$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/5d9a62ec-643c-34da-8c6b-7eaa536a8c4f.roa File: 5d9a62ec-643c-34da-8c6b-7eaa536a8c4f.roa (raw, json) Hash identifier: UKy3K90Jys1t6sQjmzbTD8gFBCN/goNAdflKxqVNXnQ= Subject key identifier: 8C:46:0F:84:D9:BD:9A:9E:59:29:9C:29:38:C4:F0:6F:CA:1F:06:D3 Certificate issuer: /CN=445edff1-360d-4ae2-a045-ccf7dbc4beeb Certificate serial: 010D0C9F4328584BA7CCEF6F40FA294EF864F6C0 Authority key identifier: 00:B7:C6:A7:48:8A:12:60:2D:94:01:4C:B0:5E:88:88:58:B0:51:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/5d9a62ec-643c-34da-8c6b-7eaa536a8c4f.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 208.89.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:ef:6f:40:fa:29:4e:f8:64:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=445edff1-360d-4ae2-a045-ccf7dbc4beeb Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=37ab8bf2-445a-4f46-a891-dd9569ced59a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:18:9c:06:af:d2:a8:99:35:ae:37:87:8e:34: b2:b3:35:37:21:4a:94:f3:ff:a1:b7:df:83:ea:5b: 42:f1:6f:84:98:c0:c0:27:72:3b:a0:0a:71:29:f6: b9:a9:84:8f:8e:c3:c7:06:03:bc:3e:e5:44:93:4b: 66:d9:3d:c7:ed:3a:44:10:55:7f:a5:40:99:c9:4a: 47:ff:ec:e7:ee:c1:95:95:97:b7:ff:df:90:74:b0: 12:44:10:42:bb:9d:09:a4:2c:d7:99:9b:57:4c:8a: ad:f4:48:77:e4:f8:0c:c3:b7:fb:48:bc:50:b8:48: 67:b9:48:53:84:60:4e:e0:31:f4:a3:90:f1:fe:6e: 9f:02:48:2d:96:dd:b8:e9:b3:b0:5e:f5:5e:25:1e: b3:c6:53:7b:56:0d:15:95:93:22:31:3d:93:28:65: e1:8e:90:d7:9f:ef:19:98:ef:56:3f:a9:58:64:99: c8:26:d7:1c:b2:6c:ff:04:65:d4:56:a3:56:39:51: 18:13:cb:d8:60:15:cd:3f:36:5a:a2:2d:70:c8:18: d8:01:e2:25:bc:8c:4b:b3:65:5c:58:d5:e9:a7:83: 1c:ff:e1:62:fb:18:d9:97:56:45:b0:6c:cb:71:72: f9:d4:38:d0:95:78:c7:d6:47:41:aa:42:ae:98:13: be:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:46:0F:84:D9:BD:9A:9E:59:29:9C:29:38:C4:F0:6F:CA:1F:06:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/5d9a62ec-643c-34da-8c6b-7eaa536a8c4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.crl X509v3 Authority Key Identifier: keyid:00:B7:C6:A7:48:8A:12:60:2D:94:01:4C:B0:5E:88:88:58:B0:51:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer sbgp-ipAddrBlock: critical IPv4: 208.89.