$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/10c0c4bf-39f2-3de1-87c7-61e3ec92176a.roa File: 10c0c4bf-39f2-3de1-87c7-61e3ec92176a.roa (raw, json) Hash identifier: 9EfzVUvJDNZbX3T4VrCViZfZ8aZADgdbctTYce85K2Y= Subject key identifier: 03:A3:FE:59:2B:59:E3:41:E3:AB:54:9C:65:9E:64:DD:DB:55:45:55 Certificate issuer: /CN=1cef5c7c-f81f-4afe-a833-6ad9053c4074 Certificate serial: 010D0C9F4328584B48E1ACE8AABE4670E390DE80 Authority key identifier: 31:71:4F:AA:2B:76:A2:15:A0:6C:E2:FB:75:AB:5A:57:73:73:3E:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/10c0c4bf-39f2-3de1-87c7-61e3ec92176a.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 18628 IP address blocks: 208.112.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/1cef5c7c-f81f-4afe-a833-6ad9053c4074.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/1cef5c7c-f81f-4afe-a833-6ad9053c4074.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:ac:e8:aa:be:46:70:e3:90:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cef5c7c-f81f-4afe-a833-6ad9053c4074 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=72b8c90b-6b29-47e2-85bb-e0d814b22224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6b:03:4f:b0:df:f5:0d:dd:4f:ed:27:6e:50: f4:1b:5d:48:ef:68:87:3a:8a:b4:98:83:44:51:fe: f0:dd:d4:f6:30:e5:01:d3:84:66:7c:72:47:8c:97: 12:cc:5f:6c:c5:de:01:50:d3:be:1f:96:da:f5:c1: 9f:7a:a2:ec:74:d3:0b:63:3c:cd:8b:b4:e1:ee:3b: 73:ce:35:ef:8f:e4:ee:bf:27:91:9a:35:26:91:49: 2a:4d:2d:7f:fa:67:da:01:d3:8f:f4:bd:6d:a5:99: f3:27:9a:f4:c7:a3:24:21:0c:72:fe:67:e8:ff:7c: a9:8a:18:c5:54:fa:15:34:41:b6:a1:c2:37:f0:39: 9f:f2:07:a0:98:59:25:93:e5:55:15:1f:0a:c3:31: 89:6c:af:18:f8:4c:44:f0:c9:1d:bf:02:18:e4:60: db:07:60:cf:08:4f:e3:b3:86:0d:4a:4f:f7:36:30: b4:76:a1:a0:48:53:55:ac:55:f6:71:b1:c1:bd:6e: 64:40:b2:fb:de:01:2c:96:65:33:27:4b:2e:c9:0b: 3e:41:24:2b:0b:2d:73:d6:28:84:b3:a9:c9:ab:fb: d8:92:24:21:22:9d:8b:fa:df:17:8c:ae:9d:79:8e: f3:fe:fd:ae:7b:91:c4:c5:6e:05:2a:48:15:50:17: 37:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A3:FE:59:2B:59:E3:41:E3:AB:54:9C:65:9E:64:DD:DB:55:45:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/10c0c4bf-39f2-3de1-87c7-61e3ec92176a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/1cef5c7c-f81f-4afe-a833-6ad9053c4074.crl X509v3 Authority Key Identifier: keyid:31:71:4F:AA:2B:76:A2:15:A0:6C:E2:FB:75:AB:5A:57:73:73:3E:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074.cer sbgp-ipAddrBlock: critical IPv4: 208.112.