$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9e385ca2-c418-3d2f-acb5-00a220501733.roa File: 9e385ca2-c418-3d2f-acb5-00a220501733.roa (raw, json) Hash identifier: qZNVEywH0+hkIKj6/PsjsCuMuza4IG9HA5bm2HrGk7o= Subject key identifier: 33:BB:EF:34:28:4E:79:E8:4E:69:AA:9A:0C:A5:05:94:F1:62:9A:7D Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584B1806D05EFF4B9C055611A000 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9e385ca2-c418-3d2f-acb5-00a220501733.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 19795 IP address blocks: 208.85.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:d0:5e:ff:4b:9c:05:56:11:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=15f0f5fe-b266-42d5-8ab9-9c38eb2b52c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:39:7c:4b:ae:dd:f1:48:de:b7:b2:4f:a6:9f: 95:41:8d:2c:ea:e2:aa:1b:33:71:1a:19:14:14:26: ff:41:2d:21:67:1b:95:1e:26:82:7c:59:e9:a0:8b: 3f:95:ea:26:94:7b:49:19:44:9a:14:9c:d7:24:4d: de:be:11:89:75:05:f7:f0:82:57:1a:06:f2:f2:40: ba:03:26:4f:f9:c9:fd:bd:59:dd:57:6d:8e:b0:29: 57:c1:e9:57:8e:1c:f2:26:06:0f:b4:c5:c1:3a:16: 4a:a8:96:f2:03:be:01:c0:b2:44:8e:be:60:d1:df: 8a:1b:fb:fc:cf:46:02:58:46:fa:02:61:99:e6:ee: 8b:04:d6:7a:b8:ad:1c:f5:b5:3d:66:0f:4f:e3:a3: 1a:0a:d4:1c:8e:97:a8:fd:1b:aa:51:96:cf:36:9a: e5:68:f7:2a:16:7c:ec:5f:fc:2a:0f:dd:25:1f:4a: 83:79:e8:5e:f1:6a:a6:b9:4b:13:6e:9b:bc:76:c7: 39:63:df:c5:5a:6b:45:ac:77:c3:5a:12:b3:05:9e: 04:fc:ed:d2:ae:74:e4:72:9c:ad:c8:ce:7f:27:79: d8:1e:5d:7f:64:8e:3f:6f:0f:5b:54:c1:29:9d:4f: 57:31:22:7c:d2:f0:6c:0e:14:d4:c7:bc:1e:c6:c5: 1c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:BB:EF:34:28:4E:79:E8:4E:69:AA:9A:0C:A5:05:94:F1:62:9A:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9e385ca2-c418-3d2f-acb5-00a220501733.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:48:80:c0:81:f7:00:b6:75:b6:9e:06:22:34:73:f5:eb:42: 5e:36:e0:e1:59:94:05:6f:1f:f1:be:b6:ac:1c:ec:b1:28:7c: 60:dc:9a:33:a8:59:8f:83:27:3f:b1:98:bd:d8:1b:12:f2:97: 19:50:7f:27:18:30:79:1e:08:21:02:de:b5:c6:d0:c9:04:17: 2e:e1:2a:19:ea:2a:4e:3e:ef:9f:0e:d7:54:87:c0:32:b5:39: d7:3e:43:c0:ce:4e:4a:a9:ca:d3:11:f0:d3:5e:f5:72:61:31: fc:9b:74:28:e5:6a:6f:32:23:bc:5a:fa:2e:d7:7f:0f:64:04: 23:07:67:6b:d9:01:c0:36:34:c7:82:3e:a1:0b:c1:a1:5e:55: 49:34:0c:aa:63:62:19:57:ee:e3:94:ba:25:01:d7:41:3a:d7: 29:17:da:28:a0:2c:4d:75:0e:cf:7c:f4:da:87:ea:d7:bd:49: 1c:31:37:29:ca:e3:54:aa:1c:a2:3a:47:a3:9b:b4:50:44:d6: b1:31:e9:89:a0:42:34:30:a0:09:07:a4:ab:69:47:cd:40:aa: 62:fa:90:c5:97:6a:07:46:20:2f:c7:0d:bf:cc:a6:ee:a1:41: 79:72:11:79:9f:42:dc:be:44:4e:47:a6:39:0c:32:d0:01:78: 08:5f:e3:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBtBe/0ucBVYRoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk MTVmMGY1ZmUtYjI2Ni00MmQ1LThhYjktOWMzOGViMmI1MmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojl8S67d8Ujet7JPpp+VQY0s6uKqGzNxGhkU FCb/QS0hZxuVHiaCfFnpoIs/leomlHtJGUSaFJzXJE3evhGJdQX38IJXGgby8kC6 AyZP+cn9vVndV22OsClXwelXjhzyJgYPtMXBOhZKqJbyA74BwLJEjr5g0d+KG/v8 z0YCWEb6AmGZ5u6LBNZ6uK0c9bU9Zg9P46MaCtQcjpeo/RuqUZbPNprlaPcqFnzs X/wqD90lH0qDeehe8WqmuUsTbpu8dsc5Y9/FWmtFrHfDWhKzBZ4E/O3SrnTkcpyt yM5/J3nYHl1/ZI4/bw9bVMEpnU9XMSJ80vBsDhTUx7wexsUcQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDO77zQoTnnoTmmqmgylBZTxYpp9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvOWUzODVjYTItYzQxOC0z ZDJmLWFjYjUtMDBhMjIwNTAxNzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FUyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpIgMCB9wC2dbaeBiI0c/XrQl424OFZlAVvH/G+tqwc7LEofGDcmjOo WY+DJz+xmL3YGxLylxlQfycYMHkeCCEC3rXG0MkEFy7hKhnqKk4+758O11SHwDK1 Odc+Q8DOTkqpytMR8NNe9XJhMfybdCjlam8yI7xa+i7Xfw9kBCMHZ2vZAcA2NMeC PqELwaFeVUk0DKpjYhlX7uOUuiUB10E61ykX2iigLE11Ds989NqH6te9SRwxNynK 41SqHKI6R6ObtFBE1rEx6YmgQjQwoAkHpKtpR81AqmL6kMWXagdGIC/HDb/Mpu6h QXlyEXmfQty+RE5HpjkMMtABeAhf48A= -----END CERTIFICATE-----Generated at Wed Oct 8 23:13:32 2025 by rpki-client