$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d3470643-6f3e-3594-b37a-b18a5d14b95e.roa File: d3470643-6f3e-3594-b37a-b18a5d14b95e.roa (raw, json) Hash identifier: Rbnxzw75g4UzSRXz6vSUli0sTUjWbE5MG3+bmOS3b+c= Subject key identifier: 33:3E:D7:F3:6D:AE:18:C6:BE:06:F5:1A:CC:92:16:01:C5:9E:AF:89 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584B13088AEFEF8E4F5B5F30A200 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d3470643-6f3e-3594-b37a-b18a5d14b95e.roa Signing time: Wed 03 Sep 2025 18:05:16 +0000 ROA not before: Wed 03 Sep 2025 18:05:16 +0000 ROA not after: Tue 02 Dec 2025 19:05:16 +0000 asID: 174 IP address blocks: 208.0.32.0/20 maxlen: 20 208.0.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:08:8a:ef:ef:8e:4f:5b:5f:30:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Sep 3 18:05:16 2025 GMT Not After : Dec 2 19:05:16 2025 GMT Subject: CN=4b843740-3156-43a5-85db-a93c46e87ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2a:0c:bb:07:eb:33:8f:ac:d0:55:aa:27:1a: 71:cc:44:e1:3a:10:31:20:6e:b4:7e:c4:3d:55:96: 3e:57:dd:5e:78:d5:1b:95:8b:08:40:dd:76:21:a6: 2f:77:00:41:4e:bb:79:40:43:60:6b:a2:6c:32:93: 43:64:93:c4:88:a2:e7:9d:e3:5e:62:0b:2c:be:5c: 77:2d:2e:90:da:e5:77:ed:b0:ae:ce:6f:cb:a6:cc: c3:35:fc:de:64:20:6d:ad:8c:71:d4:0a:cc:07:c3: 0c:9d:e5:a5:9f:07:05:79:74:37:a0:20:0b:c2:b1: c0:02:ab:62:bc:1d:09:b2:d4:0e:cc:7a:9a:cb:ef: e5:21:68:13:31:ac:90:c6:0c:7a:67:ae:1d:9d:a9: 5c:9e:0d:ca:ce:0b:a0:11:0d:37:41:6f:2d:6b:61: ea:2a:3a:ec:55:ac:2f:bb:cb:3a:ab:7c:ab:06:06: ab:7d:85:c0:f0:04:02:92:77:77:8c:08:f0:68:00: dd:dd:82:d0:91:a7:47:99:81:27:a9:c0:a9:38:f0: a7:9f:2d:1d:4e:d3:5e:29:bf:74:1b:21:7f:0d:4c: a0:f5:bd:76:8d:93:25:c9:47:0e:8e:eb:79:85:dc: d4:bc:18:30:78:78:57:86:8a:32:5c:58:84:eb:ab: 3d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3E:D7:F3:6D:AE:18:C6:BE:06:F5:1A:CC:92:16:01:C5:9E:AF:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d3470643-6f3e-3594-b37a-b18a5d14b95e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 208.0.32.0/20 208.0.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:2d:69:88:f6:d0:af:98:5a:4f:e5:49:08:dd:04:2f:ec:56: 20:54:f9:e8:0a:f9:b3:e4:a1:51:cf:42:11:93:73:a9:41:73: ab:bf:28:23:b5:7a:ba:27:d2:83:09:96:15:a9:de:f2:34:c6: 9f:28:70:b2:13:af:ec:0a:b8:77:b3:13:36:c0:5a:a5:1e:b8: 98:9b:3d:cd:47:32:80:eb:a1:ca:b3:f4:3b:7b:3a:6e:27:ee: c3:73:9d:35:c4:1f:02:89:e2:77:fc:a6:5c:08:7f:0d:90:02: 91:04:fe:65:ca:8f:e1:bf:ef:eb:91:eb:71:27:41:f3:9f:fb: 03:88:23:c4:56:f0:96:74:21:e7:aa:7e:fa:22:2e:c3:10:2a: 72:b3:99:2b:a9:2f:9d:03:47:25:81:13:07:79:08:8e:55:79: c7:4f:24:12:4b:8e:08:c5:21:02:a4:e3:fe:16:b3:6e:0a:8f: 11:4a:41:db:46:93:7d:4e:da:30:8a:f8:7d:30:4d:d2:90:3a: 6b:fc:41:52:22:04:10:b2:28:69:cb:4e:76:a9:ec:77:a3:2e: be:68:f9:8b:56:7a:0e:f9:01:3f:95:02:aa:d4:6c:dc:f9:ed: fb:fc:72:01:bb:96:f7:c5:3c:6f:6b:eb:9e:f0:06:bc:49:b1: 92:6d:d7:67 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsTCIrv745PW18wogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDkwMzE4MDUxNloXDTI1MTIwMjE5MDUxNlowLzEtMCsGA1UEAxMk NGI4NDM3NDAtMzE1Ni00M2E1LTg1ZGItYTkzYzQ2ZTg3YWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SoMuwfrM4+s0FWqJxpxzEThOhAxIG60fsQ9 VZY+V91eeNUblYsIQN12IaYvdwBBTrt5QENga6JsMpNDZJPEiKLnneNeYgssvlx3 LS6Q2uV37bCuzm/LpszDNfzeZCBtrYxx1ArMB8MMneWlnwcFeXQ3oCALwrHAAqti vB0JstQOzHqay+/lIWgTMayQxgx6Z64dnalcng3KzgugEQ03QW8ta2HqKjrsVawv u8s6q3yrBgarfYXA8AQCknd3jAjwaADd3YLQkadHmYEnqcCpOPCnny0dTtNeKb90 GyF/DUyg9b12jZMlyUcOjut5hdzUvBgweHhXhooyXFiE66s95QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDM+1/NtrhjGvgb1GsySFgHFnq+JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvZDM0NzA2NDMtNmYzZS0z NTk0LWIzN2EtYjE4YTVkMTRiOTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQE0AAgAwQE 0ABQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFgtaYj20K+YWk/lSQjdBC/sViBU+egK+bPkoVHPQhGTc6lB c6u/KCO1eron0oMJlhWp3vI0xp8ocLITr+wKuHezEzbAWqUeuJibPc1HMoDrocqz 9Dt7Om4n7sNznTXEHwKJ4nf8plwIfw2QApEE/mXKj+G/7+uR63EnQfOf+wOII8RW 8JZ0IeeqfvoiLsMQKnKzmSupL50DRyWBEwd5CI5VecdPJBJLjgjFIQKk4/4Ws24K jxFKQdtGk31O2jCK+H0wTdKQOmv8QVIiBBCyKGnLTnap7HejLr5o+YtWeg75AT+V AqrUbNz57fv8cgG7lvfFPG9r657wBrxJsZJt12c= -----END CERTIFICATE-----Generated at Sun Oct 19 20:55:56 2025 by rpki-client