$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3e3631a7-6a34-3455-850a-0ec197b42195.roa File: 3e3631a7-6a34-3455-850a-0ec197b42195.roa (raw, json) Hash identifier: ECwFtXCzQH6BL57K5PWqeIgBimY2iICghH3ncUP+ibc= Subject key identifier: EA:56:F1:BA:30:D7:27:80:83:3E:7C:E4:DB:B5:DB:54:91:0D:B0:12 Certificate issuer: /CN=3d318897-eed6-4fd9-a18c-91026968b3e2 Certificate serial: 010D0C9F4328584B48E1B94F378A37FC98B29300 Authority key identifier: 73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3e3631a7-6a34-3455-850a-0ec197b42195.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 800 IP address blocks: 207.32.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:b9:4f:37:8a:37:fc:98:b2:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d318897-eed6-4fd9-a18c-91026968b3e2 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=7d91368e-dd04-49ee-83cf-0363425c47e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8f:37:7a:bc:fc:11:a5:09:b6:2d:d0:40:3f: 24:31:df:17:55:9b:1d:f8:2f:d8:0e:90:b8:27:db: be:f6:6a:04:ab:66:23:c2:eb:59:42:40:eb:bb:78: 7e:31:e0:a5:a2:7d:dd:5c:42:40:05:06:dd:9a:f5: 1e:27:33:40:89:2e:b6:0b:b0:d7:10:d7:70:cf:0b: 09:48:ba:ab:eb:b9:39:b9:bc:87:ea:1c:9c:53:db: 64:27:24:0b:21:45:39:1d:8d:78:ce:76:a6:d2:13: ce:e0:60:db:62:01:ac:aa:88:6c:2b:17:60:7f:f6: 0e:5f:f5:63:b5:c7:f6:27:30:bb:5c:15:b6:bd:f1: da:c5:96:34:11:03:8e:84:48:4b:f1:ce:c5:f5:57: 1d:18:8d:86:eb:02:16:5c:52:07:40:a7:9f:3d:b4: b9:09:38:63:c3:63:c1:8b:ea:92:72:d2:e4:4d:84: bc:35:7a:8a:5b:d4:89:77:d8:b6:25:b9:dc:ca:eb: 00:26:cf:cd:da:e0:92:44:da:4d:9a:ed:60:ee:b1: bf:f9:fe:f7:e1:25:83:0f:70:1a:43:3d:b2:17:28: 08:e4:6c:8b:c2:85:8b:2c:ac:9c:03:cc:33:57:df: 48:bd:99:30:15:29:66:58:90:2a:2a:44:bb:43:98: d7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:56:F1:BA:30:D7:27:80:83:3E:7C:E4:DB:B5:DB:54:91:0D:B0:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3e3631a7-6a34-3455-850a-0ec197b42195.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl X509v3 Authority Key Identifier: keyid:73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer sbgp-ipAddrBlock: critical IPv4: 207.32.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:4c:f5:49:25:96:3a:6a:09:ee:0c:8b:44:17:71:ed:78:3a: 61:f2:f4:2d:4f:d3:2e:40:d4:dc:49:7d:a1:8b:0d:38:06:85: 8f:57:e6:97:bc:d0:4a:88:bc:65:64:74:7f:85:4b:a9:e2:3b: ae:e9:17:93:66:87:45:8e:df:5f:af:e3:90:a1:38:2f:5f:98: b9:03:9a:39:df:ef:b0:38:7a:07:6f:a7:98:f4:4c:5c:63:a3: cb:70:19:60:9a:2a:69:9c:c6:75:68:31:93:3a:c4:6c:e9:15: d6:34:b2:0c:ff:73:a4:f3:1e:72:5b:37:f5:c1:1d:c5:97:51: f8:ac:4a:9b:ca:b9:7f:9e:72:c7:17:a0:9a:93:58:3f:3a:46: 59:54:ec:5e:d3:04:5e:0d:b8:15:de:31:2d:fa:e2:15:de:97: 0b:19:b5:3a:85:76:df:72:da:a4:96:dc:96:8c:9a:21:94:31: a3:11:4c:41:73:fe:a7:55:74:46:61:3f:dd:58:69:d9:0a:38: 1f:30:8c:11:0f:07:5e:23:a0:0d:66:21:e9:b5:f9:44:b1:d5: cb:d4:54:96:ba:c8:b7:9d:7f:ae:d3:7c:39:d9:75:7e:af:8f: d1:33:17:ae:a4:86:53:8a:6b:ec:bc:41:66:67:05:08:2f:22: f0:8f:7b:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4blPN4o3/JiykwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QzMTg4OTctZWVkNi00ZmQ5LWExOGMtOTEwMjY5Njhi M2UyMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk N2Q5MTM2OGUtZGQwNC00OWVlLTgzY2YtMDM2MzQyNWM0N2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgI83erz8EaUJti3QQD8kMd8XVZsd+C/YDpC4 J9u+9moEq2YjwutZQkDru3h+MeClon3dXEJABQbdmvUeJzNAiS62C7DXENdwzwsJ SLqr67k5ubyH6hycU9tkJyQLIUU5HY14znam0hPO4GDbYgGsqohsKxdgf/YOX/Vj tcf2JzC7XBW2vfHaxZY0EQOOhEhL8c7F9VcdGI2G6wIWXFIHQKefPbS5CThjw2PB i+qSctLkTYS8NXqKW9SJd9i2JbncyusAJs/N2uCSRNpNmu1g7rG/+f734SWDD3Aa Qz2yFygI5GyLwoWLLKycA8wzV99IvZkwFSlmWJAqKkS7Q5jXKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpW8bow1yeAgz585Nu121SRDbASMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZDMx ODg5Ny1lZWQ2LTRmZDktYTE4Yy05MTAyNjk2OGIzZTIvM2UzNjMxYTctNmEzNC0z NDU1LTg1MGEtMGVjMTk3YjQyMTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2QzMTg4OTctZWVkNi00ZmQ5LWEx OGMtOTEwMjY5NjhiM2UyLzNkMzE4ODk3LWVlZDYtNGZkOS1hMThjLTkxMDI2OTY4 YjNlMi5jcmwwHwYDVR0jBBgwFoAUc8TQLDaRo+qfzP7VqsDgIojDPKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZDMxODg5Ny1lZWQ2LTRmZDktYTE4Yy05MTAy Njk2OGIzZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzyDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFM9UklljpqCe4Mi0QXce14OmHy9C1P0y5A1NxJfaGLDTgGhY9X5pe8 0EqIvGVkdH+FS6niO67pF5Nmh0WO31+v45ChOC9fmLkDmjnf77A4egdvp5j0TFxj o8twGWCaKmmcxnVoMZM6xGzpFdY0sgz/c6TzHnJbN/XBHcWXUfisSpvKuX+ecscX oJqTWD86RllU7F7TBF4NuBXeMS364hXelwsZtTqFdt9y2qSW3JaMmiGUMaMRTEFz /qdVdEZhP91YadkKOB8wjBEPB14joA1mIem1+USx1cvUVJa6yLedf67TfDnZdX6v j9EzF66khlOKa+y8QWZnBQgvIvCPeyM= -----END CERTIFICATE-----Generated at Wed Nov 5 18:34:45 2025 by rpki-client