$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/f6404bf4-cfbe-301f-9707-5fcc0c9b808e.roa File: f6404bf4-cfbe-301f-9707-5fcc0c9b808e.roa (raw, json) Hash identifier: dbQ95hWIlL6Agvxn2KSW0kbPhZiijjZ9YA5GkKsMb/A= Subject key identifier: FA:73:88:83:1A:3C:F0:34:B5:3D:19:1D:D9:9C:CE:CC:A6:7D:11:43 Certificate issuer: /CN=8eef875a-c9a4-45e0-9b80-3ea10becad9f Certificate serial: 010D0C9F4328584B23317F82F40CBFA9237B0600 Authority key identifier: DA:17:75:BB:11:3E:F2:6B:F0:F9:5E:6E:89:5C:C3:0E:E0:A8:CA:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/f6404bf4-cfbe-301f-9707-5fcc0c9b808e.roa Signing time: Tue 09 Sep 2025 13:00:41 +0000 ROA not before: Tue 09 Sep 2025 13:00:41 +0000 ROA not after: Mon 08 Dec 2025 14:00:41 +0000 asID: 20259 IP address blocks: 208.82.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/8eef875a-c9a4-45e0-9b80-3ea10becad9f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/8eef875a-c9a4-45e0-9b80-3ea10becad9f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:31:7f:82:f4:0c:bf:a9:23:7b:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eef875a-c9a4-45e0-9b80-3ea10becad9f Validity Not Before: Sep 9 13:00:41 2025 GMT Not After : Dec 8 14:00:41 2025 GMT Subject: CN=b1f4fd2c-568b-43a0-9a80-02d149f9fcaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:04:90:15:f2:29:e9:be:32:df:d7:28:d1:0e: 21:28:77:ff:ae:c2:63:d1:47:ed:7d:bd:5d:aa:83: d4:a8:39:66:b8:f7:58:25:39:74:a6:a2:0a:da:48: da:d8:a0:c9:aa:f3:88:c0:25:0b:4d:f2:20:21:31: 4d:ac:0b:96:64:b0:ce:fb:08:c3:f3:b5:b2:f1:2c: 28:ce:69:7b:59:a2:95:e8:66:30:5d:53:c1:87:cd: dd:9c:c1:21:cb:63:f0:bf:ce:9f:4d:02:40:dc:85: 32:ae:1f:b3:78:3c:92:13:5a:c1:fe:eb:1a:34:7b: 0b:6d:49:75:32:89:d1:12:a7:ca:51:7c:4d:63:fd: 69:a5:42:56:d2:b7:9f:b7:8e:e5:87:14:02:08:03: 67:b2:a4:d2:ab:86:7d:c5:2f:88:65:4a:f8:58:2a: e5:e0:c6:40:fb:88:74:2c:e7:b4:da:8d:2f:1f:ab: bd:9a:21:0d:c7:04:e1:00:36:0e:33:9c:26:26:44: 50:80:89:15:0e:6c:b0:78:e0:fc:bc:17:17:b0:ed: 55:6e:db:c8:59:9f:e6:5a:b0:b9:42:54:ca:a1:c9: fd:2a:fb:c1:df:a8:14:75:c7:6e:82:90:35:47:ec: 6a:81:ea:f3:12:d4:70:67:24:46:06:53:ad:19:d3: 13:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:73:88:83:1A:3C:F0:34:B5:3D:19:1D:D9:9C:CE:CC:A6:7D:11:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/f6404bf4-cfbe-301f-9707-5fcc0c9b808e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/8eef875a-c9a4-45e0-9b80-3ea10becad9f.crl X509v3 Authority Key Identifier: keyid:DA:17:75:BB:11:3E:F2:6B:F0:F9:5E:6E:89:5C:C3:0E:E0:A8:CA:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer sbgp-ipAddrBlock: critical IPv4: 208.82.