$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8/b83c616f-87ba-3659-8b75-d0e8f2d10479.roa File: b83c616f-87ba-3659-8b75-d0e8f2d10479.roa (raw, json) Hash identifier: yakEeQV4cQzq1ZpA1Wi0tn0T8iHGaSgQjVA13Gjwe04= Subject key identifier: EB:47:8B:BC:31:D0:CD:C7:0D:D5:42:F1:20:58:0E:6B:ED:EB:2D:20 Certificate issuer: /CN=e498d95b-9c81-4838-b64f-90f2065c0ea8 Certificate serial: 010D0C9F4328584B34B44E9878DF29434B43E900 Authority key identifier: 79:38:10:DA:F7:43:D7:2D:3E:42:9A:47:03:6F:5C:88:07:BD:15:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8/b83c616f-87ba-3659-8b75-d0e8f2d10479.roa Signing time: Mon 15 Sep 2025 19:33:02 +0000 ROA not before: Mon 15 Sep 2025 19:33:02 +0000 ROA not after: Sun 14 Dec 2025 20:33:02 +0000 asID: 10587 IP address blocks: 209.161.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8/e498d95b-9c81-4838-b64f-90f2065c0ea8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8/e498d95b-9c81-4838-b64f-90f2065c0ea8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:34:b4:4e:98:78:df:29:43:4b:43:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e498d95b-9c81-4838-b64f-90f2065c0ea8 Validity Not Before: Sep 15 19:33:02 2025 GMT Not After : Dec 14 20:33:02 2025 GMT Subject: CN=491ad0fa-c7f4-411f-80e7-9dfd912971ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e5:b2:25:92:f3:76:7a:3e:2f:9e:11:bc:e5: 21:57:f6:50:65:12:c6:45:fd:4e:3f:99:a1:27:c6: be:68:52:ae:1d:5f:c7:ed:50:df:43:f6:df:76:d2: bb:e9:55:60:63:13:12:62:34:5b:5c:5e:8d:ad:7e: 70:53:a2:2e:07:1d:ca:be:f9:d7:03:60:a9:c9:f5: 48:eb:ef:5a:e7:fe:35:ca:2a:75:be:ca:4d:f0:22: be:04:a0:29:e6:6c:4a:66:ec:c9:97:f7:c3:e1:26: 3a:09:1b:9e:f1:c8:e8:62:bd:4e:78:99:34:1c:1a: 0c:0d:84:0e:aa:10:c3:03:ce:fd:83:d0:d4:40:d2: 48:86:a5:43:ce:aa:03:7c:02:27:de:f5:cc:05:d3: 02:b4:45:19:3f:49:6a:48:51:8a:be:08:c0:48:af: 7a:15:ea:fe:b8:71:13:22:b8:d7:f0:66:99:1c:c3: 7f:69:76:d0:cc:cd:58:5c:3e:02:f3:a0:b1:0c:22: 8c:b5:81:e1:64:21:e5:4e:8b:aa:c0:05:67:6a:05: 8e:70:87:01:d0:f0:de:da:8f:4f:ba:5b:5c:a3:e6: 91:51:51:97:67:ec:4b:1c:93:a9:a9:38:4d:bd:da: 44:56:6d:d7:67:eb:c3:11:a0:60:a1:84:b3:a0:ad: f8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:47:8B:BC:31:D0:CD:C7:0D:D5:42:F1:20:58:0E:6B:ED:EB:2D:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8/b83c616f-87ba-3659-8b75-d0e8f2d10479.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8/e498d95b-9c81-4838-b64f-90f2065c0ea8.crl X509v3 Authority Key Identifier: keyid:79:38:10:DA:F7:43:D7:2D:3E:42:9A:47:03:6F:5C:88:07:BD:15:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e498d95b-9c81-4838-b64f-90f2065c0ea8.cer sbgp-ipAddrBlock: critical IPv4: 209.161.