$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/585ca79e-ea47-30c0-8c71-3e388273bb4f.roa File: 585ca79e-ea47-30c0-8c71-3e388273bb4f.roa (raw, json) Hash identifier: UFwlIxUedpgFZA9/FRt1w/I+UEyw7zt315oV0sk/xbs= Subject key identifier: B7:AB:BC:BA:6C:57:00:93:1F:16:06:F8:08:57:4C:08:57:99:17:1D Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B4FDC71C1A454FA58F5D64C00 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/585ca79e-ea47-30c0-8c71-3e388273bb4f.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 15164 IP address blocks: 208.82.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:71:c1:a4:54:fa:58:f5:d6:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=c8d36b4d-73dd-475e-b620-a985765a2c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c7:d6:dc:20:60:e0:5c:fa:7b:a3:40:42:1e: 64:d7:b9:2c:04:25:48:bf:18:63:44:45:24:fb:4e: b3:92:27:a1:4f:a8:39:81:51:09:23:b6:fc:9c:df: 7b:fa:2c:ed:47:80:71:78:cd:1d:8a:83:fb:42:25: 97:8e:a2:d2:b2:b0:e0:ae:b2:6e:33:71:de:98:9e: 25:44:d3:c6:78:10:e7:0d:09:a0:fd:61:80:f8:f2: db:65:cf:e7:a9:44:d9:89:7b:3d:80:0d:52:18:e8: 5c:e7:a0:fc:53:6f:99:18:2d:78:aa:86:66:76:54: e4:5f:a2:bd:83:8f:76:95:f9:f8:c2:52:33:78:23: c0:f9:9c:99:8c:21:56:6f:30:f5:ea:25:95:2c:c8: b2:ec:bc:af:a3:e5:c0:50:60:d4:b6:1f:63:a6:3f: 9e:a5:2c:42:46:a8:a9:b2:1a:1d:c1:db:66:44:12: f3:3a:3b:9f:f6:c0:03:6f:68:45:61:04:05:2a:fb: 83:a5:05:7e:28:a0:f4:26:80:11:3e:57:f8:79:8b: 89:8f:71:cc:fe:87:93:9e:a5:69:bf:c4:79:3a:1a: 25:f3:11:8e:6b:e8:d5:0c:c2:f1:1b:43:7c:e3:12: 55:78:bb:73:97:13:34:99:97:ca:05:bc:a4:3f:04: c4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:AB:BC:BA:6C:57:00:93:1F:16:06:F8:08:57:4C:08:57:99:17:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/585ca79e-ea47-30c0-8c71-3e388273bb4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 208.82.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:8f:c2:4c:54:3b:6a:1f:25:6e:24:46:44:4e:55:e2:e3:6c: e5:87:ad:35:94:ed:b3:c1:21:3c:78:56:27:46:d3:c4:6f:0c: d5:7d:79:26:20:d9:1e:81:33:20:87:ea:f8:41:2b:d5:b5:44: f1:37:59:13:20:9e:93:98:e7:20:61:ab:fa:4a:be:45:5c:fb: 2b:19:31:73:eb:89:fe:bd:55:60:52:67:d5:9a:47:13:c6:26: a8:a6:2f:bc:55:33:62:8d:4b:2d:9a:f9:02:e4:67:a6:aa:22: 2d:87:00:22:79:f6:04:a4:70:e5:b3:bb:4d:3c:ae:34:60:22: c0:24:48:42:f5:f6:1a:88:c2:16:6c:e4:7e:4a:8a:37:a6:ff: 4d:68:52:5c:b5:ef:27:d9:af:f7:87:99:9b:37:3d:06:3d:2f: 4b:41:7f:a1:60:73:1a:42:ac:b0:ef:65:ee:a7:29:59:7d:d7: e6:df:27:70:f3:3c:61:b1:52:12:e3:d3:b6:9e:5f:dc:65:35: ef:9f:9f:5a:50:6c:b1:f4:94:be:d4:a7:c6:73:a4:c5:2c:f9: ae:af:ea:e9:e5:1d:20:2d:a7:59:61:74:f5:4d:d0:8c:2d:8a: 69:f7:70:df:2b:60:5c:7e:c6:34:d0:bb:4b:5d:3b:16:a6:0a: 46:57:92:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3HHBpFT6WPXWTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk YzhkMzZiNGQtNzNkZC00NzVlLWI2MjAtYTk4NTc2NWEyYzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cfW3CBg4Fz6e6NAQh5k17ksBCVIvxhjREUk +06zkiehT6g5gVEJI7b8nN97+iztR4BxeM0dioP7QiWXjqLSsrDgrrJuM3HemJ4l RNPGeBDnDQmg/WGA+PLbZc/nqUTZiXs9gA1SGOhc56D8U2+ZGC14qoZmdlTkX6K9 g492lfn4wlIzeCPA+ZyZjCFWbzD16iWVLMiy7Lyvo+XAUGDUth9jpj+epSxCRqip shodwdtmRBLzOjuf9sADb2hFYQQFKvuDpQV+KKD0JoARPlf4eYuJj3HM/oeTnqVp v8R5Ohol8xGOa+jVDMLxG0N84xJVeLtzlxM0mZfKBbykPwTEiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLervLpsVwCTHxYG+AhXTAhXmRcdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvNTg1Y2E3OWUtZWE0Ny0z MGMwLThjNzEtM2UzODgyNzNiYjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FJqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiPwkxUO2ofJW4kRkROVeLjbOWHrTWU7bPBITx4VidG08RvDNV9eSYg 2R6BMyCH6vhBK9W1RPE3WRMgnpOY5yBhq/pKvkVc+ysZMXPrif69VWBSZ9WaRxPG JqimL7xVM2KNSy2a+QLkZ6aqIi2HACJ59gSkcOWzu008rjRgIsAkSEL19hqIwhZs 5H5Kijem/01oUly17yfZr/eHmZs3PQY9L0tBf6FgcxpCrLDvZe6nKVl91+bfJ3Dz PGGxUhLj07aeX9xlNe+fn1pQbLH0lL7Up8ZzpMUs+a6v6unlHSAtp1lhdPVN0Iwt imn3cN8rYFx+xjTQu0tdOxamCkZXkqg= -----END CERTIFICATE-----Generated at Thu Oct 9 11:13:31 2025 by rpki-client