$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/bfb7bfe5-406b-32d9-a1ca-a731af76a95c.roa File: bfb7bfe5-406b-32d9-a1ca-a731af76a95c.roa (raw, json) Hash identifier: 5AraexCuoMqKUlkYfndqyL7OWxg5HovoI2JCZil3WCk= Subject key identifier: 38:3B:29:42:1E:9D:7E:0D:A0:6F:0C:70:E3:99:C1:4E:00:FB:2B:19 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584B21CC1892BC36DFF7C57E3560 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/bfb7bfe5-406b-32d9-a1ca-a731af76a95c.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 199.255.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:18:92:bc:36:df:f7:c5:7e:35:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=59a5a27c-f2d2-4959-85a1-85c03553086c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3c:ed:1b:6c:79:4c:60:49:1f:2d:20:8f:70: cf:7d:d0:d1:d1:ba:f9:77:c3:98:79:8b:26:d9:dc: 1c:0e:a7:07:8f:69:be:5b:2b:03:5f:6c:c9:72:a1: f7:00:d7:28:8e:c5:75:3d:00:3c:7e:73:9b:15:e2: ec:95:83:21:2d:1b:07:4f:37:a9:23:b1:b9:fc:39: c5:90:56:98:a7:00:2c:a6:d1:3e:74:62:c1:5c:89: 29:6d:d7:27:c9:9b:21:b9:e6:de:17:61:b5:80:63: 49:33:41:4f:62:00:65:0e:09:1b:1a:82:57:90:56: 7a:bd:0a:51:81:e1:74:d9:7b:e3:5b:14:5c:dc:07: 22:95:f9:45:17:20:9b:26:6f:82:cb:4d:44:a8:17: c5:7d:bd:72:ac:9a:da:98:4e:a9:a9:66:b3:7c:52: 31:56:0b:2f:16:76:b6:41:19:62:43:cc:25:6a:cb: 7f:81:aa:f6:da:4a:dc:43:b0:7b:4f:a4:9b:9c:b2: 01:5f:4e:dd:5e:2e:19:6f:03:19:dd:e7:ca:3d:f4: bd:ea:e5:2c:28:e0:a4:03:79:c2:6a:4b:eb:37:d1: 55:48:63:90:9d:13:74:61:16:b9:6b:72:90:21:6f: 5f:21:a1:cc:8c:a7:04:99:14:b5:46:77:76:6b:92: ca:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3B:29:42:1E:9D:7E:0D:A0:6F:0C:70:E3:99:C1:4E:00:FB:2B:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/bfb7bfe5-406b-32d9-a1ca-a731af76a95c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 199.255.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:cc:4e:46:8f:21:4b:34:26:a7:6d:0c:64:26:5a:00:62:61: bb:6e:55:5b:a5:b9:dd:8c:ed:b3:1f:3e:10:18:04:86:4e:6f: e4:0c:54:05:70:8b:84:19:f5:4c:80:36:e8:4f:9e:6e:21:3b: 39:32:b5:20:48:ae:34:95:6e:54:65:8b:95:6e:1f:48:76:e9: a6:47:42:35:26:d0:c7:54:c7:78:77:fa:ee:aa:3d:bd:d4:bc: 9d:0f:a3:3b:9e:ab:e7:d5:08:e6:a8:a0:68:2d:7d:8f:7d:a3: 66:33:dd:a9:d2:14:31:36:e2:45:cb:c8:0b:6c:12:92:13:3b: 93:d3:92:ce:9a:ff:c7:0b:60:c7:b5:90:e5:6e:29:f2:2b:da: 47:c6:75:f3:b4:51:6a:a0:ad:7a:6b:39:23:73:b4:f9:e3:17: d3:09:c8:36:83:b4:88:5d:9c:55:39:23:7c:31:3b:ba:98:41: e3:57:53:3d:32:0b:da:10:6d:ed:16:f9:41:60:b9:6e:70:7b: 18:2d:66:2b:2b:16:2b:a4:a1:43:be:1e:2f:3a:b4:ef:7f:02: fa:f8:c3:02:d4:11:92:8c:08:20:71:c3:eb:65:dd:52:bf:00: df:06:b3:7a:bf:00:17:74:fe:08:57:a0:d4:fd:7b:96:9a:a4: 41:4b:cb:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzBiSvDbf98V+NWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk NTlhNWEyN2MtZjJkMi00OTU5LTg1YTEtODVjMDM1NTMwODZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDztG2x5TGBJHy0gj3DPfdDR0br5d8OYeYsm 2dwcDqcHj2m+WysDX2zJcqH3ANcojsV1PQA8fnObFeLslYMhLRsHTzepI7G5/DnF kFaYpwAsptE+dGLBXIkpbdcnyZshuebeF2G1gGNJM0FPYgBlDgkbGoJXkFZ6vQpR geF02XvjWxRc3AcilflFFyCbJm+Cy01EqBfFfb1yrJramE6pqWazfFIxVgsvFna2 QRliQ8wlast/gar22krcQ7B7T6SbnLIBX07dXi4ZbwMZ3efKPfS96uUsKOCkA3nC akvrN9FVSGOQnRN0YRa5a3KQIW9fIaHMjKcEmRS1Rnd2a5LKVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDg7KUIenX4NoG8McOOZwU4A+ysZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYmZiN2JmZTUtNDA2Yi0z MmQ5LWExY2EtYTczMWFmNzZhOTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/8hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTMTkaPIUs0JqdtDGQmWgBiYbtuVVulud2M7bMfPhAYBIZOb+QMVAVw i4QZ9UyANuhPnm4hOzkytSBIrjSVblRli5VuH0h26aZHQjUm0MdUx3h3+u6qPb3U vJ0Pozueq+fVCOaooGgtfY99o2Yz3anSFDE24kXLyAtsEpITO5PTks6a/8cLYMe1 kOVuKfIr2kfGdfO0UWqgrXprOSNztPnjF9MJyDaDtIhdnFU5I3wxO7qYQeNXUz0y C9oQbe0W+UFguW5wexgtZisrFiukoUO+Hi86tO9/Avr4wwLUEZKMCCBxw+tl3VK/ AN8Gs3q/ABd0/ghXoNT9e5aapEFLy+s= -----END CERTIFICATE-----Generated at Thu Oct 9 01:16:48 2025 by rpki-client