$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/88eb8d86-28b3-33c8-8b19-16c7663c11d9.roa File: 88eb8d86-28b3-33c8-8b19-16c7663c11d9.roa (raw, json) Hash identifier: Cn7l2Zl+LzQyXSehudyLdIoMAVS4U4Qw2X8YrrMIb60= Subject key identifier: CF:CA:9F:19:9D:5A:9A:E1:E8:84:AE:BA:6B:43:2B:D3:25:A3:7F:5F Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584B27617A90B4789616F8D2B600 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/88eb8d86-28b3-33c8-8b19-16c7663c11d9.roa Signing time: Thu 11 Sep 2025 01:00:33 +0000 ROA not before: Thu 11 Sep 2025 01:00:33 +0000 ROA not after: Wed 10 Dec 2025 02:00:33 +0000 asID: 19795 IP address blocks: 199.255.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:61:7a:90:b4:78:96:16:f8:d2:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 11 01:00:33 2025 GMT Not After : Dec 10 02:00:33 2025 GMT Subject: CN=aa840a02-9606-46aa-b203-413a2ad98cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:75:59:95:c8:2f:cf:2a:a5:1e:06:a9:ef:c1: 90:b2:14:48:2e:c3:d8:09:73:30:cf:2f:b3:7a:8e: 69:22:5e:fd:f0:65:c1:31:b0:a5:60:94:10:d2:fb: c5:ca:de:2c:8c:50:54:35:52:ca:ec:ce:b0:79:7d: ae:e3:b6:db:14:8d:b4:d2:65:04:b9:e9:b4:5a:f1: cb:39:d9:5f:c2:7a:06:9b:e5:a5:b1:42:68:c0:e9: ef:f0:e2:a0:ce:63:dc:c6:95:2a:74:ba:04:d8:e3: 9c:ab:00:56:57:bb:fe:03:8d:a0:cc:1f:ff:2c:76: 72:7b:68:75:bc:6c:c5:e0:ea:e2:3e:97:4a:fc:d9: a1:15:db:d9:25:36:8d:75:1f:80:f3:f1:ce:02:e1: 7c:44:c7:10:cc:16:bc:d8:4b:82:fb:57:10:31:bc: 50:cf:54:cc:4f:70:b3:26:3c:e2:11:9d:c4:49:c4: 7d:00:bf:8d:ad:01:16:1f:1c:25:1b:27:5a:65:7e: 11:cb:6e:27:3e:63:3e:6a:82:33:63:11:5a:71:8f: 26:3d:a8:ea:a3:47:5a:02:ac:fc:4f:11:a3:4f:0e: 5d:6b:c6:9f:39:ae:c6:a8:65:3b:49:09:11:ad:e3: 73:97:37:ed:2c:c7:f7:e3:44:5e:5c:f4:11:bb:4c: 6d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CA:9F:19:9D:5A:9A:E1:E8:84:AE:BA:6B:43:2B:D3:25:A3:7F:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/88eb8d86-28b3-33c8-8b19-16c7663c11d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 199.255.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:c3:34:da:19:28:93:8b:94:2d:0f:2f:fb:27:ac:07:b4:31: c3:2f:d3:69:89:b0:c9:b2:6d:20:95:b7:57:a8:5c:57:2c:a2: dd:ea:e5:94:04:6b:f7:9a:f7:5c:70:ad:4b:8f:49:a5:4f:67: e0:81:4a:fd:5d:00:0f:9b:00:63:77:67:9a:5d:52:86:35:20: 2b:5b:a5:ad:92:b6:dd:8d:96:37:8f:ae:35:5c:a5:6a:af:2d: 0f:8b:3b:3b:f0:c0:a9:20:3a:f2:20:4b:c4:d2:55:94:5b:d9: 50:e1:4a:d8:71:d7:85:63:1c:8b:07:87:d0:a4:30:32:11:87: d1:6a:94:3f:b1:62:d1:98:f0:87:62:12:c2:46:9e:60:3c:a0: 27:2b:1e:f6:b3:f6:5f:cd:97:5d:9f:34:d7:1f:23:83:6a:70: 12:0c:2b:93:22:80:3a:09:15:8f:43:16:ad:d6:c3:0d:a4:01: 77:f5:00:7c:4f:64:9f:8b:86:6b:e1:f0:70:8f:ea:7c:ca:23: 95:e0:40:45:a8:00:92:b8:81:8c:25:e5:c8:3b:eb:a2:91:26: 56:de:69:4b:93:08:66:7c:00:c6:d0:5e:49:99:c9:fc:e3:8f: b0:98:63:a7:f0:c7:0f:c3:c6:a5:e4:70:db:2b:e7:c6:45:4c: f2:b0:d4:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsnYXqQtHiWFvjStgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDkxMTAxMDAzM1oXDTI1MTIxMDAyMDAzM1owLzEtMCsGA1UEAxMk YWE4NDBhMDItOTYwNi00NmFhLWIyMDMtNDEzYTJhZDk4Y2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnVZlcgvzyqlHgap78GQshRILsPYCXMwzy+z eo5pIl798GXBMbClYJQQ0vvFyt4sjFBUNVLK7M6weX2u47bbFI200mUEuem0WvHL OdlfwnoGm+WlsUJowOnv8OKgzmPcxpUqdLoE2OOcqwBWV7v+A42gzB//LHZye2h1 vGzF4OriPpdK/NmhFdvZJTaNdR+A8/HOAuF8RMcQzBa82EuC+1cQMbxQz1TMT3Cz JjziEZ3EScR9AL+NrQEWHxwlGydaZX4Ry24nPmM+aoIzYxFacY8mPajqo0daAqz8 TxGjTw5da8afOa7GqGU7SQkRreNzlzftLMf340ReXPQRu0xtUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/KnxmdWprh6ISuumtDK9Mlo39fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvODhlYjhkODYtMjhiMy0z M2M4LThiMTktMTZjNzY2M2MxMWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/8hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjDNNoZKJOLlC0PL/snrAe0McMv02mJsMmybSCVt1eoXFcsot3q5ZQE a/ea91xwrUuPSaVPZ+CBSv1dAA+bAGN3Z5pdUoY1ICtbpa2Stt2NljePrjVcpWqv LQ+LOzvwwKkgOvIgS8TSVZRb2VDhSthx14VjHIsHh9CkMDIRh9FqlD+xYtGY8Idi EsJGnmA8oCcrHvaz9l/Nl12fNNcfI4NqcBIMK5MigDoJFY9DFq3Www2kAXf1AHxP ZJ+Lhmvh8HCP6nzKI5XgQEWoAJK4gYwl5cg766KRJlbeaUuTCGZ8AMbQXkmZyfzj j7CYY6fwxw/DxqXkcNsr58ZFTPKw1EI= -----END CERTIFICATE-----Generated at Thu Oct 9 01:16:54 2025 by rpki-client