$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/325f96a9-8212-3d9f-9012-04fbdabcb0ae.roa File: 325f96a9-8212-3d9f-9012-04fbdabcb0ae.roa (raw, json) Hash identifier: scxkaMn3sovsMmiT5OSSdsbF1RxZbM9SJB9eWlcLwGk= Subject key identifier: 96:03:60:9B:A1:CD:24:F8:AE:F5:21:75:51:6C:9A:6C:5A:C9:FE:55 Certificate issuer: /CN=804b1e4b-89d3-4769-bab1-38df1d9bb72e Certificate serial: 010D0C9F4328584B44B1C2C5CADB22163FA34200 Authority key identifier: 55:03:65:2A:F7:7F:0C:AF:50:52:FA:C9:87:C9:4F:62:04:2F:B8:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/325f96a9-8212-3d9f-9012-04fbdabcb0ae.roa Signing time: Sun 21 Sep 2025 13:00:42 +0000 ROA not before: Sun 21 Sep 2025 13:00:42 +0000 ROA not after: Sat 20 Dec 2025 14:00:42 +0000 asID: 8075 IP address blocks: 208.80.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/804b1e4b-89d3-4769-bab1-38df1d9bb72e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/804b1e4b-89d3-4769-bab1-38df1d9bb72e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:b1:c2:c5:ca:db:22:16:3f:a3:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=804b1e4b-89d3-4769-bab1-38df1d9bb72e Validity Not Before: Sep 21 13:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=3f00cd6b-9bbe-4ed7-8243-738697c6bef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4c:63:de:a5:cb:fc:51:2d:49:4b:02:5d:9e: ff:a0:1f:f8:45:10:4e:95:c2:25:71:03:c5:7c:1f: 1b:3d:e3:9e:14:7f:ba:5f:75:d8:bc:e2:60:fa:ed: 46:a8:20:58:50:27:4a:88:d0:d9:fd:01:ac:ba:42: d9:26:cb:81:92:e1:3c:07:33:33:b5:92:23:98:27: 34:c6:82:97:31:08:25:04:e2:7e:61:60:06:47:0e: 36:83:0a:fd:08:5d:1d:33:03:c8:10:f2:51:42:ad: 8a:35:6e:2b:2a:c0:f3:47:f0:c9:ec:96:da:64:ac: 30:81:ff:2e:57:49:04:27:ce:1e:1f:fe:73:5f:81: 73:60:bf:8d:0f:1a:2f:c8:52:af:39:5a:0f:7f:bf: 97:d7:ad:ab:72:a0:f6:5b:13:54:62:e5:a8:ef:3c: ac:a6:17:22:44:78:7e:f5:e1:ac:d5:ba:e0:40:a1: 8b:1d:18:77:d6:0d:b3:21:5e:d8:d7:62:45:7c:b5: fb:6d:e9:e6:98:bd:a4:e0:5e:be:99:27:3f:a4:53: 88:a8:0d:b6:16:39:5f:6d:cf:6e:67:4d:2d:05:41: bb:5c:70:a8:8c:3d:c8:6f:d3:32:76:9b:12:ef:74: 9e:cc:e3:9a:6f:f9:a1:ba:df:0d:09:60:d9:7d:af: 83:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:03:60:9B:A1:CD:24:F8:AE:F5:21:75:51:6C:9A:6C:5A:C9:FE:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/325f96a9-8212-3d9f-9012-04fbdabcb0ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/804b1e4b-89d3-4769-bab1-38df1d9bb72e.crl X509v3 Authority Key Identifier: keyid:55:03:65:2A:F7:7F:0C:AF:50:52:FA:C9:87:C9:4F:62:04:2F:B8:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e.cer sbgp-ipAddrBlock: critical IPv4: 208.80.