:ff:34:9f:8b:11:4b:a3:20:cb: d6:a1:95:c1:a6:10:50:b6:a4:4c:bb:7a:22:dd:76: 38:7d:a7:94:a0:fb:20:a1:1e:d9:05:90:fa:17:8f: 7a:90:22:e4:4e:0c:eb:cd:01:47:d3:eb:a6:f8:1d: e7:59:fe:3c:4a:13:82:20:4b:3a:a0:99:d0:b1:78: c5:6a:fa:4a:07:4e:37:a8:00:b0:14:55:aa:be:e7: 75:17:e7:9f:be:8b:ef:9e:80:bf:cc:c0:5a:c1:67: 8e:6f:d8:44:b0:6e:e3:c0:02:ab:9d:7a:1f:2f:b2: a7:84:44:a5:ab:5e:55:bd:d8:82:82:97:9d:a9:c1: 9c:b4:15:b8:0c:f0:92:25:12:98:f9:db:03:18:69: f0:0b:f4:f0:0a:20:bf:35:e6:9c:39:cb:7f:25:fd: c9:ba:f3:e9:cf:f4:f1:82:f4:eb:c6:3a:91:ac:40: 91:18:c8:df:4c:11:5f:53:32:dc:06:b5:7c:2d:56: f0:96:53:54:28:a6:67:8a:7d:96:6b:a8:cb:b8:e0: a4:a1:3a:57:36:f3:f1:09:4a:80:21:96:8b:19:82: 6c:e9:d6:8d:9d:89:c8:98:25:fc:05:42:87:b4:7e: 23:54:5c:91:15:92:2c:54:c5:ed:66:6e:49:85:62: 14:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:1A:9C:A7:19:82:0C:36:17:1F:BE:77:4C:DF:AE:5A:09:44:E7:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/38034f38-ee51-39ae-8b7b-9c9ac94d3590.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl X509v3 Authority Key Identifier: keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer sbgp-ipAddrBlock: critical IPv4: 67.209.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:16:31:75:a8:9d:62:ac:74:8e:06:e3:19:4c:57:30:39:bc: aa:8f:e3:a1:cd:53:ab:a7:7a:63:52:d6:88:4b:5a:72:f7:f8: bd:a3:f1:44:0a:25:7b:4c:b2:90:3b:c0:97:ab:ec:f8:5f:ce: 1a:fa:63:ae:c2:1e:f0:b4:eb:42:0a:dd:62:cb:eb:63:ad:9c: 30:89:e8:09:fb:7a:7e:0d:b8:7e:8c:9e:10:6e:3f:7f:45:25: b1:5f:32:53:78:f4:ec:22:47:04:d0:d3:5d:ee:0a:ca:df:e8: 0f:7e:ee:67:93:99:b1:8b:e1:11:86:3a:98:2f:bd:db:0e:95: a6:2e:17:01:8d:6d:b9:98:09:be:df:72:a0:fe:bb:9f:65:db: 57:a1:14:df:8a:e8:50:c0:90:bf:8d:a5:bf:f2:ce:b0:15:cc: e3:2e:aa:dd:a5:bf:9f:4e:1d:c7:72:47:fc:e9:cb:23:25:e9: dc:e9:cc:49:41:3f:e1:d5:a5:b5:09:f1:e2:75:83:be:f9:35: c0:99:68:46:dc:84:c8:f2:13:d7:1b:46:9f:8f:7c:08:9a:a9: 3f:dc:7f:24:fc:a9:17:ad:b1:17:87:7c:99:8b:fb:f8:cf:1e: 18:e6:7b:e8:db:7b:38:0d:e8:33:01:db:db:bc:0d:9b:58:85: e5:dd:c7:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZs/sNys4+mTM+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM3ZGJjZDUtZDZiYi00YTg5LTk4YWUtZTI1NTBlYTNl OTNhMB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk YWJlYjM3NTgtYzQ2My00YjQ2LWE3ODEtMDcxMTIwMjc5ODk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXckMIT/NJ+LEUujIMvWoZXBphBQtqRMu3oi 3XY4faeUoPsgoR7ZBZD6F496kCLkTgzrzQFH0+um+B3nWf48ShOCIEs6oJnQsXjF avpKB043qACwFFWqvud1F+efvovvnoC/zMBawWeOb9hEsG7jwAKrnXofL7KnhESl q15VvdiCgpedqcGctBW4DPCSJRKY+dsDGGnwC/TwCiC/NeacOct/Jf3JuvPpz/Tx gvTrxjqRrECRGMjfTBFfUzLcBrV8LVbwllNUKKZnin2Wa6jLuOCkoTpXNvPxCUqA IZaLGYJs6daNnYnImCX8BUKHtH4jVFyRFZIsVMXtZm5JhWIU3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQanKcZggw2Fx++d0zfrloJROf5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Yzdk YmNkNS1kNmJiLTRhODktOThhZS1lMjU1MGVhM2U5M2EvMzgwMzRmMzgtZWU1MS0z OWFlLThiN2ItOWM5YWM5NGQzNTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGM3ZGJjZDUtZDZiYi00YTg5LTk4 YWUtZTI1NTBlYTNlOTNhLzhjN2RiY2Q1LWQ2YmItNGE4OS05OGFlLWUyNTUwZWEz ZTkzYS5jcmwwHwYDVR0jBBgwFoAUAzePKejZd54MxR716MslpAwKWwIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84YzdkYmNkNS1kNmJiLTRhODktOThhZS1lMjU1 MGVhM2U5M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ9HQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMWMXWonWKsdI4G4xlMVzA5vKqP46HNU6unemNS1ohLWnL3+L2j8UQK JXtMspA7wJer7Phfzhr6Y67CHvC060IK3WLL62OtnDCJ6An7en4NuH6MnhBuP39F JbFfMlN49OwiRwTQ013uCsrf6A9+7meTmbGL4RGGOpgvvdsOlaYuFwGNbbmYCb7f cqD+u59l21ehFN+K6FDAkL+Npb/yzrAVzOMuqt2lv59OHcdyR/zpyyMl6dzpzElB P+HVpbUJ8eJ1g775NcCZaEbchMjyE9cbRp+PfAiaqT/cfyT8qRetsReHfJmL+/jP Hhjme+jbezgN6DMB29u8DZtYheXdx2g= -----END CERTIFICATE-----Generated at Fri Oct 10 20:07:22 2025 by rpki-client