$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/f2a8dca4-a5cb-3059-b553-5d14fbb5dab7.roa File: f2a8dca4-a5cb-3059-b553-5d14fbb5dab7.roa (raw, json) Hash identifier: UC7AZ7iHRibcXmBYVM7jDTbdl2OQUbD9/hg6TNAZ+FI= Subject key identifier: 6F:04:00:A8:B5:28:BA:77:ED:35:6E:AA:A0:0D:65:3A:36:01:9C:49 Certificate issuer: /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Certificate serial: 010D0C9F4328584B0D090A1F821F76A000953AA0 Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/f2a8dca4-a5cb-3059-b553-5d14fbb5dab7.roa Signing time: Tue 12 Aug 2025 13:05:42 +0000 ROA not before: Tue 12 Aug 2025 13:05:42 +0000 ROA not after: Mon 10 Nov 2025 14:05:42 +0000 asID: 401921 IP address blocks: 69.80.226.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0d:09:0a:1f:82:1f:76:a0:00:95:3a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe Validity Not Before: Aug 12 13:05:42 2025 GMT Not After : Nov 10 14:05:42 2025 GMT Subject: CN=ac9d153b-c95e-4096-acae-36a336be9a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:06:5e:b5:ad:49:7b:a3:46:7a:a1:07:0b:9c: 1c:a3:0e:b2:f3:79:dc:83:da:9f:7f:76:85:33:69: d6:e6:e7:ef:0c:d3:ee:3b:9e:da:8e:99:fc:24:c4: 35:d8:57:40:ab:db:8f:16:c2:e7:51:b9:36:5d:32: 7e:a6:df:8e:1b:16:f3:64:2c:d8:c2:28:2b:fc:30: d0:53:37:c8:c2:06:37:6c:ee:b9:33:40:12:79:fd: d7:91:45:77:36:76:22:28:47:a5:86:06:c9:ad:f5: b9:0e:57:f4:d3:94:4c:c9:60:11:d8:2e:d6:56:d4: 04:97:5b:84:3b:45:62:fb:0f:79:b7:d1:34:5a:a1: 43:44:53:55:6d:01:d4:03:da:1e:e6:dc:8d:2e:b8: 2d:6d:50:7f:29:50:14:30:4d:57:4c:2b:30:43:9b: 2a:58:89:3d:6b:ff:a7:1d:35:97:08:71:64:a3:e3: 06:74:95:2d:bc:52:d0:e6:64:6a:f2:97:79:10:76: 37:23:2f:22:e1:0e:42:50:1b:2b:a0:b3:05:45:23: 3a:72:60:93:a7:1b:3c:ec:42:a4:6d:95:e2:f7:ce: d3:4c:52:34:96:e4:ef:c5:38:e7:83:9b:51:da:34: 96:00:58:e1:fe:75:ce:ee:55:26:cd:9d:fc:85:18: e6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:04:00:A8:B5:28:BA:77:ED:35:6E:AA:A0:0D:65:3A:36:01:9C:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/f2a8dca4-a5cb-3059-b553-5d14fbb5dab7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl X509v3 Authority Key Identifier: keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer sbgp-ipAddrBlock: critical IPv4: 69.80.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:16:06:ed:2b:6f:e8:07:3f:b8:e4:da:9c:c0:61:7d:4d:18: 1d:ae:bb:66:5c:45:42:a4:58:e4:33:5b:35:d7:d3:1b:8e:c6: a7:c2:35:59:62:10:32:32:a4:9f:98:b5:77:12:ea:b4:78:54: db:7c:77:1c:28:8f:78:e4:c8:3e:c5:6e:3c:7b:9e:82:6e:91: 19:e0:d3:36:84:de:4b:8d:03:d0:b6:69:23:bc:ea:68:3c:69: 6c:ef:ea:d3:1a:50:57:00:52:b7:c7:0a:81:bc:1d:41:c9:95: aa:3d:16:ae:9b:34:11:ab:49:14:51:97:54:90:99:b9:9c:5a: 3b:a9:04:a6:f7:d7:77:e8:e4:66:ea:ee:5f:26:87:87:a5:e0: c6:8a:62:a1:bc:f8:24:75:25:e8:fa:30:05:f1:30:17:3b:de: 98:96:c0:0d:94:7d:4b:0d:2c:e3:55:f6:1c:e3:5a:e9:f2:e8: ed:50:86:86:dc:68:c7:98:fd:ae:53:3e:14:49:a0:16:2f:23: 16:32:54:d2:e3:aa:e8:54:24:14:2a:69:0b:ad:68:4c:9d:cc: 7f:37:eb:c7:41:bb:e6:b7:49:e1:4b:62:f2:77:21:d4:3c:70: e5:8d:ff:05:e6:cb:1c:b0:62:47:a2:8c:f7:c3:73:09:00:d5: 14:23:8c:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsNCQofgh92oACVOqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDM4OGQ1MmEtZjhkZC00YzAyLThjM2UtZTEyODA5Zjkz Y2ZlMB4XDTI1MDgxMjEzMDU0MloXDTI1MTExMDE0MDU0MlowLzEtMCsGA1UEAxMk YWM5ZDE1M2ItYzk1ZS00MDk2LWFjYWUtMzZhMzM2YmU5YTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwZeta1Je6NGeqEHC5wcow6y83ncg9qff3aF M2nW5ufvDNPuO57ajpn8JMQ12FdAq9uPFsLnUbk2XTJ+pt+OGxbzZCzYwigr/DDQ UzfIwgY3bO65M0ASef3XkUV3NnYiKEelhgbJrfW5Dlf005RMyWAR2C7WVtQEl1uE O0Vi+w95t9E0WqFDRFNVbQHUA9oe5tyNLrgtbVB/KVAUME1XTCswQ5sqWIk9a/+n HTWXCHFko+MGdJUtvFLQ5mRq8pd5EHY3Iy8i4Q5CUBsroLMFRSM6cmCTpxs87EKk bZXi987TTFI0luTvxTjng5tR2jSWAFjh/nXO7lUmzZ38hRjmAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8EAKi1KLp37TVuqqANZTo2AZxJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4 ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4MDlmOTNjZmUvZjJhOGRjYTQtYTVjYi0z MDU5LWI1NTMtNWQxNGZiYjVkYWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDM4OGQ1MmEtZjhkZC00YzAyLThj M2UtZTEyODA5ZjkzY2ZlLzAzODhkNTJhLWY4ZGQtNGMwMi04YzNlLWUxMjgwOWY5 M2NmZS5jcmwwHwYDVR0jBBgwFoAUcbVVsA0KERfSSVFKjETwTz2hZm0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4 MDlmOTNjZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRVDiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQWBu0rb+gHP7jk2pzAYX1NGB2uu2ZcRUKkWOQzWzXX0xuOxqfCNVli EDIypJ+YtXcS6rR4VNt8dxwoj3jkyD7Fbjx7noJukRng0zaE3kuNA9C2aSO86mg8 aWzv6tMaUFcAUrfHCoG8HUHJlao9Fq6bNBGrSRRRl1SQmbmcWjupBKb313fo5Gbq 7l8mh4el4MaKYqG8+CR1Jej6MAXxMBc73piWwA2UfUsNLONV9hzjWuny6O1Qhobc aMeY/a5TPhRJoBYvIxYyVNLjquhUJBQqaQutaEydzH8368dBu+a3SeFLYvJ3IdQ8 cOWN/wXmyxywYkeijPfDcwkA1RQjjKU= -----END CERTIFICATE-----Generated at Sat Sep 6 18:00:52 2025 by rpki-client