$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/dc2f8723-1a25-3bb3-8ab1-b25662ba1a77.roa File: dc2f8723-1a25-3bb3-8ab1-b25662ba1a77.roa (raw, json) Hash identifier: S6BKSpJpdVz/HFtW8jcILAJvgJgYkMw/6pZVICVHflc= Subject key identifier: 0C:81:75:FB:11:2E:CD:17:D6:21:FF:87:38:61:B7:C3:6D:13:5C:D3 Certificate issuer: /CN=208dcf74-3dce-4384-beaf-70319895fc4b Certificate serial: 010D0C9F4328584AB650F09845D0E325E8B2AA80 Authority key identifier: B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/dc2f8723-1a25-3bb3-8ab1-b25662ba1a77.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 16509 IP address blocks: 134.65.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:f0:98:45:d0:e3:25:e8:b2:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208dcf74-3dce-4384-beaf-70319895fc4b Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=8d3d05ae-da47-4345-94a5-d599a58d9a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:77:3f:fd:ac:59:53:80:48:dc:76:12:42:18: b9:7f:89:1c:78:b8:90:6f:6e:71:3f:f9:72:70:59: e2:0c:a6:57:a1:cd:5f:ac:d2:a5:9a:6b:e6:b6:62: cb:0b:c4:f4:85:70:0c:98:77:b8:c3:17:4e:67:1a: f4:8c:7b:80:18:70:93:9d:ce:51:9b:99:21:94:0e: 1c:5f:9e:0d:96:99:0d:92:54:52:98:e4:29:4a:50: d8:eb:8f:84:e1:4f:11:99:8e:36:7f:33:ce:fc:0b: 85:e3:b9:d9:24:3b:e7:4b:27:71:05:07:86:9c:23: 99:f2:9d:b7:b3:1a:d0:1c:a6:57:89:8e:f6:eb:d4: ab:40:00:46:e1:be:4e:e4:de:a1:6c:43:79:9c:75: 43:88:33:8b:1b:43:87:83:bd:8d:d7:ed:0f:70:03: 46:1c:35:78:30:06:66:02:24:1d:71:a4:e2:74:d2: ba:d8:2a:6a:52:ec:07:df:a1:92:f0:3d:02:37:72: 53:43:4a:96:21:8d:eb:f2:cd:47:ed:01:fb:22:62: f7:35:b2:c0:fe:8f:5e:b2:85:48:c4:0f:af:32:91: 22:de:e4:c9:47:34:01:c7:d0:12:c8:14:2b:06:9a: 6d:e0:8d:8e:5b:c1:8d:d5:6e:72:ff:68:d8:bd:2c: fa:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:81:75:FB:11:2E:CD:17:D6:21:FF:87:38:61:B7:C3:6D:13:5C:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/dc2f8723-1a25-3bb3-8ab1-b25662ba1a77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl X509v3 Authority Key Identifier: keyid:B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer sbgp-ipAddrBlock: critical IPv4: 134.65.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:f6:76:00:7b:be:42:ca:aa:55:9c:57:35:a7:25:cc:88:42: ea:b9:73:4c:a8:ce:55:72:96:e7:aa:95:e6:a7:32:59:c8:85: af:cc:ef:a0:38:8e:5b:24:77:62:b6:ff:6c:99:17:95:ed:c2: 3a:f6:8f:a0:01:a6:c0:07:cb:06:f6:73:03:72:d5:a4:80:b6: a6:20:42:51:16:18:09:7f:47:dd:88:38:0d:93:07:cc:7e:26: ef:2c:95:aa:96:ce:ac:6d:4f:13:f9:4d:25:f3:5e:7a:79:ec: 85:38:f9:2c:84:6f:16:cc:3a:a1:52:e6:24:82:e7:6d:84:0f: dd:a9:fd:c5:40:a4:81:81:86:c7:bc:40:4e:79:25:ca:a0:9d: 64:bb:0b:f7:90:50:91:f8:ae:2e:2d:6d:8c:90:41:c6:a6:cc: 54:fc:c3:90:5a:f4:b5:69:12:92:76:9f:16:95:fe:95:bf:dc: ac:15:f3:c2:9f:1d:31:e7:3a:ff:93:4d:43:35:ce:17:d9:0d: 58:2e:ff:59:54:0c:dc:23:ba:05:b2:dc:78:65:bf:10:ef:db: e6:7b:1c:03:38:5d:56:c6:aa:b2:70:4a:29:39:49:52:ee:1b: 97:ea:33:be:19:47:74:4a:fb:6b:94:30:45:48:e4:9b:f0:0a: 39:e5:4c:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UPCYRdDjJeiyqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA4ZGNmNzQtM2RjZS00Mzg0LWJlYWYtNzAzMTk4OTVm YzRiMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk OGQzZDA1YWUtZGE0Ny00MzQ1LTk0YTUtZDU5OWE1OGQ5YTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXc//axZU4BI3HYSQhi5f4kceLiQb25xP/ly cFniDKZXoc1frNKlmmvmtmLLC8T0hXAMmHe4wxdOZxr0jHuAGHCTnc5Rm5khlA4c X54NlpkNklRSmOQpSlDY64+E4U8RmY42fzPO/AuF47nZJDvnSydxBQeGnCOZ8p23 sxrQHKZXiY7269SrQABG4b5O5N6hbEN5nHVDiDOLG0OHg72N1+0PcANGHDV4MAZm AiQdcaTidNK62CpqUuwH36GS8D0CN3JTQ0qWIY3r8s1H7QH7ImL3NbLA/o9esoVI xA+vMpEi3uTJRzQBx9ASyBQrBppt4I2OW8GN1W5y/2jYvSz6lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyBdfsRLs0X1iH/hzhht8NtE1zTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMDhk Y2Y3NC0zZGNlLTQzODQtYmVhZi03MDMxOTg5NWZjNGIvZGMyZjg3MjMtMWEyNS0z YmIzLThhYjEtYjI1NjYyYmExYTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjA4ZGNmNzQtM2RjZS00Mzg0LWJl YWYtNzAzMTk4OTVmYzRiLzIwOGRjZjc0LTNkY2UtNDM4NC1iZWFmLTcwMzE5ODk1 ZmM0Yi5jcmwwHwYDVR0jBBgwFoAUtFZe+2BitOcxIpuQ8WaNOb1jB1swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMDhkY2Y3NC0zZGNlLTQzODQtYmVhZi03MDMx OTg5NWZjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChkGoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADv2dgB7vkLKqlWcVzWnJcyIQuq5c0yozlVylueqleanMlnIha/M76A4 jlskd2K2/2yZF5Xtwjr2j6ABpsAHywb2cwNy1aSAtqYgQlEWGAl/R92IOA2TB8x+ Ju8slaqWzqxtTxP5TSXzXnp57IU4+SyEbxbMOqFS5iSC522ED92p/cVApIGBhse8 QE55JcqgnWS7C/eQUJH4ri4tbYyQQcamzFT8w5Ba9LVpEpJ2nxaV/pW/3KwV88Kf HTHnOv+TTUM1zhfZDVgu/1lUDNwjugWy3HhlvxDv2+Z7HAM4XVbGqrJwSik5SVLu G5fqM74ZR3RK+2uUMEVI5JvwCjnlTB8= -----END CERTIFICATE-----Generated at Mon Oct 20 20:21:52 2025 by rpki-client