$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/3880b21f-244e-35e6-a256-bd5d4c123331.roa File: 3880b21f-244e-35e6-a256-bd5d4c123331.roa (raw, json) Hash identifier: rvfg5famsYiLJSUM0NI1VAPwHS1rrXQWiKAQLLozUAE= Subject key identifier: 44:3C:BB:2D:0D:C9:55:CC:28:30:3C:F1:EA:99:27:6A:F1:D4:47:58 Certificate issuer: /CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035 Certificate serial: 010D0C9F4328584BAEC891F0177AFB01F7D26CC0 Authority key identifier: 95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/3880b21f-244e-35e6-a256-bd5d4c123331.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 15204 IP address blocks: 204.15.52.0/22 maxlen: 22 204.15.52.0/23 maxlen: 23 204.15.54.0/24 maxlen: 24 204.15.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c8:91:f0:17:7a:fb:01:f7:d2:6c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=03672f0a-4785-4637-bc22-bfd348d83922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:eb:33:c1:25:15:6d:26:24:5f:0b:fb:ed:2c: ac:10:e1:67:23:61:75:9b:5d:37:7a:20:f2:15:79: b3:c3:95:3c:ee:b0:3d:cf:91:a7:4f:d8:03:69:66: 32:81:cd:a5:4d:c7:9c:a0:f6:ec:4b:92:35:8c:f0: 80:b9:60:06:c3:ee:73:76:a8:d3:09:2d:aa:aa:a9: 76:02:8e:7a:43:9d:b2:9d:8a:ed:ef:b1:2f:14:3f: 29:53:49:d2:60:8a:1c:e3:f0:1a:ad:4d:92:15:0f: b1:f6:9a:b8:09:43:e4:8c:56:2f:00:08:c4:df:dd: 65:7a:92:fe:22:54:e1:8b:8e:f0:fc:b1:36:f2:3a: 1e:47:f4:19:b2:3d:03:0a:3f:cd:f3:39:49:2b:ce: a0:bf:9c:b8:95:c5:85:86:9c:4f:6b:61:b6:ac:a5: b1:a6:64:0d:38:66:ab:cf:d3:13:05:82:89:50:fe: 42:f3:88:9b:39:bc:54:4e:2e:5a:ac:f5:76:18:b8: 7f:c3:14:05:5a:57:20:31:28:df:8a:8c:c1:e7:b7: 0e:1d:2a:49:fc:82:19:d9:7a:38:e7:3a:99:e8:1a: e3:14:a7:02:64:69:79:9b:87:ed:24:4f:dc:26:92: 45:ba:ef:6f:ea:b5:e5:0f:b7:b3:c7:a2:8c:64:76: 3c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3C:BB:2D:0D:C9:55:CC:28:30:3C:F1:EA:99:27:6A:F1:D4:47:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/3880b21f-244e-35e6-a256-bd5d4c123331.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl X509v3 Authority Key Identifier: keyid:95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer sbgp-ipAddrBlock: critical IPv4: 204.15.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:d7:47:ea:80:44:97:88:02:57:14:03:ec:3e:16:ee:c1:23: 2e:9d:c6:33:b6:b8:20:ce:e9:a5:05:fa:b7:27:40:3f:55:67: 5e:04:78:e4:c9:d0:98:64:02:27:85:b0:f6:14:ef:bb:04:2d: f6:07:11:ff:77:60:fc:53:87:52:d1:40:50:13:cc:3e:7f:d3: 36:ea:6c:a6:9d:db:5e:0d:19:ae:d3:e9:35:1a:35:6e:19:ca: b4:7a:a9:18:20:d0:c3:cf:65:7f:cb:26:b1:cb:d6:c2:6a:fc: 23:08:6e:ab:9e:72:4e:ca:d8:69:bb:48:53:31:48:8e:cd:7e: 7e:44:bc:27:7a:94:dc:bc:5b:be:9b:9f:fe:c3:8c:9d:26:4f: 1e:c0:96:c3:93:54:c9:e7:be:62:ae:d9:21:ca:8c:81:7b:df: e6:83:1e:c8:1e:2d:45:38:b5:29:90:0e:99:b8:8e:b8:80:94: b4:b6:f7:4d:86:4c:07:18:0a:2b:10:72:16:40:68:0a:30:85: f9:9b:5b:f5:95:3f:bc:db:91:96:e8:9c:bc:a9:05:ec:08:7d: fd:ef:2c:71:0a:42:91:6b:14:bb:f8:72:8c:39:46:ea:96:66: a9:ba:62:48:80:a0:f5:34:97:1d:1b:14:80:d7:eb:32:cc:37: 10:85:28:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuuyJHwF3r7AffSbMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE0YzcwYTQtMzNkYS00ODQzLWEzYzctYzhmOGQ4OGQ4 MDM1MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk MDM2NzJmMGEtNDc4NS00NjM3LWJjMjItYmZkMzQ4ZDgzOTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueszwSUVbSYkXwv77SysEOFnI2F1m103eiDy FXmzw5U87rA9z5GnT9gDaWYygc2lTcecoPbsS5I1jPCAuWAGw+5zdqjTCS2qqql2 Ao56Q52ynYrt77EvFD8pU0nSYIoc4/AarU2SFQ+x9pq4CUPkjFYvAAjE391lepL+ IlThi47w/LE28joeR/QZsj0DCj/N8zlJK86gv5y4lcWFhpxPa2G2rKWxpmQNOGar z9MTBYKJUP5C84ibObxUTi5arPV2GLh/wxQFWlcgMSjfiozB57cOHSpJ/IIZ2Xo4 5zqZ6BrjFKcCZGl5m4ftJE/cJpJFuu9v6rXlD7ezx6KMZHY87wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQ8uy0NyVXMKDA88eqZJ2rx1EdYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YTRj NzBhNC0zM2RhLTQ4NDMtYTNjNy1jOGY4ZDg4ZDgwMzUvMzg4MGIyMWYtMjQ0ZS0z NWU2LWEyNTYtYmQ1ZDRjMTIzMzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGE0YzcwYTQtMzNkYS00ODQzLWEz YzctYzhmOGQ4OGQ4MDM1LzhhNGM3MGE0LTMzZGEtNDg0My1hM2M3LWM4ZjhkODhk ODAzNS5jcmwwHwYDVR0jBBgwFoAUlXdqCbBoupmxHOIMzuMA/rZSrUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YTRjNzBhNC0zM2RhLTQ4NDMtYTNjNy1jOGY4 ZDg4ZDgwMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzA80MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnXR+qARJeIAlcUA+w+Fu7BIy6dxjO2uCDO6aUF+rcnQD9VZ14EeOTJ 0JhkAieFsPYU77sELfYHEf93YPxTh1LRQFATzD5/0zbqbKad214NGa7T6TUaNW4Z yrR6qRgg0MPPZX/LJrHL1sJq/CMIbqueck7K2Gm7SFMxSI7Nfn5EvCd6lNy8W76b n/7DjJ0mTx7AlsOTVMnnvmKu2SHKjIF73+aDHsgeLUU4tSmQDpm4jriAlLS2902G TAcYCisQchZAaAowhfmbW/WVP7zbkZbonLypBewIff3vLHEKQpFrFLv4cow5RuqW Zqm6YkiAoPU0lx0bFIDX6zLMNxCFKL8= -----END CERTIFICATE-----Generated at Wed Nov 5 14:23:52 2025 by rpki-client