$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d9acdab0-aaa1-3527-a872-ab0322e1875b.roa File: d9acdab0-aaa1-3527-a872-ab0322e1875b.roa (raw, json) Hash identifier: ziLctPzzkR1kt9ys+oSfvFvG01aM0mBKaqcuyy4omuM= Subject key identifier: C9:EF:73:41:C5:0A:2F:09:46:C0:CC:B5:59:0C:60:D2:B2:FF:E4:4C Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F4328584B4081CB04A25EFAF0593FB180 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d9acdab0-aaa1-3527-a872-ab0322e1875b.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 19165 IP address blocks: 208.80.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:cb:04:a2:5e:fa:f0:59:3f:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=fa1c193b-f69c-45b5-80e4-3df4140a9dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ee:21:97:49:f7:9e:9c:61:6c:16:35:c7:17: b0:42:52:04:6c:b5:ce:e9:2e:50:23:5a:fc:4d:b0: aa:4f:9e:df:7e:17:b5:5b:45:51:83:4d:e0:f8:a4: 30:4d:66:06:96:4b:61:e3:87:98:b3:00:5e:15:92: 66:44:be:42:d0:56:32:8c:d0:46:89:82:cc:d4:4d: e8:77:aa:12:85:07:4f:20:a8:d8:b6:77:17:9a:63: 3c:1f:be:64:7d:99:36:fc:79:79:60:ca:83:c0:d8: 43:3f:7b:c0:53:6b:b4:b8:d1:61:5d:88:5f:20:d8: ea:fc:da:c5:69:04:2e:17:4d:21:8f:b3:f6:3d:f3: 7b:7c:27:b9:b3:95:fa:d5:9e:09:9f:11:91:e0:3f: 66:08:76:c3:d3:23:97:16:39:20:f0:29:50:b8:19: 6b:b6:92:94:4b:52:51:9b:08:11:d0:b4:8f:40:1f: 5e:36:a3:59:ce:bf:b5:e2:38:20:de:2a:96:4e:20: 5c:d1:bd:c2:b0:49:5a:70:6b:b0:06:33:24:42:b2: 0b:83:9a:6d:03:d4:dd:13:6a:29:0f:52:04:74:c5: 6b:26:43:a7:63:77:50:58:92:d5:eb:0f:4e:51:08: 80:ad:6a:f1:1d:72:f1:fc:2f:18:c3:79:2e:5a:58: fc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:EF:73:41:C5:0A:2F:09:46:C0:CC:B5:59:0C:60:D2:B2:FF:E4:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d9acdab0-aaa1-3527-a872-ab0322e1875b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv4: 208.80.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:1a:96:ad:d5:ac:87:f3:02:17:11:24:0f:c2:a1:73:1a:14: 2d:70:3c:e9:0f:e7:03:dc:78:5b:01:6f:bb:92:5f:9e:64:72: ce:53:dc:19:e1:7f:e1:24:cd:39:11:0e:c2:a3:17:6a:09:f2: e0:04:d6:f0:6e:5b:2a:84:79:6b:1d:12:e3:21:0d:82:bf:06: 9b:3c:5f:a9:c5:7b:71:66:54:83:a3:a9:56:fb:78:36:37:23: 5d:6d:6d:39:7b:48:f3:e7:1f:01:4d:f9:3b:a2:95:2c:b1:bb: cc:30:c9:0a:50:55:cc:db:a0:2d:f1:ef:d1:b1:25:af:8a:67: 76:0f:f7:74:68:f5:56:16:45:1c:27:be:45:13:ab:90:43:0c: 38:c5:8e:f2:5c:56:5a:75:a0:76:80:19:23:33:41:71:a7:eb: bc:54:88:ad:f5:fa:38:cf:74:d9:db:1e:9f:ad:72:e0:16:61: 4c:74:05:ef:8c:b2:3d:3d:94:ee:d2:f2:63:fa:69:6b:69:c0: fb:cc:27:96:ea:c1:a0:83:64:e9:d1:da:c4:f7:ce:75:00:f7: 6c:2a:9f:b2:58:90:11:b9:52:6c:9a:3d:e2:c0:f4:55:98:79: 11:03:e2:b7:45:e7:dd:97:93:32:56:f3:27:37:84:be:3d:67: c4:93:69:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgcsEol768Fk/sYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk ZmExYzE5M2ItZjY5Yy00NWI1LTgwZTQtM2RmNDE0MGE5ZGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyO4hl0n3npxhbBY1xxewQlIEbLXO6S5QI1r8 TbCqT57ffhe1W0VRg03g+KQwTWYGlkth44eYswBeFZJmRL5C0FYyjNBGiYLM1E3o d6oShQdPIKjYtncXmmM8H75kfZk2/Hl5YMqDwNhDP3vAU2u0uNFhXYhfINjq/NrF aQQuF00hj7P2PfN7fCe5s5X61Z4JnxGR4D9mCHbD0yOXFjkg8ClQuBlrtpKUS1JR mwgR0LSPQB9eNqNZzr+14jgg3iqWTiBc0b3CsElacGuwBjMkQrILg5ptA9TdE2op D1IEdMVrJkOnY3dQWJLV6w9OUQiArWrxHXLx/C8Yw3kuWlj8dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnvc0HFCi8JRsDMtVkMYNKy/+RMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvZDlhY2RhYjAtYWFhMS0z NTI3LWE4NzItYWIwMzIyZTE4NzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsalq3VrIfzAhcRJA/CoXMaFC1wPOkP5wPceFsBb7uSX55kcs5T3Bnh f+EkzTkRDsKjF2oJ8uAE1vBuWyqEeWsdEuMhDYK/Bps8X6nFe3FmVIOjqVb7eDY3 I11tbTl7SPPnHwFN+TuilSyxu8wwyQpQVczboC3x79GxJa+KZ3YP93Ro9VYWRRwn vkUTq5BDDDjFjvJcVlp1oHaAGSMzQXGn67xUiK31+jjPdNnbHp+tcuAWYUx0Be+M sj09lO7S8mP6aWtpwPvMJ5bqwaCDZOnR2sT3znUA92wqn7JYkBG5UmyaPeLA9FWY eRED4rdF592XkzJW8yc3hL49Z8STaSM= -----END CERTIFICATE-----Generated at Wed Nov 5 17:40:38 2025 by rpki-client