$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e358e5dd-2747-36f1-9144-3bfe274aabbf.roa File: e358e5dd-2747-36f1-9144-3bfe274aabbf.roa (raw, json) Hash identifier: 2mMukgCJn3Fej59GbsprhmmVUfc40QytiJLPw88BLBA= Subject key identifier: 54:47:76:BA:43:CE:32:C2:80:F0:FF:0A:BE:6B:82:94:02:05:60:B6 Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Certificate serial: 010D0C9F4328584B4FDC70651154112DFA1F1800 Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e358e5dd-2747-36f1-9144-3bfe274aabbf.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 15164 IP address blocks: 208.82.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:70:65:11:54:11:2d:fa:1f:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=11bb71bf-05ba-4acf-891e-ebbaf191cba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:36:a1:82:3d:f4:aa:bc:2b:82:3a:f5:64:62: bf:17:ae:c7:86:be:10:ed:8a:23:2d:1e:f8:04:cd: 48:78:44:51:77:65:32:97:47:92:16:66:ef:79:9a: 37:cb:10:5a:4d:67:78:92:98:a8:d4:97:22:52:a7: 74:fb:96:a7:70:90:f1:b0:6b:55:cb:5b:fd:48:d3: c7:ab:3a:24:9d:d1:d9:80:96:66:f0:58:a6:91:91: 5c:3c:3e:ac:69:07:45:3b:3b:3a:d4:bc:38:4b:62: cd:65:c9:c9:19:a3:55:00:8e:8e:e8:d8:db:86:fb: 3e:b3:4c:ca:78:20:8c:02:bd:52:59:28:33:a2:e4: 52:3a:53:6c:db:55:2a:44:58:14:42:0f:d5:ac:56: d1:81:a8:4f:83:c3:fa:3c:dd:32:7d:07:30:9e:f1: d9:cb:61:77:36:18:cf:dd:fa:45:ab:72:3c:07:15: 0f:66:de:02:0c:7f:39:e4:8b:62:8a:7a:49:af:e1: 19:31:00:9f:19:c3:23:03:86:b7:d6:9e:dd:c5:b9: 34:3b:e2:87:ee:bd:f2:a5:cc:78:32:b6:f9:2b:99: 4f:b6:5c:3f:2a:15:1a:de:61:e4:53:12:1e:17:47: 12:c1:56:56:dc:44:32:b4:b0:93:e8:24:14:2a:6d: a9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:47:76:BA:43:CE:32:C2:80:F0:FF:0A:BE:6B:82:94:02:05:60:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/e358e5dd-2747-36f1-9144-3bfe274aabbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl X509v3 Authority Key Identifier: keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer sbgp-ipAddrBlock: critical IPv4: 208.82.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:97:a4:e6:c1:fe:8a:45:13:aa:65:63:e8:69:4e:e5:67:9f: da:60:29:0a:76:c1:8b:f4:89:93:30:5b:14:2f:0d:5d:4c:2f: f4:97:f7:e1:e6:5d:a0:07:88:cf:f8:1b:82:9e:7b:75:37:47: 2f:35:11:94:35:21:49:b6:e0:90:b3:71:aa:20:53:d7:b1:82: 01:b5:1b:30:2e:ad:20:fd:fc:24:c0:b2:c5:f8:cb:89:1a:59: 5a:3c:af:48:9f:99:8a:a5:9a:e0:dc:d9:3b:a6:0c:87:fb:40: e4:67:ef:a9:2a:20:36:1e:f8:d2:56:34:66:41:48:34:db:54: b8:f0:df:86:87:9c:e2:47:b9:7e:5a:22:92:ea:d3:20:c8:ea: b6:54:c1:70:ed:4f:ec:d6:b7:b3:84:b5:06:fa:a2:64:1b:98: b3:9f:1f:4b:19:45:a0:2d:79:91:7d:db:92:b1:65:59:23:a7: 92:b6:9d:0a:4a:92:74:a6:58:67:9e:01:e2:a7:d1:f9:b5:8c: 2a:4c:94:86:8d:01:66:8d:4e:b8:81:4a:0b:ca:0a:63:cd:c2: 34:d0:61:2b:10:4a:c5:bb:82:31:1c:50:62:8a:34:73:f0:ae: 71:73:04:b9:26:ef:ad:2a:64:c9:bd:b0:c5:10:59:7c:b2:c0: 67:41:f2:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3HBlEVQRLfofGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1 OTg4MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk MTFiYjcxYmYtMDViYS00YWNmLTg5MWUtZWJiYWYxOTFjYmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDahgj30qrwrgjr1ZGK/F67Hhr4Q7YojLR74 BM1IeERRd2Uyl0eSFmbveZo3yxBaTWd4kpio1JciUqd0+5ancJDxsGtVy1v9SNPH qzokndHZgJZm8FimkZFcPD6saQdFOzs61Lw4S2LNZcnJGaNVAI6O6Njbhvs+s0zK eCCMAr1SWSgzouRSOlNs21UqRFgUQg/VrFbRgahPg8P6PN0yfQcwnvHZy2F3NhjP 3fpFq3I8BxUPZt4CDH855ItiinpJr+EZMQCfGcMjA4a31p7dxbk0O+KH7r3ypcx4 Mrb5K5lPtlw/KhUa3mHkUxIeF0cSwVZW3EQytLCT6CQUKm2p+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRHdrpDzjLCgPD/Cr5rgpQCBWC2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0 NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvZTM1OGU1ZGQtMjc0Ny0z NmYxLTkxNDQtM2JmZTI3NGFhYmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3 ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FJuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKuXpObB/opFE6plY+hpTuVnn9pgKQp2wYv0iZMwWxQvDV1ML/SX9+Hm XaAHiM/4G4Kee3U3Ry81EZQ1IUm24JCzcaogU9exggG1GzAurSD9/CTAssX4y4ka WVo8r0ifmYqlmuDc2TumDIf7QORn76kqIDYe+NJWNGZBSDTbVLjw34aHnOJHuX5a IpLq0yDI6rZUwXDtT+zWt7OEtQb6omQbmLOfH0sZRaAteZF925KxZVkjp5K2nQpK knSmWGeeAeKn0fm1jCpMlIaNAWaNTriBSgvKCmPNwjTQYSsQSsW7gjEcUGKKNHPw rnFzBLkm760qZMm9sMUQWXyywGdB8nM= -----END CERTIFICATE-----Generated at Thu Oct 9 11:15:50 2025 by rpki-client