$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/ec9b8dd1-0fcf-3701-8960-025422e94c7b.roa File: ec9b8dd1-0fcf-3701-8960-025422e94c7b.roa (raw, json) Hash identifier: 07Ins8EtO7RvvONgow3UJXQlFZhkWJm7jKdFsSZym+4= Subject key identifier: 33:DD:D1:92:6D:C6:B5:E8:3B:F0:C0:28:F9:9D:B3:02:8D:2B:0B:1C Certificate issuer: /CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Certificate serial: 010D0C9F4328584B110C0FAAE712F5247B161D30 Authority key identifier: 6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/ec9b8dd1-0fcf-3701-8960-025422e94c7b.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 208.88.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:0f:aa:e7:12:f5:24:7b:16:1d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=30c93219-1729-48a5-a7c6-f34356c54bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5b:11:03:b4:55:32:37:40:33:6c:68:09:e5: 9d:99:61:36:19:98:26:a1:81:e1:8d:12:de:b8:07: 58:41:43:43:43:cd:ee:14:a6:bb:a2:64:18:d7:33: 63:01:08:6c:f7:8e:6c:2e:7e:0a:73:3d:21:8f:7e: 0f:4f:07:62:0f:0f:55:85:5e:27:65:e0:06:c0:a0: 3f:8f:08:3d:69:aa:a3:d4:9d:41:5d:8c:51:44:6a: 9f:c0:79:f7:47:47:8a:cb:42:e2:80:3a:08:5f:a5: d0:41:d6:fd:ce:ec:ac:ac:61:9b:04:c0:80:09:cd: d4:9d:51:2d:2b:78:8f:3d:6d:de:2d:36:ae:d8:5a: 5f:50:d2:1c:36:06:c9:a9:6c:19:9e:dc:d2:73:10: 5e:49:09:02:b3:11:fe:10:8e:1c:9e:71:4d:a2:53: 70:ae:c4:01:fb:76:bb:52:54:ef:bd:92:bb:5b:6e: 0b:44:27:3e:a1:e5:d3:16:ea:a4:cb:b5:d2:68:78: bf:aa:1e:4c:a2:71:fe:5f:37:53:5e:42:03:41:f1: 10:a8:ac:74:ff:b4:c3:92:0a:5b:ee:58:76:fa:07: 2c:c4:b3:49:8e:46:aa:27:3c:62:c4:15:05:5f:92: 39:ab:c8:64:6f:7d:f6:82:60:f0:11:20:91:87:f0: de:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:DD:D1:92:6D:C6:B5:E8:3B:F0:C0:28:F9:9D:B3:02:8D:2B:0B:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/ec9b8dd1-0fcf-3701-8960-025422e94c7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl X509v3 Authority Key Identifier: keyid:6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer sbgp-ipAddrBlock: critical IPv4: 208.88.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:a3:90:19:26:6c:6a:fe:88:03:dc:a8:67:05:5e:79:a3:be: 15:ba:19:0b:25:c2:5e:f0:55:1c:51:5d:61:f5:27:ad:a3:d5: e0:de:96:2b:aa:19:4b:1f:77:d2:d5:7d:d8:a7:7d:38:95:0d: e4:b3:fa:6a:51:65:aa:1a:71:d1:dc:d7:1a:c1:b9:8c:33:54: 80:d0:48:03:ed:a4:c7:9e:ad:0b:4a:93:07:71:7f:c0:e1:48: 34:26:c4:72:ed:cb:0e:2e:21:c3:30:21:66:af:2b:0e:12:ec: bd:95:64:43:b4:c4:1c:92:0e:6a:f0:8b:56:a8:30:d4:60:d0: 29:d9:03:42:77:f4:1a:a4:80:76:c6:7b:82:15:5c:a9:cc:c8: 13:26:51:3c:74:af:9e:2d:ee:5b:1d:90:55:a6:2d:65:69:99: a9:a3:04:bb:be:65:72:3b:84:b9:74:25:8f:2b:3c:50:ab:e0: d6:9e:de:7a:a8:2f:8a:71:e3:72:a6:79:55:bd:87:1d:82:7a: d7:85:d7:96:ef:de:2a:2c:da:90:8f:24:ba:68:3e:40:ca:3f: 68:f3:5b:09:eb:01:43:c5:0b:37:bc:09:46:79:2f:77:07:d8: 95:b0:36:dc:77:87:40:76:2f:4f:dd:99:82:b7:3f:7c:10:49: e2:74:b4:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRDA+q5xL1JHsWHTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg2ZGI0ZWItNDA0MS00YWY4LWI2NGQtZjJlOGI3YmMw NDhiMB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk MzBjOTMyMTktMTcyOS00OGE1LWE3YzYtZjM0MzU2YzU0YmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFsRA7RVMjdAM2xoCeWdmWE2GZgmoYHhjRLe uAdYQUNDQ83uFKa7omQY1zNjAQhs945sLn4Kcz0hj34PTwdiDw9VhV4nZeAGwKA/ jwg9aaqj1J1BXYxRRGqfwHn3R0eKy0LigDoIX6XQQdb9zuysrGGbBMCACc3UnVEt K3iPPW3eLTau2FpfUNIcNgbJqWwZntzScxBeSQkCsxH+EI4cnnFNolNwrsQB+3a7 UlTvvZK7W24LRCc+oeXTFuqky7XSaHi/qh5MonH+XzdTXkIDQfEQqKx0/7TDkgpb 7lh2+gcsxLNJjkaqJzxixBUFX5I5q8hkb332gmDwESCRh/DeFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPd0ZJtxrXoO/DAKPmdswKNKwscMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZk YjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4YjdiYzA0OGIvZWM5YjhkZDEtMGZjZi0z NzAxLTg5NjAtMDI1NDIyZTk0YzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjg2ZGI0ZWItNDA0MS00YWY4LWI2 NGQtZjJlOGI3YmMwNDhiL2I4NmRiNGViLTQwNDEtNGFmOC1iNjRkLWYyZThiN2Jj MDQ4Yi5jcmwwHwYDVR0jBBgwFoAUa8ITUOp05WaWTNRMgjyklz6m1dMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iODZkYjRlYi00MDQxLTRhZjgtYjY0ZC1mMmU4 YjdiYzA0OGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGujkBkmbGr+iAPcqGcFXnmjvhW6GQslwl7wVRxRXWH1J62j1eDeliuq GUsfd9LVfdinfTiVDeSz+mpRZaoacdHc1xrBuYwzVIDQSAPtpMeerQtKkwdxf8Dh SDQmxHLtyw4uIcMwIWavKw4S7L2VZEO0xBySDmrwi1aoMNRg0CnZA0J39BqkgHbG e4IVXKnMyBMmUTx0r54t7lsdkFWmLWVpmamjBLu+ZXI7hLl0JY8rPFCr4Nae3nqo L4px43KmeVW9hx2CeteF15bv3ios2pCPJLpoPkDKP2jzWwnrAUPFCze8CUZ5L3cH 2JWwNtx3h0B2L0/dmYK3P3wQSeJ0tJ4= -----END CERTIFICATE-----Generated at Fri Oct 10 21:34:47 2025 by rpki-client