$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/b22abd72-0314-3d31-bb53-c6c482f407aa.roa File: b22abd72-0314-3d31-bb53-c6c482f407aa.roa (raw, json) Hash identifier: jYbAppyEzTqNzxgaS+88nzVQNV4+JOQF2GQHRqaUy30= Subject key identifier: 0A:17:C2:49:3D:CE:38:AD:18:C1:EF:76:8B:34:24:7A:EF:94:06:54 Certificate issuer: /CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d Certificate serial: 010D0C9F4328584B84E772D43CC2247D22961280 Authority key identifier: C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/b22abd72-0314-3d31-bb53-c6c482f407aa.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16509 IP address blocks: 208.79.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:72:d4:3c:c2:24:7d:22:96:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=205e11c6-1c09-4d5a-96bb-b04311c3d4dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fd:21:0f:88:31:5d:b7:24:51:b4:b7:e4:81: e1:59:58:c7:fb:4e:38:27:7a:3d:59:57:ad:d7:0f: 53:2c:f7:d6:26:db:95:28:9d:91:a8:af:57:1a:11: 5c:79:2e:81:99:5a:69:52:1d:63:c4:37:2d:9a:94: a6:33:98:bc:ee:4c:02:bb:a5:70:3d:8f:e2:8e:e3: d7:11:e8:fc:cc:30:f8:6a:b7:de:a8:a7:1e:9a:c9: a5:4f:be:f3:dc:35:72:94:58:3c:69:bb:44:d2:fa: 58:8c:ec:1d:bf:de:15:d3:d9:70:76:98:87:15:f5: 8b:99:e7:4f:7f:b2:f2:e1:40:47:d7:6d:ba:b6:f4: 55:ec:8d:98:36:0b:1c:2c:ae:62:db:15:bc:a5:46: 12:bd:2f:94:93:7b:ce:54:44:b6:a1:03:04:c9:11: 25:d0:9d:54:b5:b6:be:41:83:28:98:0f:4c:0b:41: b7:39:31:f7:54:cc:62:ad:3a:2b:32:60:40:0a:61: 49:d6:9a:0c:44:36:b4:2f:de:30:bc:42:4b:e7:d2: 13:9a:b7:ab:22:70:49:92:5b:ed:52:d2:b8:de:9a: 46:9b:44:a5:06:5a:55:29:96:0b:b5:21:fe:45:4d: 0c:6a:3d:b3:be:bd:31:30:1e:ff:d6:81:48:f8:db: bf:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:17:C2:49:3D:CE:38:AD:18:C1:EF:76:8B:34:24:7A:EF:94:06:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/b22abd72-0314-3d31-bb53-c6c482f407aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl X509v3 Authority Key Identifier: keyid:C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer sbgp-ipAddrBlock: critical IPv4: 208.79.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:0b:09:a0:96:8f:77:9c:6c:a0:f9:b3:74:42:40:4f:09:35: 4c:5b:2f:64:3d:b2:e1:35:f2:e7:d4:3a:08:e2:d1:b2:0d:5a: 11:3a:1f:a5:14:71:92:76:91:9f:8b:74:70:26:ac:e2:c6:65: c9:40:46:83:56:f4:09:0f:0b:e9:09:2b:7f:8c:3a:03:03:45: e2:24:c7:f5:56:c7:8f:0e:90:ad:2f:d4:35:b7:11:c1:8c:d0: b5:ac:08:41:37:01:65:2d:bf:ab:73:a0:3a:b7:08:c7:8c:b3: 0f:27:9c:ac:bc:7a:86:12:7a:c7:50:6c:a6:bb:cb:94:a2:5a: 4f:04:e1:7c:e7:3d:35:ca:0f:35:7b:14:ad:c6:18:59:c3:b5: 0f:88:94:16:28:bf:ba:b4:ac:f7:93:b2:3e:76:83:e3:64:a0: f1:84:91:d6:e3:bc:fa:42:51:d6:6e:15:8e:7a:d6:32:c6:b0: a4:56:d6:e2:47:8c:11:47:fd:55:3a:be:94:1e:2a:4b:bf:3d: 43:17:da:07:5d:30:71:51:3e:34:a6:ce:d9:93:98:9c:ce:04: c1:41:30:99:44:8b:f9:e1:4c:52:8e:bc:a2:cd:45:d8:a2:75: cd:6b:6b:1e:41:88:01:c1:4f:57:9b:86:34:7b:01:f1:7d:e4: cf:ea:8f:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53LUPMIkfSKWEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UzNGRhNDItNzUzZS00YjlhLWFiNzYtMzdmZDZjZmQ3 NjVkMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk MjA1ZTExYzYtMWMwOS00ZDVhLTk2YmItYjA0MzExYzNkNGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyv0hD4gxXbckUbS35IHhWVjH+044J3o9WVet 1w9TLPfWJtuVKJ2RqK9XGhFceS6BmVppUh1jxDctmpSmM5i87kwCu6VwPY/ijuPX Eej8zDD4arfeqKcemsmlT77z3DVylFg8abtE0vpYjOwdv94V09lwdpiHFfWLmedP f7Ly4UBH1226tvRV7I2YNgscLK5i2xW8pUYSvS+Uk3vOVES2oQMEyREl0J1Utba+ QYMomA9MC0G3OTH3VMxirTorMmBACmFJ1poMRDa0L94wvEJL59ITmrerInBJklvt UtK43ppGm0SlBlpVKZYLtSH+RU0Maj2zvr0xMB7/1oFI+Nu/9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoXwkk9zjitGMHvdos0JHrvlAZUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTM0 ZGE0Mi03NTNlLTRiOWEtYWI3Ni0zN2ZkNmNmZDc2NWQvYjIyYWJkNzItMDMxNC0z ZDMxLWJiNTMtYzZjNDgyZjQwN2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2UzNGRhNDItNzUzZS00YjlhLWFi NzYtMzdmZDZjZmQ3NjVkLzNlMzRkYTQyLTc1M2UtNGI5YS1hYjc2LTM3ZmQ2Y2Zk NzY1ZC5jcmwwHwYDVR0jBBgwFoAUyczkBMk8UbylYUVW4zKa/Jhk+IwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTM0ZGE0Mi03NTNlLTRiOWEtYWI3Ni0zN2Zk NmNmZDc2NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0E8sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALILCaCWj3ecbKD5s3RCQE8JNUxbL2Q9suE18ufUOgji0bINWhE6H6UU cZJ2kZ+LdHAmrOLGZclARoNW9AkPC+kJK3+MOgMDReIkx/VWx48OkK0v1DW3EcGM 0LWsCEE3AWUtv6tzoDq3CMeMsw8nnKy8eoYSesdQbKa7y5SiWk8E4XznPTXKDzV7 FK3GGFnDtQ+IlBYov7q0rPeTsj52g+NkoPGEkdbjvPpCUdZuFY561jLGsKRW1uJH jBFH/VU6vpQeKku/PUMX2gddMHFRPjSmztmTmJzOBMFBMJlEi/nhTFKOvKLNRdii dc1rax5BiAHBT1ebhjR7AfF95M/qj2w= -----END CERTIFICATE-----Generated at Mon Oct 20 13:52:34 2025 by rpki-client