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:10:49:52:14:9a:e0:f9:82:0a:e2:c2:f7:b1:8e:87:2b:26: cc:db:83:03:39:50:1b:e0:d8:32:de:93:ca:f0:c0:35:1c:e3: 32:e2:e6:5e:ec:7a:e6:3b:5b:f3:47:12:f9:46:6b:b3:77:ad: 21:ab:9f:fd:56:28:69:f7:72:8d:21:61:82:5e:36:6c:69:67: 0f:a0:39:1c:4d:f0:a7:24:06:c4:28:a9:06:c3:2c:01:cd:d4: 54:b1:9c:be:08:d1:58:41:2c:0c:11:7d:e1:7a:c5:80:64:ca: 2c:f4:4b:c8:95:4a:fe:45:96:c7:15:6d:6d:22:8d:69:84:a1: c6:c2:70:a8:54:3b:be:4a:a7:69:2a:2d:07:ca:62:10:78:61: 77:d0:81:09:72:35:cb:57:27:53:5c:0c:9a:f1:1b:a9:81:d1: a7:da:cc:b3:4c:65:cf:5c:67:b7:0e:70:45:03:67:27:80:21: 72:a3:8f:be:18:55:a8:54:2e:98:9f:5a:53:2b:c0:ec:0f:29: 92:97:c7:34:bd:c6:0e:3d:aa:1e:da:79:fd:b8:52:c5:4f:2b: 6d:71:4a:18:46:c5:02:72:7f:74:e0:6f:fb:13:99:8e:41:9a: e6:8e:88:d0:fe:0a:e7:61:67:cd:73:6e:17:77:f3:2e:77:dc: fd:50:b5:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjMX+C9Ay/qSN7BgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVlZjg3NWEtYzlhNC00NWUwLTliODAtM2VhMTBiZWNh ZDlmMB4XDTI1MDkwOTEzMDA0MVoXDTI1MTIwODE0MDA0MVowLzEtMCsGA1UEAxMk YjFmNGZkMmMtNTY4Yi00M2EwLTlhODAtMDJkMTQ5ZjlmY2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsASQFfIp6b4y39co0Q4hKHf/rsJj0Uftfb1d qoPUqDlmuPdYJTl0pqIK2kja2KDJqvOIwCULTfIgITFNrAuWZLDO+wjD87Wy8Swo zml7WaKV6GYwXVPBh83dnMEhy2Pwv86fTQJA3IUyrh+zeDySE1rB/usaNHsLbUl1 MonREqfKUXxNY/1ppUJW0reft47lhxQCCANnsqTSq4Z9xS+IZUr4WCrl4MZA+4h0 LOe02o0vH6u9miENxwThADYOM5wmJkRQgIkVDmyweOD8vBcXsO1VbtvIWZ/mWrC5 QlTKocn9KvvB36gUdcdugpA1R+xqgerzEtRwZyRGBlOtGdMTMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpziIMaPPA0tT0ZHdmczsymfRFDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZWVm ODc1YS1jOWE0LTQ1ZTAtOWI4MC0zZWExMGJlY2FkOWYvZjY0MDRiZjQtY2ZiZS0z MDFmLTk3MDctNWZjYzBjOWI4MDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGVlZjg3NWEtYzlhNC00NWUwLTli ODAtM2VhMTBiZWNhZDlmLzhlZWY4NzVhLWM5YTQtNDVlMC05YjgwLTNlYTEwYmVj YWQ5Zi5jcmwwHwYDVR0jBBgwFoAU2hd1uxE+8mvw+V5uiVzDDuCoynIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZWVmODc1YS1jOWE0LTQ1ZTAtOWI4MC0zZWEx MGJlY2FkOWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FJEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAQSVIUmuD5ggriwvexjocrJszbgwM5UBvg2DLek8rwwDUc4zLi5l7s euY7W/NHEvlGa7N3rSGrn/1WKGn3co0hYYJeNmxpZw+gORxN8KckBsQoqQbDLAHN 1FSxnL4I0VhBLAwRfeF6xYBkyiz0S8iVSv5FlscVbW0ijWmEocbCcKhUO75Kp2kq LQfKYhB4YXfQgQlyNctXJ1NcDJrxG6mB0afazLNMZc9cZ7cOcEUDZyeAIXKjj74Y VahULpifWlMrwOwPKZKXxzS9xg49qh7aef24UsVPK21xShhGxQJyf3Tgb/sTmY5B muaOiND+CudhZ81zbhd38y533P1Qtd0= -----END CERTIFICATE-----Generated at Wed Sep 17 20:35:00 2025 by rpki-client