$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/081434ec-db05-34a7-8947-1ea9ac8b36b2.roa File: 081434ec-db05-34a7-8947-1ea9ac8b36b2.roa (raw, json) Hash identifier: TozByUnIClRkDoq61Tysq3E8OiupFj7GmSluiHRfUGE= Subject key identifier: 54:1B:0F:19:D9:A5:49:0C:E1:18:BD:64:06:C1:E2:C0:E6:2E:E6:18 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584B1AD1721192871B82AFCBD380 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/081434ec-db05-34a7-8947-1ea9ac8b36b2.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 19795 IP address blocks: 208.95.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:72:11:92:87:1b:82:af:cb:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=83d572aa-d1ae-445f-b266-3ea8178ecb5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6d:3c:f8:39:6c:9a:66:45:61:2f:79:c4:c7: 39:65:f4:69:73:22:58:5b:60:22:d5:08:50:18:84: 03:f6:d1:0d:0a:c0:1b:ce:1a:c9:46:49:7e:c1:8f: d1:7a:6b:58:ab:eb:e2:19:d1:8a:d3:e6:37:57:1d: a7:6a:59:e4:8d:0f:c9:da:35:b5:d9:a4:61:2c:55: be:83:0f:11:e6:ca:1f:cf:0f:46:0a:c1:88:32:b1: 22:7d:26:ad:07:17:9a:ef:8b:fb:35:22:a5:99:cd: 3d:a5:d6:b9:79:f9:e9:9b:cb:59:d7:f3:51:8f:7f: 21:14:9c:41:37:34:26:17:30:9a:9a:af:a1:53:a5: 8a:95:a9:df:1a:ab:5e:d6:d4:47:b9:37:5a:51:22: b7:c2:c1:ee:70:55:06:8a:93:19:0b:34:40:b7:9e: b9:62:ad:29:69:60:f4:76:0a:d7:e7:7b:0f:c2:1e: 53:81:15:83:6b:04:d0:c3:60:09:fe:75:a4:a6:09: 16:1e:f4:09:e7:20:1b:e6:06:ae:78:9f:5d:4e:f6: 0b:93:1b:16:cf:44:01:de:b8:fe:23:19:2f:24:c7: 1f:42:ee:75:85:20:20:a1:1f:f5:e4:13:1d:fa:d7: f6:ae:ba:11:27:7e:6c:28:7f:4d:e8:25:68:71:90: f1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:1B:0F:19:D9:A5:49:0C:E1:18:BD:64:06:C1:E2:C0:E6:2E:E6:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/081434ec-db05-34a7-8947-1ea9ac8b36b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.95.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:de:fe:95:65:df:b3:a0:69:d3:22:db:e3:11:f0:b5:1e:61: 08:17:34:d7:59:c0:b8:d3:e1:8d:85:98:b5:a8:55:6e:ab:0e: 5a:a9:51:6d:de:03:a7:fe:9e:39:b4:e9:86:30:ef:3b:d7:4b: 0c:ca:80:c9:1f:22:9f:57:75:e0:b2:21:b3:92:a9:48:0d:9a: b5:40:02:8a:8b:87:7e:11:78:ba:21:bf:9b:b2:88:d0:ca:f7: cf:ad:3c:a4:4c:f3:c3:2b:2b:2c:8a:01:7f:a0:69:f0:3d:d1: 10:6c:62:87:f8:54:00:2d:08:25:ce:6b:25:c1:96:ad:ac:23: fe:a2:b7:5e:11:08:1c:de:2e:2b:7a:e0:05:df:cb:7d:c4:56: 02:e3:cc:a4:b2:fc:ed:bc:e7:b2:f9:32:64:79:8d:f7:de:2b: ec:9c:b7:ed:08:d7:e5:d1:9d:a8:e6:d4:2c:fe:f4:83:96:81: c3:88:0c:27:f7:5a:e1:d2:db:d9:b3:e6:0c:7f:d4:62:f7:e5: 14:e0:5e:d2:22:bc:a4:0b:d1:34:13:3b:70:09:33:60:32:8b: 54:65:ec:93:26:26:6a:0c:db:12:8c:1c:9f:5b:f0:f6:cb:d7: 55:3e:5a:fc:5f:0e:5b:57:9d:ae:ac:39:a2:bb:90:b9:38:f4: f4:66:7a:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0XIRkocbgq/L04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ODNkNTcyYWEtZDFhZS00NDVmLWIyNjYtM2VhODE3OGVjYjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0G08+DlsmmZFYS95xMc5ZfRpcyJYW2Ai1QhQ GIQD9tENCsAbzhrJRkl+wY/RemtYq+viGdGK0+Y3Vx2nalnkjQ/J2jW12aRhLFW+ gw8R5sofzw9GCsGIMrEifSatBxea74v7NSKlmc09pda5efnpm8tZ1/NRj38hFJxB NzQmFzCamq+hU6WKlanfGqte1tRHuTdaUSK3wsHucFUGipMZCzRAt565Yq0paWD0 dgrX53sPwh5TgRWDawTQw2AJ/nWkpgkWHvQJ5yAb5gaueJ9dTvYLkxsWz0QB3rj+ IxkvJMcfQu51hSAgoR/15BMd+tf2rroRJ35sKH9N6CVocZDxOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQbDxnZpUkM4Ri9ZAbB4sDmLuYYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvMDgxNDM0ZWMtZGIwNS0z NGE3LTg5NDctMWVhOWFjOGIzNmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F+FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/e/pVl37OgadMi2+MR8LUeYQgXNNdZwLjT4Y2FmLWoVW6rDlqpUW3e A6f+njm06YYw7zvXSwzKgMkfIp9XdeCyIbOSqUgNmrVAAoqLh34ReLohv5uyiNDK 98+tPKRM88MrKyyKAX+gafA90RBsYof4VAAtCCXOayXBlq2sI/6it14RCBzeLit6 4AXfy33EVgLjzKSy/O2857L5MmR5jffeK+yct+0I1+XRnajm1Cz+9IOWgcOIDCf3 WuHS29mz5gx/1GL35RTgXtIivKQL0TQTO3AJM2Ayi1Rl7JMmJmoM2xKMHJ9b8PbL 11U+WvxfDltXna6sOaK7kLk49PRmetA= -----END CERTIFICATE-----Generated at Wed Oct 8 23:14:46 2025 by rpki-client