$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/b658cb86-29f4-3ed0-a909-c092848c3510.roa File: b658cb86-29f4-3ed0-a909-c092848c3510.roa (raw, json) Hash identifier: LDVtdW57s4X29f4OipxjckW42g89x/EiJUUEpWIePaA= Subject key identifier: F1:2A:AD:5B:48:15:B8:CF:BC:1A:80:53:DF:29:C4:D9:A2:55:68:84 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584B639C196E5DA3494C27CA8980 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/b658cb86-29f4-3ed0-a909-c092848c3510.roa Signing time: Thu 02 Oct 2025 14:47:15 +0000 ROA not before: Thu 02 Oct 2025 14:47:15 +0000 ROA not after: Wed 31 Dec 2025 15:47:15 +0000 asID: 0 IP address blocks: 208.33.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:9c:19:6e:5d:a3:49:4c:27:ca:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Oct 2 14:47:15 2025 GMT Not After : Dec 31 15:47:15 2025 GMT Subject: CN=09b37120-3c71-4b8d-ae2d-6a4d1bd6bd1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:96:04:ce:47:d9:a1:87:eb:0e:ac:15:4c:25: b5:04:de:0c:22:2f:5a:59:1c:d7:2f:a6:8c:7c:cf: 34:78:c1:62:72:0f:84:8a:80:9c:9f:c0:34:9b:37: 07:62:ae:3d:20:48:23:b5:06:dd:7d:69:25:5e:bf: ee:e8:f6:84:80:08:a2:e4:26:65:d0:b3:b7:40:ae: 01:df:7d:77:5d:4a:71:18:a1:71:67:60:3f:a7:ec: e6:75:1c:57:ba:d1:06:2f:a3:7c:37:29:2d:46:c4: 07:03:09:d2:cd:c3:89:b6:8d:58:a7:9d:d6:15:4f: 2b:ab:72:c2:96:65:17:95:46:5a:bf:a0:e1:0d:60: 11:22:a0:d1:b7:84:27:1c:28:f4:25:13:6b:4d:ee: 73:37:61:85:a3:eb:52:34:14:35:e0:cc:d6:12:79: 86:9b:d0:7e:25:00:2d:67:d5:9a:be:18:44:74:64: 48:b0:c9:13:dc:77:a4:a7:7f:b2:3c:c7:4c:8c:bf: 67:2a:1c:df:43:60:51:c7:0c:21:9c:a2:8b:62:06: 6d:fe:76:52:3b:30:cf:14:b6:97:d6:f4:03:72:ad: 26:3d:2e:ca:01:40:ec:4d:82:22:95:9f:f2:15:3b: 87:be:2e:45:02:0b:18:c1:0e:ba:40:c1:00:38:50: 14:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:2A:AD:5B:48:15:B8:CF:BC:1A:80:53:DF:29:C4:D9:A2:55:68:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/b658cb86-29f4-3ed0-a909-c092848c3510.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 208.33.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:51:75:58:96:5a:12:67:e9:29:51:5f:2f:39:6d:9f:62:ba: a8:67:5c:3a:e9:0d:78:75:3b:c7:26:8f:77:43:8b:06:af:ea: d6:52:12:53:a1:84:93:95:69:df:1c:03:b9:35:b0:62:03:03: 94:d8:94:fc:0d:8c:b3:d1:f5:d2:57:f1:4a:7e:4e:01:19:0a: b2:ff:33:87:20:f6:e3:ce:a2:6b:99:9c:ad:32:31:55:a2:51: 3a:67:cb:39:c2:0a:89:bf:e6:eb:17:07:64:ca:8e:dc:2c:58: 50:95:5b:49:1f:f1:7b:73:d2:40:6e:fe:46:b0:4a:63:3b:ee: 3b:21:df:47:2c:f6:51:22:57:30:a4:2d:f5:df:49:98:58:89: eb:2b:28:1e:02:6b:04:20:47:e5:06:25:38:c5:15:35:75:04: 49:07:43:1d:56:fe:f8:f7:c2:aa:c8:23:c6:0b:be:7d:75:c0: fc:fd:14:6e:35:f6:6d:9c:c6:fb:83:2a:51:c6:c2:c7:b0:b3: 27:e7:02:de:92:94:90:ec:22:f9:62:15:11:b9:84:10:5d:11: 68:4d:2e:8e:15:31:a7:08:12:58:c2:bc:16:12:1b:c4:1d:39: d6:0b:ac:70:f4:90:ee:c1:1a:40:79:32:09:a5:f7:66:56:3d: 9c:59:8e:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjnBluXaNJTCfKiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MTAwMjE0NDcxNVoXDTI1MTIzMTE1NDcxNVowLzEtMCsGA1UEAxMk MDliMzcxMjAtM2M3MS00YjhkLWFlMmQtNmE0ZDFiZDZiZDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJYEzkfZoYfrDqwVTCW1BN4MIi9aWRzXL6aM fM80eMFicg+EioCcn8A0mzcHYq49IEgjtQbdfWklXr/u6PaEgAii5CZl0LO3QK4B 3313XUpxGKFxZ2A/p+zmdRxXutEGL6N8NyktRsQHAwnSzcOJto1Yp53WFU8rq3LC lmUXlUZav6DhDWARIqDRt4QnHCj0JRNrTe5zN2GFo+tSNBQ14MzWEnmGm9B+JQAt Z9WavhhEdGRIsMkT3Hekp3+yPMdMjL9nKhzfQ2BRxwwhnKKLYgZt/nZSOzDPFLaX 1vQDcq0mPS7KAUDsTYIilZ/yFTuHvi5FAgsYwQ66QMEAOFAURQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEqrVtIFbjPvBqAU98pxNmiVWiEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvYjY1OGNiODYtMjlmNC0z ZWQwLWE5MDktYzA5Mjg0OGMzNTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0CEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhRdViWWhJn6SlRXy85bZ9iuqhnXDrpDXh1O8cmj3dDiwav6tZSElOh hJOVad8cA7k1sGIDA5TYlPwNjLPR9dJX8Up+TgEZCrL/M4cg9uPOomuZnK0yMVWi UTpnyznCCom/5usXB2TKjtwsWFCVW0kf8Xtz0kBu/kawSmM77jsh30cs9lEiVzCk LfXfSZhYiesrKB4CawQgR+UGJTjFFTV1BEkHQx1W/vj3wqrII8YLvn11wPz9FG41 9m2cxvuDKlHGwsewsyfnAt6SlJDsIvliFRG5hBBdEWhNLo4VMacIEljCvBYSG8Qd OdYLrHD0kO7BGkB5Mgml92ZWPZxZjvc= -----END CERTIFICATE-----Generated at Wed Nov 5 00:34:57 2025 by rpki-client