$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/8981f9f7-457a-3b83-995f-2557ffc8cb47.roa File: 8981f9f7-457a-3b83-995f-2557ffc8cb47.roa (raw, json) Hash identifier: UWVsI9B30tb49H+lcn6IKUnZbrBy0o/5496WRUvOw88= Subject key identifier: D0:D5:0A:12:EA:05:0E:B5:E2:D0:87:0B:C8:44:B2:86:B4:D3:B6:D3 Certificate issuer: /CN=2dee9b00-7f9e-4d2c-8e17-494dffa66902 Certificate serial: 010D0C9F4328584BA7CCECC0F10CBEAC49D54AE0 Authority key identifier: 51:6F:67:7F:8D:57:C0:7A:7F:D4:EF:C8:3A:CF:F2:31:53:EF:1A:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/8981f9f7-457a-3b83-995f-2557ffc8cb47.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 26461 IP address blocks: 208.91.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/2dee9b00-7f9e-4d2c-8e17-494dffa66902.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/2dee9b00-7f9e-4d2c-8e17-494dffa66902.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 03 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:ec:c0:f1:0c:be:ac:49:d5:4a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dee9b00-7f9e-4d2c-8e17-494dffa66902 Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=808c8bff-cd08-4f91-ae17-8b8d161ba563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:91:ab:dc:71:fd:6c:25:c4:a2:4a:cb:f1:ff: 0e:10:25:d7:b6:f4:61:02:59:7f:17:cb:89:0f:58: 1f:33:4d:2b:b5:fa:03:66:78:6c:fc:6e:b3:f1:9a: 69:2f:54:7e:2c:bd:0e:74:13:2a:d5:4e:21:22:a4: 1e:a4:7b:c1:b3:f3:bb:c9:7a:8a:34:fd:46:89:c5: ed:d6:e0:2b:e4:e3:84:87:eb:ab:13:69:d7:00:9d: 5d:e7:38:6b:77:3e:29:8c:f5:27:9f:21:99:c8:a0: e4:a4:ef:70:40:ca:b5:76:a0:b2:d2:e3:28:71:15: f3:f4:45:b6:db:9a:32:e2:7d:d3:1e:b0:b5:d1:c8: ce:5d:cc:f8:4a:ac:17:e9:29:24:7f:36:ea:d9:f8: 86:dd:c4:f9:c2:7b:f6:d9:95:10:4d:cd:75:2f:b5: 9b:77:d2:9e:13:51:cc:3a:f2:16:d5:9a:69:c7:a3: 57:e5:96:9e:2b:21:86:c7:2a:c4:78:21:5d:9f:42: 10:6c:15:73:57:0d:d2:79:7d:c6:1c:39:d6:27:a6: 80:f0:af:91:ee:ff:d0:06:16:f5:95:4b:05:0d:d7: db:22:8e:43:df:50:74:b0:42:ac:39:0c:cd:ee:27: 8b:c1:76:73:96:24:51:2d:d7:2a:13:6a:a5:34:00: c4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D5:0A:12:EA:05:0E:B5:E2:D0:87:0B:C8:44:B2:86:B4:D3:B6:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/8981f9f7-457a-3b83-995f-2557ffc8cb47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/2dee9b00-7f9e-4d2c-8e17-494dffa66902.crl X509v3 Authority Key Identifier: keyid:51:6F:67:7F:8D:57:C0:7A:7F:D4:EF:C8:3A:CF:F2:31:53:EF:1A:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer sbgp-ipAddrBlock: critical IPv4: 208.91.