$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/3c829a11-727a-3693-9413-1dbca27bc52c.roa File: 3c829a11-727a-3693-9413-1dbca27bc52c.roa (raw, json) Hash identifier: BPywSOUNY1TZ2KS8n7IfMW7mTSHT0g/GxFRgYZ1ofdM= Subject key identifier: 3F:1A:34:EB:52:DE:75:00:21:EA:B4:9F:67:5E:49:B2:66:21:A0:B2 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584B1806D0342701877CADAE3EC0 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/3c829a11-727a-3693-9413-1dbca27bc52c.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 14618 IP address blocks: 208.73.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:d0:34:27:01:87:7c:ad:ae:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=7c0e519e-a620-4c9b-8d28-19389288efe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:32:1a:12:49:b7:f2:79:94:d9:10:13:4e:ac: b2:2e:d4:74:53:00:87:96:9c:54:df:82:c7:8c:85: df:ae:bb:29:14:b9:3a:9d:fe:10:26:18:d1:f4:63: 9b:5b:c0:e2:ff:2f:91:e7:13:70:60:5e:32:2e:53: f3:66:c8:72:2f:83:42:6c:d5:eb:7d:5f:2a:ad:cb: 80:b4:c1:45:72:a0:08:1a:93:04:05:50:43:bd:21: 43:6b:c4:bb:f4:25:55:df:42:77:70:cf:ec:d3:e5: cf:d4:2c:20:44:39:1c:21:c3:e6:e3:c7:4e:2d:25: 37:33:9d:57:23:06:0d:6f:27:2b:cc:2b:51:de:2d: 87:bd:65:75:2a:dc:5d:12:8a:9d:42:1a:4e:0f:68: 0a:55:bf:f9:6a:59:8d:b6:6f:10:e7:45:25:f6:20: e4:4b:cb:25:0c:00:1f:2c:0b:4b:c4:9c:82:09:6c: 7f:1c:70:99:dd:2c:39:55:05:6a:a7:db:2a:0d:4b: 00:93:1a:e5:64:a8:cb:a4:80:e5:8e:d1:b0:b7:d4: f8:0e:71:84:06:66:db:c1:41:13:00:a2:7b:bd:41: 77:99:ab:17:5b:7e:bf:d9:81:93:6b:8d:0d:6a:ca: 59:24:22:02:fa:2b:07:8c:90:57:5f:0d:02:9c:1f: 9d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:1A:34:EB:52:DE:75:00:21:EA:B4:9F:67:5E:49:B2:66:21:A0:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/3c829a11-727a-3693-9413-1dbca27bc52c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.73.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:c2:23:73:cb:df:ea:02:a0:c1:c6:be:b8:7a:b9:53:bc:27: 94:59:81:6d:48:91:df:29:e7:63:02:bb:f6:20:e4:7e:f9:81: 9b:5a:c0:62:72:0e:a1:19:70:12:9a:2d:3a:a7:89:eb:a9:9a: 72:3a:5d:4f:47:1a:06:a1:f9:d3:96:4d:bd:79:1e:ca:90:d6: aa:2c:3a:0b:f6:2e:87:2f:e2:6b:0a:c5:8f:b2:12:a3:85:52: 2d:db:ee:19:e8:f8:5d:17:e2:2a:ad:0f:43:5c:8c:85:1d:23: bb:66:99:ab:21:38:bf:ef:5c:84:88:0a:9e:49:3f:e0:ee:20: 10:3d:7c:82:db:e9:2c:cc:df:a9:86:96:98:0f:71:79:01:b9: 1d:d2:9e:d9:1d:6c:ca:a1:86:82:6b:d6:89:5f:81:40:28:15: 89:a1:e5:15:80:bc:9e:86:1c:e8:ec:d9:10:92:f3:f0:63:6d: cc:4d:00:0c:72:e8:f4:3f:f1:f1:1d:a4:57:8e:b0:a3:df:3a: b1:78:36:86:a3:41:6b:f1:ef:2d:06:c2:81:22:f1:38:94:45: ad:7c:87:f5:99:53:17:1f:67:9e:50:76:8d:82:bf:5f:7d:4b: de:af:7f:a9:51:bc:a6:9b:9a:cb:a1:0f:8e:02:59:ac:84:b5: 47:f0:1f:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBtA0JwGHfK2uPsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk N2MwZTUxOWUtYTYyMC00YzliLThkMjgtMTkzODkyODhlZmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTIaEkm38nmU2RATTqyyLtR0UwCHlpxU34LH jIXfrrspFLk6nf4QJhjR9GObW8Di/y+R5xNwYF4yLlPzZshyL4NCbNXrfV8qrcuA tMFFcqAIGpMEBVBDvSFDa8S79CVV30J3cM/s0+XP1CwgRDkcIcPm48dOLSU3M51X IwYNbycrzCtR3i2HvWV1KtxdEoqdQhpOD2gKVb/5almNtm8Q50Ul9iDkS8slDAAf LAtLxJyCCWx/HHCZ3Sw5VQVqp9sqDUsAkxrlZKjLpIDljtGwt9T4DnGEBmbbwUET AKJ7vUF3masXW36/2YGTa40NaspZJCIC+isHjJBXXw0CnB+dJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8aNOtS3nUAIeq0n2deSbJmIaCyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvM2M4MjlhMTEtNzI3YS0z NjkzLTk0MTMtMWRiY2EyN2JjNTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EkFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLCI3PL3+oCoMHGvrh6uVO8J5RZgW1Ikd8p52MCu/Yg5H75gZtawGJy DqEZcBKaLTqnieupmnI6XU9HGgah+dOWTb15HsqQ1qosOgv2Locv4msKxY+yEqOF Ui3b7hno+F0X4iqtD0NcjIUdI7tmmashOL/vXISICp5JP+DuIBA9fILb6SzM36mG lpgPcXkBuR3SntkdbMqhhoJr1olfgUAoFYmh5RWAvJ6GHOjs2RCS8/BjbcxNAAxy 6PQ/8fEdpFeOsKPfOrF4NoajQWvx7y0GwoEi8TiURa18h/WZUxcfZ55Qdo2Cv199 S96vf6lRvKabmsuhD44CWayEtUfwH28= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:14 2025 by rpki-client