$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/e208510e-919b-3acc-a02a-9e6cc9ba5abf.roa File: e208510e-919b-3acc-a02a-9e6cc9ba5abf.roa (raw, json) Hash identifier: ktHdqrjp4WgbCQ+j3iygT2TiS1VUKgy8cQKDE9xEsHQ= Subject key identifier: 28:1C:9C:FC:37:EE:76:8C:C5:F3:83:A7:4A:17:B1:17:90:C3:9E:CC Certificate issuer: /CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Certificate serial: 010D0C9F4328584B3DB7012E89BDE2BA2FDE25E0 Authority key identifier: 21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/e208510e-919b-3acc-a02a-9e6cc9ba5abf.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 208.64.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:01:2e:89:bd:e2:ba:2f:de:25:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=31cefe07-6d65-4408-bed4-197420b1b89f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:dd:3c:e6:9b:91:db:c2:84:d5:ff:45:52:a1: 74:ce:70:4c:ae:0d:d1:ba:1f:93:f2:29:63:0f:ea: 4b:de:a0:a8:29:be:ca:45:7e:87:49:75:a3:a4:81: 49:1d:b0:ea:9e:30:9d:1b:da:db:b8:08:bd:b3:62: c7:e5:c2:f5:54:74:33:07:0c:37:34:3d:fc:41:bd: 57:19:a8:84:64:e2:0d:9b:d4:2d:d5:c5:09:31:1c: 7b:ba:03:d2:9b:a9:79:b8:ad:cf:0c:88:39:3f:fc: 0c:21:09:ac:40:a4:ab:e8:a3:15:69:a4:82:be:4a: e8:7f:60:46:b5:f0:a9:a5:79:e5:bd:1e:5c:2a:0d: fd:b3:c4:a1:b8:b1:5b:26:c7:b1:93:92:83:c4:b2: cc:c7:47:4b:2d:41:58:4e:4b:04:b6:22:d3:86:d6: 06:d4:5e:b5:ef:4c:e4:23:a1:d4:8b:c9:45:94:6d: b6:47:12:68:ad:5d:30:ca:88:26:8c:0f:1d:4d:25: 6b:35:ab:62:8a:32:05:68:95:8d:ac:a5:60:ac:ad: 2f:b2:cd:2d:5d:b4:26:29:34:ef:c8:d6:f1:21:08: b7:2c:c2:92:58:c7:aa:0f:e2:66:a5:2b:01:50:fc: 08:db:66:24:1a:c3:9a:07:49:74:18:e0:91:aa:1c: 6f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1C:9C:FC:37:EE:76:8C:C5:F3:83:A7:4A:17:B1:17:90:C3:9E:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/e208510e-919b-3acc-a02a-9e6cc9ba5abf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl X509v3 Authority Key Identifier: keyid:21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer sbgp-ipAddrBlock: critical IPv4: 208.64.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:43:49:90:0d:2b:96:3f:25:e3:71:af:0d:60:b5:72:4a:76: 77:45:bc:06:05:76:f6:e4:6e:02:fc:60:9d:33:11:ea:f1:b5: 45:4f:ea:ac:5c:27:c5:57:f3:47:03:e4:67:98:d9:9d:e3:3b: 4a:da:77:bd:ab:84:00:ae:f3:9e:7d:e4:b9:1b:cf:39:04:00: 55:67:8a:d3:59:5f:82:a8:2e:db:96:dc:38:15:86:02:74:3e: 77:f4:32:61:4e:99:97:cd:9d:9e:9d:33:ec:e9:3f:2f:ed:a9: a7:4e:48:fc:bd:9f:e4:4c:f5:c7:0e:11:04:ae:3a:13:95:99: 14:b8:43:6d:15:97:ba:11:9d:07:39:bd:f9:2a:52:aa:9f:20: b6:b2:8c:ea:91:55:21:90:16:80:9a:7a:d9:5d:b0:92:d6:63: 5f:ec:91:9d:5f:45:5c:f6:0d:20:95:97:ff:aa:2b:d1:5f:de: 3f:63:12:e1:db:99:2e:45:f9:4c:e6:c4:fb:57:8a:07:b6:bb: f3:3d:89:4c:72:21:cd:91:6d:74:ed:e2:ba:d6:cb:a1:d0:d6: df:e1:d7:5d:e4:1c:90:be:2d:fe:af:56:e8:39:b3:69:fa:b3: 89:d1:27:37:c9:ad:01:21:e9:a2:64:d1:bb:77:8b:2e:69:ce: 45:85:5e:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9twEuib3iui/eJeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4N2MwYjMtMzgzYS00MzhjLWFhNDUtMWU1ZGYwZDBl MDYxMB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MzFjZWZlMDctNmQ2NS00NDA4LWJlZDQtMTk3NDIwYjFiODlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAht085puR28KE1f9FUqF0znBMrg3Ruh+T8ilj D+pL3qCoKb7KRX6HSXWjpIFJHbDqnjCdG9rbuAi9s2LH5cL1VHQzBww3ND38Qb1X GaiEZOINm9Qt1cUJMRx7ugPSm6l5uK3PDIg5P/wMIQmsQKSr6KMVaaSCvkrof2BG tfCppXnlvR5cKg39s8ShuLFbJsexk5KDxLLMx0dLLUFYTksEtiLThtYG1F6170zk I6HUi8lFlG22RxJorV0wyogmjA8dTSVrNatiijIFaJWNrKVgrK0vss0tXbQmKTTv yNbxIQi3LMKSWMeqD+JmpSsBUPwI22YkGsOaB0l0GOCRqhxvHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgcnPw37naMxfODp0oXsReQw57MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3 YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVkZjBkMGUwNjEvZTIwODUxMGUtOTE5Yi0z YWNjLWEwMmEtOWU2Y2M5YmE1YWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGU4N2MwYjMtMzgzYS00MzhjLWFh NDUtMWU1ZGYwZDBlMDYxLzRlODdjMGIzLTM4M2EtNDM4Yy1hYTQ1LTFlNWRmMGQw ZTA2MS5jcmwwHwYDVR0jBBgwFoAUIbRtv8sZKo0pVPBrIIKDwhIbf9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVk ZjBkMGUwNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EBQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRDSZANK5Y/JeNxrw1gtXJKdndFvAYFdvbkbgL8YJ0zEerxtUVP6qxc J8VX80cD5GeY2Z3jO0rad72rhACu85595LkbzzkEAFVnitNZX4KoLtuW3DgVhgJ0 Pnf0MmFOmZfNnZ6dM+zpPy/tqadOSPy9n+RM9ccOEQSuOhOVmRS4Q20Vl7oRnQc5 vfkqUqqfILayjOqRVSGQFoCaetldsJLWY1/skZ1fRVz2DSCVl/+qK9Ff3j9jEuHb mS5F+UzmxPtXige2u/M9iUxyIc2RbXTt4rrWy6HQ1t/h113kHJC+Lf6vVug5s2n6 s4nRJzfJrQEh6aJk0bt3iy5pzkWFXpI= -----END CERTIFICATE-----Generated at Mon Oct 20 13:53:01 2025 by rpki-client