$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/e4603523-52cd-3192-b6b2-3747ffa2c161.roa File: e4603523-52cd-3192-b6b2-3747ffa2c161.roa (raw, json) Hash identifier: +jPdAAMafqzqUvUDNbSZG8+uKQ/QjZRqiPRl8pcTOVM= Subject key identifier: 41:B1:97:B2:7D:D1:F8:12:0A:59:2C:42:8B:D1:DC:C8:B1:45:45:20 Certificate issuer: /CN=3a6d409f-f6c6-4ba5-a674-6b6368d2478a Certificate serial: 010D0C9F4328584AECC12FE6C4C994F77AD4A850 Authority key identifier: F6:D4:94:D6:34:79:64:22:55:99:1E:B3:43:65:D0:58:C4:F5:B0:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/e4603523-52cd-3192-b6b2-3747ffa2c161.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 26281 IP address blocks: 208.93.72.0/21 maxlen: 21 208.93.73.0/24 maxlen: 24 208.93.76.0/23 maxlen: 23 208.93.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/3a6d409f-f6c6-4ba5-a674-6b6368d2478a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/3a6d409f-f6c6-4ba5-a674-6b6368d2478a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:2f:e6:c4:c9:94:f7:7a:d4:a8:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a6d409f-f6c6-4ba5-a674-6b6368d2478a Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=e000025b-fb47-44ec-a247-b515d64351e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:58:47:47:4b:ba:83:a1:ad:9a:5e:42:06:5a: 14:72:c6:c1:84:48:d7:70:cc:8c:f7:44:29:ff:b0: af:0e:de:d9:6c:28:53:9e:d3:b5:6d:13:66:b1:6d: ff:dd:39:f4:5c:63:89:7b:fc:ff:51:95:1e:4d:f9: c5:73:f2:fe:6e:05:08:37:f1:61:70:f3:26:4c:77: 16:3d:0e:a6:1d:e0:b9:72:06:f7:ab:43:0c:73:7d: fa:8c:9d:1d:4e:e9:ef:0d:48:41:95:35:85:44:17: 59:bd:dc:7f:47:1b:72:8a:09:03:7e:b2:f3:c7:46: 36:d3:35:9f:ef:2e:cd:8f:6a:25:e3:b4:84:5b:87: 4b:90:25:d2:f7:2c:96:c3:8d:1f:0d:62:e3:d3:4c: b8:65:5a:a6:d1:94:4e:3e:c9:d8:59:e3:0a:63:87: 2f:46:b5:c5:d7:5f:62:ce:a7:de:4a:d3:d2:29:e3: 5a:d6:92:f6:cc:65:2e:9e:01:1d:11:7d:8e:bf:b6: 20:d4:e0:2b:01:55:81:2b:28:78:71:a4:53:35:2f: 2d:f4:0f:f7:ab:a6:f8:cc:64:94:55:d9:6f:fc:1f: 0b:d8:9b:0e:ab:98:5b:98:ff:db:05:e8:70:d0:af: 32:40:a7:f7:4b:ab:c6:13:6e:eb:a0:55:2b:aa:30: 81:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B1:97:B2:7D:D1:F8:12:0A:59:2C:42:8B:D1:DC:C8:B1:45:45:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/e4603523-52cd-3192-b6b2-3747ffa2c161.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/3a6d409f-f6c6-4ba5-a674-6b6368d2478a.crl X509v3 Authority Key Identifier: keyid:F6:D4:94:D6:34:79:64:22:55:99:1E:B3:43:65:D0:58:C4:F5:B0:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a.cer sbgp-ipAddrBlock: critical IPv4: 208.93.