$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/20dc2a0c-cadc-3d7b-8eef-a5ecd8874d55.roa File: 20dc2a0c-cadc-3d7b-8eef-a5ecd8874d55.roa (raw, json) Hash identifier: OBG7bpmjMxcVI+G0O21sZuJsaLbHeC5esw9ryvXHDno= Subject key identifier: E9:57:30:45:D7:4A:88:5D:C7:7C:5D:6C:26:B5:CD:33:68:3D:5D:36 Certificate issuer: /CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54 Certificate serial: 010D0C9F4328584AFC1BF59A655C2D56096E4700 Authority key identifier: F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/20dc2a0c-cadc-3d7b-8eef-a5ecd8874d55.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 16552 IP address blocks: 208.80.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:f5:9a:65:5c:2d:56:09:6e:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=05596615-b5cd-4ccb-9303-5616e35e0457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f4:ca:cf:40:3c:22:12:a2:12:bb:99:4b:68: 12:99:26:69:38:63:9b:df:c2:43:0a:57:b9:f4:5f: a7:ae:54:a1:34:da:35:d8:f6:dd:a3:2a:a2:df:8d: 71:2d:68:3b:7a:d7:34:66:11:07:75:a1:62:96:66: 12:79:33:2d:11:25:bb:70:00:a0:9c:19:b5:45:bd: 4c:5d:c3:fc:f9:3a:84:43:1f:2b:79:5d:03:01:93: 20:3b:61:6b:22:65:21:8c:aa:80:7d:60:f2:92:6f: c3:7c:ca:91:e3:98:29:7e:84:c8:27:7d:a3:88:65: a2:07:a8:d1:d9:0d:86:a5:45:13:45:81:7f:f9:ff: 7d:34:0e:05:56:5f:e0:75:6f:6a:a0:79:84:95:c1: 31:52:cc:d0:ea:be:72:d7:6f:de:4d:05:9b:1d:d2: 9e:5b:f7:90:a8:ce:08:79:e3:5d:c3:cb:4d:e9:e3: 59:bd:28:6b:e3:9b:4b:0b:85:77:39:30:66:a4:b0: 01:e2:7f:17:04:79:5b:2b:df:5f:af:39:b8:0c:f7: c8:e4:55:e5:25:57:42:6a:7f:e6:23:3f:54:40:74: d1:95:df:36:bc:50:f0:01:51:d4:65:46:33:04:76: dd:92:50:67:ad:87:7e:a5:f4:07:66:27:9a:9d:37: 31:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:57:30:45:D7:4A:88:5D:C7:7C:5D:6C:26:B5:CD:33:68:3D:5D:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/20dc2a0c-cadc-3d7b-8eef-a5ecd8874d55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl X509v3 Authority Key Identifier: keyid:F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer sbgp-ipAddrBlock: critical IPv4: 208.80.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:af:d7:ec:63:75:ad:19:f3:94:b8:f8:04:a8:8b:a4:07:96: f0:05:fa:c8:88:4e:f2:32:52:32:cd:e0:28:b3:f1:16:f7:18: 04:0a:7f:50:fc:87:d3:0a:9b:fd:82:c9:25:c4:1d:af:fb:44: 9e:54:40:ef:dc:45:4d:8d:4f:2f:40:53:b7:4d:7a:e2:de:d0: 23:a7:af:57:1b:fa:07:08:b8:cd:2a:ab:ea:8d:b6:93:be:d8: 4e:27:da:42:5c:23:82:bd:0d:c3:13:b8:2f:d3:ce:37:c1:1d: 11:52:69:6c:1b:28:92:18:ed:8c:bd:39:a7:04:9b:d3:6a:a4: 43:fc:9c:0a:a7:12:4e:9a:f0:af:3c:3a:55:4d:56:a3:07:e0: ec:53:14:ba:53:30:b4:f1:ba:f8:26:17:07:b9:c3:5d:a0:33: 5b:88:cd:c7:0f:84:45:79:8f:68:ef:ae:25:be:c3:e4:5b:a7: 78:e7:20:8e:f5:66:79:58:6a:65:da:4f:cb:1a:f8:39:c7:55: ed:4f:8d:6c:56:97:4a:ae:b7:01:76:4b:cc:c7:67:69:8e:36: 63:4a:66:4b:a5:41:80:09:de:d7:41:33:a5:74:54:36:aa:3b: fb:05:46:b4:b6:58:ed:5e:cf:3b:36:22:d5:97:b8:c1:b7:27: 8d:b1:ab:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G/WaZVwtVgluRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRmNmViZDctMGNjZC00YzA2LTgwYTAtNDVmZDc2MDc3 ZjU0MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk MDU1OTY2MTUtYjVjZC00Y2NiLTkzMDMtNTYxNmUzNWUwNDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvTKz0A8IhKiEruZS2gSmSZpOGOb38JDCle5 9F+nrlShNNo12Pbdoyqi341xLWg7etc0ZhEHdaFilmYSeTMtESW7cACgnBm1Rb1M XcP8+TqEQx8reV0DAZMgO2FrImUhjKqAfWDykm/DfMqR45gpfoTIJ32jiGWiB6jR 2Q2GpUUTRYF/+f99NA4FVl/gdW9qoHmElcExUszQ6r5y12/eTQWbHdKeW/eQqM4I eeNdw8tN6eNZvShr45tLC4V3OTBmpLAB4n8XBHlbK99frzm4DPfI5FXlJVdCan/m Iz9UQHTRld82vFDwAVHUZUYzBHbdklBnrYd+pfQHZieanTcxYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlXMEXXSohdx3xdbCa1zTNoPV02MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZGY2 ZWJkNy0wY2NkLTRjMDYtODBhMC00NWZkNzYwNzdmNTQvMjBkYzJhMGMtY2FkYy0z ZDdiLThlZWYtYTVlY2Q4ODc0ZDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWRmNmViZDctMGNjZC00YzA2LTgw YTAtNDVmZDc2MDc3ZjU0LzVkZjZlYmQ3LTBjY2QtNGMwNi04MGEwLTQ1ZmQ3NjA3 N2Y1NC5jcmwwHwYDVR0jBBgwFoAU+ZXymTKY5kpAyLxIzydJ7K1e/qcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZGY2ZWJkNy0wY2NkLTRjMDYtODBhMC00NWZk NzYwNzdmNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiv1+xjda0Z85S4+ASoi6QHlvAF+siITvIyUjLN4Ciz8Rb3GAQKf1D8 h9MKm/2CySXEHa/7RJ5UQO/cRU2NTy9AU7dNeuLe0COnr1cb+gcIuM0qq+qNtpO+ 2E4n2kJcI4K9DcMTuC/TzjfBHRFSaWwbKJIY7Yy9OacEm9NqpEP8nAqnEk6a8K88 OlVNVqMH4OxTFLpTMLTxuvgmFwe5w12gM1uIzccPhEV5j2jvriW+w+Rbp3jnII71 ZnlYamXaT8sa+DnHVe1PjWxWl0qutwF2S8zHZ2mONmNKZkulQYAJ3tdBM6V0VDaq O/sFRrS2WO1ezzs2ItWXuMG3J42xqx0= -----END CERTIFICATE-----Generated at Tue Nov 4 16:56:15 2025 by rpki-client