$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/67f4abfc-cbc8-3d4b-9d56-90af0d60faa6.roa File: 67f4abfc-cbc8-3d4b-9d56-90af0d60faa6.roa (raw, json) Hash identifier: Aw4e+ANvHICxVvNOPcALuSBT1naCWtWjmzjFZTX80Cc= Subject key identifier: FD:57:D8:F3:0B:3F:8C:35:65:04:43:80:76:4D:29:B5:3F:0D:02:BA Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584B1AD1788BDBAF25AA69468E00 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/67f4abfc-cbc8-3d4b-9d56-90af0d60faa6.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 14618 IP address blocks: 208.85.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:78:8b:db:af:25:aa:69:46:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=c46ad636-1bb1-4718-9b98-cdff0b2a8ad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:91:82:94:f1:d6:93:fa:27:72:de:bc:8a:69: 39:6b:64:f6:c1:b6:1b:36:2b:1a:6b:d0:b3:91:c3: 50:f8:89:53:19:71:49:92:4d:0b:b9:e9:fb:81:5a: 80:03:08:bd:3f:e9:a1:1a:99:05:fc:6f:72:f5:94: 69:6e:4d:88:76:fc:5f:0e:49:99:cb:f1:0f:97:f3: bf:6e:d9:41:2c:e1:7f:05:25:5d:72:81:4c:b0:39: 4f:b0:1c:fb:15:3c:9e:b1:9a:42:f5:dc:f0:ed:43: 24:cf:14:4b:43:e8:70:47:e2:ae:91:84:03:d1:55: bd:aa:19:d0:17:a7:45:af:55:f1:66:5b:2d:2d:73: 93:89:24:11:bd:45:3f:1d:53:13:98:5c:c1:e7:e1: fd:9c:00:e3:2f:b4:bb:95:6c:b1:a7:08:a4:78:21: 3a:67:a7:c8:d4:84:23:39:71:32:99:58:81:69:f3: 7d:5f:79:25:2d:ac:30:83:3b:65:fc:b8:82:69:08: ad:8e:da:0c:f2:dd:e3:7c:9a:a2:78:1d:35:60:61: b3:28:cf:f3:ba:ae:29:c1:04:5a:46:c9:91:da:8d: 56:ec:3b:a4:1d:c2:fb:12:de:81:bf:d6:4c:5a:4c: a9:65:45:ba:e5:42:32:6c:6e:ac:48:3a:db:7c:95: 1b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:57:D8:F3:0B:3F:8C:35:65:04:43:80:76:4D:29:B5:3F:0D:02:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/67f4abfc-cbc8-3d4b-9d56-90af0d60faa6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:a9:8e:99:11:d9:2c:d4:f5:14:40:00:50:43:3c:ff:d7:26: 6b:22:09:61:e5:7b:0a:5a:25:c6:de:c0:fc:1c:01:75:6d:56: 7b:0e:e1:0f:e8:2c:9d:2a:4a:2f:57:46:a1:4c:47:59:f7:e8: 16:f9:d6:bd:0d:56:28:03:05:ec:64:ad:a7:ce:b9:07:44:ab: 65:1b:df:01:f1:21:94:c6:ae:7e:07:31:52:d5:fc:21:ef:7d: d6:82:5f:b3:97:aa:40:7c:a4:08:15:d8:89:bc:74:0d:1f:77: 0a:b2:c3:3a:54:63:79:12:b6:57:4d:97:cb:43:5a:88:06:d5: 10:74:f8:b9:23:c4:07:44:d3:09:88:d7:8c:bb:31:30:a7:e3: af:e6:8e:0e:a9:6e:ef:d3:bb:7f:59:47:18:87:ba:31:b3:f0: 29:c3:f0:5e:f7:89:cd:69:8e:c9:ed:3e:78:e2:0a:d9:60:c4: 25:95:a0:b0:50:cd:e6:a1:40:24:a1:f3:2d:0b:98:b3:36:99: 27:3e:13:a1:f7:c2:2b:92:c8:9f:a1:63:cd:7a:ff:ce:56:df: 44:67:35:41:20:59:2a:99:63:1c:3c:c7:ba:e2:d1:09:6c:83: d6:fb:bb:29:52:ef:6f:74:83:d0:fc:47:d2:67:43:ba:89:0d: bd:cf:63:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0XiL268lqmlGjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk YzQ2YWQ2MzYtMWJiMS00NzE4LTliOTgtY2RmZjBiMmE4YWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJGClPHWk/onct68imk5a2T2wbYbNisaa9Cz kcNQ+IlTGXFJkk0Luen7gVqAAwi9P+mhGpkF/G9y9ZRpbk2IdvxfDkmZy/EPl/O/ btlBLOF/BSVdcoFMsDlPsBz7FTyesZpC9dzw7UMkzxRLQ+hwR+KukYQD0VW9qhnQ F6dFr1XxZlstLXOTiSQRvUU/HVMTmFzB5+H9nADjL7S7lWyxpwikeCE6Z6fI1IQj OXEymViBafN9X3klLawwgztl/LiCaQitjtoM8t3jfJqieB01YGGzKM/zuq4pwQRa RsmR2o1W7DukHcL7Et6Bv9ZMWkypZUW65UIybG6sSDrbfJUbLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1X2PMLP4w1ZQRDgHZNKbU/DQK6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNjdmNGFiZmMtY2JjOC0z ZDRiLTlkNTYtOTBhZjBkNjBmYWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FU1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+pjpkR2SzU9RRAAFBDPP/XJmsiCWHlewpaJcbewPwcAXVtVnsO4Q/o LJ0qSi9XRqFMR1n36Bb51r0NVigDBexkrafOuQdEq2Ub3wHxIZTGrn4HMVLV/CHv fdaCX7OXqkB8pAgV2Im8dA0fdwqywzpUY3kStldNl8tDWogG1RB0+LkjxAdE0wmI 14y7MTCn46/mjg6pbu/Tu39ZRxiHujGz8CnD8F73ic1pjsntPnjiCtlgxCWVoLBQ zeahQCSh8y0LmLM2mSc+E6H3wiuSyJ+hY816/85W30RnNUEgWSqZYxw8x7ri0Qls g9b7uylS7290g9D8R9JnQ7qJDb3PY9M= -----END CERTIFICATE-----Generated at Wed Oct 8 21:29:55 2025 by rpki-client