$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/cdae90d2-7bca-300b-89a5-2f31e2182fd3.roa File: cdae90d2-7bca-300b-89a5-2f31e2182fd3.roa (raw, json) Hash identifier: /XhRLVUsVEXz0WT3wpfmyJZqic32H+we1+/6DUBDZ2g= Subject key identifier: 67:49:0A:B6:3D:E7:F3:5F:68:45:9C:A3:23:BF:40:F7:FD:BD:EA:0E Certificate issuer: /CN=48416e40-8d51-4528-a6af-36dd93cf14ee Certificate serial: 010D0C9F4328584B319580D178B8A5635BCBF000 Authority key identifier: 58:AC:61:1D:B9:A7:A5:FA:3D:50:CF:48:51:9B:FC:14:FA:A4:C6:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/cdae90d2-7bca-300b-89a5-2f31e2182fd3.roa Signing time: Sun 14 Sep 2025 16:43:32 +0000 ROA not before: Sun 14 Sep 2025 16:43:32 +0000 ROA not after: Sat 13 Dec 2025 17:43:32 +0000 asID: 30625 IP address blocks: 208.66.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/48416e40-8d51-4528-a6af-36dd93cf14ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/48416e40-8d51-4528-a6af-36dd93cf14ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:31:95:80:d1:78:b8:a5:63:5b:cb:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48416e40-8d51-4528-a6af-36dd93cf14ee Validity Not Before: Sep 14 16:43:32 2025 GMT Not After : Dec 13 17:43:32 2025 GMT Subject: CN=2b4c73e3-1e79-4d21-bbab-185ab10b1eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:a1:83:67:34:f4:2f:7c:ce:3b:c6:14:ab:cb: 7b:10:0e:bb:16:08:13:f6:63:e3:9f:53:b8:64:69: bb:df:13:bb:6a:50:13:db:88:46:c0:5d:7d:dd:9d: d8:69:b7:81:70:4e:a7:05:fe:e8:f7:35:51:42:c2: ac:9d:23:29:28:60:a7:d4:ce:95:c0:69:9e:46:72: 63:49:cc:ac:f9:16:af:1b:f2:06:40:a2:c1:ca:7b: fd:57:bd:7d:f6:ea:27:3a:4f:02:80:94:ec:1f:a4: d1:c6:ca:c4:0c:aa:a4:ad:ea:8b:fb:d1:23:fd:a0: 22:c3:d7:b7:93:3b:54:e5:aa:8e:1e:bf:06:32:a6: 3a:e4:f2:54:bf:78:40:ab:5e:59:75:b1:9e:96:e0: 57:5c:e6:d6:88:fe:80:f5:38:d4:95:29:da:96:e1: a4:ac:7f:c6:90:de:97:00:19:bb:5e:1d:bc:e0:03: ee:60:33:04:9d:0c:5b:a7:74:f3:5b:ec:17:0e:83: be:98:f0:e7:0f:5a:fc:ad:68:8c:de:9c:2a:88:5e: 1e:62:e8:43:64:da:d9:5f:54:f1:cd:27:04:a2:da: 8f:23:6f:6d:42:48:eb:9b:bf:f3:86:39:ca:ea:94: b8:03:86:d4:37:cf:5e:20:dc:a9:7b:10:17:28:85: a4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:49:0A:B6:3D:E7:F3:5F:68:45:9C:A3:23:BF:40:F7:FD:BD:EA:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/cdae90d2-7bca-300b-89a5-2f31e2182fd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/48416e40-8d51-4528-a6af-36dd93cf14ee.crl X509v3 Authority Key Identifier: keyid:58:AC:61:1D:B9:A7:A5:FA:3D:50:CF:48:51:9B:FC:14:FA:A4:C6:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee.cer sbgp-ipAddrBlock: critical IPv4: 208.66.