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:52:bd:dc:b7:eb:f9:eb:7a:68:b0:cc:0a:ba:ac:67:64:3f: dc:39:7a:71:30:43:55:5e:c6:6b:fc:81:cc:15:90:30:ae:4c: c3:81:c3:19:f1:58:bf:96:03:de:d1:bf:bc:b5:90:2b:27:31: fd:17:94:40:53:fe:25:8e:1d:a7:45:66:28:ec:e7:16:4d:cc: a1:e7:48:e7:2e:1c:40:f3:8b:6c:b8:42:0f:c6:61:38:92:56: 10:61:88:28:e1:de:c7:89:be:f9:b9:e0:78:cd:4e:93:77:b4: fd:88:38:ae:79:11:48:38:56:30:74:2c:51:5b:81:b4:49:79: 62:40:8a:06:1b:0a:ca:47:f8:b9:c9:91:a9:85:7b:e1:04:46: 08:1c:c8:5d:d6:84:4a:1c:22:0b:7f:4e:20:68:d5:cd:6c:d6: 9f:d7:6b:2e:37:15:02:8d:24:79:22:f4:c9:b1:0a:c0:50:1b: c0:07:78:c3:97:40:10:7e:fa:ea:89:2f:d7:85:a7:a2:be:f6: 7d:b4:2d:c4:cb:9a:d2:b5:a1:3d:be:b3:0a:9d:4d:ce:3a:02: 84:d4:74:f3:7d:53:a3:de:ff:c1:75:f0:43:89:b9:de:3e:9c: 14:82:e7:e3:c0:9f:22:81:b7:f7:ba:f1:83:25:e9:38:a2:84: 80:b5:fe:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzO9vQPopTvhk9sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDQ1ZWRmZjEtMzYwZC00YWUyLWEwNDUtY2NmN2RiYzRi ZWViMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk MzdhYjhiZjItNDQ1YS00ZjQ2LWE4OTEtZGQ5NTY5Y2VkNTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhicBq/SqJk1rjeHjjSyszU3IUqU8/+ht9+D 6ltC8W+EmMDAJ3I7oApxKfa5qYSPjsPHBgO8PuVEk0tm2T3H7TpEEFV/pUCZyUpH /+zn7sGVlZe3/9+QdLASRBBCu50JpCzXmZtXTIqt9Eh35PgMw7f7SLxQuEhnuUhT hGBO4DH0o5Dx/m6fAkgtlt246bOwXvVeJR6zxlN7Vg0VlZMiMT2TKGXhjpDXn+8Z mO9WP6lYZJnIJtccsmz/BGXUVqNWOVEYE8vYYBXNPzZaoi1wyBjYAeIlvIxLs2Vc WNXpp4Mc/+Fi+xjZl1ZFsGzLcXL51DjQlXjH1kdBqkKumBO+3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxGD4TZvZqeWSmcKTjE8G/KHwbTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80NDVl ZGZmMS0zNjBkLTRhZTItYTA0NS1jY2Y3ZGJjNGJlZWIvNWQ5YTYyZWMtNjQzYy0z NGRhLThjNmItN2VhYTUzNmE4YzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDQ1ZWRmZjEtMzYwZC00YWUyLWEw NDUtY2NmN2RiYzRiZWViLzQ0NWVkZmYxLTM2MGQtNGFlMi1hMDQ1LWNjZjdkYmM0 YmVlYi5jcmwwHwYDVR0jBBgwFoAUALfGp0iKEmAtlAFMsF6IiFiwUZ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80NDVlZGZmMS0zNjBkLTRhZTItYTA0NS1jY2Y3 ZGJjNGJlZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fn3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABSvdy36/nremiwzAq6rGdkP9w5enEwQ1Vexmv8gcwVkDCuTMOBwxnx WL+WA97Rv7y1kCsnMf0XlEBT/iWOHadFZijs5xZNzKHnSOcuHEDzi2y4Qg/GYTiS VhBhiCjh3seJvvm54HjNTpN3tP2IOK55EUg4VjB0LFFbgbRJeWJAigYbCspH+LnJ kamFe+EERggcyF3WhEocIgt/TiBo1c1s1p/Xay43FQKNJHki9MmxCsBQG8AHeMOX QBB++uqJL9eFp6K+9n20LcTLmtK1oT2+swqdTc46AoTUdPN9U6Pe/8F18EOJud4+ nBSC5+PAnyKBt/e68YMl6TiihIC1/kU= -----END CERTIFICATE-----Generated at Tue Nov 4 13:35:48 2025 by rpki-client