$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc/e4600f39-cda5-3221-bddb-2d82d3f5fe2c.roa File: e4600f39-cda5-3221-bddb-2d82d3f5fe2c.roa (raw, json) Hash identifier: +K8vQwaQqA4zxBZiksI9N1nJBABVJuoaoY/5H6BpCuk= Subject key identifier: 7D:03:20:70:82:CF:CE:89:F4:66:00:9D:59:C5:2F:A8:49:66:15:88 Certificate issuer: /CN=503b7ff7-eb05-4b50-bb5b-d7fc378b78dc Certificate serial: 010D0C9F4328584BB2F7A3132EB9F72EAC2AEC80 Authority key identifier: 6C:DC:B8:20:C4:DC:47:8C:45:45:46:30:E4:F9:45:1D:20:59:04:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc/e4600f39-cda5-3221-bddb-2d82d3f5fe2c.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 10340 IP address blocks: 208.81.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:a3:13:2e:b9:f7:2e:ac:2a:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=503b7ff7-eb05-4b50-bb5b-d7fc378b78dc Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=e6f595df-411d-49d0-89b1-79eef1a6193e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:99:4e:85:e3:4b:f4:c7:90:1a:36:f6:f9:31: 0d:9e:30:54:92:75:93:df:8f:68:c1:40:3b:c8:06: 34:92:9a:1a:87:c9:04:d6:8a:53:9d:05:cb:ee:9c: 85:de:b6:e0:83:53:c5:a6:a7:97:b2:4a:3b:7a:46: 2d:6c:28:07:57:a4:2b:cf:aa:73:11:96:21:aa:b6: 3e:3f:d7:f9:aa:66:72:7d:62:95:fd:dc:b7:f6:34: 4d:94:e3:5e:51:f6:3f:5a:21:96:6e:56:84:ab:9f: 07:d7:a1:8a:ce:4e:bc:89:96:48:1a:da:c8:7c:70: c2:08:18:7e:4e:7a:7a:36:27:37:49:06:7d:81:83: b6:a7:cb:e8:25:c0:75:42:4f:13:1e:85:ac:b7:af: e7:bb:95:a1:8d:76:a6:2b:26:6d:cd:9a:5e:5f:3f: 5e:84:41:fc:04:42:85:0d:a7:b3:02:9e:9c:0e:1d: 89:5a:6f:fe:61:62:ac:e7:2b:00:ee:86:20:b0:16: a6:2a:40:0b:94:85:d0:05:e8:29:a6:09:5a:d2:cd: 20:fa:d8:64:5f:ae:56:3e:9d:bf:89:89:74:0f:40: 1a:67:99:8c:c3:99:68:66:8b:de:02:d1:d6:b0:d9: 60:a1:5d:c4:41:53:a4:6b:b6:b5:90:8e:a9:5d:07: 6c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:03:20:70:82:CF:CE:89:F4:66:00:9D:59:C5:2F:A8:49:66:15:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc/e4600f39-cda5-3221-bddb-2d82d3f5fe2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc.crl X509v3 Authority Key Identifier: keyid:6C:DC:B8:20:C4:DC:47:8C:45:45:46:30:E4:F9:45:1D:20:59:04:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc.cer sbgp-ipAddrBlock: critical IPv4: 208.81.