$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e1a24306-5aad-3b58-aa6a-8501df64a677.roa File: e1a24306-5aad-3b58-aa6a-8501df64a677.roa (raw, json) Hash identifier: kcm+SZ/W8fIGLFXW+56ew4WbDemzhUo6D151aYvV3U0= Subject key identifier: 42:85:6E:E3:80:9E:32:EA:59:4B:9B:55:47:25:6C:D0:CB:77:04:4A Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584BBB75A39C3E560FCAB3A69E00 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e1a24306-5aad-3b58-aa6a-8501df64a677.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 3561 IP address blocks: 208.138.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:a3:9c:3e:56:0f:ca:b3:a6:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=56ea8557-1983-419a-ad60-7864ce608ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b0:3e:6a:a9:b1:98:b0:ea:d6:06:d5:1d:f2: dd:27:85:5a:12:c0:67:68:57:1e:b0:e1:a7:a3:e1: 00:a4:84:bf:61:c1:d9:fa:7d:09:e3:65:6c:eb:46: 03:08:85:23:12:80:59:20:ff:20:85:fd:12:0d:89: b7:23:f7:86:1b:74:38:53:b4:71:53:51:c5:48:f6: 14:06:f1:9e:e1:27:e6:82:69:33:84:43:f6:8c:72: 92:e8:01:da:bf:b0:6c:0d:92:29:c9:0f:34:aa:74: 30:8a:e7:94:c7:34:bb:fe:aa:23:1b:f0:fa:e3:a4: e0:2b:82:40:e3:d6:e7:a6:0e:ea:ae:bc:64:d7:a3: 6c:1a:4c:85:79:aa:42:f8:b4:e2:07:f2:52:61:07: a5:50:d2:ff:27:0e:a0:00:d4:5f:a8:dd:74:f8:fd: 50:83:79:ff:b2:d7:72:4b:08:88:a2:25:71:79:66: 39:35:ee:71:bc:83:76:dc:80:36:1b:4b:f1:18:07: e3:bf:6b:83:1c:77:8d:d7:8f:74:24:d2:bf:6e:90: 46:f3:be:a1:e4:59:06:9d:cf:aa:ed:a3:d0:a1:a5: d5:81:ba:a7:a3:ba:24:40:7a:73:3b:fb:a5:bc:af: 22:91:cd:55:73:66:54:55:c7:82:14:09:87:b7:8d: 79:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:85:6E:E3:80:9E:32:EA:59:4B:9B:55:47:25:6C:D0:CB:77:04:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e1a24306-5aad-3b58-aa6a-8501df64a677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 208.138.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:4a:18:06:17:30:de:da:b9:83:49:2f:a3:3b:b4:25:b6:65: b6:ab:3d:88:81:8b:a1:72:58:5d:f2:7c:a3:c7:55:9c:68:4d: 6b:c9:83:3b:7f:45:2d:e9:02:7d:3b:4f:b1:e5:35:33:79:54: 88:26:5e:04:31:87:8e:db:50:e5:0b:79:fb:28:e9:97:74:54: 58:42:bb:d4:34:a9:ac:25:57:73:f8:15:f8:e4:23:2c:9f:59: d8:8b:47:50:ad:24:8d:21:f3:aa:bc:f0:57:69:70:81:b0:93: f1:c6:84:78:e7:c9:fc:18:d1:82:f7:bc:5d:c1:c9:91:08:aa: 24:fe:e0:c5:ba:aa:ed:f5:c7:13:af:75:9e:7d:8c:0b:85:eb: d6:0d:de:2d:7a:34:8e:d8:0d:06:1f:ae:29:42:74:c7:80:25: 92:e9:cc:2d:01:18:70:01:e2:16:5f:cf:2f:99:a3:dc:02:c8: 4b:5a:08:0f:9a:18:66:65:00:47:43:c9:1f:d3:f3:a6:a6:6c: ff:97:2e:57:a6:8c:85:e9:5d:8f:14:b9:60:02:f5:8d:4e:fd: 5f:2c:bf:56:93:e3:60:0f:df:18:f2:86:6c:e8:89:fe:17:42: 40:f3:3c:97:29:c5:b1:db:60:2a:81:d3:09:57:a0:1a:8d:96: 4a:f0:47:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7daOcPlYPyrOmngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk NTZlYTg1NTctMTk4My00MTlhLWFkNjAtNzg2NGNlNjA4YWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrA+aqmxmLDq1gbVHfLdJ4VaEsBnaFcesOGn o+EApIS/YcHZ+n0J42Vs60YDCIUjEoBZIP8ghf0SDYm3I/eGG3Q4U7RxU1HFSPYU BvGe4SfmgmkzhEP2jHKS6AHav7BsDZIpyQ80qnQwiueUxzS7/qojG/D646TgK4JA 49bnpg7qrrxk16NsGkyFeapC+LTiB/JSYQelUNL/Jw6gANRfqN10+P1Qg3n/stdy SwiIoiVxeWY5Ne5xvIN23IA2G0vxGAfjv2uDHHeN1490JNK/bpBG876h5FkGnc+q 7aPQoaXVgbqno7okQHpzO/ulvK8ikc1Vc2ZUVceCFAmHt415YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKFbuOAnjLqWUubVUclbNDLdwRKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvZTFhMjQzMDYtNWFhZC0z YjU4LWFhNmEtODUwMWRmNjRhNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0IqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhKGAYXMN7auYNJL6M7tCW2ZbarPYiBi6FyWF3yfKPHVZxoTWvJgzt/ RS3pAn07T7HlNTN5VIgmXgQxh47bUOULefso6Zd0VFhCu9Q0qawlV3P4FfjkIyyf WdiLR1CtJI0h86q88FdpcIGwk/HGhHjnyfwY0YL3vF3ByZEIqiT+4MW6qu31xxOv dZ59jAuF69YN3i16NI7YDQYfrilCdMeAJZLpzC0BGHAB4hZfzy+Zo9wCyEtaCA+a GGZlAEdDyR/T86ambP+XLlemjIXpXY8UuWAC9Y1O/V8sv1aT42AP3xjyhmzoif4X QkDzPJcpxbHbYCqB0wlXoBqNlkrwR/o= -----END CERTIFICATE-----Generated at Tue Nov 4 21:46:28 2025 by rpki-client