$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc/e4600f39-cda5-3221-bddb-2d82d3f5fe2c.roa File: e4600f39-cda5-3221-bddb-2d82d3f5fe2c.roa (raw, json) Hash identifier: amRUBEQ7Dd8sEsLRBZJ1dxF/ruflhG7YKFE4Wv0ZI+w= Subject key identifier: A5:BC:B0:35:88:11:BA:17:51:F9:0D:E6:F6:38:B6:00:7C:21:7B:29 Certificate issuer: /CN=503b7ff7-eb05-4b50-bb5b-d7fc378b78dc Certificate serial: 010D0C9F4328584AD23BA67FFBB6121F943CB340 Authority key identifier: 6C:DC:B8:20:C4:DC:47:8C:45:45:46:30:E4:F9:45:1D:20:59:04:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc/e4600f39-cda5-3221-bddb-2d82d3f5fe2c.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 10340 IP address blocks: 208.81.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:a6:7f:fb:b6:12:1f:94:3c:b3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=503b7ff7-eb05-4b50-bb5b-d7fc378b78dc Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=62b468f4-3a31-4598-8141-600e524e1839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0b:54:54:74:c7:dc:e0:c8:e4:2e:25:55:4a: a3:18:d9:5e:9e:f6:c3:6d:3c:94:4e:04:64:f4:5e: 60:db:26:9a:13:4e:4f:37:f6:9f:3e:05:42:9a:30: dc:c9:1d:44:8e:6b:6f:2d:47:70:7b:29:26:e7:88: 46:00:ff:61:84:38:b8:d8:7b:5b:65:6d:ea:14:82: 7e:a3:21:5c:22:07:b8:5c:b6:b3:6e:32:00:a7:fd: e7:6b:bc:7d:7a:2a:81:8b:8e:cb:df:cb:ba:c0:c3: 4a:ab:38:7c:b7:ed:94:eb:fa:54:41:c9:6f:a0:b5: 4b:2d:01:46:ed:2d:40:cb:0e:c1:8b:96:42:14:90: d4:e8:a9:d4:d4:e1:ff:72:c2:6c:87:55:ef:62:3e: 40:c5:0a:7f:f0:e0:29:85:09:fe:b8:c3:52:82:35: 46:12:c9:6a:18:42:83:1a:92:b8:df:a7:09:d4:e2: 34:a0:c4:04:7f:41:1f:3a:46:61:4b:ac:f4:dc:d0: 12:8a:16:b8:b9:b3:a6:fa:ac:78:d0:de:dc:24:0e: 89:ab:0f:3f:02:fe:2a:be:cb:bf:fb:ba:07:3f:a1: ab:3a:77:4c:2a:ea:14:0b:d4:9a:50:89:77:48:c8: f9:bb:96:27:9d:8e:da:db:c3:0d:59:22:9d:16:2f: 86:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:BC:B0:35:88:11:BA:17:51:F9:0D:E6:F6:38:B6:00:7C:21:7B:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc/e4600f39-cda5-3221-bddb-2d82d3f5fe2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc.crl X509v3 Authority Key Identifier: keyid:6C:DC:B8:20:C4:DC:47:8C:45:45:46:30:E4:F9:45:1D:20:59:04:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc.cer sbgp-ipAddrBlock: critical IPv4: 208.81.