$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/c08cddf9-ba1c-326e-b5f2-eaa91ac95c6f.roa File: c08cddf9-ba1c-326e-b5f2-eaa91ac95c6f.roa (raw, json) Hash identifier: PZs/JGCjAmA5E5ljsmByhJ/1VgxijGuXtNwk3W4cpSE= Subject key identifier: 3C:0E:41:44:68:8E:3D:55:EA:F7:1E:1D:B5:06:1E:20:D6:9E:67:72 Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Certificate serial: 010D0C9F4328584AFEE69F52EFE17D07C526A340 Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/c08cddf9-ba1c-326e-b5f2-eaa91ac95c6f.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 21928 IP address blocks: 65.76.0.0/16 maxlen: 24 167.20.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:9f:52:ef:e1:7d:07:c5:26:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=49f909ea-b39f-48c5-8ccc-3ebdd59bc167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:33:8a:30:d0:91:fa:39:96:e7:ab:2f:9c:57: 2e:31:c9:3d:d8:e6:01:bf:d2:cc:0f:3e:ea:75:c4: ed:d9:ed:3b:ee:bc:d5:f5:d7:b0:d0:c0:55:18:c5: fa:be:31:d6:a5:a1:1a:b3:86:4c:a6:af:c6:de:d5: f9:50:12:ee:f1:86:84:6d:07:28:bf:44:6e:bb:aa: f7:9c:43:41:97:3e:55:38:c5:19:16:d3:b9:ae:0d: 77:d2:55:2d:5d:de:87:05:0b:2d:6f:aa:7b:66:75: cb:31:21:f8:2d:14:7f:50:d4:df:89:0b:99:91:f1: 31:cf:7d:09:4b:0d:57:50:64:f7:ca:c8:bc:87:a0: 56:b6:00:b2:00:dc:e5:37:4b:27:45:7a:b4:98:55: 35:af:26:26:e9:41:5a:43:be:98:cf:3c:5c:1e:f6: fb:f4:67:43:4f:10:4b:ac:e1:06:e5:46:56:b3:17: 96:1b:84:f2:89:43:98:9a:b1:46:e9:3b:09:3c:7f: 10:b4:5e:34:1c:46:99:5a:c6:eb:68:0a:ee:09:c9: 43:97:d2:b3:64:b5:69:d9:04:1f:2b:6d:43:e0:f3: d6:b5:89:65:25:eb:02:0c:da:8c:40:ea:4e:34:05: ec:4e:37:cb:76:f1:f0:87:e8:cb:12:72:71:fb:f1: 6d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0E:41:44:68:8E:3D:55:EA:F7:1E:1D:B5:06:1E:20:D6:9E:67:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/c08cddf9-ba1c-326e-b5f2-eaa91ac95c6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl X509v3 Authority Key Identifier: keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer sbgp-ipAddrBlock: critical IPv4: 65.76.0.0/16 167.20.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:21:97:45:6f:0f:fa:6a:bd:5d:d4:cb:c3:b7:e4:5d:74:43: 66:07:97:cd:6a:4c:50:a6:2f:cd:98:12:be:ad:ca:0d:e7:ed: ed:ec:37:e7:a5:9f:12:02:b1:d1:ca:2e:c7:62:3a:ba:74:f4: 10:1f:9e:01:97:c5:93:92:25:aa:f1:5b:20:13:0c:65:41:ce: 31:1d:19:c7:2e:c6:b7:01:74:63:4d:14:70:ee:54:74:e9:db: 11:05:81:fe:88:8b:ef:97:7d:fb:4f:96:41:18:9e:3c:4e:26: 54:b2:de:01:d8:6d:e6:af:c6:98:65:e5:d2:4e:42:50:31:c2: 68:06:44:6e:ec:0d:f7:02:c2:c7:fb:99:ab:b8:ca:7c:9a:08: 6f:f5:fd:97:9d:83:34:83:0d:56:0f:d7:3b:a2:a0:bb:8b:5d: 9c:6e:c8:2e:1d:9e:09:7f:18:e6:a6:24:c5:9d:84:74:99:9a: cd:89:0b:9d:f2:df:ba:bf:bf:33:0e:e0:06:1a:19:21:76:15: ca:ca:4f:a1:03:0a:32:a9:96:26:53:88:67:e4:d7:fb:58:ca: 5b:2e:ee:99:ed:fb:35:c3:87:0a:2c:ab:4e:71:5e:c1:e7:01: ae:16:04:ad:df:5e:e4:9e:8c:58:d8:4f:bc:9b:11:ff:37:96: cf:a0:79:c9 -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEr+5p9S7+F9B8Umo0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm MGMzMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk NDlmOTA5ZWEtYjM5Zi00OGM1LThjY2MtM2ViZGQ1OWJjMTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTOKMNCR+jmW56svnFcuMck92OYBv9LMDz7q dcTt2e077rzV9dew0MBVGMX6vjHWpaEas4ZMpq/G3tX5UBLu8YaEbQcov0Ruu6r3 nENBlz5VOMUZFtO5rg130lUtXd6HBQstb6p7ZnXLMSH4LRR/UNTfiQuZkfExz30J Sw1XUGT3ysi8h6BWtgCyANzlN0snRXq0mFU1ryYm6UFaQ76YzzxcHvb79GdDTxBL rOEG5UZWsxeWG4TyiUOYmrFG6TsJPH8QtF40HEaZWsbraAruCclDl9KzZLVp2QQf K21D4PPWtYllJesCDNqMQOpONAXsTjfLdvHwh+jLEnJx+/FtPQIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFDwOQURojj1V6vceHbUGHiDWnmdyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvYzA4Y2RkZjktYmExYy0z MjZlLWI1ZjItZWFhOTFhYzk1YzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi ZjVjZWYwYzMuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAQUwDAwCn FDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQDEIZdFbw/6ar1d1MvDt+RddENmB5fNakxQpi/NmBK+rcoN5+3t 7DfnpZ8SArHRyi7HYjq6dPQQH54Bl8WTkiWq8VsgEwxlQc4xHRnHLsa3AXRjTRRw 7lR06dsRBYH+iIvvl337T5ZBGJ48TiZUst4B2G3mr8aYZeXSTkJQMcJoBkRu7A33 AsLH+5mruMp8mghv9f2XnYM0gw1WD9c7oqC7i12cbsguHZ4JfxjmpiTFnYR0mZrN iQud8t+6v78zDuAGGhkhdhXKyk+hAwoyqZYmU4hn5Nf7WMpbLu6Z7fs1w4cKLKtO cV7B5wGuFgSt317knoxY2E+8mxH/N5bPoHnJ -----END CERTIFICATE-----Generated at Mon Oct 20 07:42:21 2025 by rpki-client