$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/0a7ce8a1-9b66-3b17-9a24-ac02db6d5399.roa File: 0a7ce8a1-9b66-3b17-9a24-ac02db6d5399.roa (raw, json) Hash identifier: t+a9MTo1rBynIXsvTWWLfiYze3x3L3W/yhvQLyL+gxA= Subject key identifier: B4:38:A2:45:4E:D5:69:D2:CA:03:0D:24:E0:AD:2D:73:2A:F9:5B:E4 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584B1806C9EE7B076622339C5C00 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/0a7ce8a1-9b66-3b17-9a24-ac02db6d5399.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 14618 IP address blocks: 208.85.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:c9:ee:7b:07:66:22:33:9c:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=645c80ef-d186-444c-aad8-1d04b61c49ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:df:73:c9:34:53:e3:99:99:d8:db:a8:63:8d: 3b:5d:00:5a:ad:b5:34:0b:71:61:c3:ff:b4:94:10: 78:a1:48:03:85:ec:26:93:8f:7a:6a:b9:4f:14:aa: 92:9d:eb:ce:44:cc:55:a7:cb:83:55:d1:dd:33:02: f9:fa:b7:b8:6e:c6:f3:65:fe:da:29:8e:bb:f5:2a: 3e:de:71:1a:b3:7b:7e:a3:4d:bb:02:b6:da:0d:f2: 15:8b:22:db:4b:0a:b2:bf:8f:7e:86:26:7d:68:ba: 1a:0f:3e:25:94:1e:6c:1f:2e:3e:be:48:e1:28:ee: 65:2b:c5:b1:37:ef:82:13:5e:54:65:38:d6:d9:09: 6e:a0:dd:97:8f:70:bd:9f:01:b4:6a:3e:9b:0b:d6: 56:dd:51:71:59:6a:ef:a7:29:55:72:63:fc:d0:b1: 9e:81:02:49:42:c2:2a:24:65:f8:63:58:d6:ad:12: 08:0e:a3:7a:74:cb:35:4c:80:9d:87:3c:ae:5a:8e: 64:bf:bb:d4:af:39:ed:7b:93:b3:95:99:cc:e4:f8: eb:35:78:99:6d:90:4b:13:3c:8e:70:7f:a0:02:ee: 66:5a:68:ce:5c:3c:eb:0a:a5:0e:17:0e:6a:4e:42: 93:df:f0:6d:b5:15:15:64:ac:e1:10:26:c4:cb:30: ac:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:38:A2:45:4E:D5:69:D2:CA:03:0D:24:E0:AD:2D:73:2A:F9:5B:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/0a7ce8a1-9b66-3b17-9a24-ac02db6d5399.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:63:d5:36:3a:ed:70:a5:18:5a:a0:11:6f:62:3e:21:80:f9: c0:06:4c:a8:d4:f8:15:4a:1a:f4:67:17:e5:ee:a6:2f:5e:e3: 25:65:80:17:1f:0f:c0:8f:1c:17:28:aa:e4:2b:83:7f:91:8c: 10:b5:98:83:36:df:c3:02:03:c1:31:75:37:b6:ce:20:31:37: e0:e9:f0:88:ed:3a:4a:66:f0:f5:ca:10:be:e8:65:d2:40:61: 7a:8f:ca:2c:57:9b:4b:93:95:14:0f:00:de:a6:ae:9c:7d:a5: bd:98:88:dc:81:ed:69:56:cf:e2:52:24:15:71:52:21:36:26: 02:24:84:bf:5a:11:6a:3d:87:42:d7:22:9b:50:6b:c2:d6:38: d3:b7:ed:81:51:ea:1d:25:cb:32:3c:ed:94:b0:bb:a5:4a:10: 9f:7a:41:9f:27:cf:9f:db:92:6e:05:19:f2:e3:0b:f2:7f:a7: 99:fc:1e:5e:77:dc:e3:04:2e:93:02:68:a0:b9:bb:01:79:4e: 12:a3:6a:3d:43:0f:0b:f3:d4:de:37:57:90:65:53:a2:50:71: 5d:59:e2:de:67:ed:a9:7b:31:3f:fc:00:0e:5a:18:5a:4e:51: c5:43:3e:22:ec:87:e9:9c:a9:8d:30:5e:ac:11:ec:f4:3a:a9: ac:24:e3:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBsnuewdmIjOcXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NjQ1YzgwZWYtZDE4Ni00NDRjLWFhZDgtMWQwNGI2MWM0OWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo99zyTRT45mZ2NuoY407XQBarbU0C3Fhw/+0 lBB4oUgDhewmk496arlPFKqSnevORMxVp8uDVdHdMwL5+re4bsbzZf7aKY679So+ 3nEas3t+o027ArbaDfIViyLbSwqyv49+hiZ9aLoaDz4llB5sHy4+vkjhKO5lK8Wx N++CE15UZTjW2QluoN2Xj3C9nwG0aj6bC9ZW3VFxWWrvpylVcmP80LGegQJJQsIq JGX4Y1jWrRIIDqN6dMs1TICdhzyuWo5kv7vUrznte5OzlZnM5PjrNXiZbZBLEzyO cH+gAu5mWmjOXDzrCqUOFw5qTkKT3/BttRUVZKzhECbEyzCsQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQ4okVO1WnSygMNJOCtLXMq+VvkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvMGE3Y2U4YTEtOWI2Ni0z YjE3LTlhMjQtYWMwMmRiNmQ1Mzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBj1TY67XClGFqgEW9iPiGA+cAGTKjU+BVKGvRnF+Xupi9e4yVlgBcf D8CPHBcoquQrg3+RjBC1mIM238MCA8ExdTe2ziAxN+Dp8IjtOkpm8PXKEL7oZdJA YXqPyixXm0uTlRQPAN6mrpx9pb2YiNyB7WlWz+JSJBVxUiE2JgIkhL9aEWo9h0LX IptQa8LWONO37YFR6h0lyzI87ZSwu6VKEJ96QZ8nz5/bkm4FGfLjC/J/p5n8Hl53 3OMELpMCaKC5uwF5ThKjaj1DDwvz1N43V5BlU6JQcV1Z4t5n7al7MT/8AA5aGFpO UcVDPiLsh+mcqY0wXqwR7PQ6qawk4zQ= -----END CERTIFICATE-----Generated at Wed Oct 8 21:35:57 2025 by rpki-client