$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/3fc1396a-9d01-3bc4-9bc3-67f3159ef8ae.roa File: 3fc1396a-9d01-3bc4-9bc3-67f3159ef8ae.roa (raw, json) Hash identifier: RQ9LQFUgrJyMVpAk2cixQuKsqCt32m67WkpXTpKobEI= Subject key identifier: EB:A3:EF:25:E5:32:C3:CA:74:BD:CB:2A:2A:00:E1:2A:C3:AB:F4:96 Certificate issuer: /CN=371710da-4c28-4923-921b-e1d710cec29e Certificate serial: 010D0C9F4328584B7B21FA97719B707DE0E56900 Authority key identifier: 5D:6F:DA:FC:B7:B6:DE:51:70:F0:48:F6:9B:AC:DD:23:A7:5D:79:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/3fc1396a-9d01-3bc4-9bc3-67f3159ef8ae.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 198949 IP address blocks: 208.68.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:21:fa:97:71:9b:70:7d:e0:e5:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=371710da-4c28-4923-921b-e1d710cec29e Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=81189933-5021-460f-98ad-6a67e36485af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1f:69:20:2d:4d:84:48:9d:6a:a0:73:ef:a7: ad:00:6e:0b:eb:1d:0f:7f:12:cd:ed:93:07:34:9c: b4:cc:c2:0d:98:d7:ce:54:50:2e:93:4f:13:6b:bb: e5:e6:33:7a:12:18:e9:8a:b0:00:27:39:cc:d9:1d: fd:9e:92:71:e7:3c:d9:4d:c4:08:f8:47:65:4f:27: ae:e0:f2:c2:4a:78:64:25:8d:95:66:0a:b0:91:37: 62:f1:d7:43:26:ea:48:20:84:73:5f:07:fc:dc:ad: b9:6a:57:3b:b8:f3:3e:9b:52:0e:dc:7f:fb:87:98: b6:df:aa:7f:3d:d5:e0:19:e7:6b:a1:a6:2d:11:d3: 2a:38:d5:9d:bd:bf:5a:ba:19:c6:33:7a:e0:a9:85: 50:c4:da:a3:9d:d2:81:2d:ce:bb:b7:f1:be:24:c2: fd:74:d7:6c:94:f2:66:a8:23:fd:11:ab:02:52:14: 04:24:da:6a:cf:8c:84:52:50:2b:d0:9a:30:ae:59: eb:95:c5:8f:f5:d6:cb:e2:b6:21:43:4c:93:56:f1: 11:9f:2a:b6:09:b0:b5:00:37:a7:c3:3b:ba:f4:f9: e7:ed:08:dc:14:3d:8d:7a:ea:be:3c:4e:86:41:9b: d6:ea:37:ae:9d:c8:79:16:57:3e:a4:c1:9c:a3:7f: 75:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A3:EF:25:E5:32:C3:CA:74:BD:CB:2A:2A:00:E1:2A:C3:AB:F4:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/3fc1396a-9d01-3bc4-9bc3-67f3159ef8ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.crl X509v3 Authority Key Identifier: keyid:5D:6F:DA:FC:B7:B6:DE:51:70:F0:48:F6:9B:AC:DD:23:A7:5D:79:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer sbgp-ipAddrBlock: critical IPv4: 208.68.