$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/acf0070a-bcf1-31f7-b9b5-03e6b40f4c06.roa File: acf0070a-bcf1-31f7-b9b5-03e6b40f4c06.roa (raw, json) Hash identifier: DV7Udf9pL67NQREQqpFPvQS35m2E2MffkvblZLBGXds= Subject key identifier: FA:D7:23:37:43:E5:8A:A3:A8:82:A1:2C:93:EC:A6:04:DF:94:89:0F Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584B21CC1E2F503A340D9FF04540 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/acf0070a-bcf1-31f7-b9b5-03e6b40f4c06.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 13536 IP address blocks: 208.20.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:1e:2f:50:3a:34:0d:9f:f0:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=e0d0cfe0-7e4b-49a3-a488-088e54ef33f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:17:8d:75:57:9f:46:31:39:35:6d:35:20:45: e9:e4:b9:bf:f0:f0:10:44:8a:5f:c6:f3:b5:a1:5b: 86:1f:a2:ef:a0:a5:1a:b1:b4:9b:e4:d5:17:ec:55: 50:33:a5:52:23:ba:33:df:b9:0f:1c:7e:eb:4a:c5: 76:e4:5e:c6:71:52:18:13:46:53:3f:72:d3:b4:a3: e2:e6:da:d1:6e:f1:61:f6:43:b6:fd:19:85:d2:97: 44:af:b5:a4:ee:91:48:7e:5d:0d:6a:57:b6:de:34: b6:b3:65:b5:14:eb:c4:ed:0d:e8:23:17:47:76:ab: 9c:67:c1:c7:3c:f3:26:82:22:ab:3a:90:1c:3d:40: 4f:57:4b:01:50:9f:a8:d7:98:e1:cf:da:3a:22:bf: ee:70:a6:b0:4e:cf:ee:18:b3:37:cd:9c:42:be:c6: 87:54:58:80:c8:39:d3:93:33:ca:a5:ca:35:ad:9c: 60:7b:ff:fa:23:53:58:ad:b6:b0:6c:91:c1:da:e1: df:ea:bf:00:a3:65:0c:74:f8:4f:c6:e5:dd:59:c2: 03:6e:93:9a:5f:f9:10:ee:d2:1e:41:6d:0b:d1:ba: 53:f2:a6:1b:73:f7:38:1e:9e:8c:5c:4d:06:b0:11: 95:d1:d8:a0:66:e6:89:5e:aa:13:96:75:d8:c2:c6: ef:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D7:23:37:43:E5:8A:A3:A8:82:A1:2C:93:EC:A6:04:DF:94:89:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/acf0070a-bcf1-31f7-b9b5-03e6b40f4c06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 208.20.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:d6:a8:5a:be:81:3b:cc:83:f9:40:58:8b:61:e0:c1:f9:78: 25:74:2c:c6:95:e3:7d:0e:a6:1d:ed:0f:ea:93:72:bc:de:6f: 99:40:ca:07:aa:02:09:25:3e:41:fa:9b:62:28:46:3a:5e:81: 14:e9:cf:73:44:b6:a5:6c:e8:6b:79:5d:a3:87:2a:67:df:3a: 65:f7:84:64:94:cb:b4:a5:f4:e9:0c:17:a9:b0:ad:01:37:6e: 6b:97:74:f1:56:45:47:a1:0c:30:9b:40:98:32:e3:29:97:eb: 9b:51:64:53:01:65:b3:8e:05:4c:fe:69:ad:25:82:87:8a:b4: 32:a5:89:ef:39:5e:61:d1:47:12:6a:73:6c:66:c3:75:92:bd: 01:43:0e:d5:f8:33:2d:ab:9f:88:a8:57:90:cc:7e:14:1d:10: b7:da:fa:8d:30:c5:13:48:23:49:22:b3:5a:dd:ef:39:80:8d: 2a:93:38:12:ba:1b:43:ae:f9:99:e9:6b:0e:db:f8:0a:85:6f: f5:d1:f5:29:b6:66:f1:b6:60:7b:85:a8:9a:b1:3e:2c:37:b8: 40:21:78:41:f6:f3:31:3d:23:ba:55:75:6e:01:9b:35:f5:f6: 7e:4c:30:87:57:5b:85:37:70:f5:fc:fa:8b:b8:d5:63:94:4e: 07:88:f0:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzB4vUDo0DZ/wRUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk ZTBkMGNmZTAtN2U0Yi00OWEzLWE0ODgtMDg4ZTU0ZWYzM2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxeNdVefRjE5NW01IEXp5Lm/8PAQRIpfxvO1 oVuGH6LvoKUasbSb5NUX7FVQM6VSI7oz37kPHH7rSsV25F7GcVIYE0ZTP3LTtKPi 5trRbvFh9kO2/RmF0pdEr7Wk7pFIfl0Nale23jS2s2W1FOvE7Q3oIxdHdqucZ8HH PPMmgiKrOpAcPUBPV0sBUJ+o15jhz9o6Ir/ucKawTs/uGLM3zZxCvsaHVFiAyDnT kzPKpco1rZxge//6I1NYrbawbJHB2uHf6r8Ao2UMdPhPxuXdWcIDbpOaX/kQ7tIe QW0L0bpT8qYbc/c4Hp6MXE0GsBGV0digZuaJXqoTlnXYwsbvwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrXIzdD5YqjqIKhLJPspgTflIkPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvYWNmMDA3MGEtYmNmMS0z MWY3LWI5YjUtMDNlNmI0MGY0YzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0BQhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPWqFq+gTvMg/lAWIth4MH5eCV0LMaV430Oph3tD+qTcrzeb5lAygeq AgklPkH6m2IoRjpegRTpz3NEtqVs6Gt5XaOHKmffOmX3hGSUy7Sl9OkMF6mwrQE3 bmuXdPFWRUehDDCbQJgy4ymX65tRZFMBZbOOBUz+aa0lgoeKtDKlie85XmHRRxJq c2xmw3WSvQFDDtX4My2rn4ioV5DMfhQdELfa+o0wxRNII0kis1rd7zmAjSqTOBK6 G0Ou+Znpaw7b+AqFb/XR9Sm2ZvG2YHuFqJqxPiw3uEAheEH28zE9I7pVdW4BmzX1 9n5MMIdXW4U3cPX8+ou41WOUTgeI8LM= -----END CERTIFICATE-----Generated at Wed Nov 5 08:39:56 2025 by rpki-client