$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/d507668b-e70a-32a7-9458-c5a581f7b715.roa File: d507668b-e70a-32a7-9458-c5a581f7b715.roa (raw, json) Hash identifier: UO5tPKKwhhKRHhbMSSYT0IYCjXL1fGrXv23Y2xHtj20= Subject key identifier: 91:69:9A:95:72:58:03:4C:4F:B9:55:26:4A:B6:C6:68:0E:0E:19:DC Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584B1AD17229F3AE4481401EC280 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/d507668b-e70a-32a7-9458-c5a581f7b715.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 208.95.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:72:29:f3:ae:44:81:40:1e:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=d23a306c-8b9e-464a-99cf-eb503c35e8d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cb:63:86:fb:c7:b0:73:18:0c:ba:49:5e:75: 03:38:cd:41:44:08:ab:bb:8a:95:63:39:c6:f9:a3: e6:84:8f:d0:c7:aa:a8:a2:da:99:63:5f:6f:0a:e8: 8d:0d:8b:22:c9:66:53:c9:df:1c:f9:4a:01:6f:76: e7:3d:38:75:9c:2e:56:f3:9b:a2:cd:59:21:1a:94: 72:25:14:d9:75:ef:b5:c9:d6:b6:2b:1d:8d:4c:3f: a6:fe:81:91:f7:0b:47:0c:d8:7f:54:31:12:41:df: f0:80:fe:8e:21:16:d4:ba:37:79:cd:7b:4c:b7:65: 76:d7:3d:17:36:63:56:76:ad:00:48:0e:7d:48:5c: 31:6a:67:8a:87:94:c1:1e:48:2c:5a:cc:56:14:48: 14:d4:fe:0a:1c:be:4b:7f:fd:43:b5:28:38:88:cd: 06:09:20:1d:58:e7:91:ea:74:13:13:ed:e3:0d:a0: 33:f3:7b:51:a3:8c:e5:05:12:d8:41:2f:f8:19:3a: ba:00:9c:62:24:da:bc:3e:ef:24:41:bd:76:42:b4: e0:1e:98:0f:9a:4d:ae:4c:57:0b:52:09:2c:4e:9c: 85:43:bf:d4:4d:96:3d:65:49:9e:02:7a:28:97:71: 1c:6f:78:13:78:40:4b:e0:40:28:7e:d3:7a:1f:51: 80:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:69:9A:95:72:58:03:4C:4F:B9:55:26:4A:B6:C6:68:0E:0E:19:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/d507668b-e70a-32a7-9458-c5a581f7b715.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.95.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:44:04:a7:7a:5e:d9:4f:b6:ef:40:76:a4:34:03:c7:b4:e7: 16:22:fb:36:09:03:40:75:a9:9f:11:8c:2b:81:e6:24:16:cb: 8c:92:3d:ba:8f:af:17:3a:ce:9b:8e:c6:69:54:0c:83:cc:af: b4:95:49:07:1c:50:d8:8b:99:cf:f5:ba:b3:b4:d7:36:6c:da: ec:35:27:2f:d1:2f:f0:c3:5d:f3:0a:34:d8:46:18:f3:40:66: 00:94:04:5f:54:64:da:36:e8:5b:82:83:bf:42:3e:cd:87:24: 0a:d8:d4:cf:cc:ea:2d:1c:74:ff:6e:5e:9a:25:97:2e:30:f8: 01:52:b7:50:b6:c7:19:4a:00:48:3c:0a:66:2a:95:46:9e:34: 5a:60:24:1f:8d:76:97:4f:fe:06:a9:db:86:e7:fc:23:06:b0: f9:88:02:69:ce:be:ce:ec:6e:71:c7:8b:e7:54:2c:93:de:ed: 46:8b:ab:6f:2f:e8:7c:d6:cc:31:93:e6:40:19:8d:d2:8e:71: dd:66:46:72:4b:ad:3a:82:eb:09:8b:89:c3:39:14:59:a7:1c: b0:b0:74:eb:91:f0:83:63:9d:52:4b:0b:06:3d:34:3d:a1:4c: d9:a7:90:0a:1a:ed:ca:a3:19:d5:ff:2b:93:6b:37:1b:e8:38: a0:31:5c:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0XIp865EgUAewoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ZDIzYTMwNmMtOGI5ZS00NjRhLTk5Y2YtZWI1MDNjMzVlOGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMtjhvvHsHMYDLpJXnUDOM1BRAiru4qVYznG +aPmhI/Qx6qootqZY19vCuiNDYsiyWZTyd8c+UoBb3bnPTh1nC5W85uizVkhGpRy JRTZde+1yda2Kx2NTD+m/oGR9wtHDNh/VDESQd/wgP6OIRbUujd5zXtMt2V21z0X NmNWdq0ASA59SFwxameKh5TBHkgsWsxWFEgU1P4KHL5Lf/1DtSg4iM0GCSAdWOeR 6nQTE+3jDaAz83tRo4zlBRLYQS/4GTq6AJxiJNq8Pu8kQb12QrTgHpgPmk2uTFcL UgksTpyFQ7/UTZY9ZUmeAnool3Ecb3gTeEBL4EAoftN6H1GAIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFpmpVyWANMT7lVJkq2xmgODhncMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvZDUwNzY2OGItZTcwYS0z MmE3LTk0NTgtYzVhNTgxZjdiNzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F+FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBEBKd6XtlPtu9AdqQ0A8e05xYi+zYJA0B1qZ8RjCuB5iQWy4ySPbqP rxc6zpuOxmlUDIPMr7SVSQccUNiLmc/1urO01zZs2uw1Jy/RL/DDXfMKNNhGGPNA ZgCUBF9UZNo26FuCg79CPs2HJArY1M/M6i0cdP9uXpolly4w+AFSt1C2xxlKAEg8 CmYqlUaeNFpgJB+NdpdP/gap24bn/CMGsPmIAmnOvs7sbnHHi+dULJPe7UaLq28v 6HzWzDGT5kAZjdKOcd1mRnJLrTqC6wmLicM5FFmnHLCwdOuR8INjnVJLCwY9ND2h TNmnkAoa7cqjGdX/K5NrNxvoOKAxXAg= -----END CERTIFICATE-----Generated at Wed Oct 8 23:11:38 2025 by rpki-client