$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/021dd233-7b51-318b-9669-09b2cce6b6a9.roa File: 021dd233-7b51-318b-9669-09b2cce6b6a9.roa (raw, json) Hash identifier: 0DNByQ6EH0pCnNhaOSSjjCtL9NxjVN69KjwxEJTRfWY= Subject key identifier: 2F:1E:68:10:42:48:FD:CD:37:83:CF:D5:6C:C2:7B:93:BB:59:F9:25 Certificate issuer: /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b Certificate serial: 010D0C9F4328584AF95142C03CD5192B53182060 Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/021dd233-7b51-318b-9669-09b2cce6b6a9.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 6079 IP address blocks: 208.72.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:42:c0:3c:d5:19:2b:53:18:20:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=2b57f95e-8d8e-4091-82a6-ddf923590899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4c:aa:8b:1a:98:d2:0f:12:8f:56:83:a7:3f: af:f1:c4:32:d6:ca:12:95:5f:4d:29:e3:bd:49:6b: d2:80:2c:78:6e:18:a4:18:d2:6d:33:22:83:68:55: 87:9a:49:9e:d6:63:27:fb:cc:f3:0b:64:7e:fd:e2: 65:64:13:ed:cc:cd:de:9b:12:ed:65:4f:5f:cf:b3: 41:76:99:97:38:f4:dc:69:a3:67:58:12:ee:df:e7: ae:33:f1:0e:4e:5c:d0:f0:44:83:0d:b8:ca:a5:ee: c5:23:7b:44:86:fe:25:fd:37:2e:cd:e0:4f:33:94: 38:2d:80:6c:67:16:94:24:7a:d0:51:b2:ef:d0:0e: 77:cf:ad:76:b6:3a:af:14:03:d2:f2:cf:b6:ea:2a: cf:3f:9b:5d:7f:ad:4b:52:56:44:83:7f:53:7b:6a: 31:37:b3:f3:06:53:c5:e0:5c:2f:04:54:3f:c1:1a: 26:21:f4:2c:04:8a:e4:f9:e7:cd:79:3b:3f:85:42: d5:46:24:16:fb:6e:44:35:e9:ea:1c:20:d5:0c:6c: ba:ad:5f:d4:07:af:07:4f:64:25:52:97:99:da:fc: e3:9e:c1:04:34:e7:c0:dc:b7:56:82:65:dc:c1:da: f3:ee:33:4d:ec:11:de:ca:50:79:61:bd:ff:6a:11: 8d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:1E:68:10:42:48:FD:CD:37:83:CF:D5:6C:C2:7B:93:BB:59:F9:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/021dd233-7b51-318b-9669-09b2cce6b6a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl X509v3 Authority Key Identifier: keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer sbgp-ipAddrBlock: critical IPv4: 208.72.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:ca:d4:89:de:8c:9c:4d:a4:c0:01:86:b5:6f:b4:bf:69:76: 3e:aa:96:80:ac:db:1b:55:6d:bc:17:ea:92:5e:f7:c4:c3:71: 28:d2:3d:99:05:4e:b3:70:45:f1:a4:bb:5e:79:83:8e:12:7e: 4c:5f:58:09:fb:62:a7:c9:b5:6c:61:29:c6:88:6f:93:e6:6c: 7e:e5:da:2b:1f:41:14:47:c8:13:ea:de:5f:98:db:ad:77:aa: 2c:0b:f8:bc:ef:55:96:0d:b5:2b:04:ae:d1:f8:a9:40:77:5f: af:8e:96:05:d9:c1:4d:39:0c:ad:1e:7b:67:af:cd:68:ac:29: f8:ce:42:f8:a6:b9:24:cc:72:21:36:4b:be:52:8d:b7:dc:35: cb:e2:08:5d:4c:31:7a:cb:91:5d:0f:3e:69:ae:8e:4c:c4:26: be:57:fd:a6:8b:6e:8a:c3:7c:ef:30:4e:7c:fa:44:41:d7:30: f4:97:4e:69:3c:94:dd:58:14:72:5e:9d:35:ee:d7:fc:1b:21: c7:08:75:c3:7f:a6:ef:cc:2b:de:50:45:a2:0b:f3:b0:83:96: 85:03:25:73:ae:da:21:cc:1b:6b:7a:dc:e1:b6:c3:a3:c6:ce: d3:9f:ea:d4:40:17:5c:db:fa:16:d0:aa:fc:9a:44:c4:b5:a2: 92:87:95:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UULAPNUZK1MYIGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRlM2U3MmUtMzJjYi00ZTgzLThkNDQtODYyNDY2YmIw YzhiMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MmI1N2Y5NWUtOGQ4ZS00MDkxLTgyYTYtZGRmOTIzNTkwODk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0yqixqY0g8Sj1aDpz+v8cQy1soSlV9NKeO9 SWvSgCx4bhikGNJtMyKDaFWHmkme1mMn+8zzC2R+/eJlZBPtzM3emxLtZU9fz7NB dpmXOPTcaaNnWBLu3+euM/EOTlzQ8ESDDbjKpe7FI3tEhv4l/TcuzeBPM5Q4LYBs ZxaUJHrQUbLv0A53z612tjqvFAPS8s+26irPP5tdf61LUlZEg39Te2oxN7PzBlPF 4FwvBFQ/wRomIfQsBIrk+efNeTs/hULVRiQW+25ENenqHCDVDGy6rV/UB68HT2Ql UpeZ2vzjnsEENOfA3LdWgmXcwdrz7jNN7BHeylB5Yb3/ahGNcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8eaBBCSP3NN4PP1WzCe5O7WfklMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUz ZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0NjZiYjBjOGIvMDIxZGQyMzMtN2I1MS0z MThiLTk2NjktMDliMmNjZTZiNmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTRlM2U3MmUtMzJjYi00ZTgzLThk NDQtODYyNDY2YmIwYzhiL2E0ZTNlNzJlLTMyY2ItNGU4My04ZDQ0LTg2MjQ2NmJi MGM4Yi5jcmwwHwYDVR0jBBgwFoAU36ao4MNy5scPhIXGsRigy1w+vcMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUzZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0 NjZiYjBjOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EjTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPK1InejJxNpMABhrVvtL9pdj6qloCs2xtVbbwX6pJe98TDcSjSPZkF TrNwRfGku155g44SfkxfWAn7YqfJtWxhKcaIb5PmbH7l2isfQRRHyBPq3l+Y2613 qiwL+LzvVZYNtSsErtH4qUB3X6+OlgXZwU05DK0ee2evzWisKfjOQvimuSTMciE2 S75SjbfcNcviCF1MMXrLkV0PPmmujkzEJr5X/aaLborDfO8wTnz6REHXMPSXTmk8 lN1YFHJenTXu1/wbIccIdcN/pu/MK95QRaIL87CDloUDJXOu2iHMG2t63OG2w6PG ztOf6tRAF1zb+hbQqvyaRMS1opKHlcs= -----END CERTIFICATE-----Generated at Sun Sep 7 12:21:47 2025 by rpki-client