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:cd:3e:dc:f7:7a:a8:42:f5:f7:4c:74:b1:3b:30:87:8f:c9: f3:2f:61:47:68:d7:32:c0:ad:04:22:11:e1:c8:13:81:88:a7: 52:79:7b:90:1c:5f:d6:c0:a2:1a:96:87:92:c4:2a:20:63:74: 2f:9f:2a:ba:72:69:37:a5:ec:b4:30:7d:db:5e:f7:2e:7f:75: 97:8f:9b:1d:b5:16:80:aa:2a:30:a1:c7:24:44:4a:4b:5c:41: 3e:91:53:5f:ad:3e:3b:40:f1:29:d9:0a:82:45:58:99:2a:b9: 83:91:c8:c3:11:97:64:a7:ed:a1:48:4e:a1:5f:e9:c4:8c:a7: 2a:ab:ce:2a:5c:d0:52:00:9b:60:24:6a:f7:fd:4a:f7:ff:d8: 7a:40:8b:0a:78:d6:81:40:14:3b:d0:f5:74:58:35:b4:97:76: 5a:ee:94:a2:06:b9:63:95:b8:51:f4:c4:75:6a:8b:e8:81:a6: 49:eb:79:bf:ab:de:8b:20:2e:e2:21:de:f4:40:40:b6:2d:15: ef:9b:cf:fd:ea:b8:18:e3:82:ec:cd:7c:14:90:cd:93:ed:a9: 3b:e7:f2:83:67:d2:9a:c6:45:49:34:ee:10:a5:93:ce:43:f4: d3:e8:95:36:dd:0a:26:fb:4e:0a:28:9a:71:e5:23:55:e3:31: 15:01:93:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs0tE6YeN8pQ0tD6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQ5OGQ5NWItOWM4MS00ODM4LWI2NGYtOTBmMjA2NWMw ZWE4MB4XDTI1MDkxNTE5MzMwMloXDTI1MTIxNDIwMzMwMlowLzEtMCsGA1UEAxMk NDkxYWQwZmEtYzdmNC00MTFmLTgwZTctOWRmZDkxMjk3MWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueWyJZLzdno+L54RvOUhV/ZQZRLGRf1OP5mh J8a+aFKuHV/H7VDfQ/bfdtK76VVgYxMSYjRbXF6NrX5wU6IuBx3KvvnXA2CpyfVI 6+9a5/41yip1vspN8CK+BKAp5mxKZuzJl/fD4SY6CRue8cjoYr1OeJk0HBoMDYQO qhDDA879g9DUQNJIhqVDzqoDfAIn3vXMBdMCtEUZP0lqSFGKvgjASK96Fer+uHET IrjX8GaZHMN/aXbQzM1YXD4C86CxDCKMtYHhZCHlTouqwAVnagWOcIcB0PDe2o9P ultco+aRUVGXZ+xLHJOpqThNvdpEVm3XZ+vDEaBgoYSzoK34DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtHi7wx0M3HDdVC8SBYDmvt6y0gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lNDk4 ZDk1Yi05YzgxLTQ4MzgtYjY0Zi05MGYyMDY1YzBlYTgvYjgzYzYxNmYtODdiYS0z NjU5LThiNzUtZDBlOGYyZDEwNDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZTQ5OGQ5NWItOWM4MS00ODM4LWI2 NGYtOTBmMjA2NWMwZWE4L2U0OThkOTViLTljODEtNDgzOC1iNjRmLTkwZjIwNjVj MGVhOC5jcmwwHwYDVR0jBBgwFoAUeTgQ2vdD1y0+QppHA29ciAe9FdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lNDk4ZDk1Yi05YzgxLTQ4MzgtYjY0Zi05MGYy MDY1YzBlYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0aEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7NPtz3eqhC9fdMdLE7MIePyfMvYUdo1zLArQQiEeHIE4GIp1J5e5Ac X9bAohqWh5LEKiBjdC+fKrpyaTel7LQwfdte9y5/dZePmx21FoCqKjChxyRESktc QT6RU1+tPjtA8SnZCoJFWJkquYORyMMRl2Sn7aFITqFf6cSMpyqrzipc0FIAm2Ak avf9Svf/2HpAiwp41oFAFDvQ9XRYNbSXdlrulKIGuWOVuFH0xHVqi+iBpknreb+r 3osgLuIh3vRAQLYtFe+bz/3quBjjguzNfBSQzZPtqTvn8oNn0prGRUk07hClk85D 9NPolTbdCib7TgoomnHlI1XjMRUBkxg= -----END CERTIFICATE-----Generated at Wed Oct 8 22:58:44 2025 by rpki-client