$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/4049c44a-f808-3c97-bfb6-a323f04f3436.roa File: 4049c44a-f808-3c97-bfb6-a323f04f3436.roa (raw, json) Hash identifier: cvqtR6NAjmQ8gFsgWBEH3j+doaWZRTPakQKNm8hev8U= Subject key identifier: BF:0C:DE:5B:DF:54:4F:17:07:54:C4:55:5A:E8:FA:92:5B:76:F4:56 Certificate issuer: /CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Certificate serial: 010D0C9F4328584BBE403426208A7F96127C9590 Authority key identifier: 88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/4049c44a-f808-3c97-bfb6-a323f04f3436.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 395927 IP address blocks: 208.72.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:34:26:20:8a:7f:96:12:7c:95:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=fd7393f0-4494-4711-bc54-2884835afb2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:83:4c:d2:f0:e5:bd:48:5b:3d:54:e1:55:24: 28:6a:c9:9d:59:3e:1a:64:14:ac:4e:ef:05:46:cf: 1a:bc:eb:dc:c5:42:0d:fd:19:0d:2c:70:61:ba:b5: 5b:10:e6:04:59:9c:18:8f:83:af:5f:00:99:3c:33: 2e:42:1d:26:14:0c:88:f6:9f:1e:37:f9:7e:1e:ac: fb:3c:1a:84:d2:8b:22:42:ff:31:35:0f:95:f1:38: bf:c3:1d:4d:64:70:5c:29:81:98:f6:21:b1:ae:74: ce:65:44:fb:9c:13:d1:0b:43:51:0b:62:83:0e:52: 23:18:ca:90:84:d7:5c:7b:d7:e6:24:dc:1f:fa:3f: 96:6d:de:8e:6f:2b:8f:63:5b:1b:b4:6a:dd:26:07: 84:89:2e:f6:cc:0b:a8:7c:19:aa:4f:a4:6f:31:17: 20:f9:f7:78:75:d1:c6:c4:ce:30:0a:33:6f:e0:6d: 57:d8:e0:71:b9:a4:f4:aa:87:ae:a0:a2:3a:e3:c9: bf:84:b4:8b:d2:23:f5:a7:60:8b:b6:02:4a:81:45: 7e:75:c4:38:bd:4c:40:c0:77:e3:ec:fe:01:0d:ce: 12:d0:bf:82:51:21:d8:7a:50:31:1d:ec:2b:c3:e3: aa:bd:99:df:25:74:10:aa:0e:62:69:b3:37:cd:6c: 5c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:0C:DE:5B:DF:54:4F:17:07:54:C4:55:5A:E8:FA:92:5B:76:F4:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/4049c44a-f808-3c97-bfb6-a323f04f3436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl X509v3 Authority Key Identifier: keyid:88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer sbgp-ipAddrBlock: critical IPv4: 208.72.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:93:87:07:96:45:23:9b:9d:dc:9b:90:ca:ea:1c:a3:7e:7a: 72:93:fc:7e:50:5d:22:91:6a:04:88:4a:7a:53:25:26:51:e9: 84:cc:4c:a0:cc:94:9d:4b:04:34:2a:3c:69:35:cd:fb:d2:52: 64:b9:cc:9f:da:1a:69:92:55:d0:cd:cd:40:ac:a5:71:97:04: a8:39:f8:30:46:32:71:4f:9f:48:0a:7b:30:1a:b1:ef:23:6e: 69:69:2e:f3:32:42:12:11:a3:54:86:c6:3d:56:96:06:fa:46: 38:8d:96:2d:d3:c6:8c:15:d1:60:4e:3d:93:ff:98:b5:36:a1: 85:cf:f8:d6:39:84:d5:52:ba:52:ee:27:be:94:62:c5:c7:76: df:5b:ad:66:db:86:9b:4f:e7:a7:8e:05:3a:ef:ee:b3:de:a0: c9:af:f1:e7:da:cf:58:d2:fc:72:18:08:4c:b8:cd:29:ad:e7: a8:81:aa:4e:52:b1:ae:97:5a:c8:31:0c:9c:e2:6b:a5:25:ba: e5:2b:73:c9:eb:39:90:8a:cb:f9:ed:d0:35:25:88:77:45:66: e3:02:7c:89:75:01:19:91:da:af:75:39:78:13:44:be:ac:d6: 57:5c:38:c6:dc:3d:34:50:14:30:f5:3e:73:e3:a6:0e:0c:df: 3a:19:44:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QDQmIIp/lhJ8lZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M2NTVhYWYtNzZmNC00YmFiLWI0ZjctOGZiMjNjM2Q0 MDExMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk ZmQ3MzkzZjAtNDQ5NC00NzExLWJjNTQtMjg4NDgzNWFmYjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4NM0vDlvUhbPVThVSQoasmdWT4aZBSsTu8F Rs8avOvcxUIN/RkNLHBhurVbEOYEWZwYj4OvXwCZPDMuQh0mFAyI9p8eN/l+Hqz7 PBqE0osiQv8xNQ+V8Ti/wx1NZHBcKYGY9iGxrnTOZUT7nBPRC0NRC2KDDlIjGMqQ hNdce9fmJNwf+j+Wbd6ObyuPY1sbtGrdJgeEiS72zAuofBmqT6RvMRcg+fd4ddHG xM4wCjNv4G1X2OBxuaT0qoeuoKI648m/hLSL0iP1p2CLtgJKgUV+dcQ4vUxAwHfj 7P4BDc4S0L+CUSHYelAxHewrw+OqvZnfJXQQqg5iabM3zWxcEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8M3lvfVE8XB1TEVVro+pJbdvRWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1 NWFhZi03NmY0LTRiYWItYjRmNy04ZmIyM2MzZDQwMTEvNDA0OWM0NGEtZjgwOC0z Yzk3LWJmYjYtYTMyM2YwNGYzNDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2M2NTVhYWYtNzZmNC00YmFiLWI0 ZjctOGZiMjNjM2Q0MDExLzNjNjU1YWFmLTc2ZjQtNGJhYi1iNGY3LThmYjIzYzNk NDAxMS5jcmwwHwYDVR0jBBgwFoAUiHOJW9dIB54yw37e57iTyJjsLBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1NWFhZi03NmY0LTRiYWItYjRmNy04ZmIy M2MzZDQwMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Eg0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6ThweWRSObndybkMrqHKN+enKT/H5QXSKRagSISnpTJSZR6YTMTKDM lJ1LBDQqPGk1zfvSUmS5zJ/aGmmSVdDNzUCspXGXBKg5+DBGMnFPn0gKezAase8j bmlpLvMyQhIRo1SGxj1Wlgb6RjiNli3TxowV0WBOPZP/mLU2oYXP+NY5hNVSulLu J76UYsXHdt9brWbbhptP56eOBTrv7rPeoMmv8efaz1jS/HIYCEy4zSmt56iBqk5S sa6XWsgxDJzia6UluuUrc8nrOZCKy/nt0DUliHdFZuMCfIl1ARmR2q91OXgTRL6s 1ldcOMbcPTRQFDD1PnPjpg4M3zoZRPg= -----END CERTIFICATE-----Generated at Wed Nov 5 09:13:18 2025 by rpki-client