$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/0fa138cc-579e-337f-844b-d4a832c956c9.roa File: 0fa138cc-579e-337f-844b-d4a832c956c9.roa (raw, json) Hash identifier: ApwDEctL9TLs3KJN0diXfxAcy/+GhS7tGmlh3U72Udc= Subject key identifier: FC:D3:EE:88:B4:50:BA:88:BC:C1:6A:D3:7B:F7:6C:03:27:33:0C:F1 Certificate issuer: /CN=a20363da-11e1-47d9-ac51-fe156737c8bb Certificate serial: 010D0C9F4328584AFC1BEC65DF17E4AFBEFFA180 Authority key identifier: D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/0fa138cc-579e-337f-844b-d4a832c956c9.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 55039 IP address blocks: 208.66.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:ec:65:df:17:e4:af:be:ff:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a20363da-11e1-47d9-ac51-fe156737c8bb Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=f39bc902-f809-47f4-9a4f-89de31ca9004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8d:de:ac:56:b8:e9:8d:f5:32:d3:72:4a:61: 09:5c:e5:f2:d5:e3:c5:4e:eb:58:9a:62:12:e1:34: b6:bf:62:4d:09:99:ec:02:70:1d:65:21:20:d7:ca: 3f:4f:41:7b:9d:10:84:53:7f:16:36:f4:58:03:76: 13:84:f4:7a:3e:58:e6:19:53:15:19:cd:bb:3c:64: 7e:8d:f5:12:5e:9c:db:68:e5:0c:79:26:cc:36:dd: e2:45:41:f9:c5:c7:67:d6:71:83:c6:27:9a:d8:ce: 5d:b4:12:36:fd:b4:6a:af:c0:16:50:db:58:dc:d7: df:54:2f:ce:de:dc:b6:e6:3d:9b:ae:a5:e0:b3:ab: 3e:1f:57:21:e5:89:da:4c:6a:de:58:9a:94:3b:7a: e5:81:70:d4:2b:fe:7b:f0:af:b1:b0:e9:06:55:f9: 8d:c6:3a:46:f3:5d:91:30:fa:f7:9f:eb:f2:45:24: c5:14:2f:08:c7:f8:1e:1f:8c:39:53:86:ce:b3:1d: aa:b2:b5:c0:7e:a6:5b:1f:50:a0:9d:1e:32:4a:56: 7a:55:e0:92:2b:f5:01:ab:24:d9:2f:ab:35:f9:10: db:c9:02:3b:86:8a:7e:5d:2a:e1:f1:78:c1:b7:b2: fa:c6:3b:a9:9b:44:65:3f:81:4e:66:ca:8a:35:c8: 18:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D3:EE:88:B4:50:BA:88:BC:C1:6A:D3:7B:F7:6C:03:27:33:0C:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/0fa138cc-579e-337f-844b-d4a832c956c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl X509v3 Authority Key Identifier: keyid:D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer sbgp-ipAddrBlock: critical IPv4: 208.66.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:59:fc:5c:52:a2:3f:7c:d1:7d:1b:b6:33:d5:3d:c4:4c:b6: 53:5b:59:cf:2e:de:23:35:74:88:56:f6:29:21:8d:79:c3:c9: 93:70:f7:f3:a7:ba:52:c5:c1:46:72:fe:e9:2a:41:29:62:7a: 57:bd:12:f8:24:0f:7c:11:da:c2:8a:70:e2:0b:20:e6:04:29: 81:2a:9e:c6:86:67:42:fb:22:2c:92:1d:ab:ef:b3:42:fd:1a: d4:27:be:48:12:31:40:4d:42:86:f6:12:1e:d9:35:c2:0b:77: 30:1e:e4:eb:bb:7e:91:53:f6:0e:5c:e7:a5:38:b9:69:96:c1: 8f:54:28:9c:a1:af:4c:f9:a4:0d:e3:4b:fb:dc:56:f8:95:21: 32:d1:68:9d:96:83:4d:fb:83:26:84:6a:92:4e:96:64:4f:1a: 8e:66:ba:67:25:61:eb:c8:76:e8:fd:ec:1a:e4:d2:7f:5d:fc: 69:39:c8:a0:be:ee:df:c0:85:be:73:52:7e:31:e9:30:11:1e: ce:d1:59:53:ff:2b:b3:7c:44:a3:90:18:47:2f:aa:08:5c:af: 56:68:54:f0:4c:3f:69:cf:dc:82:5d:2b:84:e2:9b:12:ed:a4: 32:d9:d0:8c:8d:db:83:be:6e:d0:1c:5d:fc:21:3b:4c:a9:04: b8:f3:5f:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G+xl3xfkr77/oYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIwMzYzZGEtMTFlMS00N2Q5LWFjNTEtZmUxNTY3Mzdj OGJiMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZjM5YmM5MDItZjgwOS00N2Y0LTlhNGYtODlkZTMxY2E5MDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY3erFa46Y31MtNySmEJXOXy1ePFTutYmmIS 4TS2v2JNCZnsAnAdZSEg18o/T0F7nRCEU38WNvRYA3YThPR6PljmGVMVGc27PGR+ jfUSXpzbaOUMeSbMNt3iRUH5xcdn1nGDxiea2M5dtBI2/bRqr8AWUNtY3NffVC/O 3ty25j2brqXgs6s+H1ch5YnaTGreWJqUO3rlgXDUK/578K+xsOkGVfmNxjpG812R MPr3n+vyRSTFFC8Ix/geH4w5U4bOsx2qsrXAfqZbH1CgnR4ySlZ6VeCSK/UBqyTZ L6s1+RDbyQI7hop+XSrh8XjBt7L6xjupm0RlP4FOZsqKNcgYawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzT7oi0ULqIvMFq03v3bAMnMwzxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAz NjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1NjczN2M4YmIvMGZhMTM4Y2MtNTc5ZS0z MzdmLTg0NGItZDRhODMyYzk1NmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTIwMzYzZGEtMTFlMS00N2Q5LWFj NTEtZmUxNTY3MzdjOGJiL2EyMDM2M2RhLTExZTEtNDdkOS1hYzUxLWZlMTU2NzM3 YzhiYi5jcmwwHwYDVR0jBBgwFoAU00Sj8uDd7uXT1A4v3OrfYK5roBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAzNjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1 NjczN2M4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdZ/FxSoj980X0btjPVPcRMtlNbWc8u3iM1dIhW9ikhjXnDyZNw9/On ulLFwUZy/ukqQSliele9EvgkD3wR2sKKcOILIOYEKYEqnsaGZ0L7IiySHavvs0L9 GtQnvkgSMUBNQob2Eh7ZNcILdzAe5Ou7fpFT9g5c56U4uWmWwY9UKJyhr0z5pA3j S/vcVviVITLRaJ2Wg037gyaEapJOlmRPGo5mumclYevIduj97Brk0n9d/Gk5yKC+ 7t/Ahb5zUn4x6TARHs7RWVP/K7N8RKOQGEcvqghcr1ZoVPBMP2nP3IJdK4TimxLt pDLZ0IyN24O+btAcXfwhO0ypBLjzX7k= -----END CERTIFICATE-----Generated at Tue Oct 21 18:04:34 2025 by rpki-client