$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b69689e-73ec-4bfc-a419-09f12ac26857/267fc03d-8be0-36bb-a1aa-eacfa1f6b0f5.roa File: 267fc03d-8be0-36bb-a1aa-eacfa1f6b0f5.roa (raw, json) Hash identifier: th1GP1d39DoP2VBGL6tZdf0RcyPsYBrGO0RMIQjiKCM= Subject key identifier: B9:7C:0F:05:48:D9:A5:C8:A6:5F:AD:F3:02:6F:D5:A9:88:9D:0A:35 Certificate issuer: /CN=5b69689e-73ec-4bfc-a419-09f12ac26857 Certificate serial: 010D0C9F4328584B4E7747831C9439089BBA76C0 Authority key identifier: 7C:1F:00:4D:B7:AB:06:1E:99:2F:E7:EC:F8:96:44:04:6A:4C:01:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b69689e-73ec-4bfc-a419-09f12ac26857.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b69689e-73ec-4bfc-a419-09f12ac26857/267fc03d-8be0-36bb-a1aa-eacfa1f6b0f5.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 11070 IP address blocks: 208.84.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b69689e-73ec-4bfc-a419-09f12ac26857/5b69689e-73ec-4bfc-a419-09f12ac26857.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b69689e-73ec-4bfc-a419-09f12ac26857/5b69689e-73ec-4bfc-a419-09f12ac26857.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b69689e-73ec-4bfc-a419-09f12ac26857.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:47:83:1c:94:39:08:9b:ba:76:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b69689e-73ec-4bfc-a419-09f12ac26857 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=3c9f86ec-630f-421f-b262-1fbfff927fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:57:59:c0:27:b8:93:f3:43:cd:9f:c4:38:2f: 7d:95:38:15:f2:67:49:85:c4:03:e6:43:b6:66:bc: 0c:3a:14:f1:bf:07:7d:58:6b:26:b9:26:84:7a:c0: 02:d8:e1:52:13:41:74:50:7b:a7:06:b5:75:ee:f6: 64:09:78:67:2e:2d:94:71:93:d9:06:c1:78:34:8d: 40:51:bc:03:a2:ad:a1:ca:82:0d:44:e4:e9:08:dd: 7d:93:d8:32:86:9b:8c:d6:e6:c9:16:df:3d:3b:e4: 55:ee:79:6d:58:39:b4:85:4f:78:50:60:46:b1:cf: d9:f3:34:01:4b:45:63:c9:1f:61:db:35:a7:91:cb: e9:a3:ca:fa:98:dd:3d:de:f2:4e:3b:68:e6:54:e6: f8:28:22:9a:4a:c5:9b:e6:f7:42:fc:68:69:f1:15: 05:46:2b:36:79:94:4e:39:78:7a:01:01:b3:76:78: 11:be:38:1f:a4:b0:a3:21:b1:9f:9a:53:05:21:cc: 43:3b:4e:9e:e0:69:e5:ba:2f:1a:b2:a4:b4:55:7c: ba:57:73:7e:b3:01:d5:71:70:b4:70:99:1a:30:a6: 80:ef:35:8c:99:02:93:87:f0:42:5d:42:9d:96:cd: fe:bf:a0:3e:25:59:d4:a1:3c:1a:cc:e0:fd:59:b5: c5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:7C:0F:05:48:D9:A5:C8:A6:5F:AD:F3:02:6F:D5:A9:88:9D:0A:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b69689e-73ec-4bfc-a419-09f12ac26857/267fc03d-8be0-36bb-a1aa-eacfa1f6b0f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b69689e-73ec-4bfc-a419-09f12ac26857/5b69689e-73ec-4bfc-a419-09f12ac26857.crl X509v3 Authority Key Identifier: keyid:7C:1F:00:4D:B7:AB:06:1E:99:2F:E7:EC:F8:96:44:04:6A:4C:01:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5b69689e-73ec-4bfc-a419-09f12ac26857.cer sbgp-ipAddrBlock: critical IPv4: 208.84.