$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/def9b23b-c280-3ecf-944f-d95c26db0ef0.roa File: def9b23b-c280-3ecf-944f-d95c26db0ef0.roa (raw, json) Hash identifier: IQysitdCDdElzrYN0gpjzdcJsk84Huio2HIVx7sM4sE= Subject key identifier: 92:6E:6E:C2:ED:20:8C:82:8C:44:3A:0E:A4:26:5B:4F:F9:9A:81:6B Certificate issuer: /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Certificate serial: 010D0C9F4328584BBFA597EC764C6223D4245500 Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/def9b23b-c280-3ecf-944f-d95c26db0ef0.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 62707 IP address blocks: 208.80.40.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:97:ec:76:4c:62:23:d4:24:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=7e10d82d-3e4f-4cde-b7d8-6dbb379b611a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ab:68:cd:dd:95:60:ba:3f:60:78:c7:d9:49: 46:41:5a:5c:35:a0:a9:69:1f:ac:a4:d6:01:16:01: f4:66:7a:1f:8a:29:8a:f3:b1:2f:40:28:19:ea:68: 2d:03:e2:c9:be:83:4b:34:25:5d:f9:4a:fd:e0:27: 48:88:16:ac:95:ad:43:4a:85:20:c6:b1:62:db:3e: c0:6a:3c:9a:9a:06:87:b8:5f:4d:72:b1:1d:85:74: a3:aa:70:91:d4:90:ed:21:fd:65:e9:fe:75:59:f7: 67:3e:74:56:4b:8c:d0:8b:cd:79:d2:a3:d7:bf:5b: 74:0c:03:67:fa:e1:12:08:f1:11:c1:32:f9:ff:90: 62:b7:85:98:95:ec:39:41:47:02:29:9c:69:6c:bb: f1:f7:b4:4d:68:b0:e5:bb:d4:12:35:c0:15:39:63: 1e:b0:40:84:86:8e:c8:54:bd:19:3d:63:ef:12:76: 39:ce:e7:99:b6:0b:50:38:a9:ff:d7:75:b2:a0:22: 2e:29:52:84:9f:54:fb:ff:f6:af:87:b6:26:7d:0f: 9d:af:b6:96:ac:47:98:cf:f9:4e:7e:61:0b:30:00: 6e:52:56:39:f4:30:d2:66:5a:7a:9f:7f:68:02:a9: 2f:75:d9:9e:6e:3f:b2:66:7a:4e:bb:89:4a:23:ff: 32:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:6E:6E:C2:ED:20:8C:82:8C:44:3A:0E:A4:26:5B:4F:F9:9A:81:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/def9b23b-c280-3ecf-944f-d95c26db0ef0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl X509v3 Authority Key Identifier: keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer sbgp-ipAddrBlock: critical IPv4: 208.80.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:a8:19:24:bc:25:f8:aa:df:c7:7d:2b:a1:21:bc:80:c2:d0: 10:f6:6d:c5:03:a6:66:64:72:c4:ba:e5:ab:8b:24:a7:ae:72: 15:3e:83:58:90:42:05:29:b6:06:14:e1:ea:0e:ac:ea:1d:78: b9:f2:7f:15:d1:cd:24:c0:eb:91:af:e2:5f:a3:e1:70:2f:41: 58:96:64:a3:83:ec:61:c0:5e:8d:53:8e:d4:50:6a:9c:70:1d: e2:57:ca:75:de:21:54:75:5a:eb:43:87:90:46:e3:6d:2e:be: c4:ef:0f:4a:f8:e0:96:70:cc:92:c8:96:34:ee:37:e5:bd:4d: 31:27:7b:ed:15:b2:9b:9e:62:a7:88:0e:dd:14:9f:ac:b0:60: 82:b2:6f:fa:3f:91:17:76:c7:ff:56:69:cf:c6:c8:46:82:38: b2:a9:b9:da:e8:15:7a:7a:c0:f0:0d:d3:1c:10:3c:32:8c:21: 02:65:11:5c:2e:38:d5:fb:91:4c:27:65:d5:64:3e:b2:8e:08: 84:ef:f0:95:0f:8b:3c:a0:57:8d:57:c3:53:40:3f:cc:dc:bc: f4:d2:86:f4:8f:d1:1a:c4:c1:cf:7e:3a:83:79:08:e5:0a:cf: 3b:3d:c8:47:ce:9b:66:a1:99:4e:3b:ba:24:e2:de:4e:a8:b3: bf:27:78:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pZfsdkxiI9QkVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWYzZWM5MzgtN2I0NS00YzQ3LTkxZDItOWY3ZDE4NDEx NTE5MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk N2UxMGQ4MmQtM2U0Zi00Y2RlLWI3ZDgtNmRiYjM3OWI2MTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6tozd2VYLo/YHjH2UlGQVpcNaCpaR+spNYB FgH0ZnofiimK87EvQCgZ6mgtA+LJvoNLNCVd+Ur94CdIiBasla1DSoUgxrFi2z7A ajyamgaHuF9NcrEdhXSjqnCR1JDtIf1l6f51WfdnPnRWS4zQi8150qPXv1t0DANn +uESCPERwTL5/5Bit4WYlew5QUcCKZxpbLvx97RNaLDlu9QSNcAVOWMesECEho7I VL0ZPWPvEnY5zueZtgtQOKn/13WyoCIuKVKEn1T7//avh7YmfQ+dr7aWrEeYz/lO fmELMABuUlY59DDSZlp6n39oAqkvddmebj+yZnpOu4lKI/8y4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJubsLtIIyCjEQ6DqQmW0/5moFrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNl YzkzOC03YjQ1LTRjNDctOTFkMi05ZjdkMTg0MTE1MTkvZGVmOWIyM2ItYzI4MC0z ZWNmLTk0NGYtZDk1YzI2ZGIwZWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWYzZWM5MzgtN2I0NS00YzQ3LTkx ZDItOWY3ZDE4NDExNTE5L2VmM2VjOTM4LTdiNDUtNGM0Ny05MWQyLTlmN2QxODQx MTUxOS5jcmwwHwYDVR0jBBgwFoAUkanyxG7l5rwGtdG4Yq1QTfPopywwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNlYzkzOC03YjQ1LTRjNDctOTFkMi05Zjdk MTg0MTE1MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FAoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOoGSS8Jfiq38d9K6EhvIDC0BD2bcUDpmZkcsS65auLJKeuchU+g1iQ QgUptgYU4eoOrOodeLnyfxXRzSTA65Gv4l+j4XAvQViWZKOD7GHAXo1TjtRQapxw HeJXynXeIVR1WutDh5BG420uvsTvD0r44JZwzJLIljTuN+W9TTEne+0VspueYqeI Dt0Un6ywYIKyb/o/kRd2x/9Wac/GyEaCOLKpudroFXp6wPAN0xwQPDKMIQJlEVwu ONX7kUwnZdVkPrKOCITv8JUPizygV41Xw1NAP8zcvPTShvSP0RrEwc9+OoN5COUK zzs9yEfOm2ahmU47uiTi3k6os78neC4= -----END CERTIFICATE-----Generated at Wed Nov 5 06:42:58 2025 by rpki-client