$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d4693619-dbd0-388d-895c-e93673e5594f.roa File: d4693619-dbd0-388d-895c-e93673e5594f.roa (raw, json) Hash identifier: 1N2ICL4TdsrAqbVtvxB/8qWdqvlo55Fog+V3TpgvpVk= Subject key identifier: E8:84:C2:3C:97:06:89:7A:25:DB:91:64:62:D4:2C:18:E8:84:C7:FC Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584B7B21F431BA9C2E7F7E87FE28 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d4693619-dbd0-388d-895c-e93673e5594f.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 1239 IP address blocks: 208.19.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:21:f4:31:ba:9c:2e:7f:7e:87:fe:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=63dfb4ba-50b1-49f2-973c-16f41dfbf7f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:44:00:6f:53:30:7a:02:7e:3b:e6:be:a3:3d: ab:e3:e7:10:a4:ac:b6:be:c3:00:d1:dc:d0:93:a3: d7:56:b9:84:a9:23:a1:17:66:69:ed:57:08:ee:af: c9:39:6f:13:b9:a2:0b:89:cb:5a:d7:b5:86:09:d4: 42:dc:1d:35:b3:43:93:2a:03:82:7b:79:81:8b:e4: 40:fb:24:e8:86:98:7e:13:ff:3e:18:48:d7:e9:b6: 6b:6a:d4:c3:9b:03:32:08:c7:ed:e9:ee:01:a6:c7: 7a:2c:39:5e:68:b2:e7:fa:9e:f9:0d:ea:ed:ad:50: 07:85:43:cf:2b:0b:26:41:04:5b:67:c3:7e:9d:f0: 0c:d8:ec:43:36:3f:7e:8a:e7:14:cc:37:ba:1d:c9: c6:9f:92:33:d3:f7:91:2d:33:cd:c1:43:a8:e5:e6: 97:4b:1e:a6:1d:90:df:10:53:77:50:fb:e3:45:59: 33:fa:57:de:8f:48:e4:8e:93:15:57:65:96:2e:fc: f0:d3:fc:15:b3:3f:82:d4:8b:26:e2:2e:5d:6e:23: a7:bc:be:3d:0d:5b:f1:3e:9c:0c:5a:a1:d6:b8:3b: 8c:f4:a6:45:00:d2:66:f6:8c:b7:85:e2:52:67:30: 4e:7c:65:8e:3b:e5:dc:fb:61:23:09:e2:3a:b7:a5: c5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:84:C2:3C:97:06:89:7A:25:DB:91:64:62:D4:2C:18:E8:84:C7:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d4693619-dbd0-388d-895c-e93673e5594f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 208.19.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:8d:70:77:c8:e0:be:b9:26:6c:4e:65:85:db:cc:8d:db:67: cd:b8:c9:d0:a9:5b:fe:7f:91:59:3b:36:32:94:3f:f3:62:2a: 53:47:4e:96:f2:1b:59:61:6b:51:21:f9:cd:21:8d:85:72:28: 60:49:2f:e1:5c:cc:ad:a4:01:81:97:49:86:b5:d0:fc:51:be: 11:85:f5:74:cd:52:bb:ae:11:af:7c:2f:86:25:b8:3d:4c:1c: e5:79:55:9b:08:ec:5f:8f:6b:a8:11:be:d4:13:bb:60:b6:50: 12:6f:8b:a5:0f:6e:ad:64:e1:d5:de:47:a5:b4:c3:52:9d:6a: f5:03:d4:3d:b1:0a:a1:c7:08:bd:94:d0:89:dc:ba:fc:4a:84: ee:5a:ad:99:31:c8:b0:16:00:51:e4:c1:de:e9:6f:c5:f7:94: 79:c6:31:ae:91:71:3c:56:13:16:6e:03:35:1f:03:b1:3f:d0: ca:65:b9:ba:29:cc:72:2b:37:f4:a5:f6:1b:d2:32:df:8a:d4: 56:e5:21:ba:fc:04:8d:e0:ab:a2:25:4a:ff:39:15:62:43:ab: 07:e7:45:32:e1:94:77:6d:a2:9f:18:e1:38:77:bb:fc:dd:16: 6a:65:2c:08:0e:38:29:57:db:fb:53:3b:db:6e:4c:ad:7d:8c: 3a:02:94:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7IfQxupwuf36H/igwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk NjNkZmI0YmEtNTBiMS00OWYyLTk3M2MtMTZmNDFkZmJmN2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEQAb1MwegJ+O+a+oz2r4+cQpKy2vsMA0dzQ k6PXVrmEqSOhF2Zp7VcI7q/JOW8TuaILicta17WGCdRC3B01s0OTKgOCe3mBi+RA +yTohph+E/8+GEjX6bZratTDmwMyCMft6e4Bpsd6LDleaLLn+p75DertrVAHhUPP KwsmQQRbZ8N+nfAM2OxDNj9+iucUzDe6HcnGn5Iz0/eRLTPNwUOo5eaXSx6mHZDf EFN3UPvjRVkz+lfej0jkjpMVV2WWLvzw0/wVsz+C1Ism4i5dbiOnvL49DVvxPpwM WqHWuDuM9KZFANJm9oy3heJSZzBOfGWOO+Xc+2EjCeI6t6XFAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiEwjyXBol6JduRZGLULBjohMf8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvZDQ2OTM2MTktZGJkMC0z ODhkLTg5NWMtZTkzNjczZTU1OTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0BNoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKyNcHfI4L65JmxOZYXbzI3bZ824ydCpW/5/kVk7NjKUP/NiKlNHTpby G1lha1Eh+c0hjYVyKGBJL+FczK2kAYGXSYa10PxRvhGF9XTNUruuEa98L4YluD1M HOV5VZsI7F+Pa6gRvtQTu2C2UBJvi6UPbq1k4dXeR6W0w1KdavUD1D2xCqHHCL2U 0IncuvxKhO5arZkxyLAWAFHkwd7pb8X3lHnGMa6RcTxWExZuAzUfA7E/0Mplubop zHIrN/Sl9hvSMt+K1FblIbr8BI3gq6IlSv85FWJDqwfnRTLhlHdtop8Y4Th3u/zd FmplLAgOOClX2/tTO9tuTK19jDoClBw= -----END CERTIFICATE-----Generated at Mon Oct 20 09:49:33 2025 by rpki-client