$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/32982901-ba1e-35a1-b683-2ccbd0d4ac50.roa File: 32982901-ba1e-35a1-b683-2ccbd0d4ac50.roa (raw, json) Hash identifier: D9cqzC3quelOfrg5VkhZDpoXZEBiGNlQ93EZ68ohh28= Subject key identifier: 35:16:60:99:F6:3F:F9:6B:F6:F2:DC:13:B3:D9:6D:79:6B:B1:C0:0C Certificate issuer: /CN=371710da-4c28-4923-921b-e1d710cec29e Certificate serial: 010D0C9F4328584B13D6C3364E35B57063306B40 Authority key identifier: 5D:6F:DA:FC:B7:B6:DE:51:70:F0:48:F6:9B:AC:DD:23:A7:5D:79:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/32982901-ba1e-35a1-b683-2ccbd0d4ac50.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 36861 IP address blocks: 208.68.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:c3:36:4e:35:b5:70:63:30:6b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=371710da-4c28-4923-921b-e1d710cec29e Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=93cad14c-7896-4ed9-ac0c-7182b31020e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:17:f2:1b:12:7f:23:98:5b:8e:76:34:13:0b: bc:1b:8c:b2:5d:b6:c3:1a:fa:f9:2e:db:ec:3e:43: 6e:a8:0b:35:6d:6b:48:7d:91:cc:c7:8d:5b:2d:21: c7:a3:7a:a1:b7:60:23:e9:ae:94:df:9b:ee:af:ea: 33:91:ae:7d:fd:e3:a9:43:a6:c7:cf:cf:85:b9:c3: 37:5e:c0:c4:a3:b1:0e:e2:83:0f:f7:4d:c2:5d:71: 7a:8a:bd:40:03:aa:76:a0:3b:43:a2:6c:55:3c:c6: aa:30:57:77:a8:98:8b:47:1b:ad:8a:8d:92:23:60: d0:c6:90:34:d9:68:9b:48:b7:25:b6:94:e6:93:84: e1:6f:16:fb:24:87:58:e9:91:3c:a9:d9:94:26:28: 34:4a:ff:b8:72:7a:b4:05:5d:82:30:4c:f9:49:ab: 50:4c:53:53:dc:c0:ca:07:f7:75:b7:49:34:1e:44: 11:bf:73:d8:81:7f:de:d5:a5:e6:ce:ed:b5:a3:ec: a2:29:9b:39:1c:6c:2f:b4:c9:41:7e:d9:e6:e1:50: 40:25:96:01:54:ec:44:c4:9a:7f:0e:62:cf:2e:2f: 0c:03:b3:d4:7c:cc:f6:0c:56:6c:cc:fe:70:43:e1: 58:35:59:56:f6:a2:8b:d0:cf:03:41:bd:4c:be:86: 55:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:16:60:99:F6:3F:F9:6B:F6:F2:DC:13:B3:D9:6D:79:6B:B1:C0:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/32982901-ba1e-35a1-b683-2ccbd0d4ac50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.crl X509v3 Authority Key Identifier: keyid:5D:6F:DA:FC:B7:B6:DE:51:70:F0:48:F6:9B:AC:DD:23:A7:5D:79:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer sbgp-ipAddrBlock: critical IPv4: 208.68.