$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/d68c2fd0-cde6-3cd2-8afd-b50783a2217c.roa File: d68c2fd0-cde6-3cd2-8afd-b50783a2217c.roa (raw, json) Hash identifier: xvq/4ZK+MCIDLMuq7zYhi/TfnqcfNwwq0L2BwV+Sz3k= Subject key identifier: CF:BD:93:39:E4:F9:1D:8E:EF:9D:06:CD:8F:CE:19:F8:88:A3:5E:78 Certificate issuer: /CN=c0ae1cff-309c-40d1-9760-3a89a481e998 Certificate serial: 010D0C9F4328584AFC1C0A9DA0BCD9FE8B499EA0 Authority key identifier: 3D:5C:C9:D2:DF:E0:F1:12:4E:09:59:BF:BE:75:A7:C9:39:BB:13:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/d68c2fd0-cde6-3cd2-8afd-b50783a2217c.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 14907 IP address blocks: 208.80.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:0a:9d:a0:bc:d9:fe:8b:49:9e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0ae1cff-309c-40d1-9760-3a89a481e998 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=ff965773-bfef-4c7b-aab7-4eccb8349081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:54:42:23:c7:3e:a8:1e:05:76:fa:49:fc:d0: ab:62:59:49:48:4f:ad:bd:d1:32:84:fa:32:30:d3: 8b:1b:4d:3f:5a:dc:dd:5e:75:97:40:3a:1f:8b:55: 0b:a4:f0:bd:45:73:26:59:07:0f:cb:22:da:e3:cf: d2:d9:ae:30:bd:89:94:9f:c7:1c:a5:a0:d7:b3:60: 83:cf:b8:7f:ec:70:0e:76:33:74:8d:ee:c6:bb:97: 69:1c:cc:59:51:84:a6:a9:37:40:e2:e8:5a:54:05: d9:d4:29:b3:d8:59:cc:3a:c6:d3:b0:7c:09:18:79: bd:55:08:1f:86:68:7a:10:9c:c0:42:ea:08:b9:a5: f1:9f:07:b1:0d:d1:5c:54:a5:5b:06:f8:8b:b0:9f: b9:f9:6b:4c:d1:a6:f9:4b:84:57:4c:a4:82:1e:ba: 26:ec:45:d3:77:7b:be:83:a9:15:40:9e:05:66:45: 1c:a9:cf:fb:c3:be:0a:01:f8:7e:80:11:30:e2:14: 8d:b9:2a:fc:3d:58:ba:9e:02:96:58:c0:37:2f:2b: 17:7f:99:54:99:21:63:40:09:f7:ec:35:58:d2:57: 26:15:a2:0d:0c:40:bb:d4:09:ef:12:7a:cc:7e:88: f9:af:9b:c3:8f:a3:1b:8e:99:96:2a:8b:68:f8:5a: 39:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:BD:93:39:E4:F9:1D:8E:EF:9D:06:CD:8F:CE:19:F8:88:A3:5E:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/d68c2fd0-cde6-3cd2-8afd-b50783a2217c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998/c0ae1cff-309c-40d1-9760-3a89a481e998.crl X509v3 Authority Key Identifier: keyid:3D:5C:C9:D2:DF:E0:F1:12:4E:09:59:BF:BE:75:A7:C9:39:BB:13:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0ae1cff-309c-40d1-9760-3a89a481e998.cer sbgp-ipAddrBlock: critical IPv4: 208.80.