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:5c:88:1d:71:b8:79:91:ea:33:44:2c:4f:0e:89:19:89:c0: 81:67:f2:6f:c4:e6:75:06:f9:3b:aa:c7:8f:7e:c3:46:ed:ea: ce:0d:4a:84:74:c6:64:fe:fa:25:53:b8:da:5a:89:71:01:02: 33:d0:89:11:88:ae:fb:29:c3:9d:be:66:44:4d:e8:09:0b:b3: 16:06:3f:21:b1:0b:4b:65:c3:31:f9:c7:55:b3:40:e6:e2:ca: 11:f6:78:b3:76:97:fa:7d:f0:8d:56:c2:d4:c7:70:b5:2a:e0: 6a:bb:0f:c2:d5:09:cf:32:c0:5d:68:4d:4b:88:60:32:0d:7b: af:13:96:b0:6e:99:a7:b2:ed:b1:6b:36:90:bd:f5:22:07:08: 23:b0:a5:c0:46:4c:e6:c8:69:4d:11:8f:ae:4f:c7:a6:50:65: 33:dc:3c:9e:ba:f3:1a:d4:cb:86:22:e3:e0:5d:2c:74:9b:6c: 18:fd:ba:90:f1:9f:a4:6c:0d:ec:70:ee:70:9c:60:00:95:14: b1:79:ee:be:bb:e7:98:eb:aa:8d:6c:a1:b8:da:34:ff:79:4c: 11:86:5c:9b:c1:23:ca:e7:e8:be:28:c9:88:aa:85:3f:08:cf: 9b:21:ab:6d:85:49:30:88:56:40:bf:84:eb:2d:3b:99:a9:b4: 8b:9c:c9:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy96MTLrn3Lqwq7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTAzYjdmZjctZWIwNS00YjUwLWJiNWItZDdmYzM3OGI3 OGRjMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZTZmNTk1ZGYtNDExZC00OWQwLTg5YjEtNzllZWYxYTYxOTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5lOheNL9MeQGjb2+TENnjBUknWT349owUA7 yAY0kpoah8kE1opTnQXL7pyF3rbgg1PFpqeXsko7ekYtbCgHV6Qrz6pzEZYhqrY+ P9f5qmZyfWKV/dy39jRNlONeUfY/WiGWblaEq58H16GKzk68iZZIGtrIfHDCCBh+ Tnp6Nic3SQZ9gYO2p8voJcB1Qk8THoWst6/nu5WhjXamKyZtzZpeXz9ehEH8BEKF DaezAp6cDh2JWm/+YWKs5ysA7oYgsBamKkALlIXQBegppgla0s0g+thkX65WPp2/ iYl0D0AaZ5mMw5loZoveAtHWsNlgoV3EQVOka7a1kI6pXQds/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH0DIHCCz86J9GYAnVnFL6hJZhWIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81MDNi N2ZmNy1lYjA1LTRiNTAtYmI1Yi1kN2ZjMzc4Yjc4ZGMvZTQ2MDBmMzktY2RhNS0z MjIxLWJkZGItMmQ4MmQzZjVmZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTAzYjdmZjctZWIwNS00YjUwLWJi NWItZDdmYzM3OGI3OGRjLzUwM2I3ZmY3LWViMDUtNGI1MC1iYjViLWQ3ZmMzNzhi NzhkYy5jcmwwHwYDVR0jBBgwFoAUbNy4IMTcR4xFRUYw5PlFHSBZBGwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81MDNiN2ZmNy1lYjA1LTRiNTAtYmI1Yi1kN2Zj Mzc4Yjc4ZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhciB1xuHmR6jNELE8OiRmJwIFn8m/E5nUG+Tuqx49+w0bt6s4NSoR0 xmT++iVTuNpaiXEBAjPQiRGIrvspw52+ZkRN6AkLsxYGPyGxC0tlwzH5x1WzQObi yhH2eLN2l/p98I1WwtTHcLUq4Gq7D8LVCc8ywF1oTUuIYDINe68TlrBumaey7bFr NpC99SIHCCOwpcBGTObIaU0Rj65Px6ZQZTPcPJ668xrUy4Yi4+BdLHSbbBj9upDx n6RsDexw7nCcYACVFLF57r6755jrqo1sobjaNP95TBGGXJvBI8rn6L4oyYiqhT8I z5shq22FSTCIVkC/hOstO5mptIucyYk= -----END CERTIFICATE-----Generated at Wed Nov 5 12:12:49 2025 by rpki-client