$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/422a23f3-46df-3a7b-afbd-3ae916bba51f.roa File: 422a23f3-46df-3a7b-afbd-3ae916bba51f.roa (raw, json) Hash identifier: 4UE1eWpIoIr4gOeIllV+U7Cr1dCRrCOPHJuNXbVeroo= Subject key identifier: 12:9C:78:7D:6C:FE:65:2F:F6:D3:C4:43:E7:AD:EA:2A:E5:B7:67:09 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584B1AD1716EE9EE8EF69A028E40 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/422a23f3-46df-3a7b-afbd-3ae916bba51f.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 14618 IP address blocks: 208.85.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:71:6e:e9:ee:8e:f6:9a:02:8e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=8c5ffc4d-b06d-4c0a-9f6f-a63f4fe658a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:66:c9:6d:98:26:90:e7:3b:d9:4e:fe:61:55: b8:62:89:e1:a2:69:d8:76:64:a1:61:78:52:d0:7a: 2b:c3:cd:0f:05:f2:79:32:e3:22:c6:ea:40:b8:b5: 9d:50:1d:a8:1c:1a:b5:95:2f:91:36:6e:52:80:5a: 79:7a:bf:f7:55:cb:f7:ac:d5:e3:80:b2:5e:8a:30: 7d:d0:c7:fa:35:79:d1:43:a4:3d:a8:d8:c6:e7:41: f1:89:64:e1:b4:8c:42:dd:df:ec:4f:cc:7b:7a:cd: 11:19:b2:f4:0c:b8:a1:9a:92:c3:7a:d9:77:dc:ee: fb:ff:2d:06:27:12:07:78:98:9f:c6:56:cd:79:48: 37:07:67:c4:98:b0:0a:e7:5a:46:1f:44:23:63:21: cf:72:70:4b:23:9f:9e:e8:1d:99:6a:60:0f:91:70: d6:a3:21:7f:3d:14:51:fe:01:50:95:ee:3f:85:ad: 08:db:4e:68:7e:4d:f9:25:47:c9:65:90:c8:cb:87: 25:6b:e1:4e:f4:52:e4:79:01:10:18:7a:54:63:9a: 76:34:3e:4d:ce:a9:3c:1e:24:93:3a:35:9c:17:d5: ae:07:bf:9a:10:62:eb:97:ca:f6:3c:8c:92:2b:46: ce:d6:dc:a0:87:31:c8:a8:97:fa:3d:df:c8:3a:c1: bf:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9C:78:7D:6C:FE:65:2F:F6:D3:C4:43:E7:AD:EA:2A:E5:B7:67:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/422a23f3-46df-3a7b-afbd-3ae916bba51f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:07:16:ae:c8:70:54:a7:3f:7b:df:99:50:ae:84:76:a4:e8: f9:f2:cc:3f:ee:63:3a:12:76:74:ea:65:3d:83:40:71:6d:a5: 69:cd:1f:8f:36:d4:bf:87:dc:20:4f:37:73:3d:95:8f:ba:f3: 2e:a9:6f:a1:f7:65:4e:42:70:27:42:71:3b:8b:a3:e8:fb:4a: 65:e5:11:55:7f:ed:ba:a3:6d:30:0c:4d:db:88:51:de:9d:70: df:56:2a:c7:6a:77:a7:4c:72:47:11:d2:78:70:2f:24:34:93: 9d:73:d2:b6:41:ed:0f:78:d0:e9:88:1a:09:06:87:f6:e7:00: 01:6f:9a:ea:5f:cc:21:53:4f:ca:bf:ae:29:6e:99:5f:fc:19: ad:f4:9b:bb:09:75:cb:18:a2:22:bf:e3:bd:c9:41:6b:d3:c7: f6:ce:41:a5:61:0e:dc:c2:34:16:50:1b:a9:23:21:ca:0a:f4: 43:fa:aa:59:dd:a4:b9:a6:85:12:1d:79:8b:b2:06:f5:f1:2a: aa:63:37:69:cd:c3:05:d1:40:2a:20:3c:61:b5:a2:f8:36:23: 72:de:01:c2:c4:1c:0d:9c:bd:04:6b:f3:4e:8f:bd:c5:f8:21: f6:ce:48:08:20:56:26:ff:b6:b9:c7:a9:a4:4c:2c:57:11:78: a6:c8:73:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0XFu6e6O9poCjkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk OGM1ZmZjNGQtYjA2ZC00YzBhLTlmNmYtYTYzZjRmZTY1OGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2bJbZgmkOc72U7+YVW4YonhomnYdmShYXhS 0Horw80PBfJ5MuMixupAuLWdUB2oHBq1lS+RNm5SgFp5er/3Vcv3rNXjgLJeijB9 0Mf6NXnRQ6Q9qNjG50HxiWThtIxC3d/sT8x7es0RGbL0DLihmpLDetl33O77/y0G JxIHeJifxlbNeUg3B2fEmLAK51pGH0QjYyHPcnBLI5+e6B2ZamAPkXDWoyF/PRRR /gFQle4/ha0I205ofk35JUfJZZDIy4cla+FO9FLkeQEQGHpUY5p2ND5Nzqk8HiST OjWcF9WuB7+aEGLrl8r2PIySK0bO1tyghzHIqJf6Pd/IOsG/nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKceH1s/mUv9tPEQ+et6irlt2cJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNDIyYTIzZjMtNDZkZi0z YTdiLWFmYmQtM2FlOTE2YmJhNTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FU0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwHFq7IcFSnP3vfmVCuhHak6PnyzD/uYzoSdnTqZT2DQHFtpWnNH482 1L+H3CBPN3M9lY+68y6pb6H3ZU5CcCdCcTuLo+j7SmXlEVV/7bqjbTAMTduIUd6d cN9WKsdqd6dMckcR0nhwLyQ0k51z0rZB7Q940OmIGgkGh/bnAAFvmupfzCFTT8q/ rilumV/8Ga30m7sJdcsYoiK/473JQWvTx/bOQaVhDtzCNBZQG6kjIcoK9EP6qlnd pLmmhRIdeYuyBvXxKqpjN2nNwwXRQCogPGG1ovg2I3LeAcLEHA2cvQRr806PvcX4 IfbOSAggVib/trnHqaRMLFcReKbIc6o= -----END CERTIFICATE-----Generated at Wed Oct 8 21:31:02 2025 by rpki-client