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:92:70:6f:74:43:a7:f7:ac:4b:cb:f2:2c:89:60:a1:90:9f: e8:77:6d:c4:3e:03:48:6c:1e:3a:04:3c:4b:1e:53:bc:b8:db: cc:a3:ba:71:2c:ea:69:6f:36:15:ea:ae:4a:a4:7e:fd:57:93: 65:fa:33:dc:ee:f5:2d:d5:8a:54:b4:4d:24:d2:20:54:f4:31: 79:5c:ed:01:8b:a9:f3:61:40:16:16:25:37:4b:3b:e0:dd:a8: 2f:29:17:58:95:c2:f0:96:1f:bc:b2:9a:e1:2f:55:81:a3:a8: 41:08:0c:64:5b:2e:fe:75:c6:1e:d4:84:e7:e6:17:f2:68:4d: 72:ae:f2:4a:86:ad:b1:2d:55:50:67:3a:43:39:53:cf:f7:ff: a1:63:47:51:fe:c2:8c:87:3b:bf:26:b9:b9:f3:3c:09:01:53: eb:30:17:03:69:fb:9f:46:68:d5:19:f7:fa:b1:f3:63:5f:3a: 29:56:1f:a1:f9:bd:c3:57:10:3a:e9:c3:bb:97:a9:75:5c:f9: 06:b9:c2:c9:b8:e4:2c:b1:6e:98:9e:3c:02:29:21:7a:0f:30: 4a:9a:c2:05:9d:27:a6:b5:bf:51:4e:c6:24:2a:bf:95:ef:f6: 64:be:ab:f9:4c:f2:3d:8f:65:7a:48:1b:75:a0:a8:57:c3:c8: 33:d8:b4:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOd0eDHJQ5CJu6dsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI2OTY4OWUtNzNlYy00YmZjLWE0MTktMDlmMTJhYzI2 ODU3MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk M2M5Zjg2ZWMtNjMwZi00MjFmLWIyNjItMWZiZmZmOTI3ZmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1dZwCe4k/NDzZ/EOC99lTgV8mdJhcQD5kO2 ZrwMOhTxvwd9WGsmuSaEesAC2OFSE0F0UHunBrV17vZkCXhnLi2UcZPZBsF4NI1A UbwDoq2hyoINROTpCN19k9gyhpuM1ubJFt89O+RV7nltWDm0hU94UGBGsc/Z8zQB S0VjyR9h2zWnkcvpo8r6mN093vJOO2jmVOb4KCKaSsWb5vdC/Ghp8RUFRis2eZRO OXh6AQGzdngRvjgfpLCjIbGfmlMFIcxDO06e4Gnlui8asqS0VXy6V3N+swHVcXC0 cJkaMKaA7zWMmQKTh/BCXUKdls3+v6A+JVnUoTwazOD9WbXFnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLl8DwVI2aXIpl+t8wJv1amInQo1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81YjY5 Njg5ZS03M2VjLTRiZmMtYTQxOS0wOWYxMmFjMjY4NTcvMjY3ZmMwM2QtOGJlMC0z NmJiLWExYWEtZWFjZmExZjZiMGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNWI2OTY4OWUtNzNlYy00YmZjLWE0 MTktMDlmMTJhYzI2ODU3LzViNjk2ODllLTczZWMtNGJmYy1hNDE5LTA5ZjEyYWMy Njg1Ny5jcmwwHwYDVR0jBBgwFoAUfB8ATberBh6ZL+fs+JZEBGpMAVYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy81YjY5Njg5ZS03M2VjLTRiZmMtYTQxOS0wOWYx MmFjMjY4NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWScG90Q6f3rEvL8iyJYKGQn+h3bcQ+A0hsHjoEPEseU7y428yjunEs 6mlvNhXqrkqkfv1Xk2X6M9zu9S3VilS0TSTSIFT0MXlc7QGLqfNhQBYWJTdLO+Dd qC8pF1iVwvCWH7yymuEvVYGjqEEIDGRbLv51xh7UhOfmF/JoTXKu8kqGrbEtVVBn OkM5U8/3/6FjR1H+woyHO78mubnzPAkBU+swFwNp+59GaNUZ9/qx82NfOilWH6H5 vcNXEDrpw7uXqXVc+Qa5wsm45CyxbpiePAIpIXoPMEqawgWdJ6a1v1FOxiQqv5Xv 9mS+q/lM8j2PZXpIG3WgqFfDyDPYtO0= -----END CERTIFICATE-----Generated at Sat Oct 11 12:34:23 2025 by rpki-client