$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b036528c-d877-46d3-a948-64c8f3b600cc/a44749b3-2884-3b75-b78d-0868496658de.roa File: a44749b3-2884-3b75-b78d-0868496658de.roa (raw, json) Hash identifier: 9uuKRo7N6orj9p+NlWMZf4htjVMTpnTv6GozwVFGuis= Subject key identifier: 44:1A:4F:0F:E7:63:89:0F:04:FD:C6:4A:93:75:59:9F:43:88:5E:E6 Certificate issuer: /CN=b036528c-d877-46d3-a948-64c8f3b600cc Certificate serial: 010D0C9F4328584B8EACE53247ECE88EEAF08020 Authority key identifier: 51:45:D2:CC:87:7A:2C:B7:0E:3A:3E:E9:2A:DD:F1:78:19:17:A3:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b036528c-d877-46d3-a948-64c8f3b600cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b036528c-d877-46d3-a948-64c8f3b600cc/a44749b3-2884-3b75-b78d-0868496658de.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 23038 IP address blocks: 208.71.200.0/21 maxlen: 21 208.71.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b036528c-d877-46d3-a948-64c8f3b600cc/b036528c-d877-46d3-a948-64c8f3b600cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b036528c-d877-46d3-a948-64c8f3b600cc/b036528c-d877-46d3-a948-64c8f3b600cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b036528c-d877-46d3-a948-64c8f3b600cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:e5:32:47:ec:e8:8e:ea:f0:80:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b036528c-d877-46d3-a948-64c8f3b600cc Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=9c041950-ff42-409f-8c84-0fb4a71fcc3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:17:36:30:ad:31:52:aa:a6:25:19:2e:3e:ea: d7:7c:3e:be:e9:59:38:ed:d9:69:92:12:e9:de:f8: eb:70:66:ef:03:73:ef:5d:ed:34:be:0c:56:10:ca: db:cc:c7:79:0c:66:1b:38:14:96:05:34:bc:97:61: 9c:b4:bf:da:57:65:03:9f:66:77:ad:1d:b3:c6:46: 3f:05:08:3d:13:c0:f4:a2:8c:05:42:37:15:fa:72: aa:d1:77:92:31:98:58:93:7a:18:eb:58:f9:65:cb: 74:84:fc:67:5e:84:95:c7:54:b9:b2:5f:2c:51:8a: ba:b5:2f:46:8b:2d:e1:d6:3d:06:f8:f7:fd:12:44: 07:6c:0a:29:30:12:2f:cd:c4:6f:70:71:30:bb:c8: 45:b3:b3:0e:93:16:6a:ef:27:58:1e:e7:ad:25:2d: ae:a5:2a:f9:40:b9:ad:a8:f1:e3:c2:68:72:ae:7a: f6:36:5d:65:1a:de:24:71:27:bf:74:9a:c2:f2:75: 81:cb:9e:84:82:94:17:de:d7:57:09:4b:42:5a:62: 66:3c:e7:b8:ad:41:6b:91:08:c5:b7:12:88:90:89: 59:c2:6f:dd:36:c5:8d:fc:a7:fd:40:a6:08:9f:d1: 09:c9:3a:db:21:3c:7d:5e:3f:53:bc:ee:be:db:41: 5f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:1A:4F:0F:E7:63:89:0F:04:FD:C6:4A:93:75:59:9F:43:88:5E:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b036528c-d877-46d3-a948-64c8f3b600cc/a44749b3-2884-3b75-b78d-0868496658de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b036528c-d877-46d3-a948-64c8f3b600cc/b036528c-d877-46d3-a948-64c8f3b600cc.crl X509v3 Authority Key Identifier: keyid:51:45:D2:CC:87:7A:2C:B7:0E:3A:3E:E9:2A:DD:F1:78:19:17:A3:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b036528c-d877-46d3-a948-64c8f3b600cc.cer sbgp-ipAddrBlock: critical IPv4: 208.71.