$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/cae089a3-5e09-33b8-8828-122471b2e81f.roa File: cae089a3-5e09-33b8-8828-122471b2e81f.roa (raw, json) Hash identifier: HJMG6ny+bE37pkW0QMkhV023cvriwsGvOMWO2zmnIG8= Subject key identifier: D2:40:56:86:90:59:D7:AC:C1:90:30:98:C5:75:E1:D4:9C:AF:7F:D9 Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Certificate serial: 010D0C9F4328584B8EACDA1AC72D114A2F75F400 Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/cae089a3-5e09-33b8-8828-122471b2e81f.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 396982 IP address blocks: 208.127.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:da:1a:c7:2d:11:4a:2f:75:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=efbcaf16-3e10-4be6-bf85-1fcba40143fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6c:3f:1c:64:1b:3f:11:3a:c9:4a:4d:33:40: 0e:ae:2e:68:7c:6c:de:61:5e:8c:64:cf:3f:77:70: 0e:21:99:54:e1:c4:03:df:07:18:9e:1b:f9:f4:4f: 43:4a:14:7d:1a:c4:7d:ef:5a:7e:86:c5:95:3b:db: 41:34:01:45:a3:c3:6e:e3:7c:5e:bd:e6:8d:2e:84: dd:33:27:2e:30:34:41:0e:19:7c:af:24:aa:1e:f6: 53:c4:59:97:45:25:67:d1:43:90:0e:b2:82:e7:ad: a7:72:f7:10:4f:99:0f:f6:2a:e5:75:27:2b:94:2f: 8e:59:da:ae:3e:4b:78:57:fc:41:5d:97:98:42:22: 86:13:ed:3f:bb:b0:86:03:44:8b:37:a8:2e:ea:f3: 14:02:bc:2c:6f:41:c4:d1:82:52:25:ee:a3:73:54: 63:33:ea:11:a7:46:bb:6c:d1:31:08:86:83:4a:ca: 40:8a:ad:01:54:e5:33:0f:bd:2f:5a:de:be:ec:ae: a4:02:88:a8:01:43:aa:ae:d4:eb:ba:19:92:b0:62: b8:fe:7e:4b:77:05:ad:19:0a:1f:55:47:cd:14:74: 38:35:54:16:07:21:10:ff:c1:e1:35:e3:a0:6d:3e: 18:a9:f1:d5:6f:39:9d:48:c7:06:15:af:cb:49:78: a0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:40:56:86:90:59:D7:AC:C1:90:30:98:C5:75:E1:D4:9C:AF:7F:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/cae089a3-5e09-33b8-8828-122471b2e81f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl X509v3 Authority Key Identifier: keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer sbgp-ipAddrBlock: critical IPv4: 208.127.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:f2:83:82:ef:a4:7d:b6:06:ea:ef:87:b7:84:b1:4e:ce:4d: 4c:72:21:17:7f:f4:11:c1:f5:6a:86:1d:f9:a5:64:8a:38:bb: 28:52:93:36:e7:91:65:39:ac:a4:9f:3f:b2:f6:29:87:21:60: 40:e0:58:14:14:d2:e2:fc:47:af:c9:cc:9e:41:f0:1c:4a:c3: 65:34:76:94:92:f6:20:d7:05:10:cd:7f:f6:93:93:27:8a:d0: 2b:9a:e0:07:0a:13:86:8a:6a:26:ca:e8:14:f1:ea:b4:0a:d5: 73:a6:d0:14:0f:18:63:20:d2:2c:a2:08:10:97:47:ec:45:a2: 55:93:7f:56:0f:81:7a:99:fc:27:7e:e0:95:35:1a:a9:61:0d: d5:e7:09:cd:22:b9:c0:0d:4b:7a:31:45:72:86:44:85:13:04: 14:3e:8b:8e:12:92:be:1b:6e:cf:2f:7d:05:fc:7e:0d:e5:57: b1:86:c4:fd:00:5a:f2:ff:25:6e:23:fd:41:77:ee:24:4b:4e: 2c:51:0c:b4:19:05:52:f7:81:1e:a5:36:18:4e:a5:25:76:d0: f3:3f:6c:aa:92:85:b7:76:15:5c:1b:cd:08:75:88:df:fa:95: c2:48:b3:53:ff:3d:df:a5:95:9f:7c:93:0a:c5:a2:e7:44:0d: 9c:06:e6:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrNoaxy0RSi919AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk OWU3MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ZWZiY2FmMTYtM2UxMC00YmU2LWJmODUtMWZjYmE0MDE0M2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGw/HGQbPxE6yUpNM0AOri5ofGzeYV6MZM8/ d3AOIZlU4cQD3wcYnhv59E9DShR9GsR971p+hsWVO9tBNAFFo8Nu43xeveaNLoTd MycuMDRBDhl8rySqHvZTxFmXRSVn0UOQDrKC562ncvcQT5kP9irldScrlC+OWdqu Pkt4V/xBXZeYQiKGE+0/u7CGA0SLN6gu6vMUArwsb0HE0YJSJe6jc1RjM+oRp0a7 bNExCIaDSspAiq0BVOUzD70vWt6+7K6kAoioAUOqrtTruhmSsGK4/n5LdwWtGQof VUfNFHQ4NVQWByEQ/8HhNeOgbT4YqfHVbzmdSMcGFa/LSXigHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJAVoaQWdeswZAwmMV14dScr3/ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvY2FlMDg5YTMtNWUwOS0z M2I4LTg4MjgtMTIyNDcxYjJlODFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3 M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4 ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5 NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0H/4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/yg4LvpH22Burvh7eEsU7OTUxyIRd/9BHB9WqGHfmlZIo4uyhSkzbn kWU5rKSfP7L2KYchYEDgWBQU0uL8R6/JzJ5B8BxKw2U0dpSS9iDXBRDNf/aTkyeK 0Cua4AcKE4aKaibK6BTx6rQK1XOm0BQPGGMg0iyiCBCXR+xFolWTf1YPgXqZ/Cd+ 4JU1GqlhDdXnCc0iucANS3oxRXKGRIUTBBQ+i44Skr4bbs8vfQX8fg3lV7GGxP0A WvL/JW4j/UF37iRLTixRDLQZBVL3gR6lNhhOpSV20PM/bKqShbd2FVwbzQh1iN/6 lcJIs1P/Pd+llZ98kwrFoudEDZwG5ss= -----END CERTIFICATE-----Generated at Mon Oct 20 20:31:36 2025 by rpki-client