$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/6b20c6c8-b544-3233-9c89-ea3eead2913d.roa File: 6b20c6c8-b544-3233-9c89-ea3eead2913d.roa (raw, json) Hash identifier: dRViDKQE7hM6lgM5KjMzCz6G6YcKzuBrE59LhlXM934= Subject key identifier: C6:EF:FE:F7:5F:92:F3:F1:20:15:D0:17:09:E1:56:23:30:7D:E5:59 Certificate issuer: /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a Certificate serial: 010D0C9F4328584B95A79875A0DA930E16D1DF38 Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/6b20c6c8-b544-3233-9c89-ea3eead2913d.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 18914 IP address blocks: 204.8.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:98:75:a0:da:93:0e:16:d1:df:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=b8eb4f97-71b7-4b35-b92b-5ec737ab8da5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:01:94:bc:94:84:29:0c:d7:2f:4b:c0:f7:2c: ab:96:9c:0f:07:fb:d6:5c:2f:b5:21:68:ec:c2:a3: 85:db:cd:15:df:8d:69:7e:c5:cd:f3:43:cb:c4:ef: 34:73:b3:44:48:e6:32:8a:2a:f5:15:9e:35:2a:61: 8b:a9:02:83:50:4a:4c:63:46:a9:77:07:4d:72:5d: 74:7b:8f:d0:c2:e0:89:9b:39:9d:23:6e:d7:b8:e6: f0:e0:ab:6e:30:c5:ad:df:18:fa:a6:8b:59:7d:dd: f9:dc:d8:22:e0:13:3b:90:55:68:c1:04:65:6b:0d: b2:45:4b:99:f2:53:40:5d:96:21:59:79:02:97:71: 8f:ae:4b:37:e4:25:10:fe:22:cf:67:9a:0a:77:e0: f5:27:65:9b:af:27:f5:7b:47:2b:bd:48:c2:71:e7: d2:79:5c:2c:a5:cf:08:98:4b:4d:3c:d4:52:02:a1: d3:7c:0f:1e:7f:a1:6d:cc:49:63:e5:73:9b:32:86: 99:38:49:0b:d8:02:6c:ab:ba:ea:85:4a:80:24:4a: dc:87:14:ca:f6:71:8f:cb:83:90:84:f1:96:1f:66: 42:19:df:b6:51:86:38:5c:a5:e4:7b:97:98:10:e2: b2:1d:ca:28:95:be:bf:a7:11:32:2f:98:01:3c:06: ba:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:EF:FE:F7:5F:92:F3:F1:20:15:D0:17:09:E1:56:23:30:7D:E5:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/6b20c6c8-b544-3233-9c89-ea3eead2913d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl X509v3 Authority Key Identifier: keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer sbgp-ipAddrBlock: critical IPv4: 204.8.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:48:29:ae:b2:f0:1d:42:00:f7:00:c9:8a:33:61:1b:f7:29: d5:ab:28:de:ef:70:77:7a:48:dc:9c:28:68:a9:ad:c8:e0:6c: c0:42:ee:c9:ea:96:96:a3:06:fb:f4:ba:53:16:ec:8b:26:08: da:e6:0a:c8:93:17:8a:31:fc:e7:3b:09:c6:60:81:5d:d4:3b: e6:90:32:62:42:7c:d3:b9:60:6b:54:25:d1:b1:c3:b8:f2:1c: 1f:1f:f7:bf:c5:c2:b7:ed:8d:76:7b:6d:e6:81:ce:f7:75:e9: 9d:43:3e:a0:c2:bc:53:d3:26:82:59:1a:00:86:05:39:67:c2: 0a:48:2e:40:54:ad:e9:60:bc:68:26:ea:ce:95:1e:e1:0d:c3: c7:ac:12:63:e9:10:44:2e:22:6b:c0:8c:e9:5f:a4:7b:3d:26: 97:19:98:9f:5c:cb:a9:73:2c:69:95:54:b4:bd:7a:f5:0f:3d: 98:63:6b:92:67:65:cc:55:ef:57:6c:f5:a2:62:93:6e:54:2e: 31:8a:9f:e6:0e:f6:91:3f:a1:92:f5:1f:2c:2c:de:75:e4:05: 07:74:73:e3:8e:4a:e7:ce:e5:1f:74:3d:84:f8:12:bb:94:36: 25:e0:17:ce:46:60:f2:ad:e6:ff:98:f0:6d:15:85:c0:c4:b4: 80:72:fe:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5h1oNqTDhbR3zgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM5Y2I5NjAtMjM5NC00YjIyLWI5ZjEtM2FjNTU2NmJj NzJhMB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YjhlYjRmOTctNzFiNy00YjM1LWI5MmItNWVjNzM3YWI4ZGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAGUvJSEKQzXL0vA9yyrlpwPB/vWXC+1IWjs wqOF280V341pfsXN80PLxO80c7NESOYyiir1FZ41KmGLqQKDUEpMY0apdwdNcl10 e4/QwuCJmzmdI27XuObw4KtuMMWt3xj6potZfd353Ngi4BM7kFVowQRlaw2yRUuZ 8lNAXZYhWXkCl3GPrks35CUQ/iLPZ5oKd+D1J2Wbryf1e0crvUjCcefSeVwspc8I mEtNPNRSAqHTfA8ef6FtzElj5XObMoaZOEkL2AJsq7rqhUqAJErchxTK9nGPy4OQ hPGWH2ZCGd+2UYY4XKXke5eYEOKyHcoolb6/pxEyL5gBPAa6TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbv/vdfkvPxIBXQFwnhViMwfeVZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzlj Yjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1NTY2YmM3MmEvNmIyMGM2YzgtYjU0NC0z MjMzLTljODktZWEzZWVhZDI5MTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTM5Y2I5NjAtMjM5NC00YjIyLWI5 ZjEtM2FjNTU2NmJjNzJhL2UzOWNiOTYwLTIzOTQtNGIyMi1iOWYxLTNhYzU1NjZi YzcyYS5jcmwwHwYDVR0jBBgwFoAUx5iuk+5ta+2iXZtwBvHdRTnXH4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMzljYjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1 NTY2YmM3MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAhsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClIKa6y8B1CAPcAyYozYRv3KdWrKN7vcHd6SNycKGiprcjgbMBC7snq lpajBvv0ulMW7IsmCNrmCsiTF4ox/Oc7CcZggV3UO+aQMmJCfNO5YGtUJdGxw7jy HB8f97/FwrftjXZ7beaBzvd16Z1DPqDCvFPTJoJZGgCGBTlnwgpILkBUrelgvGgm 6s6VHuENw8esEmPpEEQuImvAjOlfpHs9JpcZmJ9cy6lzLGmVVLS9evUPPZhja5Jn ZcxV71ds9aJik25ULjGKn+YO9pE/oZL1Hyws3nXkBQd0c+OOSufO5R90PYT4EruU NiXgF85GYPKt5v+Y8G0VhcDEtIBy/uU= -----END CERTIFICATE-----Generated at Wed Nov 5 08:25:56 2025 by rpki-client