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:9d:7b:68:8b:d8:52:54:4d:ab:a6:a4:2f:46:b2:b1:6a:68: 81:32:fe:89:82:d0:71:5c:44:62:2e:bd:12:37:c9:1e:57:2c: 58:b9:4f:da:b2:6a:4b:3e:11:c9:89:b0:b3:41:c1:3f:d7:0e: 15:7b:9c:ae:c5:c8:97:47:62:02:db:be:57:79:7a:f3:43:71: a2:76:a6:28:8d:8e:4e:45:6c:91:ed:6a:92:f7:fa:f5:12:56: 6f:85:ae:8a:d0:40:1d:4f:8d:67:15:da:60:79:99:0a:0e:b4: 11:23:4a:77:5e:0f:57:b7:22:fd:a8:1d:2e:9b:0d:40:c1:0b: 16:b2:e5:94:52:fb:de:f5:38:69:fe:de:d5:fc:89:05:9b:6e: 05:4c:06:9a:5f:61:10:6c:fe:39:b8:c3:07:a8:c3:b1:d2:3c: f2:10:ff:31:b0:fa:eb:7f:87:2c:71:34:bf:a5:ed:89:44:f8: 15:90:bf:61:e1:7f:cc:d5:f9:3c:14:af:76:e9:ec:55:fc:1e: c1:8e:6f:82:ce:11:49:fb:7a:39:39:89:f6:17:65:45:e4:8f: 96:cb:2c:11:ba:65:27:5e:3c:5e:4d:95:4f:e5:82:3c:1a:78: 49:28:f4:dd:e2:d5:c3:d9:9a:0b:0d:db:e5:33:db:6b:42:2b: 98:3e:0e:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrOUyR+zojurwgCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAzNjUyOGMtZDg3Ny00NmQzLWE5NDgtNjRjOGYzYjYw MGNjMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk OWMwNDE5NTAtZmY0Mi00MDlmLThjODQtMGZiNGE3MWZjYzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRc2MK0xUqqmJRkuPurXfD6+6Vk47dlpkhLp 3vjrcGbvA3PvXe00vgxWEMrbzMd5DGYbOBSWBTS8l2GctL/aV2UDn2Z3rR2zxkY/ BQg9E8D0oowFQjcV+nKq0XeSMZhYk3oY61j5Zct0hPxnXoSVx1S5sl8sUYq6tS9G iy3h1j0G+Pf9EkQHbAopMBIvzcRvcHEwu8hFs7MOkxZq7ydYHuetJS2upSr5QLmt qPHjwmhyrnr2Nl1lGt4kcSe/dJrC8nWBy56EgpQX3tdXCUtCWmJmPOe4rUFrkQjF txKIkIlZwm/dNsWN/Kf9QKYIn9EJyTrbITx9Xj9TvO6+20FfHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQaTw/nY4kPBP3GSpN1WZ9DiF7mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMDM2 NTI4Yy1kODc3LTQ2ZDMtYTk0OC02NGM4ZjNiNjAwY2MvYTQ0NzQ5YjMtMjg4NC0z Yjc1LWI3OGQtMDg2ODQ5NjY1OGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjAzNjUyOGMtZDg3Ny00NmQzLWE5 NDgtNjRjOGYzYjYwMGNjL2IwMzY1MjhjLWQ4NzctNDZkMy1hOTQ4LTY0YzhmM2I2 MDBjYy5jcmwwHwYDVR0jBBgwFoAUUUXSzId6LLcOOj7pKt3xeBkXoykwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iMDM2NTI4Yy1kODc3LTQ2ZDMtYTk0OC02NGM4 ZjNiNjAwY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EfIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACde2iL2FJUTaumpC9GsrFqaIEy/omC0HFcRGIuvRI3yR5XLFi5T9qy aks+EcmJsLNBwT/XDhV7nK7FyJdHYgLbvld5evNDcaJ2piiNjk5FbJHtapL3+vUS Vm+FrorQQB1PjWcV2mB5mQoOtBEjSndeD1e3Iv2oHS6bDUDBCxay5ZRS+971OGn+ 3tX8iQWbbgVMBppfYRBs/jm4wweow7HSPPIQ/zGw+ut/hyxxNL+l7YlE+BWQv2Hh f8zV+TwUr3bp7FX8HsGOb4LOEUn7ejk5ifYXZUXkj5bLLBG6ZSdePF5NlU/lgjwa eEko9N3i1cPZmgsN2+Uz22tCK5g+DkA= -----END CERTIFICATE-----Generated at Wed Oct 22 02:46:51 2025 by rpki-client