$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/2084f899-7d01-37c6-a226-f5e6d53fcee9.roa File: 2084f899-7d01-37c6-a226-f5e6d53fcee9.roa (raw, json) Hash identifier: 4LuDLIdVPEi00TD3HvYQxT9nBk9FsNNPoHiaDF2bN98= Subject key identifier: DE:E0:B2:9B:CE:9D:3C:21:1D:BD:59:EB:4A:BD:93:55:63:4A:06:9C Certificate issuer: /CN=1cef5c7c-f81f-4afe-a833-6ad9053c4074 Certificate serial: 010D0C9F4328584B4D11CA2C8DBD06F50459C780 Authority key identifier: 31:71:4F:AA:2B:76:A2:15:A0:6C:E2:FB:75:AB:5A:57:73:73:3E:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/2084f899-7d01-37c6-a226-f5e6d53fcee9.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 396982 IP address blocks: 208.112.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/1cef5c7c-f81f-4afe-a833-6ad9053c4074.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/1cef5c7c-f81f-4afe-a833-6ad9053c4074.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:ca:2c:8d:bd:06:f5:04:59:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cef5c7c-f81f-4afe-a833-6ad9053c4074 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=2fead058-2fd6-41b0-bcb8-c644657c0cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:08:f6:27:6a:61:e4:8a:89:03:c3:30:54:06: 43:62:54:b7:fa:eb:65:0d:b9:c7:dc:c2:c7:0a:ce: 07:c9:26:a2:d0:a4:0b:c0:f6:c2:ad:3d:94:7e:a2: f5:a9:76:7a:d2:3b:7a:27:fb:e2:a5:0d:99:2f:1a: 95:7b:e3:79:af:8e:8b:bc:cf:14:42:5c:45:72:f1: 11:e5:59:07:e8:3b:f4:3a:19:58:b2:c7:ba:54:e8: 3d:9e:d4:f8:d7:bf:29:b1:5c:26:b9:51:b0:ce:69: 6a:ce:01:2c:53:64:4e:30:b8:57:ab:ba:25:2f:26: 37:3d:73:63:74:43:f1:42:c9:6e:a9:ee:d7:c0:39: cf:67:74:0a:b1:2b:7d:83:aa:08:2e:61:cf:c3:20: 9c:ac:3b:f0:6f:61:d9:10:4a:b5:67:da:30:e8:d6: 34:eb:23:92:ac:00:4d:7d:ef:3d:a5:8f:d0:f2:ba: 39:13:a8:33:f4:ce:be:c0:cc:a3:20:d1:f0:9b:c6: 02:aa:c5:7a:0f:76:02:74:0d:e6:57:01:9d:a9:73: dd:08:57:de:13:12:79:58:aa:f7:ed:1f:a3:fb:b9: 84:76:f6:15:03:42:b7:47:ae:86:46:5a:0b:63:40: 3c:29:36:78:52:f6:a9:49:8f:e4:ab:93:aa:a1:e2: f6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E0:B2:9B:CE:9D:3C:21:1D:BD:59:EB:4A:BD:93:55:63:4A:06:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/2084f899-7d01-37c6-a226-f5e6d53fcee9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/1cef5c7c-f81f-4afe-a833-6ad9053c4074.crl X509v3 Authority Key Identifier: keyid:31:71:4F:AA:2B:76:A2:15:A0:6C:E2:FB:75:AB:5A:57:73:73:3E:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074.cer sbgp-ipAddrBlock: critical IPv4: 208.112.