$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/db276d5e-d619-3e2a-bcc0-ef4aa9a7e694.roa File: db276d5e-d619-3e2a-bcc0-ef4aa9a7e694.roa (raw, json) Hash identifier: LJHZOAicPyPcQJuL+3tQpQ6RasHlO1CLiYRtIOXHhHI= Subject key identifier: 1B:E4:5E:77:9C:BD:E3:A0:E9:16:51:7F:99:BC:0C:D0:0F:7A:22:30 Certificate issuer: /CN=647216b7-a938-45d2-8264-7d448a4eaad9 Certificate serial: 010D0C9F4328584B79BCB52F61078D03972A38EE Authority key identifier: 22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/db276d5e-d619-3e2a-bcc0-ef4aa9a7e694.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 398143 IP address blocks: 208.103.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b5:2f:61:07:8d:03:97:2a:38:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=647216b7-a938-45d2-8264-7d448a4eaad9 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=4796c1e0-ebb4-4f78-88c3-280f48c61a41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:14:f7:62:0d:ac:a0:25:dc:35:5b:be:0c:7a: f6:c4:78:fe:97:af:a0:f6:c0:19:d2:ea:81:14:04: 7d:9b:fb:6e:a4:f8:a8:e4:2e:ab:48:4b:d8:d2:f3: c4:33:bf:72:07:a4:32:57:5c:47:d8:d7:fe:db:78: 10:f9:37:b3:b9:eb:d7:27:7e:9c:1d:60:c0:b3:5e: 41:10:47:0f:ea:2c:58:b9:04:ab:6e:0b:d8:27:3b: 64:a2:9e:8b:c9:c4:b8:c2:ff:0b:f5:81:ff:9e:a0: 94:3c:ef:d1:76:3d:8f:61:f4:2b:5a:d4:21:e1:b2: 11:e4:2c:ab:0a:1b:78:e4:0a:d4:43:4e:38:47:d0: 83:7e:4d:f5:2c:fb:27:37:2c:4d:97:3d:19:e8:4b: 83:d8:dc:b1:81:c1:5a:77:37:50:d3:e4:16:a5:13: a1:71:74:b6:d7:57:33:f0:0b:d7:a8:64:3e:8d:a1: 72:13:89:e9:ce:c3:46:22:18:50:ff:2f:53:3b:89: 8b:f2:37:97:69:01:e9:05:1d:a2:5c:77:1b:5a:2a: 7d:f2:7b:18:09:b2:35:16:35:bd:c3:d2:ab:9b:6c: 39:6a:37:3b:62:be:93:56:eb:07:b7:99:b7:9e:e0: 31:79:e6:c9:47:35:66:1c:09:ed:22:1a:2a:b3:5f: 82:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E4:5E:77:9C:BD:E3:A0:E9:16:51:7F:99:BC:0C:D0:0F:7A:22:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/db276d5e-d619-3e2a-bcc0-ef4aa9a7e694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl X509v3 Authority Key Identifier: keyid:22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer sbgp-ipAddrBlock: critical IPv4: 208.103.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:47:c4:5e:07:06:93:73:e5:f7:ee:3f:d1:24:79:05:69:cc: e4:4e:f5:25:cd:0b:2c:ba:b0:51:e2:0a:e3:59:19:e5:8b:db: 27:b5:a7:87:7d:12:a6:b8:9f:84:49:22:b3:48:51:45:99:80: 4c:27:e2:43:3f:ad:40:2a:5a:0a:d2:7c:bc:fb:17:6b:3a:86: c2:29:9b:b0:0d:66:71:4f:ab:88:69:4d:9c:5f:7f:76:51:ba: 7c:51:5f:c2:da:46:c7:e6:c8:12:ba:59:46:de:8f:84:89:d0: 3c:6e:6a:e6:cd:00:b7:42:3f:2d:5a:56:c5:b3:dc:24:f5:9c: bd:09:5f:06:83:44:3e:b2:04:6c:de:0d:50:73:d5:c1:2e:f7: e2:ee:37:1c:dc:65:e9:cf:0d:54:e6:e1:89:da:73:17:de:4d: 29:c1:11:9c:59:94:c4:4a:ef:6b:28:16:0b:ec:d8:dc:52:11: 5c:32:e7:e4:05:a8:c6:14:3c:12:9c:96:5d:3b:1f:db:42:65: 21:21:82:cd:cf:93:86:97:4b:f5:12:2c:2c:12:7d:f9:2d:10: 66:46:ed:6b:c5:30:39:af:61:7d:57:13:58:57:b2:e3:d2:fb: b6:f9:c0:f2:8a:1a:e0:75:d6:18:62:c1:14:a9:56:9c:f0:5b: 99:30:a5:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLUvYQeNA5cqOO4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ3MjE2YjctYTkzOC00NWQyLTgyNjQtN2Q0NDhhNGVh YWQ5MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk NDc5NmMxZTAtZWJiNC00Zjc4LTg4YzMtMjgwZjQ4YzYxYTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxT3Yg2soCXcNVu+DHr2xHj+l6+g9sAZ0uqB FAR9m/tupPio5C6rSEvY0vPEM79yB6QyV1xH2Nf+23gQ+TezuevXJ36cHWDAs15B EEcP6ixYuQSrbgvYJztkop6LycS4wv8L9YH/nqCUPO/Rdj2PYfQrWtQh4bIR5Cyr Cht45ArUQ044R9CDfk31LPsnNyxNlz0Z6EuD2NyxgcFadzdQ0+QWpROhcXS211cz 8AvXqGQ+jaFyE4npzsNGIhhQ/y9TO4mL8jeXaQHpBR2iXHcbWip98nsYCbI1FjW9 w9Krm2w5ajc7Yr6TVusHt5m3nuAxeebJRzVmHAntIhoqs1+CRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvkXnecveOg6RZRf5m8DNAPeiIwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82NDcy MTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0OGE0ZWFhZDkvZGIyNzZkNWUtZDYxOS0z ZTJhLWJjYzAtZWY0YWE5YTdlNjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjQ3MjE2YjctYTkzOC00NWQyLTgy NjQtN2Q0NDhhNGVhYWQ5LzY0NzIxNmI3LWE5MzgtNDVkMi04MjY0LTdkNDQ4YTRl YWFkOS5jcmwwHwYDVR0jBBgwFoAUIvIMhMMKGr3ejeHfHF8TeMPZRF8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82NDcyMTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0 OGE0ZWFhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0GeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpHxF4HBpNz5ffuP9EkeQVpzORO9SXNCyy6sFHiCuNZGeWL2ye1p4d9 Eqa4n4RJIrNIUUWZgEwn4kM/rUAqWgrSfLz7F2s6hsIpm7ANZnFPq4hpTZxff3ZR unxRX8LaRsfmyBK6WUbej4SJ0DxuaubNALdCPy1aVsWz3CT1nL0JXwaDRD6yBGze DVBz1cEu9+LuNxzcZenPDVTm4YnacxfeTSnBEZxZlMRK72soFgvs2NxSEVwy5+QF qMYUPBKcll07H9tCZSEhgs3Pk4aXS/USLCwSffktEGZG7WvFMDmvYX1XE1hXsuPS +7b5wPKKGuB11hhiwRSpVpzwW5kwpZc= -----END CERTIFICATE-----Generated at Mon Nov 3 05:57:26 2025 by rpki-client