$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004/5af642ea-225c-38c3-b240-f011c1f0ef11.roa File: 5af642ea-225c-38c3-b240-f011c1f0ef11.roa (raw, json) Hash identifier: uB8CbCyXVWneqLD18BEwHfevR2+b1UXu1/DRTQe1hSQ= Subject key identifier: D4:C5:D7:6E:EB:D4:3A:CC:D7:01:E1:17:21:BC:65:EC:A2:B3:6F:E3 Certificate issuer: /CN=e987b11b-b307-4d95-abbc-a061ff00c004 Certificate serial: 010D0C9F4328584B79BCC7F525A46C6D3C116800 Authority key identifier: B3:3B:F3:8D:F6:92:6B:7F:59:46:57:94:59:4D:5A:EC:FE:75:6B:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004/5af642ea-225c-38c3-b240-f011c1f0ef11.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 46601 IP address blocks: 208.82.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004/e987b11b-b307-4d95-abbc-a061ff00c004.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004/e987b11b-b307-4d95-abbc-a061ff00c004.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:c7:f5:25:a4:6c:6d:3c:11:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e987b11b-b307-4d95-abbc-a061ff00c004 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=6e58b9e9-df6d-4dee-92d1-be4380fc7dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4c:d6:30:84:ac:cc:86:75:77:e5:45:08:84: f5:af:f9:39:c7:09:50:da:d4:a0:fd:c1:c1:f9:9a: f4:c3:c4:d0:69:88:59:5f:8f:cb:33:91:bc:fa:10: 20:ba:d4:b8:aa:2c:9a:e0:74:47:0f:76:0a:8a:94: 77:7c:36:d1:40:8f:c0:c2:7f:e8:87:53:b3:cf:fd: 46:0e:34:7c:b5:c3:88:51:fc:1f:26:af:9f:a6:d7: 7e:89:d7:8f:f1:58:ef:10:9d:01:74:47:a1:00:6a: a8:f8:8b:a1:99:5a:8a:25:12:69:3a:0e:06:6d:50: ae:38:c0:da:e4:91:2e:b5:b4:9d:a9:63:9b:d4:d3: 2b:89:ac:c6:65:9a:3a:dd:f5:e9:c6:75:34:f5:a6: 5a:04:28:89:c1:42:21:38:e2:3b:2a:66:d6:dc:f7: a7:c9:65:f7:22:5d:c1:a8:d2:3b:ff:ff:cc:a9:3b: b7:d3:ac:9d:ed:44:6b:89:cc:23:29:b7:58:e5:34: 09:72:ff:14:b9:cf:02:9d:a0:05:de:1a:34:15:d8: 3c:91:24:c4:50:73:e8:ac:4b:94:61:b0:07:d9:e6: 66:53:4b:1c:60:d3:26:e7:08:5f:5b:24:ee:0a:e0: 4a:25:b1:f6:34:53:a0:6b:e3:3e:97:78:14:14:dd: ab:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C5:D7:6E:EB:D4:3A:CC:D7:01:E1:17:21:BC:65:EC:A2:B3:6F:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004/5af642ea-225c-38c3-b240-f011c1f0ef11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004/e987b11b-b307-4d95-abbc-a061ff00c004.crl X509v3 Authority Key Identifier: keyid:B3:3B:F3:8D:F6:92:6B:7F:59:46:57:94:59:4D:5A:EC:FE:75:6B:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e987b11b-b307-4d95-abbc-a061ff00c004.cer sbgp-ipAddrBlock: critical IPv4: 208.82.