$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9850d129-378e-38bd-a615-acb2a6e4e18b.roa File: 9850d129-378e-38bd-a615-acb2a6e4e18b.roa (raw, json) Hash identifier: 026mjEfHP4HMdu4YjrKhsZ6T877uFdQx4UUWtwWsnJc= Subject key identifier: 17:C5:B6:77:42:C9:BF:4D:64:F8:B5:8B:43:2E:2D:66:B3:94:02:4A Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584B1806D048C5C6FBBEBBBB4700 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9850d129-378e-38bd-a615-acb2a6e4e18b.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 19795 IP address blocks: 208.85.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:d0:48:c5:c6:fb:be:bb:bb:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=3d1628e3-d29e-4560-8991-20dad2c552fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8e:d1:2e:60:56:9f:79:ab:3b:0f:c3:6d:54: b6:d8:b6:ef:d4:33:ac:23:e1:f1:45:d4:0a:f5:0e: bc:40:c4:8a:cc:29:fd:14:be:5f:06:70:36:0e:9a: 80:4c:1f:fb:6e:b9:57:ec:25:13:3c:a1:f4:62:7d: 0f:57:7d:ea:bb:53:a3:18:08:74:d2:2a:7c:8d:1c: 84:d7:8b:45:05:11:d3:14:f1:29:f0:6f:da:95:a1: 72:4e:14:c1:51:f5:72:ca:ad:85:3f:7c:45:99:3f: b4:2f:fb:bc:08:b4:61:42:36:d7:05:a4:b8:17:e5: 96:52:e7:a7:6c:2d:2e:63:51:35:ab:e0:f0:be:8f: c2:6b:7a:ab:38:0c:5a:49:0f:c3:42:ed:b1:17:d0: 46:57:a7:01:9a:9e:9d:65:b2:18:5f:ac:6c:e3:ba: 4a:a3:98:75:71:1b:e9:fa:02:a7:09:b6:be:9f:ea: de:20:18:cc:14:a9:d3:29:d5:23:23:90:f2:49:0a: d8:48:d2:29:dd:c2:3c:c5:70:03:e2:76:27:5f:de: 59:a5:31:31:1f:24:93:10:03:f9:1b:85:9b:eb:88: 38:7f:36:6a:db:7e:00:b0:0f:96:16:91:ff:65:79: 67:cb:35:8b:4b:c2:35:7b:14:39:ad:5b:bc:16:0d: 06:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C5:B6:77:42:C9:BF:4D:64:F8:B5:8B:43:2E:2D:66:B3:94:02:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9850d129-378e-38bd-a615-acb2a6e4e18b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:4a:96:81:4b:9a:66:7e:29:b0:6c:b7:9a:6c:80:82:c5:0e: 80:ad:cc:0e:7c:94:a9:c2:31:b5:7b:92:ac:6f:02:89:36:14: a7:12:2b:1f:88:b4:e5:04:1d:78:57:ea:54:bd:55:21:0e:90: 44:e6:23:16:f0:0d:23:73:3f:fb:49:f2:b2:bb:f3:36:e5:e8: 09:63:13:b7:ca:a9:42:3d:22:0b:a7:26:67:02:8f:c0:71:38: af:82:b9:d0:62:6c:0c:6b:51:8d:6d:72:02:38:43:81:29:b4: 33:f8:62:42:08:10:41:e2:8f:3a:07:9d:d5:7c:7e:8d:51:44: 62:a4:e4:66:93:49:39:c4:80:e6:07:1f:3c:d7:1e:ce:ef:c9: aa:91:a6:71:46:80:9e:69:99:6c:33:cf:a7:51:7e:8f:92:62: a9:77:10:30:2f:b9:58:80:2d:68:69:28:ce:6e:a9:8b:52:d2: 32:e2:05:dd:94:2c:04:a1:16:d3:b9:30:6c:8a:48:6f:12:08: f1:bb:1d:8f:c8:d7:a3:b1:f2:63:ae:1c:26:8c:30:17:32:25: 8f:77:52:fa:4a:01:f5:5a:93:92:9e:c4:f5:b7:9a:39:fe:56: 00:04:4b:30:6c:e3:33:59:b2:a8:d3:a2:8d:58:56:58:1c:34: 88:ee:30:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBtBIxcb7vru7RwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk M2QxNjI4ZTMtZDI5ZS00NTYwLTg5OTEtMjBkYWQyYzU1MmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY7RLmBWn3mrOw/DbVS22Lbv1DOsI+HxRdQK 9Q68QMSKzCn9FL5fBnA2DpqATB/7brlX7CUTPKH0Yn0PV33qu1OjGAh00ip8jRyE 14tFBRHTFPEp8G/alaFyThTBUfVyyq2FP3xFmT+0L/u8CLRhQjbXBaS4F+WWUuen bC0uY1E1q+Dwvo/Ca3qrOAxaSQ/DQu2xF9BGV6cBmp6dZbIYX6xs47pKo5h1cRvp +gKnCba+n+reIBjMFKnTKdUjI5DySQrYSNIp3cI8xXAD4nYnX95ZpTExHySTEAP5 G4Wb64g4fzZq234AsA+WFpH/ZXlnyzWLS8I1exQ5rVu8Fg0GBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfFtndCyb9NZPi1i0MuLWazlAJKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvOTg1MGQxMjktMzc4ZS0z OGJkLWE2MTUtYWNiMmE2ZTRlMThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRKloFLmmZ+KbBst5psgILFDoCtzA58lKnCMbV7kqxvAok2FKcSKx+I tOUEHXhX6lS9VSEOkETmIxbwDSNzP/tJ8rK78zbl6AljE7fKqUI9IgunJmcCj8Bx OK+CudBibAxrUY1tcgI4Q4EptDP4YkIIEEHijzoHndV8fo1RRGKk5GaTSTnEgOYH HzzXHs7vyaqRpnFGgJ5pmWwzz6dRfo+SYql3EDAvuViALWhpKM5uqYtS0jLiBd2U LAShFtO5MGyKSG8SCPG7HY/I16Ox8mOuHCaMMBcyJY93UvpKAfVak5KexPW3mjn+ VgAESzBs4zNZsqjToo1YVlgcNIjuMFE= -----END CERTIFICATE-----Generated at Wed Oct 8 23:12:13 2025 by rpki-client