$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e9b0b2ce-bcec-332c-ada8-d0d3bc2c233c.roa File: e9b0b2ce-bcec-332c-ada8-d0d3bc2c233c.roa (raw, json) Hash identifier: QXfjA2+ygszrvwxVjoXG5sQ6oZjsY9e/rRafKaAlPXI= Subject key identifier: 96:22:E5:62:30:AF:AA:72:1D:73:6F:8A:07:93:EF:56:B3:29:47:43 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584B1AD171A265E7B8618B566C89 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e9b0b2ce-bcec-332c-ada8-d0d3bc2c233c.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 208.85.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:71:a2:65:e7:b8:61:8b:56:6c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=8912ba33-300d-4153-a325-3be2c4f3d38d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:33:79:34:e0:37:8b:e9:57:9c:4a:c8:d8:4a: 7b:49:69:84:98:f5:67:6f:f5:34:72:3d:47:a8:e3: cc:57:38:63:ca:d8:6b:19:f3:ae:b4:24:0d:28:62: 94:97:32:a0:37:d9:89:92:1c:f1:01:a1:e0:68:0c: d5:08:f3:d1:29:ce:f0:47:6c:98:82:72:66:ea:e3: 6a:9a:7e:d4:d3:87:d6:81:bf:7e:38:53:ce:b1:e5: 95:7b:77:e8:6f:dd:0d:86:db:69:af:f1:b3:f5:9b: e6:4b:5e:61:a7:2d:28:28:1c:6d:71:ac:3b:30:67: da:f2:12:26:d5:44:4e:ea:21:3b:82:01:1f:4e:e4: a2:77:82:d7:e0:56:e8:f1:3b:e4:c0:54:3a:80:ec: ac:59:48:fc:20:fb:d6:d9:41:4b:b9:64:f7:15:ef: 53:02:bd:85:1f:72:c5:c7:42:8a:b0:a1:30:99:56: b0:7f:aa:87:45:b8:18:83:16:c6:5e:9b:2f:80:9b: bd:06:d1:6b:af:df:80:63:ad:81:ee:f5:d5:1c:f4: 3f:14:6c:c2:e9:2f:b1:2b:63:48:a8:90:83:b4:82: cf:21:53:3e:97:12:4b:d4:b3:f9:7c:9a:87:36:99: fb:db:95:51:40:4c:58:db:4f:a1:89:f4:79:b3:25: eb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:22:E5:62:30:AF:AA:72:1D:73:6F:8A:07:93:EF:56:B3:29:47:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e9b0b2ce-bcec-332c-ada8-d0d3bc2c233c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 208.85.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:f3:ed:70:d6:ec:28:88:89:0a:09:6e:f5:ab:55:eb:53:0f: 55:5a:fc:cf:37:5b:c4:33:10:ae:75:1a:4f:a5:e5:48:31:b7: 79:4b:ec:b4:49:3b:52:7b:8c:2e:7e:20:07:fb:17:70:56:48: 6c:d0:9e:cc:ce:22:87:55:b7:68:a7:0b:35:cf:a1:95:25:71: 56:67:4e:bd:5d:c1:d2:0b:54:b5:ad:42:7d:14:85:7f:eb:9e: a5:38:3f:06:21:c7:75:72:9e:4d:3e:94:b1:00:d9:f0:34:9b: dd:7d:71:c6:b9:a8:b5:6e:de:13:a5:dc:a4:16:5f:39:81:15: 4e:aa:44:a7:34:53:97:e3:de:30:93:f4:2e:37:a0:f7:78:35: 5f:7d:5f:a7:3f:55:6d:55:f8:56:5f:9a:89:c5:34:8e:77:b8: 99:24:ad:db:f5:ba:73:26:16:74:37:75:83:e0:81:0c:39:25: 54:d8:e4:6a:61:37:b2:d1:74:37:be:63:3c:ae:29:35:b4:f0: 86:82:a0:b6:b6:a0:87:14:ff:d9:46:0e:89:72:8b:19:fd:c1: dc:f7:0b:4e:98:04:31:54:21:94:ab:c1:55:84:b9:05:5b:59: 57:e4:75:eb:46:70:40:08:ca:62:f0:27:40:20:a7:18:f8:6c: bc:9e:08:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0XGiZee4YYtWbIkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ODkxMmJhMzMtMzAwZC00MTUzLWEzMjUtM2JlMmM0ZjNkMzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTN5NOA3i+lXnErI2Ep7SWmEmPVnb/U0cj1H qOPMVzhjythrGfOutCQNKGKUlzKgN9mJkhzxAaHgaAzVCPPRKc7wR2yYgnJm6uNq mn7U04fWgb9+OFPOseWVe3fob90Nhttpr/Gz9ZvmS15hpy0oKBxtcaw7MGfa8hIm 1URO6iE7ggEfTuSid4LX4Fbo8TvkwFQ6gOysWUj8IPvW2UFLuWT3Fe9TAr2FH3LF x0KKsKEwmVawf6qHRbgYgxbGXpsvgJu9BtFrr9+AY62B7vXVHPQ/FGzC6S+xK2NI qJCDtILPIVM+lxJL1LP5fJqHNpn725VRQExY20+hifR5syXrawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYi5WIwr6pyHXNvigeT71azKUdDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvZTliMGIyY2UtYmNlYy0z MzJjLWFkYTgtZDBkM2JjMmMyMzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FU1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfz7XDW7CiIiQoJbvWrVetTD1Va/M83W8QzEK51Gk+l5Ugxt3lL7LRJ O1J7jC5+IAf7F3BWSGzQnszOIodVt2inCzXPoZUlcVZnTr1dwdILVLWtQn0UhX/r nqU4PwYhx3Vynk0+lLEA2fA0m919cca5qLVu3hOl3KQWXzmBFU6qRKc0U5fj3jCT 9C43oPd4NV99X6c/VW1V+FZfmonFNI53uJkkrdv1unMmFnQ3dYPggQw5JVTY5Gph N7LRdDe+YzyuKTW08IaCoLa2oIcU/9lGDolyixn9wdz3C06YBDFUIZSrwVWEuQVb WVfkdetGcEAIymLwJ0Agpxj4bLyeCOg= -----END CERTIFICATE-----Generated at Thu Oct 9 01:06:59 2025 by rpki-client