$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/c9cffbc5-8bcf-3fc8-a618-31d60e8546c4.roa File: c9cffbc5-8bcf-3fc8-a618-31d60e8546c4.roa (raw, json) Hash identifier: Nma0V93SpHzjqN+ksNbtrI7Ym6Yzk6TEZ7h9R0uBeH0= Subject key identifier: B0:E1:D8:92:C5:E9:D7:0E:47:70:45:D6:76:35:C1:E3:CF:C6:41:03 Certificate issuer: /CN=3e08da12-c2b8-4581-b1af-e8322645d15e Certificate serial: 010D0C9F4328584B63673F780E8AD7DC588EA080 Authority key identifier: 8F:4F:2B:58:DA:5E:57:32:56:2B:F7:97:33:18:32:3C:17:29:0D:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/c9cffbc5-8bcf-3fc8-a618-31d60e8546c4.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 398448 IP address blocks: 208.93.120.0/24 maxlen: 24 208.93.121.0/24 maxlen: 24 208.93.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/3e08da12-c2b8-4581-b1af-e8322645d15e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/3e08da12-c2b8-4581-b1af-e8322645d15e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:3f:78:0e:8a:d7:dc:58:8e:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e08da12-c2b8-4581-b1af-e8322645d15e Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=22b4edd6-92e5-4793-8f1b-51456f5a4046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:69:e9:b4:09:8d:5b:c9:6b:cb:ba:ed:ad:62: be:4b:59:40:e0:05:57:68:e9:31:64:fe:6b:8d:f5: cd:d6:a8:23:f9:fc:6f:eb:c0:44:73:10:a8:56:3b: 0c:b0:9f:2d:23:62:b1:c8:55:0c:c0:a0:da:bb:3c: 65:dd:1c:7b:1a:26:75:29:1f:40:32:78:01:e5:3d: 39:86:66:dd:18:7b:03:b5:c0:c2:10:1f:a6:b9:ca: fe:71:d7:19:8b:d4:f1:9b:2e:1b:d1:46:95:13:78: 85:30:b3:e1:a4:25:cd:e6:36:3c:48:31:2d:95:60: 11:5b:56:3c:40:a2:57:bd:a1:ec:ba:9c:1c:96:59: bd:ba:c8:e9:ca:ab:7d:df:da:71:36:86:ff:65:d9: ff:3d:0a:60:e5:bf:22:bb:3d:7e:e1:e6:80:82:1b: f8:7a:f6:59:90:74:64:43:56:82:1a:ba:6e:14:39: d9:04:a3:c9:9d:55:f5:8d:cd:39:e0:06:65:a8:ed: 3c:7a:22:96:63:1a:9f:54:8d:df:99:77:26:ae:ce: e8:f3:85:67:e3:0b:1a:d7:ed:20:30:5d:75:85:13: b8:46:ee:24:e7:04:64:6d:ea:4d:40:77:b1:70:d7: eb:66:63:73:3a:ab:bc:7d:49:c6:4c:d2:5d:9a:6d: 37:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E1:D8:92:C5:E9:D7:0E:47:70:45:D6:76:35:C1:E3:CF:C6:41:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/c9cffbc5-8bcf-3fc8-a618-31d60e8546c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/3e08da12-c2b8-4581-b1af-e8322645d15e.crl X509v3 Authority Key Identifier: keyid:8F:4F:2B:58:DA:5E:57:32:56:2B:F7:97:33:18:32:3C:17:29:0D:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e.cer sbgp-ipAddrBlock: critical IPv4: 208.93.