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:11:46:ad:95:be:48:8f:49:60:42:76:8a:2f:6d:07:08:6e: 9e:05:28:4d:55:8c:3f:f8:cb:01:40:3f:cb:38:a4:9d:11:f7: af:22:45:a2:0d:fa:70:8b:b0:6c:96:02:55:8e:e1:e9:53:20: 5b:55:3e:b3:7e:65:04:f8:c9:02:a1:96:f4:0c:e6:33:f2:8d: 50:6b:7e:4b:45:59:7c:ff:84:ef:a6:68:dc:02:ed:5f:83:e0: 09:d4:ec:b4:ff:a4:f3:e4:d7:79:a7:47:49:fc:ce:4a:90:20: 81:79:75:26:6a:7f:5b:13:60:e9:51:d0:18:02:4c:18:8b:e5: b0:12:75:08:a8:ad:30:8d:d8:b3:ed:87:30:15:c7:f3:95:f7: 74:9d:c6:72:69:99:47:12:e2:03:53:33:5f:88:68:86:06:5a: 2f:09:40:20:04:44:95:9e:54:fe:a2:53:96:20:12:28:d4:58: 1d:80:12:cf:de:df:2f:e2:dd:2b:97:32:8c:39:84:e6:54:e7: 8b:c0:06:dc:0c:3a:34:69:42:c5:6f:a9:8f:1b:76:b5:5e:f1: 5c:be:ca:04:09:c4:48:36:e3:1e:81:03:d2:b2:b6:52:8f:8c: b7:e4:1b:ca:31:e3:f3:85:9e:6c:95:72:95:fc:34:68:e0:32: f3:e6:39:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO6Z/+7YSH5Q8s0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTAzYjdmZjctZWIwNS00YjUwLWJiNWItZDdmYzM3OGI3 OGRjMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk NjJiNDY4ZjQtM2EzMS00NTk4LTgxNDEtNjAwZTUyNGUxODM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgtUVHTH3ODI5C4lVUqjGNlenvbDbTyUTgRk 9F5g2yaaE05PN/afPgVCmjDcyR1EjmtvLUdweykm54hGAP9hhDi42HtbZW3qFIJ+ oyFcIge4XLazbjIAp/3na7x9eiqBi47L38u6wMNKqzh8t+2U6/pUQclvoLVLLQFG 7S1Ayw7Bi5ZCFJDU6KnU1OH/csJsh1XvYj5AxQp/8OAphQn+uMNSgjVGEslqGEKD GpK436cJ1OI0oMQEf0EfOkZhS6z03NASiha4ubOm+qx40N7cJA6Jqw8/Av4qvsu/ +7oHP6GrOndMKuoUC9SaUIl3SMj5u5YnnY7a28MNWSKdFi+GRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKW8sDWIEboXUfkN5vY4tgB8IXspMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81MDNi N2ZmNy1lYjA1LTRiNTAtYmI1Yi1kN2ZjMzc4Yjc4ZGMvZTQ2MDBmMzktY2RhNS0z MjIxLWJkZGItMmQ4MmQzZjVmZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTAzYjdmZjctZWIwNS00YjUwLWJi NWItZDdmYzM3OGI3OGRjLzUwM2I3ZmY3LWViMDUtNGI1MC1iYjViLWQ3ZmMzNzhi NzhkYy5jcmwwHwYDVR0jBBgwFoAUbNy4IMTcR4xFRUYw5PlFHSBZBGwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81MDNiN2ZmNy1lYjA1LTRiNTAtYmI1Yi1kN2Zj Mzc4Yjc4ZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANMRRq2VvkiPSWBCdoovbQcIbp4FKE1VjD/4ywFAP8s4pJ0R968iRaIN +nCLsGyWAlWO4elTIFtVPrN+ZQT4yQKhlvQM5jPyjVBrfktFWXz/hO+maNwC7V+D 4AnU7LT/pPPk13mnR0n8zkqQIIF5dSZqf1sTYOlR0BgCTBiL5bASdQiorTCN2LPt hzAVx/OV93SdxnJpmUcS4gNTM1+IaIYGWi8JQCAERJWeVP6iU5YgEijUWB2AEs/e 3y/i3SuXMow5hOZU54vABtwMOjRpQsVvqY8bdrVe8Vy+ygQJxEg24x6BA9KytlKP jLfkG8ox4/OFnmyVcpX8NGjgMvPmOQE= -----END CERTIFICATE-----Generated at Sat Aug 23 20:52:36 2025 by rpki-client