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:ee:78:af:3d:ef:c8:eb:49:20:ea:ed:99:c8:d0:8f:fd:b4: 09:84:3d:db:d8:dc:35:81:97:0d:66:e1:dd:fb:f9:70:3b:73: a3:d2:02:66:5c:51:67:bc:cf:6e:d3:8f:60:e6:c1:86:11:fc: cf:d4:bc:a7:a7:f7:0c:38:5f:3d:2f:c7:85:d7:ed:4d:78:1c: 94:6f:13:0a:c1:08:a7:e1:d6:17:3b:85:3f:e0:ac:7d:6c:df: 90:0f:ab:ba:98:53:7a:90:fa:c3:a8:6e:e1:ad:bb:70:60:a8: c8:a1:d6:06:25:c8:c3:de:6a:b4:1b:74:8a:8e:0b:88:b7:fc: 6f:72:5e:44:df:a8:f1:dc:2d:f9:49:32:b8:02:f3:b2:eb:43: 9d:88:20:d1:93:4d:1b:48:52:76:ca:9b:22:53:82:d5:c9:34: 3f:91:24:7a:bb:48:26:a3:ab:2b:a2:5f:87:e4:a2:b7:84:bc: 97:1b:1f:54:50:2d:7c:b6:e2:0a:bb:d3:84:ae:c0:d2:64:78: 6e:69:9d:16:d8:36:18:88:36:a9:c9:68:2d:9e:09:d5:1a:7c: 59:96:fd:eb:e3:7b:e9:db:95:00:28:ac:ce:71:b1:9d:5f:88: af:20:98:46:3c:33:db:f6:43:2d:1d:44:7d:71:c7:99:d3:d2: 1e:ce:c6:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HAqdoLzZ/otJnqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzBhZTFjZmYtMzA5Yy00MGQxLTk3NjAtM2E4OWE0ODFl OTk4MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZmY5NjU3NzMtYmZlZi00YzdiLWFhYjctNGVjY2I4MzQ5MDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVRCI8c+qB4FdvpJ/NCrYllJSE+tvdEyhPoy MNOLG00/WtzdXnWXQDofi1ULpPC9RXMmWQcPyyLa48/S2a4wvYmUn8ccpaDXs2CD z7h/7HAOdjN0je7Gu5dpHMxZUYSmqTdA4uhaVAXZ1Cmz2FnMOsbTsHwJGHm9VQgf hmh6EJzAQuoIuaXxnwexDdFcVKVbBviLsJ+5+WtM0ab5S4RXTKSCHrom7EXTd3u+ g6kVQJ4FZkUcqc/7w74KAfh+gBEw4hSNuSr8PVi6ngKWWMA3LysXf5lUmSFjQAn3 7DVY0lcmFaINDEC71AnvEnrMfoj5r5vDj6MbjpmWKoto+Fo5IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+9kznk+R2O750GzY/OGfiIo154MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMGFl MWNmZi0zMDljLTQwZDEtOTc2MC0zYTg5YTQ4MWU5OTgvZDY4YzJmZDAtY2RlNi0z Y2QyLThhZmQtYjUwNzgzYTIyMTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzBhZTFjZmYtMzA5Yy00MGQxLTk3 NjAtM2E4OWE0ODFlOTk4L2MwYWUxY2ZmLTMwOWMtNDBkMS05NzYwLTNhODlhNDgx ZTk5OC5jcmwwHwYDVR0jBBgwFoAUPVzJ0t/g8RJOCVm/vnWnyTm7EwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMGFlMWNmZi0zMDljLTQwZDEtOTc2MC0zYTg5 YTQ4MWU5OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHueK8978jrSSDq7ZnI0I/9tAmEPdvY3DWBlw1m4d37+XA7c6PSAmZc UWe8z27Tj2DmwYYR/M/UvKen9ww4Xz0vx4XX7U14HJRvEwrBCKfh1hc7hT/grH1s 35APq7qYU3qQ+sOobuGtu3BgqMih1gYlyMPearQbdIqOC4i3/G9yXkTfqPHcLflJ MrgC87LrQ52IINGTTRtIUnbKmyJTgtXJND+RJHq7SCajqyuiX4fkoreEvJcbH1RQ LXy24gq704SuwNJkeG5pnRbYNhiINqnJaC2eCdUafFmW/evje+nblQAorM5xsZ1f iK8gmEY8M9v2Qy0dRH1xx5nT0h7Oxsk= -----END CERTIFICATE-----Generated at Fri Sep 19 15:30:09 2025 by rpki-client