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:b1:de:c3:62:b9:9b:27:a8:4f:54:66:9a:01:74:dc:3f:e8: 50:ef:fc:87:16:fd:ed:fe:ce:9c:54:95:9e:ac:f8:34:7d:29: ba:e7:95:de:3e:21:11:17:74:81:f9:3d:02:94:63:97:0f:17: 63:22:4b:49:6b:6d:bc:fc:cb:3e:b5:e2:8c:37:b4:62:ed:78: 7a:d8:6b:a8:fb:cb:5a:bb:4a:72:14:9d:48:f4:62:9b:86:3b: 5f:f8:e0:4c:91:0e:1f:3d:bb:03:cd:c0:18:43:31:ce:6e:75: 31:91:18:6a:a2:66:8c:7a:af:a1:50:68:01:43:77:5b:ec:c3: e9:e8:3a:44:90:04:ed:1d:70:2a:44:ff:c1:a6:2c:19:32:b6: 4e:bf:31:a0:8c:b4:d0:e0:ee:d3:d6:3b:e3:2b:18:df:8f:4a: 49:1e:5c:d3:d9:fb:93:3c:7d:d8:d9:cb:f2:cf:27:ac:d0:a0: c3:03:18:d7:c1:3a:3b:b8:76:02:4c:28:07:93:35:8a:95:74: f8:ba:30:8d:2f:46:ab:2a:e1:9d:ce:f5:6d:68:c1:b7:ef:7b: 1d:9c:86:e2:ec:6c:96:d9:e1:9f:20:6c:c9:c8:04:94:a5:d3: 04:c7:2d:e3:60:5d:a8:ce:f8:bc:7c:f8:de:1c:06:a0:60:0c: e2:28:08:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEcosjb0G9QRZx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNlZjVjN2MtZjgxZi00YWZlLWE4MzMtNmFkOTA1M2M0 MDc0MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk MmZlYWQwNTgtMmZkNi00MWIwLWJjYjgtYzY0NDY1N2MwY2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAj2J2ph5IqJA8MwVAZDYlS3+utlDbnH3MLH Cs4HySai0KQLwPbCrT2UfqL1qXZ60jt6J/vipQ2ZLxqVe+N5r46LvM8UQlxFcvER 5VkH6Dv0OhlYsse6VOg9ntT4178psVwmuVGwzmlqzgEsU2ROMLhXq7olLyY3PXNj dEPxQsluqe7XwDnPZ3QKsSt9g6oILmHPwyCcrDvwb2HZEEq1Z9ow6NY06yOSrABN fe89pY/Q8ro5E6gz9M6+wMyjINHwm8YCqsV6D3YCdA3mVwGdqXPdCFfeExJ5WKr3 7R+j+7mEdvYVA0K3R66GRloLY0A8KTZ4UvapSY/kq5OqoeL27QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7gspvOnTwhHb1Z60q9k1VjSgacMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xY2Vm NWM3Yy1mODFmLTRhZmUtYTgzMy02YWQ5MDUzYzQwNzQvMjA4NGY4OTktN2QwMS0z N2M2LWEyMjYtZjVlNmQ1M2ZjZWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWNlZjVjN2MtZjgxZi00YWZlLWE4 MzMtNmFkOTA1M2M0MDc0LzFjZWY1YzdjLWY4MWYtNGFmZS1hODMzLTZhZDkwNTNj NDA3NC5jcmwwHwYDVR0jBBgwFoAUMXFPqit2ohWgbOL7dataV3NzPhowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xY2VmNWM3Yy1mODFmLTRhZmUtYTgzMy02YWQ5 MDUzYzQwNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0HDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKx3sNiuZsnqE9UZpoBdNw/6FDv/IcW/e3+zpxUlZ6s+DR9Kbrnld4+ IREXdIH5PQKUY5cPF2MiS0lrbbz8yz614ow3tGLteHrYa6j7y1q7SnIUnUj0YpuG O1/44EyRDh89uwPNwBhDMc5udTGRGGqiZox6r6FQaAFDd1vsw+noOkSQBO0dcCpE /8GmLBkytk6/MaCMtNDg7tPWO+MrGN+PSkkeXNPZ+5M8fdjZy/LPJ6zQoMMDGNfB Oju4dgJMKAeTNYqVdPi6MI0vRqsq4Z3O9W1owbfvex2chuLsbJbZ4Z8gbMnIBJSl 0wTHLeNgXajO+Lx8+N4cBqBgDOIoCNU= -----END CERTIFICATE-----Generated at Mon Oct 20 02:53:17 2025 by rpki-client