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:87:0f:cf:83:16:5d:a8:71:af:83:29:6b:b0:b8:f3:6c:ff: 8f:4c:f3:6c:f7:fa:1a:21:01:24:80:19:b8:da:4b:a9:fb:a9: 5d:2a:dd:12:b7:e2:06:9b:f8:bf:ae:24:81:ff:3f:c3:38:08: c7:cd:c6:8c:b1:1c:09:67:52:9f:a5:5e:67:3a:7c:80:97:fb: f0:b8:0e:91:7e:c1:03:e6:e5:a7:5d:e6:ba:6c:6f:7f:ca:5c: 6e:9a:a5:2e:56:bc:85:af:7f:67:61:db:a2:a8:64:57:4f:cc: ac:ca:5f:50:2e:26:f7:99:ce:e0:5c:53:de:f4:e2:6f:09:d3: f9:35:c0:7f:91:52:3c:75:54:3a:61:13:d0:49:a2:cc:7c:32: 2d:d2:15:aa:1a:c6:d2:f0:66:1c:43:62:4c:88:91:8f:51:74: 8d:db:b0:4d:55:6f:55:15:ec:4d:51:c6:c1:32:9e:bb:ae:e0: 29:57:f7:79:a9:c7:42:b3:50:9a:78:89:ed:27:9b:98:a9:ad: c7:65:2f:ef:e4:ae:b3:f8:7f:2a:a5:fc:63:a5:ed:72:ee:fb: bb:c1:45:ab:fd:c4:54:d6:30:4b:21:83:d1:90:be:c0:5e:7c: d7:2b:bc:9a:bd:44:67:c7:59:71:3e:c3:4c:b0:f9:23:b1:d3: 87:f3:4e:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7IfqXcZtwfeDlaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzcxNzEwZGEtNGMyOC00OTIzLTkyMWItZTFkNzEwY2Vj MjllMB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk ODExODk5MzMtNTAyMS00NjBmLTk4YWQtNmE2N2UzNjQ4NWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx9pIC1NhEidaqBz76etAG4L6x0PfxLN7ZMH NJy0zMINmNfOVFAuk08Ta7vl5jN6EhjpirAAJznM2R39npJx5zzZTcQI+EdlTyeu 4PLCSnhkJY2VZgqwkTdi8ddDJupIIIRzXwf83K25alc7uPM+m1IO3H/7h5i236p/ PdXgGedroaYtEdMqONWdvb9auhnGM3rgqYVQxNqjndKBLc67t/G+JML9dNdslPJm qCP9EasCUhQEJNpqz4yEUlAr0JowrlnrlcWP9dbL4rYhQ0yTVvERnyq2CbC1ADen wzu69Pnn7QjcFD2Neuq+PE6GQZvW6jeunch5Flc+pMGco391mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOuj7yXlMsPKdL3LKioA4SrDq/SWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNzE3 MTBkYS00YzI4LTQ5MjMtOTIxYi1lMWQ3MTBjZWMyOWUvM2ZjMTM5NmEtOWQwMS0z YmM0LTliYzMtNjdmMzE1OWVmOGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzcxNzEwZGEtNGMyOC00OTIzLTky MWItZTFkNzEwY2VjMjllLzM3MTcxMGRhLTRjMjgtNDkyMy05MjFiLWUxZDcxMGNl YzI5ZS5jcmwwHwYDVR0jBBgwFoAUXW/a/Le23lFw8Ej2m6zdI6ddeV4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNzE3MTBkYS00YzI4LTQ5MjMtOTIxYi1lMWQ3 MTBjZWMyOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+HD8+DFl2oca+DKWuwuPNs/49M82z3+hohASSAGbjaS6n7qV0q3RK3 4gab+L+uJIH/P8M4CMfNxoyxHAlnUp+lXmc6fICX+/C4DpF+wQPm5add5rpsb3/K XG6apS5WvIWvf2dh26KoZFdPzKzKX1AuJveZzuBcU9704m8J0/k1wH+RUjx1VDph E9BJosx8Mi3SFaoaxtLwZhxDYkyIkY9RdI3bsE1Vb1UV7E1RxsEynruu4ClX93mp x0KzUJp4ie0nm5iprcdlL+/krrP4fyql/GOl7XLu+7vBRav9xFTWMEshg9GQvsBe fNcrvJq9RGfHWXE+w0yw+SOx04fzTn0= -----END CERTIFICATE-----Generated at Sun Oct 19 23:57:12 2025 by rpki-client