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:cc:c4:e6:2a:85:d1:7a:ab:09:d6:ac:95:37:3a:10:20:f6: d5:69:cb:cc:78:02:0e:99:0b:93:8a:b8:3c:0b:a6:51:76:31: 21:09:3b:1e:70:b7:aa:7e:8e:89:0a:48:f7:18:0a:07:65:6b: 84:38:09:c8:e4:9c:cb:e4:db:c4:e9:06:f6:88:f8:ce:32:99: a4:79:ee:b3:86:da:37:33:71:2c:4b:b1:f1:63:6e:48:14:e6: 8e:90:5b:8e:c4:b9:3d:79:a4:92:ee:bd:b4:d9:36:b7:38:68: f0:e1:cc:62:ab:15:6d:9e:68:92:62:9d:83:76:61:b6:07:54: e4:4e:50:28:b2:8d:9f:c7:18:14:77:7f:ae:59:18:90:d8:e5: 86:fb:86:74:36:d8:90:d7:ac:bc:f4:52:0d:98:14:d3:03:ba: fb:c0:2c:51:36:51:32:80:72:e8:87:6f:c1:3b:37:7a:8b:fb: df:0e:39:23:05:83:03:42:ba:42:84:1b:9c:92:2f:e8:a3:2c: f6:72:f5:9b:bb:33:c1:28:91:c7:37:0a:7b:b5:ab:2b:b7:88: 96:40:55:61:24:ce:95:24:e4:79:45:42:0d:46:35:eb:5e:bf: e1:05:0d:8c:66:4d:5c:29:f3:69:3e:d8:97:46:5d:96:7c:8a: d4:ba:f0:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1sM2TjW1cGMwa0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzcxNzEwZGEtNGMyOC00OTIzLTkyMWItZTFkNzEwY2Vj MjllMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk OTNjYWQxNGMtNzg5Ni00ZWQ5LWFjMGMtNzE4MmIzMTAyMGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRfyGxJ/I5hbjnY0Ewu8G4yyXbbDGvr5Ltvs PkNuqAs1bWtIfZHMx41bLSHHo3qht2Aj6a6U35vur+ozka59/eOpQ6bHz8+FucM3 XsDEo7EO4oMP903CXXF6ir1AA6p2oDtDomxVPMaqMFd3qJiLRxutio2SI2DQxpA0 2WibSLcltpTmk4Thbxb7JIdY6ZE8qdmUJig0Sv+4cnq0BV2CMEz5SatQTFNT3MDK B/d1t0k0HkQRv3PYgX/e1aXmzu21o+yiKZs5HGwvtMlBftnm4VBAJZYBVOxExJp/ DmLPLi8MA7PUfMz2DFZszP5wQ+FYNVlW9qKL0M8DQb1MvoZVjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUWYJn2P/lr9vLcE7PZbXlrscAMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNzE3 MTBkYS00YzI4LTQ5MjMtOTIxYi1lMWQ3MTBjZWMyOWUvMzI5ODI5MDEtYmExZS0z NWExLWI2ODMtMmNjYmQwZDRhYzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzcxNzEwZGEtNGMyOC00OTIzLTky MWItZTFkNzEwY2VjMjllLzM3MTcxMGRhLTRjMjgtNDkyMy05MjFiLWUxZDcxMGNl YzI5ZS5jcmwwHwYDVR0jBBgwFoAUXW/a/Le23lFw8Ej2m6zdI6ddeV4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNzE3MTBkYS00YzI4LTQ5MjMtOTIxYi1lMWQ3 MTBjZWMyOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDMxOYqhdF6qwnWrJU3OhAg9tVpy8x4Ag6ZC5OKuDwLplF2MSEJOx5w t6p+jokKSPcYCgdla4Q4CcjknMvk28TpBvaI+M4ymaR57rOG2jczcSxLsfFjbkgU 5o6QW47EuT15pJLuvbTZNrc4aPDhzGKrFW2eaJJinYN2YbYHVOROUCiyjZ/HGBR3 f65ZGJDY5Yb7hnQ22JDXrLz0Ug2YFNMDuvvALFE2UTKAcuiHb8E7N3qL+98OOSMF gwNCukKEG5ySL+ijLPZy9Zu7M8Eokcc3Cnu1qyu3iJZAVWEkzpUk5HlFQg1GNete v+EFDYxmTVwp82k+2JdGXZZ8itS68FU= -----END CERTIFICATE-----Generated at Thu Sep 18 13:37:07 2025 by rpki-client