$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/e5509d98-c8ea-38e0-88a8-99be28cd2866.roa File: e5509d98-c8ea-38e0-88a8-99be28cd2866.roa (raw, json) Hash identifier: TWK/I0B4FDzAzIni43q8yR1SBanzUokDEQ8nfo9oV0A= Subject key identifier: D2:EB:20:D7:4E:A4:89:18:A0:CB:A6:49:1C:60:86:4A:A6:D7:B1:11 Certificate issuer: /CN=33d1a6b4-9003-4c1d-9a48-0270be4af50a Certificate serial: 010D0C9F4328584B5DD2092AC43BABA960583480 Authority key identifier: 2D:C3:B9:F7:14:B8:6D:B2:A5:60:A6:D9:47:0E:A0:83:36:05:45:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/e5509d98-c8ea-38e0-88a8-99be28cd2866.roa Signing time: Tue 30 Sep 2025 13:00:40 +0000 ROA not before: Tue 30 Sep 2025 13:00:40 +0000 ROA not after: Mon 29 Dec 2025 14:00:40 +0000 asID: 394911 IP address blocks: 208.90.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5d:d2:09:2a:c4:3b:ab:a9:60:58:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33d1a6b4-9003-4c1d-9a48-0270be4af50a Validity Not Before: Sep 30 13:00:40 2025 GMT Not After : Dec 29 14:00:40 2025 GMT Subject: CN=8cf86a0b-fe2d-4939-95d4-594fc10aef16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b6:3e:bb:0d:d4:e1:6e:50:b8:24:de:8c:ec: d7:76:69:63:4b:dc:c9:91:c5:49:ff:46:95:03:0d: af:0e:0c:30:d0:f2:74:d8:bf:2e:70:a4:cf:bc:1d: 09:b2:fd:9b:5c:67:8a:81:38:fd:ac:c1:83:07:8f: eb:76:ad:ff:ca:24:c6:7d:3d:c2:b8:c6:a1:ca:8d: b6:cf:74:3f:aa:c6:38:34:00:3e:3c:b4:ac:20:06: f2:f1:2b:55:fd:53:5d:bf:71:a6:8e:ae:54:83:41: 79:db:4d:e3:d9:b5:1c:b2:bf:8a:35:7a:da:d5:0d: eb:c0:83:ec:2a:2a:37:80:d8:26:ac:3e:17:ed:d0: a6:14:b6:2b:ff:d0:9b:01:40:9e:6d:81:1d:e4:41: c3:b3:da:ef:53:55:8c:41:60:05:52:57:92:76:dc: ab:88:fc:65:e6:4a:ea:ad:1b:00:e8:f8:0a:bb:6b: 2a:dc:00:cd:fc:f1:74:75:73:97:45:d3:3d:87:39: ce:5c:b4:96:53:8a:ad:a1:ff:98:6c:e7:cb:cf:be: d6:3b:6e:54:2f:e2:b5:0e:84:2d:bb:07:9f:88:cd: b2:fb:9e:00:8a:db:64:65:6c:de:d8:78:24:76:0d: 78:9f:cc:7b:87:e3:51:95:9d:c7:10:64:23:6a:0e: fa:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:EB:20:D7:4E:A4:89:18:A0:CB:A6:49:1C:60:86:4A:A6:D7:B1:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/e5509d98-c8ea-38e0-88a8-99be28cd2866.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.crl X509v3 Authority Key Identifier: keyid:2D:C3:B9:F7:14:B8:6D:B2:A5:60:A6:D9:47:0E:A0:83:36:05:45:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a.cer sbgp-ipAddrBlock: critical IPv4: 208.90.