$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/def9b23b-c280-3ecf-944f-d95c26db0ef0.roa File: def9b23b-c280-3ecf-944f-d95c26db0ef0.roa (raw, json) Hash identifier: M6MrLd62we3Fo7QSYb3B+dLP14SSgVfrHBcTpvliC88= Subject key identifier: 3F:5A:11:87:AC:FC:BB:11:1A:BF:24:34:E3:71:BB:11:4C:49:19:22 Certificate issuer: /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Certificate serial: 010D0C9F4328584ADECBB176AB653FB183ABB680 Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/def9b23b-c280-3ecf-944f-d95c26db0ef0.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 62707 IP address blocks: 208.80.40.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:b1:76:ab:65:3f:b1:83:ab:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=1887f93e-2aa8-4a82-b638-aea799f56cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1d:5d:15:a6:ed:32:e9:83:ff:52:1c:57:1a: b5:02:0f:b0:9c:99:12:50:a9:b9:73:be:56:29:31: 0e:b5:70:74:4a:9c:81:e4:79:65:30:98:88:4e:09: fe:22:ec:a8:b6:f9:65:81:6d:7f:67:d9:ec:0b:24: cd:ad:72:4c:46:71:3f:c5:67:57:5d:6d:13:0b:e0: e8:18:c6:a4:c6:21:5e:48:56:3b:f7:59:0f:a9:65: 1a:0d:f2:48:dd:2f:f9:98:16:db:0a:be:88:84:f5: 30:65:4f:8b:12:ab:d3:2a:b4:45:08:57:de:c0:52: eb:8f:31:c6:ff:7a:c5:8b:2b:12:d8:3a:dd:fd:70: 7f:83:00:88:b3:a0:bd:ff:81:87:f5:37:08:cb:a9: 40:80:48:40:20:fb:ff:1f:31:88:9e:99:04:8d:a6: 55:1b:5f:3e:10:ec:bc:b2:32:08:bf:c6:5e:be:9d: e9:62:6d:cc:dd:12:4e:09:25:93:28:e9:4a:ce:63: 59:a3:4b:bf:95:d8:a8:77:60:f7:96:04:4e:c6:50: a4:6d:8a:39:6e:02:17:c7:e7:82:99:9e:11:d9:ab: e9:1a:d8:45:77:d4:3d:30:6a:93:67:37:72:01:45: 91:53:f8:25:f9:63:10:9f:00:78:10:c0:33:b3:18: d9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:5A:11:87:AC:FC:BB:11:1A:BF:24:34:E3:71:BB:11:4C:49:19:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/def9b23b-c280-3ecf-944f-d95c26db0ef0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl X509v3 Authority Key Identifier: keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer sbgp-ipAddrBlock: critical IPv4: 208.80.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:d8:a7:72:6b:af:be:32:51:07:03:37:d3:75:9e:d0:cf:9d: 72:93:de:c0:5a:75:7b:68:22:b8:6a:e8:35:18:70:77:d0:a7: d4:97:72:17:cf:10:9e:c9:d1:e7:bc:5e:d4:1a:c7:56:ea:c5: 9c:94:15:65:aa:05:59:cd:2d:b4:d9:1f:cf:dc:24:b2:63:28: 32:e8:01:68:a8:e6:2a:bb:2b:a4:3d:5d:c9:1d:fb:48:5e:7c: 7d:22:bf:04:b1:f0:b9:5c:a3:46:3a:17:03:5c:07:9d:71:56: 6f:79:0d:8f:f6:da:26:36:90:f5:41:4d:9e:f2:2b:d9:68:7b: de:fb:cb:07:23:d0:41:9a:27:11:1e:46:5f:ce:a3:6a:ed:28: 60:7d:f1:a6:2e:d1:cc:e8:9d:35:32:b6:50:40:6f:72:5e:0a: aa:58:89:6a:c6:f8:3c:19:44:8e:b2:44:4d:10:b8:c9:7f:d2: 77:76:18:38:07:6a:bb:49:4d:eb:e8:55:66:dd:27:44:3e:1a: 4c:ad:40:ff:79:c8:05:a5:3b:87:03:ce:74:71:96:35:3c:a1: 88:6b:cf:1b:1b:db:cd:9f:1f:5c:0f:f7:0a:83:f1:95:e1:9f: 45:0a:65:8d:b0:5b:19:02:09:5c:ba:41:fd:e5:d3:cf:cb:44: 74:57:53:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey7F2q2U/sYOrtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWYzZWM5MzgtN2I0NS00YzQ3LTkxZDItOWY3ZDE4NDEx NTE5MB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk MTg4N2Y5M2UtMmFhOC00YTgyLWI2MzgtYWVhNzk5ZjU2Y2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjR1dFabtMumD/1IcVxq1Ag+wnJkSUKm5c75W KTEOtXB0SpyB5HllMJiITgn+IuyotvllgW1/Z9nsCyTNrXJMRnE/xWdXXW0TC+Do GMakxiFeSFY791kPqWUaDfJI3S/5mBbbCr6IhPUwZU+LEqvTKrRFCFfewFLrjzHG /3rFiysS2Drd/XB/gwCIs6C9/4GH9TcIy6lAgEhAIPv/HzGInpkEjaZVG18+EOy8 sjIIv8Zevp3pYm3M3RJOCSWTKOlKzmNZo0u/ldiod2D3lgROxlCkbYo5bgIXx+eC mZ4R2avpGthFd9Q9MGqTZzdyAUWRU/gl+WMQnwB4EMAzsxjZNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9aEYes/LsRGr8kNONxuxFMSRkiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNl YzkzOC03YjQ1LTRjNDctOTFkMi05ZjdkMTg0MTE1MTkvZGVmOWIyM2ItYzI4MC0z ZWNmLTk0NGYtZDk1YzI2ZGIwZWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWYzZWM5MzgtN2I0NS00YzQ3LTkx ZDItOWY3ZDE4NDExNTE5L2VmM2VjOTM4LTdiNDUtNGM0Ny05MWQyLTlmN2QxODQx MTUxOS5jcmwwHwYDVR0jBBgwFoAUkanyxG7l5rwGtdG4Yq1QTfPopywwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNlYzkzOC03YjQ1LTRjNDctOTFkMi05Zjdk MTg0MTE1MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FAoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7Yp3Jrr74yUQcDN9N1ntDPnXKT3sBadXtoIrhq6DUYcHfQp9SXchfP EJ7J0ee8XtQax1bqxZyUFWWqBVnNLbTZH8/cJLJjKDLoAWio5iq7K6Q9Xckd+0he fH0ivwSx8Llco0Y6FwNcB51xVm95DY/22iY2kPVBTZ7yK9loe977ywcj0EGaJxEe Rl/Oo2rtKGB98aYu0czonTUytlBAb3JeCqpYiWrG+DwZRI6yRE0QuMl/0nd2GDgH artJTevoVWbdJ0Q+GkytQP95yAWlO4cDznRxljU8oYhrzxsb282fH1wP9wqD8ZXh n0UKZY2wWxkCCVy6Qf3l08/LRHRXU1Q= -----END CERTIFICATE-----Generated at Sat Aug 23 12:58:03 2025 by rpki-client