$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/29531714-5912-32a0-9672-e352aeb3fbd8.roa File: 29531714-5912-32a0-9672-e352aeb3fbd8.roa (raw, json) Hash identifier: zNpg5X3bTin7hsGFRKo26dzOo57CGbwE30rJch57iZU= Subject key identifier: 8C:55:70:E5:02:3F:45:4C:F7:F8:CD:10:86:F8:A6:F8:FB:10:82:36 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584B1AD178B7C06B8C70FD61B4C0 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/29531714-5912-32a0-9672-e352aeb3fbd8.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 208.85.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:78:b7:c0:6b:8c:70:fd:61:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=bb2e69a8-7d6e-4e54-aea0-29dc84f49ad5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c5:d8:38:43:c5:66:47:e9:48:5a:10:75:77: 14:8b:be:e3:9e:9b:06:72:3c:3c:b2:e6:c2:f8:a6: ee:c7:63:35:93:16:bf:ee:7d:66:4b:f8:40:65:57: 46:3e:f4:57:7e:20:02:8f:a6:67:0b:d3:54:43:4f: bc:ba:a6:92:54:b0:00:e3:71:e1:ca:29:dc:1c:16: a5:2d:e6:d2:c0:36:34:86:4c:91:ba:b1:cf:0d:84: 04:73:e9:18:50:5a:82:f2:1f:87:d9:ab:ab:b1:d8: 1b:82:c0:05:9b:1c:91:4f:35:c5:d5:0f:e1:e4:e0: 3b:92:26:ce:86:e4:b2:c2:b5:5d:e8:eb:79:58:53: d1:61:c9:f7:d0:65:d8:cc:4b:6a:f4:5e:0d:09:c6: 2d:cf:4a:06:ac:8d:52:a0:41:ca:6e:83:f1:9f:52: a7:ca:8c:6f:1a:b8:38:54:9b:36:12:9b:df:19:fe: 69:de:01:af:ef:b5:d3:d9:ed:7b:26:07:6e:b0:5d: 82:0b:5e:42:93:84:f1:7a:35:16:c3:11:64:15:a6: 2b:3b:2e:15:11:23:45:76:dd:76:24:24:5b:36:e4: 61:bb:78:9d:9f:8e:47:db:4f:94:0c:ed:da:6a:ae: 6b:b8:5e:24:0b:e8:29:b6:43:07:6c:e5:15:88:ad: 56:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:55:70:E5:02:3F:45:4C:F7:F8:CD:10:86:F8:A6:F8:FB:10:82:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/29531714-5912-32a0-9672-e352aeb3fbd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:49:48:ab:9b:fd:b2:b5:fd:ef:c9:9c:d2:6b:1e:23:87:c3: 9b:fa:9e:2f:eb:e7:d7:7e:a9:f3:91:cf:c2:59:87:c2:50:07: 06:c7:30:3b:ec:63:4a:c9:25:1d:fc:03:95:56:85:f7:39:4e: b6:44:95:2a:2a:60:40:0a:47:ec:65:de:eb:89:04:0e:df:8a: a5:f8:1b:73:34:94:d8:0f:19:07:14:56:f8:dc:a8:30:5c:19: ca:c1:cf:95:8b:1c:be:1b:05:ea:46:9d:4f:80:ee:43:ab:b5: 89:34:ac:22:bc:29:72:ab:b9:91:45:63:48:fa:aa:22:ba:ce: b7:87:bc:a9:75:6f:a3:3a:cb:2b:01:76:0f:a7:41:d1:bc:f3: 8b:49:a2:24:0d:5d:70:b3:91:22:34:37:2a:b3:56:70:36:00: ca:71:6c:b3:3c:a1:c6:45:ff:23:6c:0f:77:80:93:09:76:ec: 3b:39:24:5d:a6:2c:7a:b8:48:19:86:7d:3a:5b:4d:40:de:ba: a7:8c:1d:92:2e:78:c2:1c:16:c8:96:c7:7a:b8:70:ee:ba:03: 27:33:59:70:4a:b1:63:7f:9f:87:23:90:0a:ec:df:0b:fc:b6: 06:c5:1c:8b:20:8c:1e:93:e5:b3:50:1a:83:9c:d1:af:c9:5d: 55:7e:95:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0Xi3wGuMcP1htMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk YmIyZTY5YTgtN2Q2ZS00ZTU0LWFlYTAtMjlkYzg0ZjQ5YWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssXYOEPFZkfpSFoQdXcUi77jnpsGcjw8subC +Kbux2M1kxa/7n1mS/hAZVdGPvRXfiACj6ZnC9NUQ0+8uqaSVLAA43HhyincHBal LebSwDY0hkyRurHPDYQEc+kYUFqC8h+H2aursdgbgsAFmxyRTzXF1Q/h5OA7kibO huSywrVd6Ot5WFPRYcn30GXYzEtq9F4NCcYtz0oGrI1SoEHKboPxn1KnyoxvGrg4 VJs2EpvfGf5p3gGv77XT2e17JgdusF2CC15Ck4TxejUWwxFkFaYrOy4VESNFdt12 JCRbNuRhu3idn45H20+UDO3aaq5ruF4kC+gptkMHbOUViK1WFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxVcOUCP0VM9/jNEIb4pvj7EII2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvMjk1MzE3MTQtNTkxMi0z MmEwLTk2NzItZTM1MmFlYjNmYmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FU2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhJSKub/bK1/e/JnNJrHiOHw5v6ni/r59d+qfORz8JZh8JQBwbHMDvs Y0rJJR38A5VWhfc5TrZElSoqYEAKR+xl3uuJBA7fiqX4G3M0lNgPGQcUVvjcqDBc GcrBz5WLHL4bBepGnU+A7kOrtYk0rCK8KXKruZFFY0j6qiK6zreHvKl1b6M6yysB dg+nQdG884tJoiQNXXCzkSI0NyqzVnA2AMpxbLM8ocZF/yNsD3eAkwl27Ds5JF2m LHq4SBmGfTpbTUDeuqeMHZIueMIcFsiWx3q4cO66AyczWXBKsWN/n4cjkArs3wv8 tgbFHIsgjB6T5bNQGoOc0a/JXVV+lYQ= -----END CERTIFICATE-----Generated at Wed Oct 8 23:15:34 2025 by rpki-client