$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/3131e6dc-7164-3f03-84c1-c68697ea362c.roa File: 3131e6dc-7164-3f03-84c1-c68697ea362c.roa (raw, json) Hash identifier: pE6ga2fZRaFRKl0othf4MFZjaj5cPS+gAbsrsjKwGRw= Subject key identifier: B7:15:E6:E8:F7:73:60:C2:36:E4:8D:B4:7F:12:63:C1:9D:9D:D0:C6 Certificate issuer: /CN=804b1e4b-89d3-4769-bab1-38df1d9bb72e Certificate serial: 010D0C9F4328584BAEC7B2A2FEF45756D5963A20 Authority key identifier: 55:03:65:2A:F7:7F:0C:AF:50:52:FA:C9:87:C9:4F:62:04:2F:B8:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/3131e6dc-7164-3f03-84c1-c68697ea362c.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 14618 IP address blocks: 208.80.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/804b1e4b-89d3-4769-bab1-38df1d9bb72e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/804b1e4b-89d3-4769-bab1-38df1d9bb72e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:b2:a2:fe:f4:57:56:d5:96:3a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=804b1e4b-89d3-4769-bab1-38df1d9bb72e Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=a3d338eb-85ce-45aa-a294-5c3b105202f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:93:5c:6a:43:92:f5:ca:b6:1c:fc:fd:69:a1: 70:97:ac:17:71:f9:8b:69:ee:65:84:d3:9d:14:a7: b2:a2:9b:43:78:f0:ef:3a:ac:78:d0:46:3e:8b:fb: 48:50:b4:ec:8b:71:38:59:ca:1d:80:cd:63:e5:0d: c2:5c:cd:a0:18:fc:40:89:e4:04:56:7c:4e:4a:0f: c8:63:0f:ef:d1:7b:48:98:81:63:97:c6:70:c6:5e: 96:6c:c2:67:e8:3e:56:3a:08:56:53:2a:28:98:70: 9d:3a:94:81:10:0c:57:be:49:e5:9f:dd:a2:7d:91: bf:7b:f4:9a:7d:93:33:ae:fa:c1:a1:7d:e0:db:da: df:78:f0:b4:52:93:cf:97:e2:21:53:ee:f9:42:af: 9c:6c:d5:99:3d:49:c2:86:2f:67:e8:68:aa:81:37: a5:b1:14:12:b1:36:81:eb:74:18:bb:a1:c0:e2:6d: 28:95:d1:b3:47:2c:32:94:8d:a4:5c:e3:bc:33:93: f7:48:b9:10:8c:f2:dc:56:6f:9d:70:71:46:2a:03: 68:80:d9:83:49:ed:53:15:85:1b:41:14:f0:e2:fd: b5:f1:a6:81:64:d0:d6:35:af:0a:b4:0e:ac:44:d7: 29:12:49:b1:7e:dd:29:c8:f6:0d:01:91:d5:55:ac: 5f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:15:E6:E8:F7:73:60:C2:36:E4:8D:B4:7F:12:63:C1:9D:9D:D0:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/3131e6dc-7164-3f03-84c1-c68697ea362c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/804b1e4b-89d3-4769-bab1-38df1d9bb72e.crl X509v3 Authority Key Identifier: keyid:55:03:65:2A:F7:7F:0C:AF:50:52:FA:C9:87:C9:4F:62:04:2F:B8:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e.cer sbgp-ipAddrBlock: critical IPv4: 208.80.