$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/5a8be34b-8cf2-3de2-91c7-a169dee7b629.roa File: 5a8be34b-8cf2-3de2-91c7-a169dee7b629.roa (raw, json) Hash identifier: fg3zDh3WH0S3Svzz9NOiEiTf1zgGRU0gsyMSOZUHBME= Subject key identifier: 75:0E:F9:C1:6A:06:0D:5F:DA:5B:4E:B8:90:F8:84:2C:FC:36:47:B9 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584B1AD178DDB05580D8CE893020 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/5a8be34b-8cf2-3de2-91c7-a169dee7b629.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 19795 IP address blocks: 208.85.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:78:dd:b0:55:80:d8:ce:89:30:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=197e7141-eb27-4ee2-a34c-1cc6f572c895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ed:f7:17:43:53:e3:d9:ee:fa:53:48:45:3d: 2e:bb:fd:28:8a:dd:b9:95:30:bc:56:e7:d9:63:32: f9:46:3b:68:62:9c:3b:67:13:ce:36:cb:ff:ab:46: 6f:08:03:3c:7a:a0:d3:09:57:f3:e6:b0:84:87:49: b0:b7:b2:83:ab:8c:82:d2:f7:03:19:2a:53:e5:81: 8c:c7:3e:19:ba:08:3d:e4:2f:a2:03:c7:12:e5:e3: f7:46:6c:f3:6f:74:a2:ff:01:8c:f3:67:fd:de:f1: 4c:b5:50:1a:e7:1b:f3:dc:ea:43:dc:1a:d8:fe:f8: 93:a2:70:ee:31:fc:49:ef:d3:04:2c:bc:19:98:3a: 1d:de:0f:82:e2:76:a6:50:21:93:21:ca:8d:6f:1e: 2e:85:df:5d:f3:d0:70:70:2f:1e:75:eb:46:61:3f: f0:31:8e:2a:9f:25:99:30:f2:61:8c:8c:b1:bd:60: 32:78:76:11:be:aa:ab:ed:3f:78:e9:c2:b2:fc:83: ac:17:f3:fa:98:ea:7e:09:31:c9:5f:e8:9f:af:72: d7:83:d5:78:ff:bc:55:6a:d9:46:da:68:8f:5b:4f: 80:75:dc:b0:79:ab:4d:b6:3d:a7:6d:9f:2a:31:17: 7a:9a:5b:26:ed:f1:ce:a7:39:51:e5:64:19:24:58: 29:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:0E:F9:C1:6A:06:0D:5F:DA:5B:4E:B8:90:F8:84:2C:FC:36:47:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/5a8be34b-8cf2-3de2-91c7-a169dee7b629.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:94:2d:42:60:4a:bf:6d:37:85:4a:ea:7e:3e:94:24:b6:1b: aa:76:8a:7b:0f:6e:cc:7b:fb:4f:53:66:17:69:35:cf:22:bb: 47:d3:fa:29:32:c0:66:86:26:fd:b3:1c:52:a9:fb:21:ec:39: a2:fc:22:e5:fb:da:94:ac:68:b3:54:64:7a:f1:16:5a:d7:b2: ff:d6:00:51:e9:69:cd:ec:d0:9f:9f:4d:d4:95:be:82:f9:c7: 9e:e6:72:e3:f1:b3:98:04:b6:68:0f:ab:77:5d:ca:91:95:84: dd:af:a7:82:b4:31:eb:f0:23:b1:e6:7a:60:ac:17:28:45:8f: 8e:2c:30:cb:84:6e:89:bf:80:da:ea:bf:7e:31:ef:f2:58:77: d2:14:1d:b7:6b:5e:18:1c:d2:ff:44:96:07:54:b2:cb:cd:a3: 46:43:7e:87:da:49:24:0e:21:e6:e1:0a:58:c5:39:33:44:5a: e2:9c:84:45:a0:69:f3:0c:31:57:7e:4f:32:a4:fb:ed:7a:30: 8f:f0:c9:b3:c6:6d:21:e0:6d:4a:87:50:e5:7b:3c:f0:02:b4: b1:ac:84:ca:dd:cc:ec:5e:0a:9d:e4:90:e6:b8:0b:d9:ce:82: 72:a2:d1:2c:34:8b:65:4e:c3:d7:2c:6d:cd:65:bb:c1:fc:0b: ce:95:9a:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0XjdsFWA2M6JMCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk MTk3ZTcxNDEtZWIyNy00ZWUyLWEzNGMtMWNjNmY1NzJjODk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+33F0NT49nu+lNIRT0uu/0oit25lTC8VufZ YzL5RjtoYpw7ZxPONsv/q0ZvCAM8eqDTCVfz5rCEh0mwt7KDq4yC0vcDGSpT5YGM xz4Zugg95C+iA8cS5eP3Rmzzb3Si/wGM82f93vFMtVAa5xvz3OpD3BrY/viTonDu MfxJ79MELLwZmDod3g+C4namUCGTIcqNbx4uhd9d89BwcC8edetGYT/wMY4qnyWZ MPJhjIyxvWAyeHYRvqqr7T946cKy/IOsF/P6mOp+CTHJX+ifr3LXg9V4/7xVatlG 2miPW0+AddyweatNtj2nbZ8qMRd6mlsm7fHOpzlR5WQZJFgpbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUO+cFqBg1f2ltOuJD4hCz8Nke5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNWE4YmUzNGItOGNmMi0z ZGUyLTkxYzctYTE2OWRlZTdiNjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FU3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuULUJgSr9tN4VK6n4+lCS2G6p2insPbsx7+09TZhdpNc8iu0fT+iky wGaGJv2zHFKp+yHsOaL8IuX72pSsaLNUZHrxFlrXsv/WAFHpac3s0J+fTdSVvoL5 x57mcuPxs5gEtmgPq3ddypGVhN2vp4K0MevwI7HmemCsFyhFj44sMMuEbom/gNrq v34x7/JYd9IUHbdrXhgc0v9ElgdUssvNo0ZDfofaSSQOIebhCljFOTNEWuKchEWg afMMMVd+TzKk++16MI/wybPGbSHgbUqHUOV7PPACtLGshMrdzOxeCp3kkOa4C9nO gnKi0Sw0i2VOw9csbc1lu8H8C86Vmrw= -----END CERTIFICATE-----Generated at Wed Oct 8 23:11:50 2025 by rpki-client