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:26:9d:5f:d7:a4:e6:9f:64:73:c7:f2:e1:16:29:9a:71:b0: f1:ae:16:e0:6b:2c:39:04:2a:d7:df:da:c4:2f:86:94:b0:f6: 60:df:dc:ee:db:46:f6:d8:18:a7:11:12:42:ff:f2:74:80:09: a9:b9:fc:ee:ae:58:1c:b9:7f:6a:73:65:00:7c:31:bc:55:75: 46:48:ed:57:f2:39:77:31:14:62:87:e6:48:f8:55:78:28:cd: 64:02:62:a5:7d:40:f4:24:bd:dc:40:eb:c2:71:9f:eb:01:64: 49:f7:35:d1:8e:10:d0:56:fa:60:49:46:27:9f:25:6d:d5:e1: 9a:c2:55:10:e0:ab:4c:17:a4:c0:12:e2:01:d3:f1:35:d3:7d: 51:46:1e:e8:e9:07:1f:9e:64:0e:6b:f8:88:d6:b0:99:83:87: 4d:ac:54:fa:11:c4:e8:99:fe:9e:30:0f:ad:2a:fd:07:98:86: 2a:cc:b7:aa:24:d7:2b:a2:d8:fd:88:ab:9a:49:c3:c4:8f:11: 4a:61:ee:31:09:cd:02:3a:ea:42:1a:80:29:e1:54:84:09:b9: d8:9c:86:3d:ed:df:0e:98:b4:1a:dd:80:9a:4e:45:f5:c9:89: 67:4d:eb:49:47:36:70:b8:25:57:79:f2:66:a8:3d:8b:0b:d7: f7:c8:81:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZz94DorX3FiOoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UwOGRhMTItYzJiOC00NTgxLWIxYWYtZTgzMjI2NDVk MTVlMB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk MjJiNGVkZDYtOTJlNS00NzkzLThmMWItNTE0NTZmNWE0MDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GnptAmNW8lry7rtrWK+S1lA4AVXaOkxZP5r jfXN1qgj+fxv68BEcxCoVjsMsJ8tI2KxyFUMwKDauzxl3Rx7GiZ1KR9AMngB5T05 hmbdGHsDtcDCEB+mucr+cdcZi9Txmy4b0UaVE3iFMLPhpCXN5jY8SDEtlWARW1Y8 QKJXvaHsupwcllm9usjpyqt939pxNob/Zdn/PQpg5b8iuz1+4eaAghv4evZZkHRk Q1aCGrpuFDnZBKPJnVX1jc054AZlqO08eiKWYxqfVI3fmXcmrs7o84Vn4wsa1+0g MF11hRO4Ru4k5wRkbepNQHexcNfrZmNzOqu8fUnGTNJdmm03CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDh2JLF6dcOR3BF1nY1wePPxkEDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZTA4 ZGExMi1jMmI4LTQ1ODEtYjFhZi1lODMyMjY0NWQxNWUvYzljZmZiYzUtOGJjZi0z ZmM4LWE2MTgtMzFkNjBlODU0NmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2UwOGRhMTItYzJiOC00NTgxLWIx YWYtZTgzMjI2NDVkMTVlLzNlMDhkYTEyLWMyYjgtNDU4MS1iMWFmLWU4MzIyNjQ1 ZDE1ZS5jcmwwHwYDVR0jBBgwFoAUj08rWNpeVzJWK/eXMxgyPBcpDUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZTA4ZGExMi1jMmI4LTQ1ODEtYjFhZi1lODMy MjY0NWQxNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0F14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQmnV/XpOafZHPH8uEWKZpxsPGuFuBrLDkEKtff2sQvhpSw9mDf3O7b RvbYGKcREkL/8nSACam5/O6uWBy5f2pzZQB8MbxVdUZI7VfyOXcxFGKH5kj4VXgo zWQCYqV9QPQkvdxA68Jxn+sBZEn3NdGOENBW+mBJRiefJW3V4ZrCVRDgq0wXpMAS 4gHT8TXTfVFGHujpBx+eZA5r+IjWsJmDh02sVPoRxOiZ/p4wD60q/QeYhirMt6ok 1yui2P2Iq5pJw8SPEUph7jEJzQI66kIagCnhVIQJudichj3t3w6YtBrdgJpORfXJ iWdN60lHNnC4JVd58maoPYsL1/fIgb8= -----END CERTIFICATE-----Generated at Mon Oct 20 20:17:59 2025 by rpki-client