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:cd:ce:22:f2:00:45:f6:13:15:f1:c9:e4:61:d1:fe:77:d6: fb:9f:e4:d5:67:1a:53:e5:61:2b:b0:65:70:7f:d0:fc:83:00: 7f:3f:3e:c8:a4:f0:88:11:40:9e:bd:46:f5:a3:32:96:91:c9: 67:d9:2b:bc:3a:d2:d5:02:78:7e:9d:c8:ab:05:a4:fb:92:05: db:18:4e:3b:7a:84:be:2d:f4:46:c7:09:2f:a7:0d:d9:b0:2e: 05:7e:c0:15:b0:36:ef:e1:23:90:97:cb:75:d4:d8:33:75:20: fd:8c:78:34:5e:cc:e0:bb:0a:91:e8:4f:76:30:5e:cd:23:08: 0a:51:91:51:a8:5d:4b:8c:72:41:3c:5c:7c:58:f5:d6:c4:19: f2:2b:bb:38:04:6f:45:cb:f5:e4:45:8a:4e:9a:38:fb:00:3b: 2a:09:5d:55:1e:38:9c:ee:76:3d:a4:fd:72:99:e8:dc:9b:d9: 79:55:d3:04:73:c8:99:c6:63:73:81:a8:93:e1:55:2e:90:40: d9:34:55:41:87:23:06:0c:31:b9:0a:41:a9:b5:91:ec:fd:8c: 77:33:46:69:32:4f:78:a4:7c:d9:2a:d4:ed:f8:c8:f6:bc:3f: 52:24:fd:1e:db:96:f7:69:73:44:e6:69:b7:3d:16:3b:23:1a: 63:85:9b:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux7Ki/vRXVtWWOiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODA0YjFlNGItODlkMy00NzY5LWJhYjEtMzhkZjFkOWJi NzJlMB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk YTNkMzM4ZWItODVjZS00NWFhLWEyOTQtNWMzYjEwNTIwMmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pNcakOS9cq2HPz9aaFwl6wXcfmLae5lhNOd FKeyoptDePDvOqx40EY+i/tIULTsi3E4WcodgM1j5Q3CXM2gGPxAieQEVnxOSg/I Yw/v0XtImIFjl8Zwxl6WbMJn6D5WOghWUyoomHCdOpSBEAxXvknln92ifZG/e/Sa fZMzrvrBoX3g29rfePC0UpPPl+IhU+75Qq+cbNWZPUnChi9n6GiqgTelsRQSsTaB 63QYu6HA4m0oldGzRywylI2kXOO8M5P3SLkQjPLcVm+dcHFGKgNogNmDSe1TFYUb QRTw4v218aaBZNDWNa8KtA6sRNcpEkmxft0pyPYNAZHVVaxfEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcV5uj3c2DCNuSNtH8SY8GdndDGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MDRi MWU0Yi04OWQzLTQ3NjktYmFiMS0zOGRmMWQ5YmI3MmUvMzEzMWU2ZGMtNzE2NC0z ZjAzLTg0YzEtYzY4Njk3ZWEzNjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODA0YjFlNGItODlkMy00NzY5LWJh YjEtMzhkZjFkOWJiNzJlLzgwNGIxZTRiLTg5ZDMtNDc2OS1iYWIxLTM4ZGYxZDli YjcyZS5jcmwwHwYDVR0jBBgwFoAUVQNlKvd/DK9QUvrJh8lPYgQvuDowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MDRiMWU0Yi04OWQzLTQ3NjktYmFiMS0zOGRm MWQ5YmI3MmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTNziLyAEX2ExXxyeRh0f531vuf5NVnGlPlYSuwZXB/0PyDAH8/Psik 8IgRQJ69RvWjMpaRyWfZK7w60tUCeH6dyKsFpPuSBdsYTjt6hL4t9EbHCS+nDdmw LgV+wBWwNu/hI5CXy3XU2DN1IP2MeDRezOC7CpHoT3YwXs0jCApRkVGoXUuMckE8 XHxY9dbEGfIruzgEb0XL9eRFik6aOPsAOyoJXVUeOJzudj2k/XKZ6Nyb2XlV0wRz yJnGY3OBqJPhVS6QQNk0VUGHIwYMMbkKQam1kez9jHczRmkyT3ikfNkq1O34yPa8 P1Ik/R7blvdpc0Tmabc9FjsjGmOFm3g= -----END CERTIFICATE-----Generated at Wed Nov 5 05:45:58 2025 by rpki-client