$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/2b0914da-3387-3454-bc38-ee4a7e5e9603.roa File: 2b0914da-3387-3454-bc38-ee4a7e5e9603.roa (raw, json) Hash identifier: r4rM/o93oQa9RLICPnvUieD0Jj1DRL5u36KzSGxXOlY= Subject key identifier: 08:69:70:26:72:78:99:E0:F1:3B:98:DB:E0:90:2A:87:D2:C6:7A:42 Certificate issuer: /CN=4d754a75-6fef-427a-8a5d-d152fb72f46d Certificate serial: 010D0C9F4328584B28C6DEEC0E766FA5AD9F0BE0 Authority key identifier: E4:23:FA:30:4E:50:F0:F7:51:74:45:81:BD:6E:13:37:F9:19:D9:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/2b0914da-3387-3454-bc38-ee4a7e5e9603.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 32913 IP address blocks: 208.85.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:de:ec:0e:76:6f:a5:ad:9f:0b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d754a75-6fef-427a-8a5d-d152fb72f46d Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=9c9c2c7e-3105-4ba6-b626-ba17bb4cf294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5c:12:9b:02:36:a7:59:0c:1e:74:7d:c4:48: 52:8f:2b:a2:9d:5a:5f:4d:97:78:88:fa:59:d3:f3: dd:c3:9d:51:96:ec:35:20:87:c7:10:24:15:e3:f3: 7b:db:fd:4d:86:c2:38:c1:59:77:0c:53:cd:fd:ca: 2c:d0:ce:0b:e2:62:62:0f:37:73:a2:59:83:7f:7b: 1a:61:39:4b:cd:16:1c:c2:44:9a:26:4a:d0:c3:41: ed:bc:40:6e:f2:46:3c:2d:7e:56:04:d5:7b:06:a6: 46:e8:a3:0f:84:66:9a:eb:77:14:1e:8e:80:61:49: 7e:69:40:20:db:37:fd:63:95:e2:b2:9b:20:35:17: e6:f1:c9:05:ff:3c:44:8d:b0:7c:1d:90:b8:9a:33: aa:48:c8:c1:5f:60:4e:6d:8e:34:bd:f0:56:28:96: 15:d8:21:df:c3:41:31:6c:9c:0e:97:f9:07:64:a7: 3a:74:57:64:d1:93:0a:1f:b1:ff:d0:a1:20:4c:dc: a2:f2:59:24:e3:cd:dc:ce:3f:5e:b6:c1:34:ba:f6: 71:70:01:7f:ef:da:d9:44:eb:ae:74:84:79:4d:e7: d1:e1:14:63:b5:e5:29:10:b0:8f:77:f0:8d:cd:9c: 18:cf:9a:c1:fe:87:88:dd:65:05:99:8d:21:9c:63: b8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:69:70:26:72:78:99:E0:F1:3B:98:DB:E0:90:2A:87:D2:C6:7A:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/2b0914da-3387-3454-bc38-ee4a7e5e9603.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.crl X509v3 Authority Key Identifier: keyid:E4:23:FA:30:4E:50:F0:F7:51:74:45:81:BD:6E:13:37:F9:19:D9:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer sbgp-ipAddrBlock: critical IPv4: 208.85.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:d1:1e:6f:44:e7:2d:3d:85:b0:20:35:91:53:39:72:76:77: eb:26:c7:e3:dc:e2:24:69:30:f3:81:ab:73:b9:7f:a0:91:ea: b1:ba:b8:7b:de:f7:21:9a:83:74:a5:42:8f:00:71:0a:e6:aa: 99:54:52:10:1e:11:58:2f:52:5c:fc:5a:13:f7:f8:30:c6:e5: ad:42:8e:72:f4:90:b8:ac:81:e8:c1:03:8a:aa:eb:ec:b9:ba: 31:0a:6d:15:c3:84:97:a4:ce:5f:59:72:7f:18:6f:5b:19:e8: fb:88:f7:0f:cc:5b:0d:12:18:cc:37:b1:2f:72:69:ca:54:f0: aa:8b:d5:ce:dd:34:1e:36:60:e1:aa:47:62:b3:74:9c:34:e2: 42:4d:9e:15:6b:7e:3e:78:46:47:5c:8d:c1:35:2a:70:25:01: 7d:bb:28:53:e0:f3:cf:37:45:74:53:b6:da:07:4e:a9:c1:f8: 3a:3d:82:ed:c5:21:23:07:12:d9:64:6d:98:6b:6e:15:88:4e: 75:4f:63:2f:61:e5:47:87:f6:6a:ca:85:2a:bd:da:6d:90:04: 50:5f:55:19:96:0b:8f:7c:fd:32:77:ce:74:c2:df:28:a7:27: 78:65:af:dd:65:99:02:af:19:21:e5:b3:1c:59:96:a6:3d:da: 12:c3:93:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxt7sDnZvpa2fC+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ3NTRhNzUtNmZlZi00MjdhLThhNWQtZDE1MmZiNzJm NDZkMB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk OWM5YzJjN2UtMzEwNS00YmE2LWI2MjYtYmExN2JiNGNmMjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1wSmwI2p1kMHnR9xEhSjyuinVpfTZd4iPpZ 0/Pdw51Rluw1IIfHECQV4/N72/1NhsI4wVl3DFPN/cos0M4L4mJiDzdzolmDf3sa YTlLzRYcwkSaJkrQw0HtvEBu8kY8LX5WBNV7BqZG6KMPhGaa63cUHo6AYUl+aUAg 2zf9Y5XispsgNRfm8ckF/zxEjbB8HZC4mjOqSMjBX2BObY40vfBWKJYV2CHfw0Ex bJwOl/kHZKc6dFdk0ZMKH7H/0KEgTNyi8lkk483czj9etsE0uvZxcAF/79rZROuu dIR5TefR4RRjteUpELCPd/CNzZwYz5rB/oeI3WUFmY0hnGO46QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhpcCZyeJng8TuY2+CQKofSxnpCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZDc1 NGE3NS02ZmVmLTQyN2EtOGE1ZC1kMTUyZmI3MmY0NmQvMmIwOTE0ZGEtMzM4Ny0z NDU0LWJjMzgtZWU0YTdlNWU5NjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGQ3NTRhNzUtNmZlZi00MjdhLThh NWQtZDE1MmZiNzJmNDZkLzRkNzU0YTc1LTZmZWYtNDI3YS04YTVkLWQxNTJmYjcy ZjQ2ZC5jcmwwHwYDVR0jBBgwFoAU5CP6ME5Q8PdRdEWBvW4TN/kZ2UswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZDc1NGE3NS02ZmVmLTQyN2EtOGE1ZC1kMTUy ZmI3MmY0NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FWkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjRHm9E5y09hbAgNZFTOXJ2d+smx+Pc4iRpMPOBq3O5f6CR6rG6uHve 9yGag3SlQo8AcQrmqplUUhAeEVgvUlz8WhP3+DDG5a1CjnL0kLisgejBA4qq6+y5 ujEKbRXDhJekzl9Zcn8Yb1sZ6PuI9w/MWw0SGMw3sS9yacpU8KqL1c7dNB42YOGq R2KzdJw04kJNnhVrfj54RkdcjcE1KnAlAX27KFPg8883RXRTttoHTqnB+Do9gu3F ISMHEtlkbZhrbhWITnVPYy9h5UeH9mrKhSq92m2QBFBfVRmWC498/TJ3znTC3yin J3hlr91lmQKvGSHlsxxZlqY92hLDk3g= -----END CERTIFICATE-----Generated at Tue Sep 16 08:52:02 2025 by rpki-client