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:13:23:47:b8:62:2e:13:e2:0c:2d:92:ba:19:71:d2:41:18: cc:5b:04:b3:a1:aa:ab:0f:1a:2a:06:98:2e:15:2e:10:2e:0c: 16:c5:b8:10:60:40:c3:80:ba:a4:76:7b:dc:68:4d:21:89:d1: ef:9e:1b:eb:63:b4:0f:90:26:73:4d:08:ba:46:48:a5:d2:bf: 13:72:9e:e0:e5:51:be:9f:5b:14:a1:9a:24:07:fe:de:b6:56: 10:d2:c7:43:7e:c4:09:be:78:cf:41:5c:54:65:26:f4:10:d7: 64:12:35:98:f1:1c:ab:34:54:97:7c:95:3b:85:f9:bd:56:fb: 7a:df:68:60:4b:eb:08:c4:d7:7f:b8:9e:a9:c3:42:56:23:8e: 9a:7e:4c:16:97:15:83:e6:9c:db:76:d0:fc:55:fa:6e:74:cd: d5:b3:d1:e3:63:17:f0:7b:95:f7:ee:86:f1:ce:44:c8:45:7f: 25:54:25:48:34:6e:0c:a1:8b:95:af:e2:af:29:17:2f:29:21: 2f:2d:3f:b7:6b:91:23:1f:fb:5e:9d:58:75:60:fb:72:77:a6: 23:03:b9:86:9e:5f:fa:f6:2f:6d:3f:dc:2b:ed:78:79:59:ab: d2:09:93:97:da:7c:07:ef:5c:86:24:65:24:bd:28:16:cb:2a: 70:fd:d9:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtd0gkqxDurqWBYNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNkMWE2YjQtOTAwMy00YzFkLTlhNDgtMDI3MGJlNGFm NTBhMB4XDTI1MDkzMDEzMDA0MFoXDTI1MTIyOTE0MDA0MFowLzEtMCsGA1UEAxMk OGNmODZhMGItZmUyZC00OTM5LTk1ZDQtNTk0ZmMxMGFlZjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LY+uw3U4W5QuCTejOzXdmljS9zJkcVJ/0aV Aw2vDgww0PJ02L8ucKTPvB0Jsv2bXGeKgTj9rMGDB4/rdq3/yiTGfT3CuMahyo22 z3Q/qsY4NAA+PLSsIAby8StV/VNdv3Gmjq5Ug0F5203j2bUcsr+KNXra1Q3rwIPs Kio3gNgmrD4X7dCmFLYr/9CbAUCebYEd5EHDs9rvU1WMQWAFUleSdtyriPxl5krq rRsA6PgKu2sq3ADN/PF0dXOXRdM9hznOXLSWU4qtof+YbOfLz77WO25UL+K1DoQt uwefiM2y+54AittkZWze2Hgkdg14n8x7h+NRlZ3HEGQjag76/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLrINdOpIkYoMumSRxghkqm17ERMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zM2Qx YTZiNC05MDAzLTRjMWQtOWE0OC0wMjcwYmU0YWY1MGEvZTU1MDlkOTgtYzhlYS0z OGUwLTg4YTgtOTliZTI4Y2QyODY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzNkMWE2YjQtOTAwMy00YzFkLTlh NDgtMDI3MGJlNGFmNTBhLzMzZDFhNmI0LTkwMDMtNGMxZC05YTQ4LTAyNzBiZTRh ZjUwYS5jcmwwHwYDVR0jBBgwFoAULcO59xS4bbKlYKbZRw6ggzYFRcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zM2QxYTZiNC05MDAzLTRjMWQtOWE0OC0wMjcw YmU0YWY1MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FoLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALATI0e4Yi4T4gwtkroZcdJBGMxbBLOhqqsPGioGmC4VLhAuDBbFuBBg QMOAuqR2e9xoTSGJ0e+eG+tjtA+QJnNNCLpGSKXSvxNynuDlUb6fWxShmiQH/t62 VhDSx0N+xAm+eM9BXFRlJvQQ12QSNZjxHKs0VJd8lTuF+b1W+3rfaGBL6wjE13+4 nqnDQlYjjpp+TBaXFYPmnNt20PxV+m50zdWz0eNjF/B7lffuhvHORMhFfyVUJUg0 bgyhi5Wv4q8pFy8pIS8tP7drkSMf+16dWHVg+3J3piMDuYaeX/r2L20/3CvteHlZ q9IJk5fafAfvXIYkZSS9KBbLKnD92dA= -----END CERTIFICATE-----Generated at Fri Oct 10 17:37:05 2025 by rpki-client