$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/4bd7e0b7-2238-33c8-a229-20f0948809be.roa File: 4bd7e0b7-2238-33c8-a229-20f0948809be.roa (raw, json) Hash identifier: Td1yGyI71Mv0Cs2df5+EfFTn1l3Uyp9qbh10wcjMIDs= Subject key identifier: DC:77:6E:6B:8F:50:D1:F9:AB:9A:44:75:C1:C7:0B:4E:38:54:5B:33 Certificate issuer: /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b Certificate serial: 010D0C9F4328584AF52150B388E525B2B97FD900 Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/4bd7e0b7-2238-33c8-a229-20f0948809be.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 3257 IP address blocks: 208.72.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:50:b3:88:e5:25:b2:b9:7f:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=29610904-b6f5-4a62-a37f-2fe7ab6de370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:81:59:3c:24:82:a8:81:e7:f7:89:4b:20:c6: 94:bc:66:99:6b:36:6a:a1:c1:12:58:1e:26:ba:b3: 4a:f4:f9:ae:c4:45:d4:fa:68:bc:d8:61:5b:4e:bb: 0d:f7:a1:11:26:53:c6:2a:2f:be:04:2e:87:73:0f: 7a:5a:9f:57:4a:07:03:df:7c:38:67:54:01:38:d0: f9:ca:d1:e8:66:25:8e:c6:82:d3:60:c2:f4:26:6f: 56:a3:72:c5:9d:21:27:66:fe:be:9f:2a:eb:85:3c: ff:8f:54:3c:a4:7c:ca:a4:80:af:3c:bd:39:05:47: 15:6f:68:cf:dd:6f:8c:5d:09:90:80:af:26:d6:6c: af:9b:29:8a:d9:3a:10:a5:27:f5:4c:f2:d1:38:67: a6:98:e1:a4:71:77:36:1b:e9:b6:60:40:a8:ad:53: ad:cc:0c:59:0c:f3:0a:fb:40:97:ed:0e:1b:1c:bd: cf:d1:e5:3b:c4:5b:f5:10:af:b2:fe:b6:e2:2e:16: b6:50:0f:59:02:02:cf:f3:80:b8:be:b3:42:26:b7: ec:13:1d:06:db:98:2a:c3:37:2e:b3:7d:aa:fa:64: b0:ac:6a:60:7c:2d:dd:3b:2b:b3:58:d1:cc:e4:d7: fd:7b:c7:47:23:41:f4:ea:9a:e2:58:f9:db:42:e4: bb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:77:6E:6B:8F:50:D1:F9:AB:9A:44:75:C1:C7:0B:4E:38:54:5B:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/4bd7e0b7-2238-33c8-a229-20f0948809be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl X509v3 Authority Key Identifier: keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer sbgp-ipAddrBlock: critical IPv4: 208.72.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:9c:17:7e:db:31:3a:db:a9:5b:0b:85:c9:81:0a:05:c3:e6: d2:c2:5a:32:42:03:0a:3e:58:8f:9a:73:25:6c:29:4d:b5:18: 6b:25:51:2c:16:0f:0d:46:3a:d1:83:2c:9d:20:85:37:f5:f5: 40:9e:99:26:a2:1c:33:40:93:e0:b7:29:67:47:ad:6d:4b:61: ce:78:34:b1:da:d1:bd:64:97:61:f8:ab:9f:52:48:0a:23:6e: b7:0c:01:4f:6d:05:7e:6c:35:b3:8e:0b:db:a3:21:82:76:0f: d4:a5:4a:09:45:10:9e:35:c3:88:a1:5c:6b:e7:1a:e3:a6:46: 96:b5:66:23:1c:12:a1:a2:87:ef:78:63:a7:5d:d5:60:7d:69: 55:60:ea:dd:9e:4b:43:dd:6b:22:7c:00:97:69:2b:6f:05:e5: 87:67:8f:22:c4:df:8e:0a:ae:49:5f:d1:df:6f:b2:75:f2:cd: 9e:f2:24:b0:a7:f1:7d:90:80:f6:c9:6b:6f:7f:60:26:ab:1e: b7:82:7b:05:ff:3b:a0:0f:d4:36:1f:9b:df:5c:28:e3:97:8d: 4f:8c:6c:d8:23:15:87:67:bf:b5:55:84:9c:d8:8f:7b:a8:52: d7:c7:bd:88:5d:0e:96:25:b0:d2:55:9f:1e:a9:7b:a2:66:c5: 7d:e5:f2:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IVCziOUlsrl/2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRlM2U3MmUtMzJjYi00ZTgzLThkNDQtODYyNDY2YmIw YzhiMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk Mjk2MTA5MDQtYjZmNS00YTYyLWEzN2YtMmZlN2FiNmRlMzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYFZPCSCqIHn94lLIMaUvGaZazZqocESWB4m urNK9PmuxEXU+mi82GFbTrsN96ERJlPGKi++BC6Hcw96Wp9XSgcD33w4Z1QBOND5 ytHoZiWOxoLTYML0Jm9Wo3LFnSEnZv6+nyrrhTz/j1Q8pHzKpICvPL05BUcVb2jP 3W+MXQmQgK8m1myvmymK2ToQpSf1TPLROGemmOGkcXc2G+m2YECorVOtzAxZDPMK +0CX7Q4bHL3P0eU7xFv1EK+y/rbiLha2UA9ZAgLP84C4vrNCJrfsEx0G25gqwzcu s32q+mSwrGpgfC3dOyuzWNHM5Nf9e8dHI0H06priWPnbQuS7zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNx3bmuPUNH5q5pEdcHHC044VFszMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUz ZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0NjZiYjBjOGIvNGJkN2UwYjctMjIzOC0z M2M4LWEyMjktMjBmMDk0ODgwOWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTRlM2U3MmUtMzJjYi00ZTgzLThk NDQtODYyNDY2YmIwYzhiL2E0ZTNlNzJlLTMyY2ItNGU4My04ZDQ0LTg2MjQ2NmJi MGM4Yi5jcmwwHwYDVR0jBBgwFoAU36ao4MNy5scPhIXGsRigy1w+vcMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUzZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0 NjZiYjBjOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+cF37bMTrbqVsLhcmBCgXD5tLCWjJCAwo+WI+acyVsKU21GGslUSwW Dw1GOtGDLJ0ghTf19UCemSaiHDNAk+C3KWdHrW1LYc54NLHa0b1kl2H4q59SSAoj brcMAU9tBX5sNbOOC9ujIYJ2D9SlSglFEJ41w4ihXGvnGuOmRpa1ZiMcEqGih+94 Y6dd1WB9aVVg6t2eS0PdayJ8AJdpK28F5YdnjyLE344Krklf0d9vsnXyzZ7yJLCn 8X2QgPbJa29/YCarHreCewX/O6AP1DYfm99cKOOXjU+MbNgjFYdnv7VVhJzYj3uo UtfHvYhdDpYlsNJVnx6pe6JmxX3l8tQ= -----END CERTIFICATE-----Generated at Tue Sep 9 00:11:40 2025 by rpki-client