$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/808f5071-862a-3086-95ab-72c8a5bdeaa3.roa File: 808f5071-862a-3086-95ab-72c8a5bdeaa3.roa (raw, json) Hash identifier: nrz7R3TNYF+XfufypzrC8WeWVa6o6mYjWu31cEinzdE= Subject key identifier: 35:E1:2D:B2:77:B1:B7:8C:9C:AF:5E:81:19:B7:9E:1E:BC:1C:37:30 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584B21CC187EAED150E93601A5C0 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/808f5071-862a-3086-95ab-72c8a5bdeaa3.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 199.255.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:18:7e:ae:d1:50:e9:36:01:a5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=9462af64-de2c-4053-8542-a139e9fe2f7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:86:97:3c:ce:dd:e3:60:5f:70:8d:be:91:ba: 49:97:c8:c0:43:dd:5e:41:01:b6:af:0d:e7:66:7a: dc:71:b6:3b:33:55:15:f5:11:c6:55:69:d7:89:43: b9:93:c3:d1:bf:ff:8c:bd:dd:4c:43:32:ac:60:a9: c3:70:48:eb:9b:59:61:b2:19:4d:2d:d9:b0:f9:8a: e0:05:3c:ec:f4:36:71:10:bf:aa:d8:de:8a:73:28: 4f:07:1e:1c:3f:e5:82:5c:cf:64:d7:0e:f9:15:68: 81:bd:43:f4:01:dc:76:28:fe:c7:61:18:97:a4:18: 0b:d4:d6:46:91:5f:ba:ea:fe:9f:f1:1b:8c:0c:65: ed:68:e0:64:e9:ee:8d:1e:71:60:5e:40:ac:c5:6d: 64:11:22:a5:7c:a2:6a:2f:f8:c3:5c:55:03:4d:5b: 54:d7:2a:88:30:be:49:dd:5c:d1:db:9f:e1:85:b2: 0d:e5:06:d0:52:73:df:fe:5a:91:36:51:57:ac:39: 35:d1:74:f8:f1:99:e5:b2:d2:d2:2a:f5:91:60:49: a6:87:38:0c:fa:08:11:47:36:12:0d:1e:63:34:c8: b7:33:62:bf:2a:e0:e6:c8:73:2f:cc:a8:a7:5b:05: 01:41:52:e9:53:60:d4:25:d9:14:5a:77:be:54:a1: 63:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E1:2D:B2:77:B1:B7:8C:9C:AF:5E:81:19:B7:9E:1E:BC:1C:37:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/808f5071-862a-3086-95ab-72c8a5bdeaa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 199.255.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:5c:e0:fd:a1:28:a5:1f:49:76:6b:da:3a:23:a0:71:1e:a7: 20:ab:2f:a0:5f:7b:21:df:49:fd:b8:81:10:45:ea:b6:ee:44: b6:18:12:e1:1c:ee:1c:77:41:e0:19:6c:90:ec:98:a4:12:9e: f9:7d:9b:2a:4d:02:35:29:4a:53:9b:79:f3:17:80:fb:a4:0e: c8:cb:f5:5f:8e:fb:e5:d0:4e:92:a2:9f:eb:78:4a:c3:21:5b: 58:b0:61:11:7f:fa:6d:75:83:53:ad:ff:2e:58:7d:32:42:da: 68:a7:98:63:d9:59:c1:b4:c4:ac:d2:5b:08:bf:18:5e:39:59: a2:f4:8b:a4:f8:49:df:2e:0f:29:3d:b7:a8:3b:31:7b:79:14: e4:b5:b9:ff:d2:70:0b:c8:9c:b5:39:0b:4b:d3:d3:76:e6:71: 8b:56:22:f5:5a:bc:38:9a:b0:fb:ce:be:d5:b7:e5:50:6c:d7: c5:c1:4b:8b:bc:22:1e:11:6e:4d:0c:da:b2:bd:aa:c6:fe:a9: ae:02:ba:33:66:8e:f8:15:c9:30:a5:77:9f:ca:3f:2b:20:a7: f2:ae:3e:c8:b1:ac:15:f5:2a:e6:40:b5:bb:ff:13:8c:56:21: a5:a8:d9:b7:8f:4d:1b:1e:71:5d:59:f3:bf:06:6d:4d:ea:13: 48:e1:25:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzBh+rtFQ6TYBpcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk OTQ2MmFmNjQtZGUyYy00MDUzLTg1NDItYTEzOWU5ZmUyZjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8IaXPM7d42BfcI2+kbpJl8jAQ91eQQG2rw3n ZnrccbY7M1UV9RHGVWnXiUO5k8PRv/+Mvd1MQzKsYKnDcEjrm1lhshlNLdmw+Yrg BTzs9DZxEL+q2N6KcyhPBx4cP+WCXM9k1w75FWiBvUP0Adx2KP7HYRiXpBgL1NZG kV+66v6f8RuMDGXtaOBk6e6NHnFgXkCsxW1kESKlfKJqL/jDXFUDTVtU1yqIML5J 3VzR25/hhbIN5QbQUnPf/lqRNlFXrDk10XT48ZnlstLSKvWRYEmmhzgM+ggRRzYS DR5jNMi3M2K/KuDmyHMvzKinWwUBQVLpU2DUJdkUWne+VKFj1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXhLbJ3sbeMnK9egRm3nh68HDcwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvODA4ZjUwNzEtODYyYS0z MDg2LTk1YWItNzJjOGE1YmRlYWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChc4P2hKKUfSXZr2jojoHEepyCrL6BfeyHfSf24gRBF6rbuRLYYEuEc 7hx3QeAZbJDsmKQSnvl9mypNAjUpSlObefMXgPukDsjL9V+O++XQTpKin+t4SsMh W1iwYRF/+m11g1Ot/y5YfTJC2minmGPZWcG0xKzSWwi/GF45WaL0i6T4Sd8uDyk9 t6g7MXt5FOS1uf/ScAvInLU5C0vT03bmcYtWIvVavDiasPvOvtW35VBs18XBS4u8 Ih4Rbk0M2rK9qsb+qa4CujNmjvgVyTCld5/KPysgp/KuPsixrBX1KuZAtbv/E4xW IaWo2bePTRsecV1Z878GbU3qE0jhJZI= -----END CERTIFICATE-----Generated at Wed Oct 8 23:15:25 2025 by rpki-client