$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/d44b739e-4693-3efd-8c82-67f73703b4ec.roa File: d44b739e-4693-3efd-8c82-67f73703b4ec.roa (raw, json) Hash identifier: Qrams8S2zxtxz8cTkVFC4XfOIMqDYaZ3RdtuhuEwWcM= Subject key identifier: 8E:F3:64:82:92:94:80:56:D4:14:65:AA:A5:9D:E8:6C:FE:1A:99:1B Certificate issuer: /CN=cde39d3e-3837-4341-a8bd-86c74c06a6e4 Certificate serial: 010D0C9F4328584B4FDC796FCEF14A136A3180C0 Authority key identifier: BE:E1:A9:58:D6:8A:ED:2B:7E:F2:AE:35:4D:3B:EC:EC:C2:2F:5B:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/d44b739e-4693-3efd-8c82-67f73703b4ec.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 46149 IP address blocks: 208.96.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:79:6f:ce:f1:4a:13:6a:31:80:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cde39d3e-3837-4341-a8bd-86c74c06a6e4 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=3a99a3bb-16b0-4299-bce7-9f04dbc7becc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:69:63:71:0c:a8:be:e3:c8:82:83:9f:cc:01: 8d:38:7c:01:63:c5:5c:46:37:70:82:5c:5a:84:44: 69:59:04:d2:84:5c:cd:6f:c4:a1:0f:c5:de:81:f0: e7:a6:96:a6:66:55:be:5e:e9:f3:91:5a:94:37:59: 52:59:ec:e7:21:c9:8d:c6:16:74:c0:60:13:b6:9d: 6e:6b:fe:81:27:59:50:86:35:a4:b2:4b:3a:e4:78: df:f4:2e:15:4b:08:94:c5:49:c0:08:78:b9:7a:eb: 69:50:1c:15:09:12:2b:6e:9f:20:71:cf:ea:90:55: c9:b5:cc:59:dd:63:49:f6:40:dd:a0:84:b4:79:14: 2d:6f:f2:62:ba:0b:58:2c:54:83:5e:41:00:1a:4c: 40:2a:5f:87:dc:e3:d3:70:f2:88:0a:5e:28:0b:64: 23:8a:ae:30:63:74:83:cc:3a:f3:b1:8a:bc:a0:e9: 65:13:0f:1d:95:12:c4:bf:b3:a4:97:fb:38:71:12: 8b:9a:8a:5e:8c:ab:58:9c:b2:f5:a8:aa:b2:13:0b: b5:16:ab:4b:f3:c3:f5:6c:db:19:ae:5d:6f:57:3b: 26:d6:d5:67:be:28:38:dd:90:1f:f8:05:a8:9f:d0: d7:76:c4:22:d3:26:fc:d7:f2:df:ee:ff:ef:e0:a1: fe:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F3:64:82:92:94:80:56:D4:14:65:AA:A5:9D:E8:6C:FE:1A:99:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/d44b739e-4693-3efd-8c82-67f73703b4ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.crl X509v3 Authority Key Identifier: keyid:BE:E1:A9:58:D6:8A:ED:2B:7E:F2:AE:35:4D:3B:EC:EC:C2:2F:5B:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4.cer sbgp-ipAddrBlock: critical IPv4: 208.96.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:e4:a0:43:1e:cf:df:14:e7:20:95:af:e8:77:40:2b:b8:04: ff:e6:37:a0:49:4a:4d:9c:c1:0b:a0:c2:e2:72:27:65:10:d6: 09:51:47:a5:0e:4f:65:a7:6e:dd:26:b6:be:4d:a2:a7:cf:f9: c6:6c:38:58:a7:ec:ee:a4:79:84:ed:6d:15:1e:33:5e:18:51: b1:f3:74:4b:00:60:c2:87:98:58:18:92:4e:1e:21:a4:05:c8: 10:41:a2:f4:91:49:5b:46:43:cb:4d:56:c7:6e:f6:7e:98:3d: 6b:8d:3f:8e:7a:61:51:74:22:18:22:ec:8a:ff:0e:16:49:e7: cd:db:93:1b:d0:20:f8:d7:c5:5c:39:bd:73:19:4a:34:37:15: fd:d5:70:b8:32:b7:d1:78:de:54:b8:7b:ff:70:bb:32:f5:7b: 3c:4b:fa:5f:7f:e4:e8:03:85:2f:b1:ba:ae:e7:24:23:6d:cb: a8:02:1a:b8:51:eb:92:15:11:96:0e:38:c4:22:94:59:08:44: 33:92:f7:d2:6d:d8:42:ab:b2:28:09:20:de:24:b2:22:32:25: 1a:47:ac:8a:a3:0e:35:6c:76:a6:d2:0b:50:40:75:7c:c7:70: cf:48:25:34:7b:d2:2d:28:18:e2:df:53:7f:06:1d:da:36:02: bd:6c:2e:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3HlvzvFKE2oxgMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RlMzlkM2UtMzgzNy00MzQxLWE4YmQtODZjNzRjMDZh NmU0MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk M2E5OWEzYmItMTZiMC00Mjk5LWJjZTctOWYwNGRiYzdiZWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmljcQyovuPIgoOfzAGNOHwBY8VcRjdwglxa hERpWQTShFzNb8ShD8XegfDnppamZlW+XunzkVqUN1lSWeznIcmNxhZ0wGATtp1u a/6BJ1lQhjWksks65Hjf9C4VSwiUxUnACHi5eutpUBwVCRIrbp8gcc/qkFXJtcxZ 3WNJ9kDdoIS0eRQtb/JiugtYLFSDXkEAGkxAKl+H3OPTcPKICl4oC2Qjiq4wY3SD zDrzsYq8oOllEw8dlRLEv7Okl/s4cRKLmopejKtYnLL1qKqyEwu1FqtL88P1bNsZ rl1vVzsm1tVnvig43ZAf+AWon9DXdsQi0yb81/Lf7v/v4KH+ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7zZIKSlIBW1BRlqqWd6Gz+GpkbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZGUz OWQzZS0zODM3LTQzNDEtYThiZC04NmM3NGMwNmE2ZTQvZDQ0YjczOWUtNDY5My0z ZWZkLThjODItNjdmNzM3MDNiNGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2RlMzlkM2UtMzgzNy00MzQxLWE4 YmQtODZjNzRjMDZhNmU0L2NkZTM5ZDNlLTM4MzctNDM0MS1hOGJkLTg2Yzc0YzA2 YTZlNC5jcmwwHwYDVR0jBBgwFoAUvuGpWNaK7St+8q41TTvs7MIvWykwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZGUzOWQzZS0zODM3LTQzNDEtYThiZC04NmM3 NGMwNmE2ZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0GCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrkoEMez98U5yCVr+h3QCu4BP/mN6BJSk2cwQugwuJyJ2UQ1glRR6UO T2Wnbt0mtr5NoqfP+cZsOFin7O6keYTtbRUeM14YUbHzdEsAYMKHmFgYkk4eIaQF yBBBovSRSVtGQ8tNVsdu9n6YPWuNP456YVF0Ihgi7Ir/DhZJ583bkxvQIPjXxVw5 vXMZSjQ3Ff3VcLgyt9F43lS4e/9wuzL1ezxL+l9/5OgDhS+xuq7nJCNty6gCGrhR 65IVEZYOOMQilFkIRDOS99Jt2EKrsigJIN4ksiIyJRpHrIqjDjVsdqbSC1BAdXzH cM9IJTR70i0oGOLfU38GHdo2Ar1sLj0= -----END CERTIFICATE-----Generated at Mon Oct 20 06:54:34 2025 by rpki-client