$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/917d967f-48eb-3031-9947-9d4672612fd4.roa File: 917d967f-48eb-3031-9947-9d4672612fd4.roa (raw, json) Hash identifier: uB03OY/a4SsHiZURsb6Ic3qbtY9TR8eiIr10HLiAsMM= Subject key identifier: 0C:B9:B9:88:75:2C:4F:8F:81:1A:86:BA:DD:36:B5:79:B1:F9:8C:AD Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584B1AD171FBDCB2D9CCB4351700 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/917d967f-48eb-3031-9947-9d4672612fd4.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 14618 IP address blocks: 208.95.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:71:fb:dc:b2:d9:cc:b4:35:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=02313dac-768f-40eb-a9d6-ffba70e9f839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6b:68:ec:fa:11:d5:b5:89:23:02:18:e9:68: f6:70:6f:fc:c3:bd:bf:86:f3:03:34:4d:f8:8e:91: de:ca:bf:08:77:fd:a2:31:6f:03:b2:a6:94:6c:35: 34:7a:fa:10:f8:1a:2a:3e:07:ab:5a:71:6f:15:66: cf:e8:3d:93:d5:57:97:bd:45:de:de:f9:1a:a4:7d: e7:a5:13:94:2e:14:64:87:f5:eb:e8:9d:d1:c8:f5: f3:e8:14:55:e2:f3:ee:7e:14:ad:b5:0d:9e:0c:7d: d1:be:94:8d:68:cb:74:b8:c9:4b:3f:9a:e6:01:bc: 60:36:56:4f:19:39:f0:ee:51:b6:a8:8d:c5:11:6a: 07:f4:55:ca:bf:e9:c4:96:ad:cf:ab:2d:70:7e:34: 34:01:8f:0c:42:a4:3f:bc:84:7d:5b:ff:03:bd:37: 11:23:7c:12:6d:b7:a6:b6:05:27:c7:30:68:93:73: 12:3e:b4:3d:dd:74:de:1e:8c:ea:56:e3:de:96:1c: 53:2d:69:37:5e:56:66:af:57:82:f8:1f:e3:41:15: 18:ba:b6:07:a1:33:9a:78:8d:49:28:ed:92:4b:6c: 38:00:fa:1a:c7:4c:2d:73:d5:75:31:c9:2a:58:0a: 1d:1c:7b:b1:92:c1:6e:32:4f:61:e3:84:8d:bf:61: d1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B9:B9:88:75:2C:4F:8F:81:1A:86:BA:DD:36:B5:79:B1:F9:8C:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/917d967f-48eb-3031-9947-9d4672612fd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.95.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:2f:e7:97:b1:b9:26:1e:81:82:3a:b0:61:5a:86:e8:ab:e0: d0:64:dc:56:f6:d0:26:69:b5:30:c8:24:09:b0:31:c3:7d:18: 7f:8c:55:e2:67:01:2f:13:c2:a7:99:89:c6:75:81:3d:df:1d: 52:a2:49:71:83:ea:6f:d3:ec:b5:ff:f2:0f:61:da:75:29:63: 72:2a:0d:0f:63:7b:70:cf:e7:b0:12:96:ff:e5:e8:15:b3:8b: 2f:23:2b:e5:0a:eb:9e:3d:57:1a:b3:75:8f:5b:59:7b:3f:16: b7:9b:ba:8b:69:9f:8d:8c:e2:b6:e6:36:53:06:b3:08:32:2b: 67:b6:b8:e0:f2:47:b1:e4:36:4b:c1:a1:e7:fd:41:3c:ff:73: e3:1e:9c:67:7e:15:d2:14:78:aa:7e:5a:39:e4:fa:e8:dd:ef: 98:36:21:52:03:da:cc:b4:f4:55:09:b5:95:a6:e8:c9:d3:5b: d3:e9:b3:1c:ac:67:3e:bb:38:3c:24:77:8a:2a:da:8e:5d:b2: 00:90:12:40:69:a2:20:bd:d5:4c:8d:6c:6f:91:17:27:ca:77: 3f:85:59:f8:2c:13:79:9b:e1:84:c7:32:78:aa:9d:16:34:c5: 48:c4:4f:6c:f1:19:be:e5:41:a0:c8:47:69:90:8f:2d:66:ea: c7:6d:37:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0XH73LLZzLQ1FwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk MDIzMTNkYWMtNzY4Zi00MGViLWE5ZDYtZmZiYTcwZTlmODM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2to7PoR1bWJIwIY6Wj2cG/8w72/hvMDNE34 jpHeyr8Id/2iMW8DsqaUbDU0evoQ+BoqPgerWnFvFWbP6D2T1VeXvUXe3vkapH3n pROULhRkh/Xr6J3RyPXz6BRV4vPufhSttQ2eDH3RvpSNaMt0uMlLP5rmAbxgNlZP GTnw7lG2qI3FEWoH9FXKv+nElq3Pqy1wfjQ0AY8MQqQ/vIR9W/8DvTcRI3wSbbem tgUnxzBok3MSPrQ93XTeHozqVuPelhxTLWk3XlZmr1eC+B/jQRUYurYHoTOaeI1J KO2SS2w4APoax0wtc9V1MckqWAodHHuxksFuMk9h44SNv2HROQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAy5uYh1LE+PgRqGut02tXmx+YytMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvOTE3ZDk2N2YtNDhlYi0z MDMxLTk5NDctOWQ0NjcyNjEyZmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F+EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsv55exuSYegYI6sGFahuir4NBk3Fb20CZptTDIJAmwMcN9GH+MVeJn AS8TwqeZicZ1gT3fHVKiSXGD6m/T7LX/8g9h2nUpY3IqDQ9je3DP57ASlv/l6BWz iy8jK+UK6549VxqzdY9bWXs/Frebuotpn42M4rbmNlMGswgyK2e2uODyR7HkNkvB oef9QTz/c+MenGd+FdIUeKp+Wjnk+ujd75g2IVID2sy09FUJtZWm6MnTW9Ppsxys Zz67ODwkd4oq2o5dsgCQEkBpoiC91UyNbG+RFyfKdz+FWfgsE3mb4YTHMniqnRY0 xUjET2zxGb7lQaDIR2mQjy1m6sdtN+8= -----END CERTIFICATE-----Generated at Wed Oct 8 21:17:24 2025 by rpki-client