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:9d:22:e1:e3:ae:10:22:7c:27:b2:e7:1b:1d:a2:53:12:c8: 36:ae:85:d4:7a:0e:de:1d:ac:54:97:bb:cc:6a:20:aa:4a:d6: 74:ce:bb:38:a2:3e:95:a3:57:6f:2b:e8:b6:1d:33:46:ba:d4: 9d:8f:d0:bb:21:6b:9e:db:6e:11:e5:92:22:f1:a2:e3:4c:41: b5:b9:fb:0e:f4:55:de:e0:af:16:74:3a:34:e2:8f:71:90:52: c8:30:c4:8d:fb:21:ed:76:44:b9:d0:02:47:65:f9:18:d4:89: 39:ab:89:fa:9e:2f:94:67:ce:fc:d3:66:d2:b6:31:c4:0e:cf: 57:51:7d:5e:c9:72:76:d4:0e:08:f3:88:2e:90:32:ad:c3:23: ff:de:97:19:81:df:01:f0:da:d6:e7:02:cd:d9:48:ae:10:f7: e3:fd:40:fa:98:51:61:6e:4d:be:a3:8a:9e:b0:f6:26:c7:de: b7:31:02:f0:87:3c:5f:1c:ae:b5:7d:68:3e:c3:59:60:36:de: f4:19:f4:0a:d5:7f:27:e1:61:80:2b:2b:f1:0e:98:63:b2:a4: 08:10:61:3c:38:99:97:6a:a5:0f:57:93:b2:b9:8e:d0:9c:d5: e6:f5:59:96:4d:ec:e9:a5:ca:8d:ca:a4:55:ba:1d:cb:17:99: 05:51:9c:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEscLFytsiFj+jQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODA0YjFlNGItODlkMy00NzY5LWJhYjEtMzhkZjFkOWJi NzJlMB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk M2YwMGNkNmItOWJiZS00ZWQ3LTgyNDMtNzM4Njk3YzZiZWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkxj3qXL/FEtSUsCXZ7/oB/4RRBOlcIlcQPF fB8bPeOeFH+6X3XYvOJg+u1GqCBYUCdKiNDZ/QGsukLZJsuBkuE8BzMztZIjmCc0 xoKXMQglBOJ+YWAGRw42gwr9CF0dMwPIEPJRQq2KNW4rKsDzR/DJ7JbaZKwwgf8u V0kEJ84eH/5zX4FzYL+NDxovyFKvOVoPf7+X162rcqD2WxNUYuWo7zysphciRHh+ 9eGs1brgQKGLHRh31g2zIV7Y12JFfLX7benmmL2k4F6+mSc/pFOIqA22Fjlfbc9u Z00tBUG7XHCojD3Ib9MydpsS73SezOOab/mhut8NCWDZfa+DmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYDYJuhzST4rvUhdVFsmmxayf5VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MDRi MWU0Yi04OWQzLTQ3NjktYmFiMS0zOGRmMWQ5YmI3MmUvMzI1Zjk2YTktODIxMi0z ZDlmLTkwMTItMDRmYmRhYmNiMGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODA0YjFlNGItODlkMy00NzY5LWJh YjEtMzhkZjFkOWJiNzJlLzgwNGIxZTRiLTg5ZDMtNDc2OS1iYWIxLTM4ZGYxZDli YjcyZS5jcmwwHwYDVR0jBBgwFoAUVQNlKvd/DK9QUvrJh8lPYgQvuDowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MDRiMWU0Yi04OWQzLTQ3NjktYmFiMS0zOGRm MWQ5YmI3MmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FCGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCdIuHjrhAifCey5xsdolMSyDauhdR6Dt4drFSXu8xqIKpK1nTOuzii PpWjV28r6LYdM0a61J2P0Lsha57bbhHlkiLxouNMQbW5+w70Vd7grxZ0OjTij3GQ UsgwxI37Ie12RLnQAkdl+RjUiTmrifqeL5RnzvzTZtK2McQOz1dRfV7JcnbUDgjz iC6QMq3DI//elxmB3wHw2tbnAs3ZSK4Q9+P9QPqYUWFuTb6jip6w9ibH3rcxAvCH PF8crrV9aD7DWWA23vQZ9ArVfyfhYYArK/EOmGOypAgQYTw4mZdqpQ9Xk7K5jtCc 1eb1WZZN7Omlyo3KpFW6HcsXmQVRnEc= -----END CERTIFICATE-----Generated at Sun Oct 19 20:52:57 2025 by rpki-client