$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/363970c4-35aa-3380-88dd-203981f8b04a.roa File: 363970c4-35aa-3380-88dd-203981f8b04a.roa (raw, json) Hash identifier: M6OCAdECw/CjHGPDA9n17L2DTpP8us8jR8ydIX0qExg= Subject key identifier: F5:68:D3:F7:08:D2:A8:E8:80:89:8A:F4:E9:C4:69:A0:13:88:31:FF Certificate issuer: /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Certificate serial: 010D0C9F4328584ADECBAA25B8C28150B7EC0300 Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/363970c4-35aa-3380-88dd-203981f8b04a.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 139267 IP address blocks: 208.80.40.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:aa:25:b8:c2:81:50:b7:ec:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=fc6bbc66-55f7-4569-8643-6674d6b814c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d1:4d:73:7a:f3:c8:17:fd:4f:1e:24:0f:6b: 4d:6c:fa:43:a3:7f:6d:c3:28:fd:88:9c:41:c8:6b: 92:05:41:1a:8f:ac:b0:22:9f:d2:9b:10:c3:e3:f5: d6:63:9e:f8:ed:ee:d8:53:47:b5:7f:d1:a5:5a:d8: 29:0d:64:60:07:4b:41:72:e9:2b:c5:fc:22:7f:f0: 92:29:b1:7a:a7:8e:0f:cd:20:57:53:52:6a:56:37: 7c:e2:7f:25:b2:42:a0:94:b8:f4:cc:57:54:4d:fd: b3:f1:a6:43:fa:78:5f:9a:da:45:b6:67:26:38:cc: ad:4c:7d:a2:ca:9a:95:65:05:5d:87:50:a6:2e:2f: 2f:0f:65:eb:a6:2d:a3:86:e5:d6:88:a6:16:0f:d9: 6e:ba:75:80:75:6b:f1:ed:40:a8:9d:4d:ef:af:0e: 53:c2:2f:d3:32:36:35:85:53:44:52:bf:96:0a:0e: 97:e3:9a:d2:be:37:9e:fd:61:22:8a:14:2d:1b:1c: a6:d5:08:1f:3e:31:8b:81:aa:6b:02:e8:f0:b5:7e: de:85:d4:ef:f6:31:36:7f:00:74:a9:88:1e:58:22: 13:68:e7:25:f4:d1:9d:11:71:a3:0b:b4:ff:24:9c: 05:96:56:ef:fb:76:9d:2b:d0:58:bc:e1:2e:7a:12: fb:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:68:D3:F7:08:D2:A8:E8:80:89:8A:F4:E9:C4:69:A0:13:88:31:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/363970c4-35aa-3380-88dd-203981f8b04a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl X509v3 Authority Key Identifier: keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer sbgp-ipAddrBlock: critical IPv4: 208.80.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:c3:86:57:02:18:22:30:22:a8:01:15:1c:87:7f:81:03:fd: 5c:fb:8d:b6:8b:fb:11:e5:93:54:62:73:a2:f3:36:0b:16:9b: b7:03:43:36:bb:35:c6:fd:eb:75:2b:5f:81:b9:04:a0:f4:ec: 5f:9b:74:63:71:9a:0c:0f:57:ea:97:d4:09:a3:1b:8a:31:c5: bc:0c:30:3a:91:36:f1:9e:e9:91:87:55:fe:49:85:7f:41:cb: db:f6:23:22:8f:80:5d:76:30:0e:32:a1:bc:b7:1e:ab:63:3c: c8:b6:4a:fc:e0:3d:b9:20:72:46:e9:7e:b5:0a:ed:6d:d4:18: 2e:32:1b:81:e0:03:84:5e:c5:3b:08:e6:5f:d8:21:5b:40:04: 88:c7:02:4e:06:fd:ea:9b:cb:62:a9:00:1d:e7:65:ab:88:5d: 16:2d:2b:fb:70:3b:7f:19:48:54:c4:d8:8b:ba:88:8b:4c:93: c8:e8:05:a1:e4:fe:fa:4d:8b:e0:f6:aa:c0:1a:1c:39:da:08: fc:43:f3:64:35:d4:5c:e5:95:aa:a2:f7:59:a1:83:92:20:66: c9:e4:12:3c:23:19:21:6b:c1:92:9b:2d:2a:22:06:09:34:0b: 39:d1:2d:70:a1:05:b2:97:39:2b:b2:97:c7:19:3c:ea:41:c9: cf:a3:fa:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey6oluMKBULfsAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWYzZWM5MzgtN2I0NS00YzQ3LTkxZDItOWY3ZDE4NDEx NTE5MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk ZmM2YmJjNjYtNTVmNy00NTY5LTg2NDMtNjY3NGQ2YjgxNGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9FNc3rzyBf9Tx4kD2tNbPpDo39twyj9iJxB yGuSBUEaj6ywIp/SmxDD4/XWY5747e7YU0e1f9GlWtgpDWRgB0tBcukrxfwif/CS KbF6p44PzSBXU1JqVjd84n8lskKglLj0zFdUTf2z8aZD+nhfmtpFtmcmOMytTH2i ypqVZQVdh1CmLi8vD2Xrpi2jhuXWiKYWD9luunWAdWvx7UConU3vrw5Twi/TMjY1 hVNEUr+WCg6X45rSvjee/WEiihQtGxym1QgfPjGLgaprAujwtX7ehdTv9jE2fwB0 qYgeWCITaOcl9NGdEXGjC7T/JJwFllbv+3adK9BYvOEuehL7qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVo0/cI0qjogImK9OnEaaATiDH/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNl YzkzOC03YjQ1LTRjNDctOTFkMi05ZjdkMTg0MTE1MTkvMzYzOTcwYzQtMzVhYS0z MzgwLTg4ZGQtMjAzOTgxZjhiMDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWYzZWM5MzgtN2I0NS00YzQ3LTkx ZDItOWY3ZDE4NDExNTE5L2VmM2VjOTM4LTdiNDUtNGM0Ny05MWQyLTlmN2QxODQx MTUxOS5jcmwwHwYDVR0jBBgwFoAUkanyxG7l5rwGtdG4Yq1QTfPopywwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNlYzkzOC03YjQ1LTRjNDctOTFkMi05Zjdk MTg0MTE1MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FAoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL/DhlcCGCIwIqgBFRyHf4ED/Vz7jbaL+xHlk1Ric6LzNgsWm7cDQza7 Ncb963UrX4G5BKD07F+bdGNxmgwPV+qX1AmjG4oxxbwMMDqRNvGe6ZGHVf5JhX9B y9v2IyKPgF12MA4yoby3HqtjPMi2SvzgPbkgckbpfrUK7W3UGC4yG4HgA4RexTsI 5l/YIVtABIjHAk4G/eqby2KpAB3nZauIXRYtK/twO38ZSFTE2Iu6iItMk8joBaHk /vpNi+D2qsAaHDnaCPxD82Q11Fzllaqi91mhg5IgZsnkEjwjGSFrwZKbLSoiBgk0 CznRLXChBbKXOSuyl8cZPOpByc+j+p4= -----END CERTIFICATE-----Generated at Sat Aug 23 14:25:19 2025 by rpki-client