$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/c3cc2b85-8c2e-306c-b469-266eeebbab15.roa File: c3cc2b85-8c2e-306c-b469-266eeebbab15.roa (raw, json) Hash identifier: ikKLGASTb/GU/nZoqZKyKXtMNeZ9C8DC0ox0jsOVjFk= Subject key identifier: A1:85:20:21:DA:74:11:55:78:72:E6:F2:2E:B0:2C:C6:8F:DA:DC:4A Certificate issuer: /CN=1cef5c7c-f81f-4afe-a833-6ad9053c4074 Certificate serial: 010D0C9F4328584B48E1B4F6D1CD2EE3D14D6480 Authority key identifier: 31:71:4F:AA:2B:76:A2:15:A0:6C:E2:FB:75:AB:5A:57:73:73:3E:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/c3cc2b85-8c2e-306c-b469-266eeebbab15.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 396982 IP address blocks: 208.112.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/1cef5c7c-f81f-4afe-a833-6ad9053c4074.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/1cef5c7c-f81f-4afe-a833-6ad9053c4074.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:b4:f6:d1:cd:2e:e3:d1:4d:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cef5c7c-f81f-4afe-a833-6ad9053c4074 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=24d78b55-0bdd-49e9-98b2-8a8c986e0c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ac:0a:94:6b:58:bb:f4:db:e9:98:24:f0:de: d1:53:74:84:f6:76:fd:35:df:35:48:ba:1d:08:00: b9:d2:e7:fc:fe:13:86:ea:66:31:45:5a:6b:e0:da: f1:7f:bd:36:75:ac:82:04:a1:6d:2b:54:b1:45:19: 4b:9f:6e:e1:d9:2e:5d:f0:78:59:a4:ff:26:8a:2f: d1:52:05:0b:34:0d:02:4e:61:81:43:87:a8:18:dc: 3c:88:58:7f:e6:49:b1:79:4d:ba:87:7e:18:14:6c: 8f:2b:64:c7:76:7e:98:8a:94:79:2d:c9:27:ff:aa: 16:95:9e:bf:7c:f0:77:43:94:a7:44:77:5e:0a:e3: 73:83:bc:9c:18:40:cc:86:32:50:b9:38:51:5a:cc: b7:9b:c6:0c:1a:30:5c:8a:b5:d4:1f:08:d8:48:0b: 78:6c:e7:3a:4d:0e:80:73:ac:40:6b:18:a1:98:b2: 5e:a6:f1:b6:75:33:66:b1:91:d6:be:27:16:60:53: 41:bb:91:7a:e9:c5:61:3e:0c:43:7a:14:8f:04:8f: 55:c3:4f:4d:03:f5:1b:9c:55:c8:60:ae:a4:1d:0c: 30:1d:0b:19:e7:3b:b1:90:32:e5:8f:69:80:53:a1: 1a:76:7a:2d:3f:e4:f9:5c:c5:cd:50:98:af:b7:f3: 39:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:85:20:21:DA:74:11:55:78:72:E6:F2:2E:B0:2C:C6:8F:DA:DC:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/c3cc2b85-8c2e-306c-b469-266eeebbab15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/1cef5c7c-f81f-4afe-a833-6ad9053c4074.crl X509v3 Authority Key Identifier: keyid:31:71:4F:AA:2B:76:A2:15:A0:6C:E2:FB:75:AB:5A:57:73:73:3E:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074.cer sbgp-ipAddrBlock: critical IPv4: 208.112.