$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/59392e2a-7cc4-32fc-840e-7383dc8b4959.roa File: 59392e2a-7cc4-32fc-840e-7383dc8b4959.roa (raw, json) Hash identifier: sUYEgrBBS54l/XFwEe74NOz74VEnXakanTblh/bDgBA= Subject key identifier: 1A:A9:23:43:E5:24:91:A2:C2:63:E8:9C:DA:45:BB:2F:80:71:6E:D5 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584B21CC1E54C11B9E7FFFE6FE80 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/59392e2a-7cc4-32fc-840e-7383dc8b4959.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 13536 IP address blocks: 208.20.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:1e:54:c1:1b:9e:7f:ff:e6:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=805a905b-53d2-40b4-9508-5697f5218aef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:70:98:48:ef:67:ec:ae:45:ab:dc:4f:e2:0b: 02:01:28:ed:18:09:5a:48:eb:15:40:3e:03:75:9e: 34:04:42:a6:d6:06:00:ba:3b:7d:c7:58:f8:2c:36: 64:24:cf:e8:4c:cf:34:5d:06:d4:74:9c:6b:e8:40: 28:be:6a:54:f9:fe:69:6b:31:c4:52:a8:56:90:0f: c9:75:e3:4c:f7:88:a9:c2:6a:61:c0:63:a4:f4:85: 0b:3a:e0:da:55:83:9d:2d:7d:c7:d6:f6:da:79:fe: 45:f3:1e:90:6c:d5:4d:80:1c:d5:60:bf:c6:a8:1a: da:1e:ee:fe:38:da:4d:fb:71:fc:52:4e:4a:02:92: 99:af:d3:30:80:f1:83:a2:1a:19:6e:93:a1:b8:78: fd:42:75:18:cf:d6:26:a9:b2:81:8c:38:c1:00:73: b6:c0:96:70:c1:ae:2d:70:88:56:2c:5d:1b:c6:29: 67:c7:fb:ae:35:44:1f:70:df:f4:69:6b:72:04:fb: 86:6f:78:b4:2b:1e:e5:a0:a1:1d:3e:f6:56:b6:48: 2e:a2:34:57:9a:5c:03:bc:9c:45:92:ba:8c:d1:92: 1d:41:9d:e3:40:1d:25:cf:7d:81:d4:80:2e:a8:0e: b7:c1:50:51:24:bd:a6:b8:b7:a0:11:8c:0a:de:00: 37:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A9:23:43:E5:24:91:A2:C2:63:E8:9C:DA:45:BB:2F:80:71:6E:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/59392e2a-7cc4-32fc-840e-7383dc8b4959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 208.20.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:c6:a3:c1:4a:26:16:c7:c2:b0:51:a2:72:3e:43:bc:93:fa: 4f:7e:44:67:61:48:60:02:c6:90:ae:eb:d0:7d:27:53:90:15: 52:c5:33:b1:c8:5f:80:b7:b5:99:80:e5:a5:7a:75:a0:77:2f: e8:bb:0d:be:99:94:0d:3b:ea:ba:2c:b0:0e:94:8a:dc:39:8d: 22:93:f3:d4:ba:95:4e:22:16:4f:ed:d6:b6:1b:43:4c:08:3f: df:04:81:ce:2e:66:9c:ce:ae:20:1a:00:d9:f9:01:17:e9:cc: 2c:09:7d:0e:13:f3:b8:da:33:24:50:dc:3c:5c:71:0e:99:27: 73:cc:92:70:74:50:ba:ef:3e:3e:a7:41:97:e9:c4:4d:89:3f: 0c:47:6e:9d:54:3d:8f:17:d0:2f:56:e7:c7:ce:88:84:87:ec: 12:64:49:82:aa:13:d1:20:a1:54:f1:fe:db:78:de:b3:9a:dd: 70:44:8e:85:23:9a:78:7a:0a:db:8b:c7:ba:27:e2:9e:fa:ee: 15:39:35:1b:32:7e:b7:a1:03:1d:2c:a4:06:5b:55:d9:81:e2: 23:a3:3f:c5:3e:bc:66:76:15:1f:d1:fd:dc:ce:34:9c:8f:72: 4f:ac:72:9e:91:c1:57:ec:de:8e:1a:35:21:fd:c8:81:c1:59: d3:d0:fd:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzB5UwRuef//m/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk ODA1YTkwNWItNTNkMi00MGI0LTk1MDgtNTY5N2Y1MjE4YWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXCYSO9n7K5Fq9xP4gsCASjtGAlaSOsVQD4D dZ40BEKm1gYAujt9x1j4LDZkJM/oTM80XQbUdJxr6EAovmpU+f5pazHEUqhWkA/J deNM94ipwmphwGOk9IULOuDaVYOdLX3H1vbaef5F8x6QbNVNgBzVYL/GqBraHu7+ ONpN+3H8Uk5KApKZr9MwgPGDohoZbpOhuHj9QnUYz9YmqbKBjDjBAHO2wJZwwa4t cIhWLF0bxilnx/uuNUQfcN/0aWtyBPuGb3i0Kx7loKEdPvZWtkguojRXmlwDvJxF krqM0ZIdQZ3jQB0lz32B1IAuqA63wVBRJL2muLegEYwK3gA39QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqpI0PlJJGiwmPonNpFuy+AcW7VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvNTkzOTJlMmEtN2NjNC0z MmZjLTg0MGUtNzM4M2RjOGI0OTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0BQiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADGo8FKJhbHwrBRonI+Q7yT+k9+RGdhSGACxpCu69B9J1OQFVLFM7HI X4C3tZmA5aV6daB3L+i7Db6ZlA076rossA6Uitw5jSKT89S6lU4iFk/t1rYbQ0wI P98Egc4uZpzOriAaANn5ARfpzCwJfQ4T87jaMyRQ3DxccQ6ZJ3PMknB0ULrvPj6n QZfpxE2JPwxHbp1UPY8X0C9W58fOiISH7BJkSYKqE9EgoVTx/tt43rOa3XBEjoUj mnh6CtuLx7on4p767hU5NRsyfrehAx0spAZbVdmB4iOjP8U+vGZ2FR/R/dzONJyP ck+scp6RwVfs3o4aNSH9yIHBWdPQ/RU= -----END CERTIFICATE-----Generated at Wed Nov 5 08:37:05 2025 by rpki-client