$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/6109b9e9-9f14-3432-a350-4e2ba7f49d1e.roa File: 6109b9e9-9f14-3432-a350-4e2ba7f49d1e.roa (raw, json) Hash identifier: rmnrH0kg3j8AKachKOzv+hbobvnV464ClagjwVDLyII= Subject key identifier: 22:76:66:70:03:23:14:B4:4D:0F:DA:A0:E0:A2:05:66:FE:A0:E8:58 Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Certificate serial: 010D0C9F4328584B110BFE8130475B24CE6D6F00 Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/6109b9e9-9f14-3432-a350-4e2ba7f49d1e.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 46432 IP address blocks: 208.88.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0b:fe:81:30:47:5b:24:ce:6d:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=873bfede-b2d6-48af-af74-a9f632a045fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:54:83:78:0a:3a:8e:13:14:30:81:67:4a:2b: d4:17:07:1b:9b:5e:a9:44:15:c1:a8:54:10:14:31: f5:4a:5e:b5:1e:e1:64:ea:2c:df:d4:c2:39:b4:9b: 46:ec:28:7c:de:09:cd:39:c9:5b:5d:34:a5:a5:a4: 13:66:ae:5d:be:ae:60:a2:62:87:97:f9:7f:14:d7: a5:09:6a:3a:19:dc:ac:c0:18:13:30:c1:e0:d0:06: 93:6c:ce:c0:cf:ac:84:8d:df:12:2c:3d:47:79:78: a2:db:6e:c7:f1:28:24:e2:00:02:0a:6d:b5:c1:cc: f5:3e:75:50:dd:fa:a1:8b:79:07:b0:85:dd:09:d9: 5d:8b:87:9b:2f:f1:d9:eb:7b:db:81:6e:eb:ed:14: 99:2d:6d:16:34:46:21:fe:46:eb:ae:17:a2:eb:21: ae:9e:f7:9f:cd:27:37:2c:d5:83:cc:31:46:29:72: ee:0c:64:1a:16:52:65:ab:81:b9:27:8c:d6:1d:aa: 49:4e:13:16:ba:89:02:06:9f:42:7b:94:d3:b6:1f: f3:fb:0c:eb:c8:94:78:86:92:d1:c0:56:b4:ee:75: 63:be:39:8f:43:77:ae:10:b2:4a:2e:7c:2a:ea:84: d4:f6:e9:bf:7f:2a:a1:15:d5:09:6f:3e:52:5e:b4: 1b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:76:66:70:03:23:14:B4:4D:0F:DA:A0:E0:A2:05:66:FE:A0:E8:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/6109b9e9-9f14-3432-a350-4e2ba7f49d1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl X509v3 Authority Key Identifier: keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer sbgp-ipAddrBlock: critical IPv4: 208.88.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:9d:24:68:d5:f5:2f:3d:8e:b5:47:b9:f4:ed:09:bc:b3:14: 0b:04:3f:53:5d:ba:82:e4:bb:99:32:99:2e:86:08:24:10:fe: b0:61:8e:f2:a2:7a:c9:1d:02:17:57:e8:73:d8:a6:42:39:61: d2:8e:8a:a1:29:b7:37:69:dd:74:13:fb:d2:89:2d:0c:f7:f4: 8c:5a:61:4d:25:8a:ae:ab:f0:80:be:98:30:2f:86:6e:26:df: 19:4b:cc:94:83:85:b6:b5:78:ca:41:dc:07:ef:b8:ec:91:1f: 10:ec:03:00:bc:54:2b:b1:76:8f:3e:3a:50:0a:ce:f1:c4:d8: 3a:24:39:1e:88:bf:01:89:3e:dc:4e:a5:c9:41:8a:cf:15:e2: b6:61:1b:24:9f:ab:24:92:0d:e2:d0:ca:68:fe:d3:65:e4:a4: 42:92:8c:3b:b0:0e:3d:db:5e:83:d7:ec:16:ce:bb:39:ac:c2: b8:c2:5e:ab:3f:4f:bd:3e:e1:e1:aa:c2:6c:ab:9a:e4:43:83: 45:83:77:a4:00:58:7e:0b:9b:e8:e1:23:c9:e9:ee:97:0d:2a: 52:73:72:82:54:34:78:5a:ae:68:f4:1a:c7:e3:a6:16:33:fa: 8f:9c:59:7f:bd:2d:9f:96:02:de:2a:34:a4:f3:9b:b7:14:51: 6e:c6:d7:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRC/6BMEdbJM5tbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm Yjg1MB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk ODczYmZlZGUtYjJkNi00OGFmLWFmNzQtYTlmNjMyYTA0NWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFSDeAo6jhMUMIFnSivUFwcbm16pRBXBqFQQ FDH1Sl61HuFk6izf1MI5tJtG7Ch83gnNOclbXTSlpaQTZq5dvq5gomKHl/l/FNel CWo6GdyswBgTMMHg0AaTbM7Az6yEjd8SLD1HeXii227H8Sgk4gACCm21wcz1PnVQ 3fqhi3kHsIXdCdldi4ebL/HZ63vbgW7r7RSZLW0WNEYh/kbrrhei6yGunvefzSc3 LNWDzDFGKXLuDGQaFlJlq4G5J4zWHapJThMWuokCBp9Ce5TTth/z+wzryJR4hpLR wFa07nVjvjmPQ3euELJKLnwq6oTU9um/fyqhFdUJbz5SXrQb4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJ2ZnADIxS0TQ/aoOCiBWb+oOhYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvNjEwOWI5ZTktOWYxNC0z NDMyLWEzNTAtNGUyYmE3ZjQ5ZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1 Y2U3ZmZiODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fj3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAydJGjV9S89jrVHufTtCbyzFAsEP1NduoLku5kymS6GCCQQ/rBhjvKi eskdAhdX6HPYpkI5YdKOiqEptzdp3XQT+9KJLQz39IxaYU0liq6r8IC+mDAvhm4m 3xlLzJSDhba1eMpB3AfvuOyRHxDsAwC8VCuxdo8+OlAKzvHE2DokOR6IvwGJPtxO pclBis8V4rZhGySfqySSDeLQymj+02XkpEKSjDuwDj3bXoPX7BbOuzmswrjCXqs/ T70+4eGqwmyrmuRDg0WDd6QAWH4Lm+jhI8np7pcNKlJzcoJUNHharmj0GsfjphYz +o+cWX+9LZ+WAt4qNKTzm7cUUW7G11E= -----END CERTIFICATE-----Generated at Sat Oct 11 07:28:53 2025 by rpki-client