$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4e4c0e81-e16f-3e88-8ef3-ee4f845ac8a6.roa File: 4e4c0e81-e16f-3e88-8ef3-ee4f845ac8a6.roa (raw, json) Hash identifier: gIc/pvX8U+9MAkaj8eikwcxbFsgaNEFvq6pE1uOZQmw= Subject key identifier: 25:A0:99:EE:8D:B4:7F:4C:F6:7B:E9:1F:02:32:8B:B7:3D:B9:D9:B8 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584B1AD1723E0806442EAEB64D00 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4e4c0e81-e16f-3e88-8ef3-ee4f845ac8a6.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 14618 IP address blocks: 208.95.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:72:3e:08:06:44:2e:ae:b6:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=d7c33e6a-50db-4769-85e9-a72db37e6a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:81:41:5b:f4:b5:63:44:be:23:67:b1:3e:7c: d0:18:0a:93:6c:43:3a:d5:0f:ab:f5:c2:28:31:05: 25:b2:6f:33:59:2b:85:ad:7a:4c:e9:0a:03:92:6f: fc:fc:d5:4a:44:d9:ea:fe:6a:1a:94:53:16:8e:aa: 79:57:3e:52:1f:af:e5:b5:be:4d:32:71:aa:6d:68: c8:8f:b0:b4:49:4c:0a:96:5c:da:e6:0f:d4:f7:fe: d1:9d:60:30:0e:59:56:3f:bc:5a:cc:1f:fe:40:30: a2:f9:c0:a2:c4:da:0f:54:17:6d:79:0f:0f:82:45: 12:41:e4:3d:8f:1e:fe:ba:54:07:0f:a8:f2:78:17: 4b:2a:4d:67:05:b3:1a:35:4b:33:db:28:cf:2b:2f: c4:5d:a0:ea:79:6d:ec:be:82:09:8f:c2:36:3d:77: 31:fe:d8:88:3d:73:22:63:88:9b:f9:a6:ce:9e:ee: f2:14:ea:44:67:03:8a:b3:de:84:b9:fe:fa:45:ab: 5e:5d:80:5d:01:06:46:0c:6b:fe:42:ff:88:78:86: e5:c9:89:5d:1f:3f:68:09:1a:cf:6b:7a:4f:60:de: 01:44:60:68:e5:38:c0:d4:41:2d:ec:29:fa:9a:d5: c6:13:58:54:74:1c:79:49:af:b8:76:2c:61:ad:e0: c6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A0:99:EE:8D:B4:7F:4C:F6:7B:E9:1F:02:32:8B:B7:3D:B9:D9:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4e4c0e81-e16f-3e88-8ef3-ee4f845ac8a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.95.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:8c:12:18:db:07:43:05:be:32:cd:22:bc:e3:6d:3e:77:40: 5f:36:8f:f4:57:49:c4:2c:45:36:d8:f6:fd:0e:d2:d0:e0:14: 37:2b:10:bb:b6:19:97:9d:86:f5:e0:6c:e7:0b:e0:02:46:19: 81:1f:fd:ea:7b:99:15:f3:cc:98:1d:f1:95:80:58:fb:25:05: ba:a3:40:95:08:2c:57:32:74:a3:7d:d2:8f:01:a3:53:ec:4a: 33:36:a2:04:f4:a6:4e:30:90:7f:4b:25:af:25:c0:88:0d:47: 30:63:62:6c:ef:70:27:56:56:d0:83:9e:7a:d0:b2:90:69:61: dd:5a:f7:1e:c6:f0:bc:ef:01:1b:47:fb:1b:48:e5:ea:a9:2f: cd:dd:a0:31:0e:8f:83:ad:a9:ef:fd:6d:11:72:70:3b:e0:fb: 7b:cb:20:bf:89:e0:af:fd:62:3a:cb:b7:21:a2:60:de:26:9c: 74:7f:49:1f:6a:47:d6:23:39:1b:f5:19:75:a7:02:8b:c7:4d: 15:1f:36:42:93:fe:29:39:2d:87:10:5a:e1:be:d2:07:87:4d: 27:54:3a:46:20:c9:d3:88:22:e7:ee:dd:04:5e:25:36:55:ec: 97:d5:60:2b:ef:a8:90:34:9a:58:cc:5b:4e:16:83:c6:f2:7f: 80:42:5c:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0XI+CAZELq62TQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ZDdjMzNlNmEtNTBkYi00NzY5LTg1ZTktYTcyZGIzN2U2YTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYFBW/S1Y0S+I2exPnzQGAqTbEM61Q+r9cIo MQUlsm8zWSuFrXpM6QoDkm/8/NVKRNnq/moalFMWjqp5Vz5SH6/ltb5NMnGqbWjI j7C0SUwKllza5g/U9/7RnWAwDllWP7xazB/+QDCi+cCixNoPVBdteQ8PgkUSQeQ9 jx7+ulQHD6jyeBdLKk1nBbMaNUsz2yjPKy/EXaDqeW3svoIJj8I2PXcx/tiIPXMi Y4ib+abOnu7yFOpEZwOKs96Euf76RateXYBdAQZGDGv+Qv+IeIblyYldHz9oCRrP a3pPYN4BRGBo5TjA1EEt7Cn6mtXGE1hUdBx5Sa+4dixhreDGDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWgme6NtH9M9nvpHwIyi7c9udm4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNGU0YzBlODEtZTE2Zi0z ZTg4LThlZjMtZWU0Zjg0NWFjOGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F+FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiMEhjbB0MFvjLNIrzjbT53QF82j/RXScQsRTbY9v0O0tDgFDcrELu2 GZedhvXgbOcL4AJGGYEf/ep7mRXzzJgd8ZWAWPslBbqjQJUILFcydKN90o8Bo1Ps SjM2ogT0pk4wkH9LJa8lwIgNRzBjYmzvcCdWVtCDnnrQspBpYd1a9x7G8LzvARtH +xtI5eqpL83doDEOj4Otqe/9bRFycDvg+3vLIL+J4K/9YjrLtyGiYN4mnHR/SR9q R9YjORv1GXWnAovHTRUfNkKT/ik5LYcQWuG+0geHTSdUOkYgydOIIufu3QReJTZV 7JfVYCvvqJA0mljMW04Wg8byf4BCXDY= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:10 2025 by rpki-client