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:35:8b:86:23:ca:46:35:39:dc:e4:57:a3:87:fe:02:70:90: db:b9:74:51:cc:7a:56:ef:db:2c:19:c7:e5:84:57:cb:9d:48: 8b:1d:c7:71:95:4b:98:64:3a:53:3b:87:a4:71:85:0d:4b:f0: 2e:91:ff:48:41:0a:b0:89:48:bc:41:b4:fc:ab:88:c7:b6:83: e8:ea:13:f4:e2:f2:d9:1b:21:6b:74:4e:1f:cd:0b:b4:42:d7: d2:b5:fc:ca:05:2d:ef:ce:6c:9d:3b:90:6b:81:63:ac:db:0d: 51:3f:d0:9a:b5:b9:3a:04:73:be:10:fa:50:48:9f:e6:5a:24: 81:46:0e:88:a9:a3:8d:93:0a:3c:80:70:be:68:31:04:a7:d2: 80:a5:3c:25:ef:b2:98:e1:7c:60:9e:92:bd:96:b3:e4:8c:1b: e1:ed:5e:c2:fe:97:5d:bd:23:81:ae:7d:b6:54:6e:f6:db:46: a5:7c:a4:af:88:1e:55:a0:0e:54:73:f3:cc:a0:65:02:c9:31: fc:b5:08:e3:bd:a1:a9:35:5b:46:4e:ac:b9:04:ff:05:99:a4: e8:47:1e:e0:bc:1f:bf:e1:55:4d:1e:f4:8f:ed:7f:7a:62:4a: 54:18:0d:77:9d:7d:34:7a:df:b2:aa:d6:fe:d9:b1:a2:19:ca: ea:e5:d6:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vMf1JaRsbTwRaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4N2IxMWItYjMwNy00ZDk1LWFiYmMtYTA2MWZmMDBj MDA0MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk NmU1OGI5ZTktZGY2ZC00ZGVlLTkyZDEtYmU0MzgwZmM3ZGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EzWMISszIZ1d+VFCIT1r/k5xwlQ2tSg/cHB +Zr0w8TQaYhZX4/LM5G8+hAgutS4qiya4HRHD3YKipR3fDbRQI/Awn/oh1Ozz/1G DjR8tcOIUfwfJq+fptd+ideP8VjvEJ0BdEehAGqo+IuhmVqKJRJpOg4GbVCuOMDa 5JEutbSdqWOb1NMriazGZZo63fXpxnU09aZaBCiJwUIhOOI7KmbW3PenyWX3Il3B qNI7///MqTu306yd7URricwjKbdY5TQJcv8Uuc8CnaAF3ho0Fdg8kSTEUHPorEuU YbAH2eZmU0scYNMm5whfWyTuCuBKJbH2NFOga+M+l3gUFN2rNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTF127r1DrM1wHhFyG8Zeyis2/jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lOTg3 YjExYi1iMzA3LTRkOTUtYWJiYy1hMDYxZmYwMGMwMDQvNWFmNjQyZWEtMjI1Yy0z OGMzLWIyNDAtZjAxMWMxZjBlZjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTk4N2IxMWItYjMwNy00ZDk1LWFi YmMtYTA2MWZmMDBjMDA0L2U5ODdiMTFiLWIzMDctNGQ5NS1hYmJjLWEwNjFmZjAw YzAwNC5jcmwwHwYDVR0jBBgwFoAUszvzjfaSa39ZRleUWU1a7P51a14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lOTg3YjExYi1iMzA3LTRkOTUtYWJiYy1hMDYx ZmYwMGMwMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FLoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD81i4YjykY1OdzkV6OH/gJwkNu5dFHMelbv2ywZx+WEV8udSIsdx3GV S5hkOlM7h6RxhQ1L8C6R/0hBCrCJSLxBtPyriMe2g+jqE/Ti8tkbIWt0Th/NC7RC 19K1/MoFLe/ObJ07kGuBY6zbDVE/0Jq1uToEc74Q+lBIn+ZaJIFGDoipo42TCjyA cL5oMQSn0oClPCXvspjhfGCekr2Ws+SMG+HtXsL+l129I4GufbZUbvbbRqV8pK+I HlWgDlRz88ygZQLJMfy1COO9oak1W0ZOrLkE/wWZpOhHHuC8H7/hVU0e9I/tf3pi SlQYDXedfTR637Kq1v7ZsaIZyurl1sE= -----END CERTIFICATE-----Generated at Fri Oct 10 16:16:40 2025 by rpki-client