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:b4:27:d1:47:48:5c:37:49:ba:3b:fb:97:10:5c:0f:95:aa: 69:70:9a:88:64:d2:74:35:d0:a0:9e:3f:8d:c4:29:18:04:cf: 6f:6e:73:7b:aa:ac:cf:50:87:22:54:13:ed:cc:20:58:a4:87: 3d:0f:a2:8a:2b:d3:25:c3:9e:43:e2:9c:db:6d:8f:fa:31:ad: 0d:7f:b7:dc:8e:81:c8:42:05:95:3a:36:91:f9:ad:c8:44:39: 52:1e:cd:12:52:94:11:6c:8f:3c:2e:08:3a:b5:a8:7e:70:9f: 63:ea:f5:dc:4f:26:e8:cf:ad:09:a8:98:ab:b2:1a:d3:c7:31: 15:48:b2:64:eb:6b:ff:52:ce:02:f8:49:41:5e:57:d2:57:31: 18:1a:3c:d0:c5:95:b2:3c:4c:48:b2:fb:1d:c3:d3:c9:1f:2e: 79:f2:8f:31:a2:da:69:be:a8:78:55:96:9b:92:9b:9a:be:99: 10:1c:e7:aa:55:77:69:d1:f1:14:73:e5:95:0d:76:10:76:96: ba:4b:36:de:00:5b:c4:1c:57:58:4a:56:86:ed:ba:c2:4e:88: 1b:e5:5f:f8:9d:c9:cb:58:7d:e6:5d:ea:11:fc:f2:1f:00:4c: 17:53:f1:23:22:a3:2c:b1:24:2e:bd:eb:2e:15:c3:97:7b:c6: 7e:ff:ea:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4bT20c0u49FNZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNlZjVjN2MtZjgxZi00YWZlLWE4MzMtNmFkOTA1M2M0 MDc0MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MjRkNzhiNTUtMGJkZC00OWU5LTk4YjItOGE4Yzk4NmUwYzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiawKlGtYu/Tb6Zgk8N7RU3SE9nb9Nd81SLod CAC50uf8/hOG6mYxRVpr4Nrxf702dayCBKFtK1SxRRlLn27h2S5d8HhZpP8mii/R UgULNA0CTmGBQ4eoGNw8iFh/5kmxeU26h34YFGyPK2THdn6YipR5Lckn/6oWlZ6/ fPB3Q5SnRHdeCuNzg7ycGEDMhjJQuThRWsy3m8YMGjBcirXUHwjYSAt4bOc6TQ6A c6xAaxihmLJepvG2dTNmsZHWvicWYFNBu5F66cVhPgxDehSPBI9Vw09NA/UbnFXI YK6kHQwwHQsZ5zuxkDLlj2mAU6EadnotP+T5XMXNUJivt/M5IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGFICHadBFVeHLm8i6wLMaP2txKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xY2Vm NWM3Yy1mODFmLTRhZmUtYTgzMy02YWQ5MDUzYzQwNzQvYzNjYzJiODUtOGMyZS0z MDZjLWI0NjktMjY2ZWVlYmJhYjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWNlZjVjN2MtZjgxZi00YWZlLWE4 MzMtNmFkOTA1M2M0MDc0LzFjZWY1YzdjLWY4MWYtNGFmZS1hODMzLTZhZDkwNTNj NDA3NC5jcmwwHwYDVR0jBBgwFoAUMXFPqit2ohWgbOL7dataV3NzPhowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xY2VmNWM3Yy1mODFmLTRhZmUtYTgzMy02YWQ5 MDUzYzQwNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0HCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABK0J9FHSFw3Sbo7+5cQXA+Vqmlwmohk0nQ10KCeP43EKRgEz29uc3uq rM9QhyJUE+3MIFikhz0Pooor0yXDnkPinNttj/oxrQ1/t9yOgchCBZU6NpH5rchE OVIezRJSlBFsjzwuCDq1qH5wn2Pq9dxPJujPrQmomKuyGtPHMRVIsmTra/9SzgL4 SUFeV9JXMRgaPNDFlbI8TEiy+x3D08kfLnnyjzGi2mm+qHhVlpuSm5q+mRAc56pV d2nR8RRz5ZUNdhB2lrpLNt4AW8QcV1hKVobtusJOiBvlX/idyctYfeZd6hH88h8A TBdT8SMioyyxJC696y4Vw5d7xn7/6sM= -----END CERTIFICATE-----Generated at Mon Oct 20 02:10:58 2025 by rpki-client