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:9a:17:d4:ab:7e:98:21:1d:f6:85:8a:dc:90:07:89:79:3f: 79:b4:e5:3c:30:5f:aa:57:2c:a8:63:3b:1c:83:60:ea:ad:09: e1:c9:06:d0:00:bb:ad:c6:88:4b:87:55:a1:36:3d:c6:04:52: 5b:67:58:d1:98:c0:f0:ed:1c:2f:a0:08:f8:53:80:40:a2:b8: e7:13:13:e6:b2:52:ff:a3:d9:e0:70:cc:08:ef:ac:13:42:57: 8d:3e:61:ca:13:ba:b5:1d:c5:80:d8:41:b7:76:af:7f:e8:28: b7:33:52:c4:97:e8:e8:df:89:55:7a:5a:36:b7:5a:63:ac:5b: 34:6d:96:4c:3e:4f:9f:c1:c1:9a:98:ef:88:79:04:8e:f0:af: ad:5a:8c:77:09:25:dd:c4:a3:3e:fa:8e:75:0a:21:66:3a:49: 19:b7:07:8a:49:cc:f7:9d:5d:41:aa:4d:d0:da:18:de:5e:75: ba:e9:d0:04:70:d3:fb:4d:ea:2e:37:53:00:83:8d:b2:4b:6b: 5d:ea:39:c4:c1:18:20:76:a5:a1:82:31:bf:40:bc:cc:0a:7c: 5f:0a:59:e7:19:72:e5:0c:d8:fe:f4:35:2e:43:ae:74:8f:f8: 08:d3:4b:42:f2:9c:36:29:87:a7:60:d1:f8:1e:91:2a:40:5e: 14:84:5b:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsxlYDReLilY1vL8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg0MTZlNDAtOGQ1MS00NTI4LWE2YWYtMzZkZDkzY2Yx NGVlMB4XDTI1MDkxNDE2NDMzMloXDTI1MTIxMzE3NDMzMlowLzEtMCsGA1UEAxMk MmI0YzczZTMtMWU3OS00ZDIxLWJiYWItMTg1YWIxMGIxZWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qGDZzT0L3zOO8YUq8t7EA67FggT9mPjn1O4 ZGm73xO7alAT24hGwF193Z3YabeBcE6nBf7o9zVRQsKsnSMpKGCn1M6VwGmeRnJj Scys+RavG/IGQKLBynv9V7199uonOk8CgJTsH6TRxsrEDKqkreqL+9Ej/aAiw9e3 kztU5aqOHr8GMqY65PJUv3hAq15ZdbGeluBXXObWiP6A9TjUlSnaluGkrH/GkN6X ABm7Xh284APuYDMEnQxbp3TzW+wXDoO+mPDnD1r8rWiM3pwqiF4eYuhDZNrZX1Tx zScEotqPI29tQkjrm7/zhjnK6pS4A4bUN89eINypexAXKIWkiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdJCrY95/NfaEWcoyO/QPf9veoOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80ODQx NmU0MC04ZDUxLTQ1MjgtYTZhZi0zNmRkOTNjZjE0ZWUvY2RhZTkwZDItN2JjYS0z MDBiLTg5YTUtMmYzMWUyMTgyZmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDg0MTZlNDAtOGQ1MS00NTI4LWE2 YWYtMzZkZDkzY2YxNGVlLzQ4NDE2ZTQwLThkNTEtNDUyOC1hNmFmLTM2ZGQ5M2Nm MTRlZS5jcmwwHwYDVR0jBBgwFoAUWKxhHbmnpfo9UM9IUZv8FPqkxv0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80ODQxNmU0MC04ZDUxLTQ1MjgtYTZhZi0zNmRk OTNjZjE0ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EJXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWaF9SrfpghHfaFityQB4l5P3m05TwwX6pXLKhjOxyDYOqtCeHJBtAA u63GiEuHVaE2PcYEUltnWNGYwPDtHC+gCPhTgECiuOcTE+ayUv+j2eBwzAjvrBNC V40+YcoTurUdxYDYQbd2r3/oKLczUsSX6OjfiVV6Wja3WmOsWzRtlkw+T5/BwZqY 74h5BI7wr61ajHcJJd3Eoz76jnUKIWY6SRm3B4pJzPedXUGqTdDaGN5edbrp0ARw 0/tN6i43UwCDjbJLa13qOcTBGCB2paGCMb9AvMwKfF8KWecZcuUM2P70NS5DrnSP +AjTS0LynDYph6dg0fgekSpAXhSEW5o= -----END CERTIFICATE-----Generated at Wed Oct 8 19:13:13 2025 by rpki-client