$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c2242b30-db46-3cd0-ac82-a64e4c9f46bf.roa File: c2242b30-db46-3cd0-ac82-a64e4c9f46bf.roa (raw, json) Hash identifier: cbLi+gOY697268l3V52Hm4PXIWgwalpIcJ02YcRBzyo= Subject key identifier: 8F:A4:79:B3:41:90:72:EA:B8:F5:4E:3D:72:9A:0F:8E:12:EF:36:D6 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584AE4611C73F4EC6EBC60540975 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c2242b30-db46-3cd0-ac82-a64e4c9f46bf.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 13576 IP address blocks: 208.53.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:1c:73:f4:ec:6e:bc:60:54:09:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=df4be221-2b9d-46df-a2dd-7bb7483500b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:98:43:31:a6:f8:ec:eb:d0:4c:bd:89:89:57: b8:6d:1c:11:73:13:ea:c8:02:69:5d:4e:75:27:ef: d2:96:9b:03:ab:09:c9:87:cb:63:69:4f:44:4f:33: 32:6a:ba:20:39:7b:70:a7:f7:89:21:ff:a0:16:d3: f7:fa:74:d5:b9:97:53:df:de:da:5f:78:29:8c:d1: e2:bc:53:7f:e9:34:fc:61:cb:17:bb:fe:32:1c:25: ff:7a:25:4e:02:dc:63:99:14:07:fa:62:fb:a1:b1: df:aa:e3:d6:eb:29:bb:da:6a:07:64:98:92:da:7a: 33:88:91:84:11:2a:2f:0a:41:4d:32:27:87:eb:35: 0a:be:98:6c:19:88:d3:0a:02:51:14:a4:a4:83:74: 0d:db:ce:69:a2:54:61:61:60:a7:86:8a:62:26:d5: bc:18:b3:c7:95:ad:71:79:b1:04:6e:7f:eb:c6:04: e0:3a:2a:2e:86:88:2c:77:15:23:c9:05:93:ee:22: 30:ca:85:66:0f:56:1f:38:d8:a1:31:ae:86:6c:47: 59:f7:5b:af:50:29:ca:df:d6:73:29:2e:f6:5f:8b: c4:a1:3e:4f:fb:75:62:0c:ac:8a:5b:39:a6:70:d5: a2:9e:ef:c5:25:22:13:6e:33:0d:e4:e2:d7:16:b0: a1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A4:79:B3:41:90:72:EA:B8:F5:4E:3D:72:9A:0F:8E:12:EF:36:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c2242b30-db46-3cd0-ac82-a64e4c9f46bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:f5:e2:ac:33:c6:5f:d0:a2:b2:11:11:0b:9d:11:fb:18:ba: 1d:97:70:1a:1d:f2:29:dd:3f:5f:4a:c5:74:6c:b1:1f:66:b2: a9:31:4e:33:2b:7d:5c:ca:16:c6:e5:16:ac:45:ea:da:fd:99: 21:ac:cf:0a:e6:d2:81:a1:89:3d:0e:63:89:55:5d:13:94:ee: c7:41:55:0b:6b:56:90:69:d9:5b:fd:bf:aa:c2:07:83:35:a1: a6:3d:7d:dd:62:e2:57:fd:e8:ce:fb:4d:e2:0f:29:7a:1a:c7: 58:6f:d8:5b:f7:93:c1:34:ba:22:aa:ce:50:b8:89:75:fb:11: 68:d4:bc:a8:bf:9b:52:78:24:39:69:f8:3d:a8:62:9d:cb:e2: 87:f9:6f:fe:94:5c:f8:93:89:93:73:6c:9d:9a:c8:1e:76:9d: cf:a5:c0:12:53:42:c9:45:13:48:49:76:dd:f6:70:46:2a:f1: 75:34:21:da:b3:a9:14:8f:ca:ca:a4:60:8a:3d:0a:fe:b9:86: 81:d8:59:0f:17:2a:91:a5:07:77:50:54:ae:e2:32:5f:cf:a3: 4c:4f:ec:8c:01:cd:3b:c1:b1:5b:c2:f8:ce:8d:b5:4f:cc:dc: 00:7a:3e:e0:8a:e1:ec:75:c4:9b:8b:67:7e:c3:ed:02:01:53: 39:5d:cf:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYRxz9OxuvGBUCXUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk ZGY0YmUyMjEtMmI5ZC00NmRmLWEyZGQtN2JiNzQ4MzUwMGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5hDMab47OvQTL2JiVe4bRwRcxPqyAJpXU51 J+/SlpsDqwnJh8tjaU9ETzMyarogOXtwp/eJIf+gFtP3+nTVuZdT397aX3gpjNHi vFN/6TT8YcsXu/4yHCX/eiVOAtxjmRQH+mL7obHfquPW6ym72moHZJiS2noziJGE ESovCkFNMieH6zUKvphsGYjTCgJRFKSkg3QN285polRhYWCnhopiJtW8GLPHla1x ebEEbn/rxgTgOiouhogsdxUjyQWT7iIwyoVmD1YfONihMa6GbEdZ91uvUCnK39Zz KS72X4vEoT5P+3ViDKyKWzmmcNWinu/FJSITbjMN5OLXFrCh2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+kebNBkHLquPVOPXKaD44S7zbWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYzIyNDJiMzAtZGI0Ni0z Y2QwLWFjODItYTY0ZTRjOWY0NmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DXBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALr14qwzxl/QorIREQudEfsYuh2XcBod8indP19KxXRssR9msqkxTjMr fVzKFsblFqxF6tr9mSGszwrm0oGhiT0OY4lVXROU7sdBVQtrVpBp2Vv9v6rCB4M1 oaY9fd1i4lf96M77TeIPKXoax1hv2Fv3k8E0uiKqzlC4iXX7EWjUvKi/m1J4JDlp +D2oYp3L4of5b/6UXPiTiZNzbJ2ayB52nc+lwBJTQslFE0hJdt32cEYq8XU0Idqz qRSPysqkYIo9Cv65hoHYWQ8XKpGlB3dQVK7iMl/Po0xP7IwBzTvBsVvC+M6NtU/M 3AB6PuCK4ex1xJuLZ37D7QIBUzldz84= -----END CERTIFICATE-----Generated at Wed Nov 5 06:49:34 2025 by rpki-client