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:24:2d:62:12:c8:68:1c:2c:a8:b1:17:f7:4d:0b:81:38:41: 32:4e:c0:d1:06:9b:d3:4e:e7:3c:1e:df:6e:b0:93:4f:30:37: ee:f1:bd:bc:d9:49:be:29:70:1b:91:cf:1e:2f:9d:0b:f7:de: d4:4d:43:08:03:04:f2:ba:b4:1e:9b:01:81:06:d3:52:d2:46: 87:54:89:0a:fa:2e:dd:37:33:fa:e8:73:19:b9:6d:95:79:99: 4d:cd:b0:58:1c:af:54:66:36:e2:94:ff:27:61:73:18:f9:3b: a0:98:a5:bb:58:11:05:d0:66:e6:18:75:4d:d3:e6:6d:40:f6: 80:39:2c:69:67:3d:be:42:80:b8:3c:0b:78:c4:51:21:06:03: 25:f8:36:e1:f0:3a:dd:59:39:a2:9d:a3:39:ca:81:00:5e:a0: 62:b2:6e:6c:d3:84:a4:6f:24:bd:5b:3b:d3:c0:db:db:d9:93: 53:4e:26:fb:23:32:56:c6:cc:d8:f9:27:3c:f0:91:26:8a:c8: 1d:93:cc:26:13:79:68:41:f0:59:05:63:81:19:6b:f7:6e:6e: af:ae:fc:5c:ab:79:a9:25:8c:9b:71:46:99:ba:9c:cf:b1:43: 05:b6:15:db:23:c5:80:bb:64:56:e8:84:ee:9d:f9:93:50:9b: fd:44:f6:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswS/mxMmU93rUqFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E2ZDQwOWYtZjZjNi00YmE1LWE2NzQtNmI2MzY4ZDI0 NzhhMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZTAwMDAyNWItZmI0Ny00NGVjLWEyNDctYjUxNWQ2NDM1MWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslhHR0u6g6Gtml5CBloUcsbBhEjXcMyM90Qp /7CvDt7ZbChTntO1bRNmsW3/3Tn0XGOJe/z/UZUeTfnFc/L+bgUIN/FhcPMmTHcW PQ6mHeC5cgb3q0MMc336jJ0dTunvDUhBlTWFRBdZvdx/RxtyigkDfrLzx0Y20zWf 7y7Nj2ol47SEW4dLkCXS9yyWw40fDWLj00y4ZVqm0ZROPsnYWeMKY4cvRrXF119i zqfeStPSKeNa1pL2zGUungEdEX2Ov7Yg1OArAVWBKyh4caRTNS8t9A/3q6b4zGSU Vdlv/B8L2JsOq5hbmP/bBehw0K8yQKf3S6vGE27roFUrqjCBNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGxl7J90fgSClksQovR3MixRUUgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYTZk NDA5Zi1mNmM2LTRiYTUtYTY3NC02YjYzNjhkMjQ3OGEvZTQ2MDM1MjMtNTJjZC0z MTkyLWI2YjItMzc0N2ZmYTJjMTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2E2ZDQwOWYtZjZjNi00YmE1LWE2 NzQtNmI2MzY4ZDI0NzhhLzNhNmQ0MDlmLWY2YzYtNGJhNS1hNjc0LTZiNjM2OGQy NDc4YS5jcmwwHwYDVR0jBBgwFoAU9tSU1jR5ZCJVmR6zQ2XQWMT1sGgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYTZkNDA5Zi1mNmM2LTRiYTUtYTY3NC02YjYz NjhkMjQ3OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0F1IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgkLWISyGgcLKixF/dNC4E4QTJOwNEGm9NO5zwe326wk08wN+7xvbzZ Sb4pcBuRzx4vnQv33tRNQwgDBPK6tB6bAYEG01LSRodUiQr6Lt03M/rocxm5bZV5 mU3NsFgcr1RmNuKU/ydhcxj5O6CYpbtYEQXQZuYYdU3T5m1A9oA5LGlnPb5CgLg8 C3jEUSEGAyX4NuHwOt1ZOaKdoznKgQBeoGKybmzThKRvJL1bO9PA29vZk1NOJvsj MlbGzNj5JzzwkSaKyB2TzCYTeWhB8FkFY4EZa/dubq+u/FyreakljJtxRpm6nM+x QwW2FdsjxYC7ZFbohO6d+ZNQm/1E9tk= -----END CERTIFICATE-----Generated at Thu Nov 6 02:40:38 2025 by rpki-client