$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8a37a60a-eebd-367b-baaf-9445a8a0316f.roa File: 8a37a60a-eebd-367b-baaf-9445a8a0316f.roa (raw, json) Hash identifier: 6fcVAxe+i7w7n8sqQ2SP9JMvuIeDnxOmNAVyL4nAqyQ= Subject key identifier: A3:06:94:7E:50:A6:A5:ED:63:72:AA:3F:3D:72:4B:39:92:EF:01:68 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584B1AD19477708B56E82B621C40 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8a37a60a-eebd-367b-baaf-9445a8a0316f.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 3561 IP address blocks: 208.132.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:94:77:70:8b:56:e8:2b:62:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=d8fa1027-9f3b-4ef6-9ab4-857ffd22d5f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:36:f8:5c:51:c0:10:b1:d0:4d:e8:5f:8c:b6: 68:d5:81:7d:b0:c8:12:52:ab:d3:13:b9:b5:ef:f8: b3:15:09:32:7c:2a:52:d5:c0:e7:54:ac:eb:77:95: d3:2f:be:19:f7:aa:89:9c:86:80:9d:3f:8e:c2:6d: 8c:2b:e5:93:d5:8f:96:42:09:40:d1:29:90:3f:11: 75:59:5a:63:0a:a9:ed:de:ef:bc:de:3c:cf:20:f4: 56:26:44:27:ef:f1:f5:e2:89:b2:42:a0:e2:ef:e6: 28:55:f3:af:ca:c0:b2:7d:18:2d:2b:7a:01:2c:cc: 25:33:bf:07:de:d6:69:86:1d:2a:a6:4f:65:58:7f: 52:a2:5a:3d:6e:42:86:68:f8:1a:36:a6:8c:ce:44: 8b:6f:b8:ba:ce:ee:85:a2:be:e9:0e:22:40:fc:7e: 82:9d:85:a6:ae:57:e4:1a:81:55:4a:1f:f4:4a:74: 89:41:f3:ab:cd:ac:13:81:ae:7b:76:36:63:ba:0e: af:75:b1:11:9d:06:f6:a4:e3:92:cb:a4:dc:19:59: da:ab:10:d4:9b:3b:e5:35:e3:83:16:13:b3:38:e5: 25:e3:93:f9:60:10:2f:58:7a:63:47:e3:c3:30:5e: f3:29:e6:e4:0c:57:80:e9:4a:0b:67:9a:6b:97:36: 3a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:06:94:7E:50:A6:A5:ED:63:72:AA:3F:3D:72:4B:39:92:EF:01:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8a37a60a-eebd-367b-baaf-9445a8a0316f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 208.132.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:d5:05:c6:5e:0f:da:fb:b7:74:ca:d5:6c:02:8a:d4:34:7c: a7:e1:b6:46:f3:e4:74:a7:4d:e9:99:48:97:b4:9e:fc:eb:4d: 2f:35:47:b3:88:32:30:a5:c6:0a:fb:e0:26:19:cf:de:be:5c: 8f:88:8c:d8:b2:91:34:92:57:7e:3a:9f:fc:9d:f5:b4:0b:11: 60:2b:82:45:82:c7:cc:a9:5b:a8:52:14:f6:d0:28:75:ae:bf: 3a:6f:a8:73:14:0d:a8:c9:05:5a:7e:d4:96:72:7e:ad:52:af: 3d:bc:b6:ec:9b:8a:49:f2:92:f8:2e:f3:83:f4:73:4b:9f:9f: b4:ba:90:c0:12:a0:dd:45:c3:87:95:ba:8a:57:e8:e5:7e:b7: ce:de:36:de:e4:3a:5d:cd:37:79:d8:13:f0:6b:83:0c:a8:ee: f0:d9:85:f8:7d:41:cd:e5:ff:44:ef:6b:e1:b4:25:d4:95:b5: c5:20:96:36:fb:1f:9d:87:6a:49:ef:ad:1b:c0:c1:0e:73:b7: f5:56:67:34:e7:c7:d9:58:2c:61:8e:18:76:32:2c:c4:a0:2f: 4d:f6:4e:c8:81:b3:30:34:7b:a6:c0:e7:b1:f5:2c:80:f8:1d: 11:26:64:16:4b:82:4a:30:a1:ac:28:de:30:d5:5a:83:e6:95: 14:20:9e:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0ZR3cItW6CtiHEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ZDhmYTEwMjctOWYzYi00ZWY2LTlhYjQtODU3ZmZkMjJkNWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTb4XFHAELHQTehfjLZo1YF9sMgSUqvTE7m1 7/izFQkyfCpS1cDnVKzrd5XTL74Z96qJnIaAnT+Owm2MK+WT1Y+WQglA0SmQPxF1 WVpjCqnt3u+83jzPIPRWJkQn7/H14omyQqDi7+YoVfOvysCyfRgtK3oBLMwlM78H 3tZphh0qpk9lWH9Solo9bkKGaPgaNqaMzkSLb7i6zu6For7pDiJA/H6CnYWmrlfk GoFVSh/0SnSJQfOrzawTga57djZjug6vdbERnQb2pOOSy6TcGVnaqxDUmzvlNeOD FhOzOOUl45P5YBAvWHpjR+PDMF7zKebkDFeA6UoLZ5prlzY6MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMGlH5QpqXtY3KqPz1ySzmS7wFoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvOGEzN2E2MGEtZWViZC0z NjdiLWJhYWYtOTQ0NWE4YTAzMTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0ISAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHVBcZeD9r7t3TK1WwCitQ0fKfhtkbz5HSnTemZSJe0nvzrTS81R7OI MjClxgr74CYZz96+XI+IjNiykTSSV346n/yd9bQLEWArgkWCx8ypW6hSFPbQKHWu vzpvqHMUDajJBVp+1JZyfq1Srz28tuybiknykvgu84P0c0ufn7S6kMASoN1Fw4eV uopX6OV+t87eNt7kOl3NN3nYE/Brgwyo7vDZhfh9Qc3l/0Tva+G0JdSVtcUgljb7 H52HaknvrRvAwQ5zt/VWZzTnx9lYLGGOGHYyLMSgL032TsiBszA0e6bA57H1LID4 HREmZBZLgkowoawo3jDVWoPmlRQgnrE= -----END CERTIFICATE-----Generated at Wed Nov 5 00:21:33 2025 by rpki-client