$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/0affa3ca-5e84-377e-8612-b0e2003b6f16.roa File: 0affa3ca-5e84-377e-8612-b0e2003b6f16.roa (raw, json) Hash identifier: BYv2WpWoLxfij/4W9uTujeGbHKFewMztnW13g4NBU9s= Subject key identifier: 1C:AC:6C:6D:63:60:85:68:3D:B2:47:49:D5:6F:C7:91:91:EC:E1:5F Certificate issuer: /CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d Certificate serial: 010D0C9F4328584B84E772E8D80B0D13E83E4B00 Authority key identifier: C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/0affa3ca-5e84-377e-8612-b0e2003b6f16.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 14618 IP address blocks: 208.79.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:72:e8:d8:0b:0d:13:e8:3e:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=b52319e0-34d7-4133-a6e1-135abfc0fd23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e0:53:53:c4:7e:cf:a1:bb:80:4f:fc:be:7b: 34:32:22:bf:7c:02:09:e4:2a:77:a0:ad:88:04:65: af:a6:39:51:cc:bf:77:8f:2b:df:f3:7d:17:6b:de: 2e:c0:67:d1:67:f8:dd:53:60:c5:67:85:8f:b4:b8: 7c:95:63:1d:54:26:06:43:19:e0:10:a9:06:5a:9d: 28:35:8f:7d:22:28:e0:8f:a8:55:6f:f6:28:04:21: 9a:27:16:1b:83:16:25:5d:13:a8:94:09:3c:db:41: ed:2c:c6:c8:19:8c:e2:7d:51:1d:d7:77:83:c9:d7: 73:d7:74:5c:85:ba:94:a3:87:3c:fe:53:00:00:21: 3d:af:2f:5e:52:78:40:32:5a:3c:9d:41:61:88:86: b3:51:af:12:76:e4:cd:4e:f8:91:1c:9b:dc:f7:a7: dd:05:db:de:e7:b4:be:c6:56:02:e5:1c:45:d2:00: c0:27:df:39:d4:37:0f:cc:4a:8f:83:33:d1:6e:ef: 2f:3e:2d:fc:75:ae:5d:18:cd:44:21:ed:e1:83:84: 4e:db:53:07:a8:ae:61:4d:1b:1f:cd:ba:0b:0a:be: 3e:82:c1:9e:82:00:71:7b:41:40:72:73:95:87:31: 0d:08:5a:b4:85:50:8f:ce:02:a0:98:61:ee:b1:c7: 64:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:AC:6C:6D:63:60:85:68:3D:B2:47:49:D5:6F:C7:91:91:EC:E1:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/0affa3ca-5e84-377e-8612-b0e2003b6f16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl X509v3 Authority Key Identifier: keyid:C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer sbgp-ipAddrBlock: critical IPv4: 208.79.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:25:b6:d1:64:1a:07:79:ea:5a:b3:fb:34:5f:b0:85:b8:30: 8c:ea:79:e7:d7:09:a7:26:16:57:dc:7a:87:ca:27:6b:9e:b2: 55:ff:41:79:2e:ea:7e:2a:89:31:a8:b4:78:29:a9:73:ad:d7: 2a:26:21:85:57:32:cb:66:92:8b:77:d2:0d:39:e6:d6:d5:0f: e0:ce:3c:dd:d9:d9:ee:bf:30:b1:af:73:e9:66:72:07:5e:0b: 8d:f6:50:78:47:d4:41:5f:f7:72:aa:85:21:20:c2:33:26:4d: 76:f0:a4:97:7c:00:8a:d0:51:ce:db:6c:f9:61:56:e5:20:ea: 07:c2:c1:26:20:a4:5c:ec:4e:0e:48:e9:2c:e4:de:98:b5:30: 56:4d:62:41:e5:49:eb:8f:92:f0:f8:8b:4e:ba:2c:d5:f6:e9: f8:ca:50:c3:76:16:31:18:60:8f:cd:df:1e:63:ea:a2:84:e8: 32:12:15:d2:47:9e:e2:3b:7c:bc:ba:4d:a1:6f:c2:11:ef:ae: fb:3d:f7:b6:31:c9:0c:6e:81:61:65:cd:2a:8d:4c:05:86:f3: 98:9c:6c:1e:86:2d:1d:e4:0a:0a:03:39:e6:f8:3e:84:c9:09: fc:e0:53:88:bd:27:be:30:50:ff:a5:97:39:24:e1:cd:a0:7a: 4a:61:57:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53Lo2AsNE+g+SwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UzNGRhNDItNzUzZS00YjlhLWFiNzYtMzdmZDZjZmQ3 NjVkMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk YjUyMzE5ZTAtMzRkNy00MTMzLWE2ZTEtMTM1YWJmYzBmZDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseBTU8R+z6G7gE/8vns0MiK/fAIJ5Cp3oK2I BGWvpjlRzL93jyvf830Xa94uwGfRZ/jdU2DFZ4WPtLh8lWMdVCYGQxngEKkGWp0o NY99Iijgj6hVb/YoBCGaJxYbgxYlXROolAk820HtLMbIGYzifVEd13eDyddz13Rc hbqUo4c8/lMAACE9ry9eUnhAMlo8nUFhiIazUa8SduTNTviRHJvc96fdBdve57S+ xlYC5RxF0gDAJ9851DcPzEqPgzPRbu8vPi38da5dGM1EIe3hg4RO21MHqK5hTRsf zboLCr4+gsGeggBxe0FAcnOVhzENCFq0hVCPzgKgmGHuscdkXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBysbG1jYIVoPbJHSdVvx5GR7OFfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTM0 ZGE0Mi03NTNlLTRiOWEtYWI3Ni0zN2ZkNmNmZDc2NWQvMGFmZmEzY2EtNWU4NC0z NzdlLTg2MTItYjBlMjAwM2I2ZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2UzNGRhNDItNzUzZS00YjlhLWFi NzYtMzdmZDZjZmQ3NjVkLzNlMzRkYTQyLTc1M2UtNGI5YS1hYjc2LTM3ZmQ2Y2Zk NzY1ZC5jcmwwHwYDVR0jBBgwFoAUyczkBMk8UbylYUVW4zKa/Jhk+IwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTM0ZGE0Mi03NTNlLTRiOWEtYWI3Ni0zN2Zk NmNmZDc2NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0E8sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM8lttFkGgd56lqz+zRfsIW4MIzqeefXCacmFlfceofKJ2ueslX/QXku 6n4qiTGotHgpqXOt1yomIYVXMstmkot30g055tbVD+DOPN3Z2e6/MLGvc+lmcgde C432UHhH1EFf93KqhSEgwjMmTXbwpJd8AIrQUc7bbPlhVuUg6gfCwSYgpFzsTg5I 6Szk3pi1MFZNYkHlSeuPkvD4i066LNX26fjKUMN2FjEYYI/N3x5j6qKE6DISFdJH nuI7fLy6TaFvwhHvrvs997YxyQxugWFlzSqNTAWG85icbB6GLR3kCgoDOeb4PoTJ CfzgU4i9J74wUP+llzkk4c2gekphV7g= -----END CERTIFICATE-----Generated at Mon Oct 20 04:15:57 2025 by rpki-client