$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/ba207d5c-c3b2-3528-8b76-2539dfdcefdb.roa File: ba207d5c-c3b2-3528-8b76-2539dfdcefdb.roa (raw, json) Hash identifier: Ji9a3MKVCU8CmmoAUxfDczg4DY1qECOYemtVIeHhA7w= Subject key identifier: E4:F0:93:99:39:4B:33:A0:21:B1:61:3F:1D:4F:BF:20:9E:FA:E8:EB Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584B1AD178ECDA9D0D89B0B15250 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/ba207d5c-c3b2-3528-8b76-2539dfdcefdb.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 19795 IP address blocks: 208.95.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:78:ec:da:9d:0d:89:b0:b1:52:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=eb94090e-4f78-44bc-b17e-7acec441b255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:05:21:13:a1:c6:8b:59:8c:a8:cb:3b:5e:47: 81:3f:c8:f1:d8:1b:cd:5e:fb:e0:7a:bb:28:37:69: f9:e4:f4:7f:cb:bb:3b:e7:11:5f:2a:b9:98:47:05: f1:ef:75:6e:22:24:4a:b3:ac:50:7f:1f:e5:ac:42: 7f:35:70:71:7c:bf:07:15:39:a7:72:12:fc:65:65: 0a:f2:3a:f5:8d:97:6a:f4:3f:00:4d:5e:aa:7b:65: c2:81:83:84:a5:9c:68:99:fa:92:61:a3:7d:90:f5: 88:31:e0:72:81:6f:e0:37:e9:14:04:cf:80:f8:37: cf:4c:06:5f:25:31:b8:92:2e:93:e7:3f:99:82:a8: c6:e1:f3:8f:4a:7c:fe:4f:d8:80:20:f1:07:74:2d: e1:25:27:da:3f:96:84:44:92:ed:e6:ad:16:96:f2: ad:c1:ff:9c:7c:6f:a3:17:66:89:23:0a:83:89:14: 47:6f:2c:04:96:a4:42:ff:53:32:f2:9f:12:67:bf: 38:a7:53:57:84:f1:69:35:40:fb:31:a1:09:cc:bb: 27:91:9b:2d:9d:d0:f9:0c:76:73:80:bd:10:1d:8c: a9:7d:cd:b5:1d:d3:0f:83:af:38:29:a5:36:be:d5: ef:50:a4:c0:cc:e0:da:0a:3c:22:1f:bd:67:bb:e8: 66:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F0:93:99:39:4B:33:A0:21:B1:61:3F:1D:4F:BF:20:9E:FA:E8:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/ba207d5c-c3b2-3528-8b76-2539dfdcefdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.95.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:53:e9:30:23:7f:a5:e8:6a:d5:bc:bb:6a:9d:1d:26:55:6e: 7f:7b:fd:95:02:d1:28:77:36:18:a5:1a:85:58:be:90:4f:0a: 45:5b:76:73:96:f0:6a:24:dd:4e:35:e7:1a:ed:ba:7c:b3:6f: f4:97:ec:cd:9d:fa:7d:03:8e:a0:d5:52:85:12:af:ad:15:d1: 22:f8:ed:44:cd:99:ad:80:89:a6:6d:a2:79:1d:e6:30:e6:30: 42:b5:56:62:64:72:31:a4:94:8c:a9:97:5f:b3:95:ac:c0:8c: e5:93:ec:ab:1a:1f:b5:1c:3b:df:33:0f:e2:85:66:72:41:5b: f5:b8:83:d0:6f:21:84:5f:cd:dc:13:a6:7c:ab:53:56:49:cc: fd:af:fb:a5:29:d7:35:fe:24:45:c5:90:15:ad:c5:e9:ff:b0: f6:03:3e:60:85:08:d8:35:fb:89:96:bd:a3:d6:d1:42:7b:5a: 80:04:99:a9:0a:89:5a:09:c0:a0:98:49:40:71:78:0b:71:0a: 9f:3d:c7:b8:12:17:c7:cb:aa:d5:c1:73:c1:c2:52:2e:dc:03: e0:03:28:3b:06:f2:3b:89:6c:4b:ba:2d:ed:c7:37:43:c6:55: bb:e3:02:cb:44:43:4a:cd:3b:d4:43:d6:03:4a:30:8c:7d:f5: 7c:87:3d:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0Xjs2p0NibCxUlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ZWI5NDA5MGUtNGY3OC00NGJjLWIxN2UtN2FjZWM0NDFiMjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAUhE6HGi1mMqMs7XkeBP8jx2BvNXvvgerso N2n55PR/y7s75xFfKrmYRwXx73VuIiRKs6xQfx/lrEJ/NXBxfL8HFTmnchL8ZWUK 8jr1jZdq9D8ATV6qe2XCgYOEpZxomfqSYaN9kPWIMeBygW/gN+kUBM+A+DfPTAZf JTG4ki6T5z+ZgqjG4fOPSnz+T9iAIPEHdC3hJSfaP5aERJLt5q0WlvKtwf+cfG+j F2aJIwqDiRRHbywElqRC/1My8p8SZ784p1NXhPFpNUD7MaEJzLsnkZstndD5DHZz gL0QHYypfc21HdMPg684KaU2vtXvUKTAzODaCjwiH71nu+hmUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTwk5k5SzOgIbFhPx1PvyCe+ujrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYmEyMDdkNWMtYzNiMi0z NTI4LThiNzYtMjUzOWRmZGNlZmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F+EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpT6TAjf6XoatW8u2qdHSZVbn97/ZUC0Sh3NhilGoVYvpBPCkVbdnOW 8Gok3U415xrtunyzb/SX7M2d+n0DjqDVUoUSr60V0SL47UTNma2AiaZtonkd5jDm MEK1VmJkcjGklIypl1+zlazAjOWT7KsaH7UcO98zD+KFZnJBW/W4g9BvIYRfzdwT pnyrU1ZJzP2v+6Up1zX+JEXFkBWtxen/sPYDPmCFCNg1+4mWvaPW0UJ7WoAEmakK iVoJwKCYSUBxeAtxCp89x7gSF8fLqtXBc8HCUi7cA+ADKDsG8juJbEu6Le3HN0PG VbvjAstEQ0rNO9RD1gNKMIx99XyHPaQ= -----END CERTIFICATE-----Generated at Wed Oct 8 23:13:39 2025 by rpki-client