$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/3cc25bcf-8851-3c68-a89f-59793b01e859.roa File: 3cc25bcf-8851-3c68-a89f-59793b01e859.roa (raw, json) Hash identifier: ieLhjkRpfCo5sIk3B98FAXtFHlbObpUGIH4g55bpkYA= Subject key identifier: C0:4F:90:18:CC:66:E1:33:79:99:0A:38:2E:3D:31:CD:C6:42:BB:47 Certificate issuer: /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Certificate serial: 010D0C9F4328584B0CDC1BA83E4B839151D0E200 Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/3cc25bcf-8851-3c68-a89f-59793b01e859.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 852 IP address blocks: 208.68.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:1b:a8:3e:4b:83:91:51:d0:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=ed64e6d9-9a7e-49f5-800f-25275c99bdab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:7e:a5:9e:78:bb:53:32:2e:04:6d:e7:a1:7f: 52:4b:59:4d:02:b4:ce:ed:fc:f0:6b:63:3b:ec:7c: 4d:3f:eb:f2:f6:0f:d8:95:dc:e7:50:1f:a3:e4:92: d5:dd:17:e6:6f:9e:16:15:ca:30:ef:46:c8:7f:df: 70:ad:70:11:35:a6:e1:a0:f3:99:b3:c8:88:ba:6d: 67:b6:e1:5c:cd:b0:ad:56:f6:1a:0b:53:cb:55:69: f7:b9:f1:85:cf:f2:4c:5b:f3:6b:a7:b7:b9:88:98: b7:71:4d:55:72:73:bf:91:82:86:70:a3:bd:9f:7a: cc:a3:82:6f:55:33:40:5e:5d:12:af:fb:07:df:a0: bf:37:f3:25:b2:26:e3:1a:aa:29:81:8d:8e:bd:67: 2e:e3:1c:da:08:81:50:f5:87:2b:07:e6:b3:ce:d7: b3:65:a9:7b:4b:bf:31:66:44:78:53:c0:c1:1d:d2: 70:24:61:a9:b5:60:c0:88:cf:89:65:47:eb:10:4c: 00:6d:7b:41:dd:e4:b6:7a:94:67:46:04:79:6a:fc: 75:79:91:ac:04:a9:32:50:b5:a3:54:14:54:cf:50: d0:29:76:ec:07:c7:83:26:86:8c:fa:a4:17:c7:7e: de:fa:c6:e2:0b:28:02:f4:bf:3c:8e:31:4e:f3:ce: 20:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4F:90:18:CC:66:E1:33:79:99:0A:38:2E:3D:31:CD:C6:42:BB:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/3cc25bcf-8851-3c68-a89f-59793b01e859.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl X509v3 Authority Key Identifier: keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer sbgp-ipAddrBlock: critical IPv4: 208.68.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:2e:54:39:e8:40:ce:b9:e2:79:9c:dd:96:0a:01:ce:0c:0e: e6:26:40:48:1e:be:29:83:b2:01:5c:f7:de:b0:7c:75:16:68: 46:63:86:b1:ee:66:77:90:98:a1:7b:f3:49:62:4f:29:ba:19: ea:0d:8f:dd:34:66:89:31:5d:60:52:07:41:8f:c5:f0:50:2c: af:1b:e2:0b:17:9d:f7:9e:84:59:37:52:67:37:34:b2:7e:20: 3e:c6:85:44:68:18:03:6a:b4:cb:83:29:55:0c:b2:9e:31:87: ba:3b:83:93:d2:1a:66:a9:7a:ad:df:78:a5:fe:c2:65:67:42: d6:fd:cf:48:4e:ce:ad:23:2c:ff:61:11:fb:dc:30:e4:b8:01: 41:35:28:5d:c9:fc:5d:90:c7:7e:63:ed:fb:a7:bb:64:f5:ce: 6f:94:90:f2:73:15:f1:9b:87:5a:e4:92:07:c8:e0:2b:66:ea: 1e:eb:f4:17:8e:ea:45:db:73:38:46:f2:9a:85:70:06:4e:b8: 17:bf:55:47:97:7d:68:dc:35:8e:a2:9d:a9:00:de:10:42:3f: d8:5a:b8:59:fa:94:71:83:e4:0e:0e:96:bb:43:e6:50:5a:86: 48:1e:ac:2a:68:cd:5d:91:08:51:6e:2f:d2:a9:7a:04:9a:60: ca:44:82:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3BuoPkuDkVHQ4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyZGM2ZTctZmExYS00YWNmLWEwMzYtNWI0NDg3MTAw ZGU5MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk ZWQ2NGU2ZDktOWE3ZS00OWY1LTgwMGYtMjUyNzVjOTliZGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgH6lnni7UzIuBG3noX9SS1lNArTO7fzwa2M7 7HxNP+vy9g/YldznUB+j5JLV3Rfmb54WFcow70bIf99wrXARNabhoPOZs8iIum1n tuFczbCtVvYaC1PLVWn3ufGFz/JMW/Nrp7e5iJi3cU1VcnO/kYKGcKO9n3rMo4Jv VTNAXl0Sr/sH36C/N/MlsibjGqopgY2OvWcu4xzaCIFQ9YcrB+azztezZal7S78x ZkR4U8DBHdJwJGGptWDAiM+JZUfrEEwAbXtB3eS2epRnRgR5avx1eZGsBKkyULWj VBRUz1DQKXbsB8eDJoaM+qQXx37e+sbiCygC9L88jjFO884gYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBPkBjMZuEzeZkKOC49Mc3GQrtHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJk YzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0ODcxMDBkZTkvM2NjMjViY2YtODg1MS0z YzY4LWE4OWYtNTk3OTNiMDFlODU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjAyZGM2ZTctZmExYS00YWNmLWEw MzYtNWI0NDg3MTAwZGU5L2IwMmRjNmU3LWZhMWEtNGFjZi1hMDM2LTViNDQ4NzEw MGRlOS5jcmwwHwYDVR0jBBgwFoAUzajON082SuE49vB+z212scrE6D4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJkYzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0 ODcxMDBkZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ET4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUuVDnoQM654nmc3ZYKAc4MDuYmQEgevimDsgFc996wfHUWaEZjhrHu ZneQmKF780liTym6GeoNj900ZokxXWBSB0GPxfBQLK8b4gsXnfeehFk3Umc3NLJ+ ID7GhURoGANqtMuDKVUMsp4xh7o7g5PSGmapeq3feKX+wmVnQtb9z0hOzq0jLP9h EfvcMOS4AUE1KF3J/F2Qx35j7funu2T1zm+UkPJzFfGbh1rkkgfI4Ctm6h7r9BeO 6kXbczhG8pqFcAZOuBe/VUeXfWjcNY6inakA3hBCP9hauFn6lHGD5A4OlrtD5lBa hkgerCpozV2RCFFuL9KpegSaYMpEgk8= -----END CERTIFICATE-----Generated at Thu Sep 18 16:13:27 2025 by rpki-client