$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/9e999df3-d635-301e-8089-0cfc2e8a5cd0.roa File: 9e999df3-d635-301e-8089-0cfc2e8a5cd0.roa (raw, json) Hash identifier: 7ALnQp59eEevy1Nf72EEpScH1d+lZ7fF8DAWxSHxRfQ= Subject key identifier: 5B:2C:77:D0:70:0E:E3:3E:48:44:A3:C7:6F:EA:DB:59:49:1C:CE:05 Certificate issuer: /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b Certificate serial: 010D0C9F4328584B5DD1EBD24EB1F8BFBED5AA00 Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/9e999df3-d635-301e-8089-0cfc2e8a5cd0.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 54702 IP address blocks: 208.72.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d1:eb:d2:4e:b1:f8:bf:be:d5:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=8e12fa3a-d417-4670-a4a3-b0b6faafcb22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e0:c9:76:f1:85:46:13:0d:20:93:51:9e:51: 91:b9:88:c9:91:53:16:17:b1:68:07:8c:b1:ec:c0: dc:0a:f8:77:d0:49:70:f7:19:9f:ab:9c:22:33:ce: 32:6d:37:b3:57:fa:3e:83:39:f7:51:df:fe:51:3a: d7:42:14:7a:e6:48:1e:0c:81:1e:1d:f9:9e:3a:e7: 71:57:14:a0:9c:c6:b2:fd:28:fa:ef:fb:36:e6:71: 2a:83:64:2f:29:33:91:14:b8:f1:b1:e1:cf:85:2d: 42:8a:b7:69:b5:d9:95:3a:86:93:94:90:45:6a:a2: 6a:e5:50:df:f1:94:67:cc:0c:f6:ce:6a:6c:1a:81: a5:f7:f0:51:26:cf:25:30:e7:78:8d:91:ea:85:6b: ae:a0:dc:2d:9f:73:9e:7e:4a:c0:0c:f4:59:5b:b1: 22:cc:15:76:7d:0a:73:28:f5:3e:76:2c:b0:6b:68: 3a:9a:d1:24:26:e8:ec:db:50:10:f7:9b:b3:25:25: b2:16:e1:70:04:bd:04:6b:9c:3d:56:bd:6f:81:b6: 7a:ef:62:e6:01:4d:89:d8:c2:20:b6:90:a7:84:46: 8c:72:94:06:d9:50:d8:77:66:74:75:ec:cd:fe:b3: 5c:ba:88:0c:84:aa:56:2f:f9:b8:d4:24:ef:e1:45: 4a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:2C:77:D0:70:0E:E3:3E:48:44:A3:C7:6F:EA:DB:59:49:1C:CE:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/9e999df3-d635-301e-8089-0cfc2e8a5cd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl X509v3 Authority Key Identifier: keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer sbgp-ipAddrBlock: critical IPv4: 208.72.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:66:cd:0a:78:71:04:6c:05:36:56:05:6c:ca:84:2d:95:19: 6f:83:60:46:26:b0:e4:37:51:bb:18:ba:62:ca:f4:b6:d2:f0: f4:77:df:70:7c:7e:80:56:5d:a4:bb:6b:6d:86:6f:09:eb:88: b8:dd:ff:5f:db:43:1b:69:d1:0c:bf:b5:56:50:71:82:1b:fd: 2d:8a:ea:c8:63:8c:d7:6e:c6:41:46:69:f9:e7:5b:3d:04:9b: 1e:90:a5:f2:6f:4f:1f:68:b8:09:47:5c:c7:ad:3a:8b:77:58: a4:c5:cd:62:86:c0:20:ac:01:b1:cf:de:a7:0e:19:bc:68:b9: 5f:95:85:91:af:e2:c8:5f:7a:d4:3f:15:2d:71:f3:3c:4c:95: e0:d1:ed:b4:3d:58:20:17:78:4d:4f:35:b4:51:79:41:18:fc: 4a:35:98:20:c9:97:b0:e6:14:1e:08:1a:bc:d5:9b:33:44:6e: fe:c8:84:19:a7:80:23:98:db:ad:6d:d9:a9:19:c4:d4:b6:0d: e7:71:b6:82:02:a5:9b:7e:31:97:b3:53:a0:a5:6b:b7:37:68: 6f:b5:6e:4f:53:02:66:ab:3c:ce:9c:3e:dc:c0:ce:de:81:c6: bb:e6:e7:cf:43:88:7c:37:ea:5e:8a:2f:40:07:34:5b:d5:c1: b4:69:8f:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0evSTrH4v77VqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRlM2U3MmUtMzJjYi00ZTgzLThkNDQtODYyNDY2YmIw YzhiMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk OGUxMmZhM2EtZDQxNy00NjcwLWE0YTMtYjBiNmZhYWZjYjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuDJdvGFRhMNIJNRnlGRuYjJkVMWF7FoB4yx 7MDcCvh30Elw9xmfq5wiM84ybTezV/o+gzn3Ud/+UTrXQhR65kgeDIEeHfmeOudx VxSgnMay/Sj67/s25nEqg2QvKTORFLjxseHPhS1CirdptdmVOoaTlJBFaqJq5VDf 8ZRnzAz2zmpsGoGl9/BRJs8lMOd4jZHqhWuuoNwtn3OefkrADPRZW7EizBV2fQpz KPU+diywa2g6mtEkJujs21AQ95uzJSWyFuFwBL0Ea5w9Vr1vgbZ672LmAU2J2MIg tpCnhEaMcpQG2VDYd2Z0dezN/rNcuogMhKpWL/m41CTv4UVKoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFssd9BwDuM+SESjx2/q21lJHM4FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUz ZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0NjZiYjBjOGIvOWU5OTlkZjMtZDYzNS0z MDFlLTgwODktMGNmYzJlOGE1Y2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTRlM2U3MmUtMzJjYi00ZTgzLThk NDQtODYyNDY2YmIwYzhiL2E0ZTNlNzJlLTMyY2ItNGU4My04ZDQ0LTg2MjQ2NmJi MGM4Yi5jcmwwHwYDVR0jBBgwFoAU36ao4MNy5scPhIXGsRigy1w+vcMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUzZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0 NjZiYjBjOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1mzQp4cQRsBTZWBWzKhC2VGW+DYEYmsOQ3UbsYumLK9LbS8PR333B8 foBWXaS7a22GbwnriLjd/1/bQxtp0Qy/tVZQcYIb/S2K6shjjNduxkFGafnnWz0E mx6QpfJvTx9ouAlHXMetOot3WKTFzWKGwCCsAbHP3qcOGbxouV+VhZGv4shfetQ/ FS1x8zxMleDR7bQ9WCAXeE1PNbRReUEY/Eo1mCDJl7DmFB4IGrzVmzNEbv7IhBmn gCOY261t2akZxNS2DedxtoICpZt+MZezU6Cla7c3aG+1bk9TAmarPM6cPtzAzt6B xrvm589DiHw36l6KL0AHNFvVwbRpj6s= -----END CERTIFICATE-----Generated at Tue Oct 21 07:19:42 2025 by rpki-client