$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/44f98da8-316e-3e2e-a620-17a85c3d1158.roa File: 44f98da8-316e-3e2e-a620-17a85c3d1158.roa (raw, json) Hash identifier: zAUkjh+cIaBnQ5l+/rBqRjjo+emoKaYqt+7mx+CC7cY= Subject key identifier: F8:66:BF:31:5F:91:97:AD:7C:BD:61:FD:42:BC:51:EB:EB:85:88:FC Certificate issuer: /CN=05ec8359-4ede-4036-8702-23e5dd37a9ba Certificate serial: 010D0C9F4328584B6A61F295FBAABC82601F5D00 Authority key identifier: 36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/44f98da8-316e-3e2e-a620-17a85c3d1158.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 912 IP address blocks: 208.93.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:f2:95:fb:aa:bc:82:60:1f:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05ec8359-4ede-4036-8702-23e5dd37a9ba Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=a3b5d14f-9b06-4e00-b7f6-76e98c22042c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b2:ca:8d:1b:b2:76:e8:1b:4d:29:b6:89:5d: 7a:ac:66:cd:3a:67:e1:a7:f4:0a:fa:ac:11:6f:33: 9f:5c:fb:1d:d8:c8:35:5e:a8:f1:65:8a:24:ef:ed: 88:b5:eb:12:10:2f:13:d2:25:91:a1:aa:4a:47:0b: 21:fb:d3:db:de:d3:6a:02:5a:cc:e9:6e:01:66:dc: b0:2f:0b:89:ea:af:88:d8:34:b7:d4:04:1f:e9:ad: d3:69:f2:63:81:2a:79:3c:e6:fa:07:e9:8c:e0:94: c0:c2:5f:55:9f:f4:6f:ce:9b:33:ae:c9:8a:23:10: b7:9b:e6:eb:c1:a1:8f:84:eb:73:90:12:17:33:b4: c8:a9:11:37:05:76:67:1e:9c:68:36:56:2e:d0:43: c8:47:b6:50:a4:00:f9:c5:e9:85:3f:db:2c:48:1b: 1b:7e:e5:f6:1b:d1:20:36:1b:bc:4b:4a:6d:25:1a: 54:99:52:b0:94:27:5e:a7:40:c8:ae:c6:cf:e0:0d: d8:3e:83:95:bf:cb:be:19:69:85:cb:89:25:1b:5d: 24:fc:28:66:d0:43:26:f4:8c:43:27:3d:93:cb:2f: 9d:80:7b:63:e7:9a:ff:f4:3c:34:e7:c6:09:09:98: 31:d2:8a:f7:6d:73:b7:6b:27:f9:ed:72:f4:ee:8f: f4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:66:BF:31:5F:91:97:AD:7C:BD:61:FD:42:BC:51:EB:EB:85:88:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/44f98da8-316e-3e2e-a620-17a85c3d1158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.crl X509v3 Authority Key Identifier: keyid:36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer sbgp-ipAddrBlock: critical IPv4: 208.93.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:5b:f3:45:50:6e:3a:c7:6f:af:3e:11:9d:16:8f:71:99:6c: 92:7b:d5:9a:19:2a:c1:94:91:42:db:3f:aa:c8:56:5b:e5:7a: fb:68:10:47:db:f5:3e:a0:2f:50:ce:e2:38:fc:3f:c6:37:ac: 21:b6:58:f5:4c:c2:0d:4c:90:7c:1c:db:53:69:5d:bb:37:37: ec:c5:42:b7:92:b4:0b:ca:a3:7d:0a:e4:25:bd:7d:37:c1:41: 7f:72:db:21:62:30:45:4b:69:03:0e:50:62:b4:0c:91:13:65: 1e:79:c5:6a:79:03:41:04:0c:d7:66:d4:1f:00:4f:9e:ca:66: da:8c:d7:70:e1:96:9e:b5:d5:dc:9c:48:d4:5c:00:a0:10:b5: 70:89:b3:18:54:ce:43:f4:a4:d3:e5:76:ac:6c:e0:d6:b8:bd: 89:ce:60:5c:02:e7:8b:89:ed:51:0f:27:0b:4f:6d:42:de:17: a7:de:7e:c3:de:e3:c6:2f:87:04:a3:16:70:76:93:1f:44:f6: e3:c6:6a:50:81:5d:03:66:34:d3:34:05:6a:0b:2d:3a:df:e4: f1:04:70:95:9d:37:1c:43:e1:04:71:03:46:82:5e:bd:c0:67: 75:f3:ec:30:3c:80:68:90:74:d7:65:fb:e2:a9:e3:0d:79:83: 23:a7:a9:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYfKV+6q8gmAfXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDVlYzgzNTktNGVkZS00MDM2LTg3MDItMjNlNWRkMzdh OWJhMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk YTNiNWQxNGYtOWIwNi00ZTAwLWI3ZjYtNzZlOThjMjIwNDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7LKjRuydugbTSm2iV16rGbNOmfhp/QK+qwR bzOfXPsd2Mg1XqjxZYok7+2ItesSEC8T0iWRoapKRwsh+9Pb3tNqAlrM6W4BZtyw LwuJ6q+I2DS31AQf6a3TafJjgSp5POb6B+mM4JTAwl9Vn/RvzpszrsmKIxC3m+br waGPhOtzkBIXM7TIqRE3BXZnHpxoNlYu0EPIR7ZQpAD5xemFP9ssSBsbfuX2G9Eg Nhu8S0ptJRpUmVKwlCdep0DIrsbP4A3YPoOVv8u+GWmFy4klG10k/Chm0EMm9IxD Jz2Tyy+dgHtj55r/9Dw058YJCZgx0or3bXO3ayf57XL07o/0/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhmvzFfkZetfL1h/UK8UevrhYj8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wNWVj ODM1OS00ZWRlLTQwMzYtODcwMi0yM2U1ZGQzN2E5YmEvNDRmOThkYTgtMzE2ZS0z ZTJlLWE2MjAtMTdhODVjM2QxMTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDVlYzgzNTktNGVkZS00MDM2LTg3 MDItMjNlNWRkMzdhOWJhLzA1ZWM4MzU5LTRlZGUtNDAzNi04NzAyLTIzZTVkZDM3 YTliYS5jcmwwHwYDVR0jBBgwFoAUNgroAyQrusZ1eDIsFKW5XRFaAJAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wNWVjODM1OS00ZWRlLTQwMzYtODcwMi0yM2U1 ZGQzN2E5YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0F3oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxb80VQbjrHb68+EZ0Wj3GZbJJ71ZoZKsGUkULbP6rIVlvlevtoEEfb 9T6gL1DO4jj8P8Y3rCG2WPVMwg1MkHwc21NpXbs3N+zFQreStAvKo30K5CW9fTfB QX9y2yFiMEVLaQMOUGK0DJETZR55xWp5A0EEDNdm1B8AT57KZtqM13Dhlp611dyc SNRcAKAQtXCJsxhUzkP0pNPldqxs4Na4vYnOYFwC54uJ7VEPJwtPbULeF6fefsPe 48YvhwSjFnB2kx9E9uPGalCBXQNmNNM0BWoLLTrf5PEEcJWdNxxD4QRxA0aCXr3A Z3Xz7DA8gGiQdNdl++Kp4w15gyOnqYE= -----END CERTIFICATE-----Generated at Sat Oct 11 10:03:46 2025 by rpki-client