$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/d2408058-ca51-3795-af09-80fd33f404a8.roa File: d2408058-ca51-3795-af09-80fd33f404a8.roa (raw, json) Hash identifier: U8dHuodts5RGZj9roZM/ysjpQOahAgSiZcVMWz/SXb0= Subject key identifier: C7:CC:BF:0B:4C:4C:95:C5:DA:97:EA:03:2E:FB:D5:87:FB:25:03:06 Certificate issuer: /CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e Certificate serial: 010D0C9F4328584B434C584A16F0CBA9FDD16F00 Authority key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/d2408058-ca51-3795-af09-80fd33f404a8.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 397270 IP address blocks: 208.86.32.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:58:4a:16:f0:cb:a9:fd:d1:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=c81b7598-9523-4c6c-95b5-3280ee0ec18f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b0:40:5f:41:74:46:4f:d5:59:be:ed:47:7c: 00:d2:01:7d:40:84:13:28:4b:58:a7:bf:1a:e9:62: 14:d1:51:f1:23:5d:e6:d9:36:26:d0:a5:60:7f:e8: 24:4a:10:86:40:a4:72:97:9d:34:92:c1:40:c5:87: e9:de:0f:43:dc:9e:ab:6e:09:fa:0c:02:c0:7a:02: 56:51:9d:7b:ee:ba:eb:40:71:a9:77:b2:54:5d:75: 67:c7:b3:08:df:04:93:f3:39:15:96:cf:84:5f:f7: d4:6d:b9:24:3a:55:32:4b:31:21:8d:f3:52:de:83: 83:e7:da:10:64:7d:d7:82:9b:d7:6d:6d:5d:3d:c0: d0:ac:7f:fe:4b:a2:33:2e:48:42:a6:10:d6:8b:08: 10:0a:12:d5:04:ef:17:32:bc:a0:15:12:eb:ad:65: f9:bf:a1:bd:1f:cf:58:63:41:c8:28:e1:a3:2b:16: 52:39:88:57:f0:05:41:12:dd:63:42:be:8a:ac:d3: 14:69:a2:44:6c:e1:83:66:4d:eb:31:b6:7d:4f:95: 48:60:87:c1:ac:2f:88:b9:73:af:3e:13:6b:cd:56: 5b:06:60:46:e5:59:81:b1:be:c2:e0:4d:6f:10:4f: 71:fa:50:8d:62:1e:e2:22:3f:57:34:73:b5:2e:38: 9d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:CC:BF:0B:4C:4C:95:C5:DA:97:EA:03:2E:FB:D5:87:FB:25:03:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/d2408058-ca51-3795-af09-80fd33f404a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl X509v3 Authority Key Identifier: keyid:50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer sbgp-ipAddrBlock: critical IPv4: 208.86.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:d9:26:62:1b:71:7e:98:a3:0a:e1:5d:81:dc:74:d6:ef:72: e8:86:0e:8d:d8:40:60:98:20:a1:97:2a:30:1a:59:4d:8b:90: 9c:1c:c9:2a:73:61:69:4c:4d:93:9b:99:31:b8:7c:09:13:a8: c6:8d:37:df:82:93:cb:53:a9:8e:f0:c9:b1:47:4f:0d:78:9e: 1b:25:1b:78:d9:7b:da:ed:68:0d:22:9c:2f:69:11:c0:2d:35: b9:61:94:e8:a7:c2:3d:2d:5c:64:cf:0d:af:f4:75:65:16:66: 07:27:b3:61:8a:89:fb:01:bb:0c:28:1b:81:24:fa:47:31:61: 4d:05:42:84:81:81:42:78:36:14:7b:a0:48:98:e8:05:ba:d0: fb:ce:9a:fc:26:65:87:53:25:b4:ae:9d:8a:46:92:57:72:79: af:30:94:aa:c8:24:e5:f1:da:e9:5e:67:ff:c7:ae:e2:15:f4: 97:09:a0:66:3e:e4:3c:f9:15:a9:3a:8d:b0:1b:ca:e3:f0:9f: 5f:17:51:5f:40:e6:af:5b:4c:43:0d:db:26:7d:91:79:c5:59: b2:7c:3e:1c:df:af:6e:0a:a9:18:20:d8:ba:91:f1:06:c9:a9: a8:c6:18:ef:03:ad:06:d1:cd:64:07:63:63:91:e8:ea:c7:40: c0:10:34:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTFhKFvDLqf3RbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzViOWNiOGUtN2E3Ny00MDhlLTgxZDktMDc1ZjhlZjcy MDBlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk YzgxYjc1OTgtOTUyMy00YzZjLTk1YjUtMzI4MGVlMGVjMThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrBAX0F0Rk/VWb7tR3wA0gF9QIQTKEtYp78a 6WIU0VHxI13m2TYm0KVgf+gkShCGQKRyl500ksFAxYfp3g9D3J6rbgn6DALAegJW UZ177rrrQHGpd7JUXXVnx7MI3wST8zkVls+EX/fUbbkkOlUySzEhjfNS3oOD59oQ ZH3XgpvXbW1dPcDQrH/+S6IzLkhCphDWiwgQChLVBO8XMrygFRLrrWX5v6G9H89Y Y0HIKOGjKxZSOYhX8AVBEt1jQr6KrNMUaaJEbOGDZk3rMbZ9T5VIYIfBrC+IuXOv PhNrzVZbBmBG5VmBsb7C4E1vEE9x+lCNYh7iIj9XNHO1LjidnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfMvwtMTJXF2pfqAy771Yf7JQMGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NWI5 Y2I4ZS03YTc3LTQwOGUtODFkOS0wNzVmOGVmNzIwMGUvZDI0MDgwNTgtY2E1MS0z Nzk1LWFmMDktODBmZDMzZjQwNGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzViOWNiOGUtN2E3Ny00MDhlLTgx ZDktMDc1ZjhlZjcyMDBlLzc1YjljYjhlLTdhNzctNDA4ZS04MWQ5LTA3NWY4ZWY3 MjAwZS5jcmwwHwYDVR0jBBgwFoAUUCXJ4rB8e2VaqkLiQ9juoPxY5KIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NWI5Y2I4ZS03YTc3LTQwOGUtODFkOS0wNzVm OGVmNzIwMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0FYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvZJmIbcX6YowrhXYHcdNbvcuiGDo3YQGCYIKGXKjAaWU2LkJwcySpz YWlMTZObmTG4fAkTqMaNN9+Ck8tTqY7wybFHTw14nhslG3jZe9rtaA0inC9pEcAt NblhlOinwj0tXGTPDa/0dWUWZgcns2GKifsBuwwoG4Ek+kcxYU0FQoSBgUJ4NhR7 oEiY6AW60PvOmvwmZYdTJbSunYpGkldyea8wlKrIJOXx2uleZ//HruIV9JcJoGY+ 5Dz5Fak6jbAbyuPwn18XUV9A5q9bTEMN2yZ9kXnFWbJ8Phzfr24KqRgg2LqR8QbJ qajGGO8DrQbRzWQHY2OR6OrHQMAQNPg= -----END CERTIFICATE-----Generated at Sat Oct 11 12:16:55 2025 by rpki-client