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:d8:47:ab:c0:de:5a:f6:f9:7e:d8:04:44:42:69:e2:c6:f9: 04:ea:ff:99:0d:38:a4:43:25:90:4f:9a:fb:9b:39:8f:ab:b7: 11:e8:fe:40:10:2b:6c:af:6d:bb:76:fe:6b:b8:77:1e:29:16: 82:1d:d7:91:e8:7e:a7:00:cd:d7:e0:c1:a8:13:2c:26:06:f9: ea:8e:22:d2:98:c9:b9:65:94:de:80:35:c2:f3:f7:fc:6c:ec: 84:f4:66:1d:57:bd:c0:bb:ad:41:83:f4:44:2c:05:dc:a4:61: d8:27:92:fb:f7:a4:04:26:b0:b8:19:a7:ba:1b:31:73:b8:20: 27:fc:97:ae:04:36:d9:4b:9f:01:f0:ca:26:28:8a:e7:d0:bc: 67:ac:8c:c8:ae:3f:c1:3d:89:ef:20:8b:c0:fd:e8:fe:4c:c1: 75:3e:d9:8a:7c:a0:4f:9d:7a:25:5d:53:4f:a1:34:cf:e1:ef: 24:47:ca:0f:ea:3d:ae:c8:15:d6:5f:23:52:4e:dc:5a:c0:70: 4a:c9:88:37:86:44:ed:71:5d:54:ab:0f:01:ee:e8:12:10:11: 00:73:65:89:62:b5:06:8b:89:c9:6d:2e:bd:c2:75:34:02:40: a3:25:a7:bd:6f:22:2a:20:cc:6a:9a:c0:ea:21:e2:4f:bf:66: 6b:c3:5c:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4azoqr5GcOOQ3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNlZjVjN2MtZjgxZi00YWZlLWE4MzMtNmFkOTA1M2M0 MDc0MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk NzJiOGM5MGItNmIyOS00N2UyLTg1YmItZTBkODE0YjIyMjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmsDT7Df9Q3dT+0nblD0G11I72iHOoq0mINE Uf7w3dT2MOUB04RmfHJHjJcSzF9sxd4BUNO+H5ba9cGfeqLsdNMLYzzNi7Th7jtz zjXvj+TuvyeRmjUmkUkqTS1/+mfaAdOP9L1tpZnzJ5r0x6MkIQxy/mfo/3ypihjF VPoVNEG2ocI38Dmf8gegmFklk+VVFR8KwzGJbK8Y+ExE8MkdvwIY5GDbB2DPCE/j s4YNSk/3NjC0dqGgSFNVrFX2cbHBvW5kQLL73gEslmUzJ0suyQs+QSQrCy1z1iiE s6nJq/vYkiQhIp2L+t8XjK6deY7z/v2ue5HExW4FKkgVUBc3hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOj/lkrWeNB46tUnGWeZN3bVUVVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xY2Vm NWM3Yy1mODFmLTRhZmUtYTgzMy02YWQ5MDUzYzQwNzQvMTBjMGM0YmYtMzlmMi0z ZGUxLTg3YzctNjFlM2VjOTIxNzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWNlZjVjN2MtZjgxZi00YWZlLWE4 MzMtNmFkOTA1M2M0MDc0LzFjZWY1YzdjLWY4MWYtNGFmZS1hODMzLTZhZDkwNTNj NDA3NC5jcmwwHwYDVR0jBBgwFoAUMXFPqit2ohWgbOL7dataV3NzPhowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xY2VmNWM3Yy1mODFmLTRhZmUtYTgzMy02YWQ5 MDUzYzQwNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0HCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7YR6vA3lr2+X7YBERCaeLG+QTq/5kNOKRDJZBPmvubOY+rtxHo/kAQ K2yvbbt2/mu4dx4pFoId15HofqcAzdfgwagTLCYG+eqOItKYyblllN6ANcLz9/xs 7IT0Zh1XvcC7rUGD9EQsBdykYdgnkvv3pAQmsLgZp7obMXO4ICf8l64ENtlLnwHw yiYoiufQvGesjMiuP8E9ie8gi8D96P5MwXU+2Yp8oE+deiVdU0+hNM/h7yRHyg/q Pa7IFdZfI1JO3FrAcErJiDeGRO1xXVSrDwHu6BIQEQBzZYlitQaLicltLr3CdTQC QKMlp71vIiogzGqawOoh4k+/ZmvDXM0= -----END CERTIFICATE-----Generated at Mon Oct 20 05:04:17 2025 by rpki-client