$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/468e47db-5e5d-3b56-8599-c0d6de193ee1.roa File: 468e47db-5e5d-3b56-8599-c0d6de193ee1.roa (raw, json) Hash identifier: kieoV6/bYsOpuX6FX2txluAFCOgABQjrASEvWvlYoNI= Subject key identifier: 0B:F8:BD:49:F3:A1:A2:9D:D2:78:D0:BB:2B:A8:94:EB:EF:7A:C3:89 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584AF5213484306582686F264B80 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/468e47db-5e5d-3b56-8599-c0d6de193ee1.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 25645 IP address blocks: 208.85.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:34:84:30:65:82:68:6f:26:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=1c782c17-57e5-4618-bf65-7d56947c1530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:1e:a4:8f:b4:0e:26:29:69:63:87:27:90:30: 58:4e:79:23:d4:a4:b9:d7:51:18:ec:e0:6e:ed:fa: dd:43:f7:c7:fe:e4:f8:cc:a0:03:48:c4:c2:bb:12: da:87:40:df:8b:9d:5f:38:5a:a4:1b:d0:69:4b:ca: 65:f7:0c:14:8c:b6:47:57:1e:c1:64:2b:09:67:8a: 14:7b:96:24:62:c1:be:da:27:3c:ce:d4:63:64:99: 73:57:2d:65:33:90:c5:4d:44:99:84:ab:c2:9c:19: 4c:9c:9b:53:6d:2b:c4:43:02:84:98:ab:39:28:0e: b9:3f:dd:52:08:e5:71:2c:73:8a:79:31:e1:3c:62: 91:33:49:a3:4f:ce:57:52:0d:74:0e:15:57:db:41: 12:b7:9a:e0:5e:52:84:48:b0:04:96:da:9a:a6:d4: 89:2f:af:64:c8:ed:07:b8:af:0c:6c:5a:73:08:03: 23:5b:47:33:31:8d:0b:25:19:95:0a:e5:d3:11:8b: f5:27:93:7f:00:fa:b0:32:84:71:62:37:e6:86:ca: e8:06:ad:40:7d:39:0b:fd:ad:3a:ff:68:06:72:a5: 3c:ba:df:a9:24:82:0f:68:b5:aa:bf:78:fe:cb:4d: d8:3a:f9:4d:17:13:b5:cf:87:76:a2:e5:c1:73:4b: 9a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F8:BD:49:F3:A1:A2:9D:D2:78:D0:BB:2B:A8:94:EB:EF:7A:C3:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/468e47db-5e5d-3b56-8599-c0d6de193ee1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 208.85.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:05:08:34:b8:f6:c5:06:35:ee:59:fe:12:60:84:8f:1c:9d: 1a:82:f8:87:59:a4:76:99:2a:1d:f7:d9:cb:cb:44:ae:c7:59: 39:fc:00:6c:5e:32:27:6a:ac:8b:1c:02:1f:dc:f9:01:49:9d: 50:10:f7:6e:95:be:ac:f9:67:b9:d5:22:3f:1a:8b:2a:7c:9f: 4a:7d:54:65:d7:52:ac:9f:0a:e9:cb:7f:d0:9a:b0:a8:32:69: 14:3f:77:7a:5f:83:03:c0:c2:26:84:61:d9:81:01:79:5f:99: 8e:42:d3:4c:4b:8d:22:e0:39:2e:09:fa:67:40:ad:a6:2e:e7: cf:97:87:75:e5:6d:ad:3d:fc:ef:56:6c:91:50:97:f2:19:d1: 88:a9:a6:36:95:fc:75:ca:89:a1:4e:96:a1:94:59:5e:79:09: f3:3b:7b:04:a6:eb:7f:61:b9:2b:d4:d1:90:31:14:29:21:5f: e0:e3:88:c1:08:76:2b:dd:0a:2f:c0:f1:77:6f:39:1c:7d:e4: 3c:e8:07:fa:98:bf:0f:cf:f9:ae:7a:5f:cc:33:f9:da:d1:47: 70:c4:69:ed:29:ac:db:9a:65:59:ed:fd:66:bf:0b:55:a3:85: da:21:b3:44:93:69:f1:7d:c4:4c:10:2e:36:96:8d:08:c3:59: 00:d3:49:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1ITSEMGWCaG8mS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk MWM3ODJjMTctNTdlNS00NjE4LWJmNjUtN2Q1Njk0N2MxNTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5R6kj7QOJilpY4cnkDBYTnkj1KS511EY7OBu 7frdQ/fH/uT4zKADSMTCuxLah0Dfi51fOFqkG9BpS8pl9wwUjLZHVx7BZCsJZ4oU e5YkYsG+2ic8ztRjZJlzVy1lM5DFTUSZhKvCnBlMnJtTbSvEQwKEmKs5KA65P91S COVxLHOKeTHhPGKRM0mjT85XUg10DhVX20ESt5rgXlKESLAEltqaptSJL69kyO0H uK8MbFpzCAMjW0czMY0LJRmVCuXTEYv1J5N/APqwMoRxYjfmhsroBq1AfTkL/a06 /2gGcqU8ut+pJIIPaLWqv3j+y03YOvlNFxO1z4d2ouXBc0uaIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAv4vUnzoaKd0njQuyuolOvvesOJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvNDY4ZTQ3ZGItNWU1ZC0z YjU2LTg1OTktYzBkNmRlMTkzZWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FWEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkFCDS49sUGNe5Z/hJghI8cnRqC+IdZpHaZKh332cvLRK7HWTn8AGxe MidqrIscAh/c+QFJnVAQ926Vvqz5Z7nVIj8aiyp8n0p9VGXXUqyfCunLf9CasKgy aRQ/d3pfgwPAwiaEYdmBAXlfmY5C00xLjSLgOS4J+mdAraYu58+Xh3Xlba09/O9W bJFQl/IZ0YippjaV/HXKiaFOlqGUWV55CfM7ewSm639huSvU0ZAxFCkhX+DjiMEI divdCi/A8XdvORx95DzoB/qYvw/P+a56X8wz+drRR3DEae0prNuaZVnt/Wa/C1Wj hdohs0STafF9xEwQLjaWjQjDWQDTSaM= -----END CERTIFICATE-----Generated at Fri Sep 19 01:16:04 2025 by rpki-client