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:4a:1b:07:3f:0f:35:e3:1f:88:70:10:9e:25:44:f9:30:4d: d7:43:ad:3a:70:fe:f5:8e:5b:04:1c:b7:2c:36:27:95:42:e2: 9a:6d:96:65:d0:07:d5:f2:50:3b:95:10:36:4f:dc:5d:e7:9a: 7d:9f:78:ac:3c:be:04:08:ec:40:60:96:05:20:11:37:bb:41: 2a:a7:84:6f:65:56:12:b6:2e:e3:58:d1:d9:aa:0c:e8:ce:87: 6a:af:07:25:1c:ec:57:98:58:c3:2f:3a:e2:f3:ac:0f:2f:2e: 69:f4:e8:3d:66:27:83:4d:5c:ca:24:a6:d9:8d:44:2c:0b:59: 19:a5:77:d5:3c:e3:0a:7d:18:69:dd:20:b8:47:9c:27:b0:3a: 30:38:58:c3:c2:13:86:df:dd:26:3b:82:a3:e9:68:30:7a:5b: 68:52:f2:20:c4:da:e0:c6:16:f9:e3:de:f9:26:c3:b0:f8:a9: 5e:14:4e:ee:18:3e:66:84:92:29:b0:86:7a:49:d1:45:39:b5: 94:16:94:05:14:9a:4a:54:83:23:82:71:65:3f:c0:88:ca:17: 7a:37:80:4b:e2:c6:08:5f:d9:d3:43:c1:65:a1:12:b1:93:36: 4e:64:16:d4:5c:4f:5a:8a:03:b3:1f:fa:46:48:47:2a:d4:4e: c9:23:27:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzOzA8Qy+rEnVSuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRlZTliMDAtN2Y5ZS00ZDJjLThlMTctNDk0ZGZmYTY2 OTAyMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk ODA4YzhiZmYtY2QwOC00ZjkxLWFlMTctOGI4ZDE2MWJhNTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJGr3HH9bCXEokrL8f8OECXXtvRhAll/F8uJ D1gfM00rtfoDZnhs/G6z8ZppL1R+LL0OdBMq1U4hIqQepHvBs/O7yXqKNP1GicXt 1uAr5OOEh+urE2nXAJ1d5zhrdz4pjPUnnyGZyKDkpO9wQMq1dqCy0uMocRXz9EW2 25oy4n3THrC10cjOXcz4SqwX6Skkfzbq2fiG3cT5wnv22ZUQTc11L7Wbd9KeE1HM OvIW1Zppx6NX5ZaeKyGGxyrEeCFdn0IQbBVzVw3SeX3GHDnWJ6aA8K+R7v/QBhb1 lUsFDdfbIo5D31B0sEKsOQzN7ieLwXZzliRRLdcqE2qlNADERQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDVChLqBQ614tCHC8hEsoa007bTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZGVl OWIwMC03ZjllLTRkMmMtOGUxNy00OTRkZmZhNjY5MDIvODk4MWY5ZjctNDU3YS0z YjgzLTk5NWYtMjU1N2ZmYzhjYjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmRlZTliMDAtN2Y5ZS00ZDJjLThl MTctNDk0ZGZmYTY2OTAyLzJkZWU5YjAwLTdmOWUtNGQyYy04ZTE3LTQ5NGRmZmE2 NjkwMi5jcmwwHwYDVR0jBBgwFoAUUW9nf41XwHp/1O/IOs/yMVPvGmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yZGVlOWIwMC03ZjllLTRkMmMtOGUxNy00OTRk ZmZhNjY5MDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FvrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpKGwc/DzXjH4hwEJ4lRPkwTddDrTpw/vWOWwQctyw2J5VC4pptlmXQ B9XyUDuVEDZP3F3nmn2feKw8vgQI7EBglgUgETe7QSqnhG9lVhK2LuNY0dmqDOjO h2qvByUc7FeYWMMvOuLzrA8vLmn06D1mJ4NNXMokptmNRCwLWRmld9U84wp9GGnd ILhHnCewOjA4WMPCE4bf3SY7gqPpaDB6W2hS8iDE2uDGFvnj3vkmw7D4qV4UTu4Y PmaEkimwhnpJ0UU5tZQWlAUUmkpUgyOCcWU/wIjKF3o3gEvixghf2dNDwWWhErGT Nk5kFtRcT1qKA7Mf+kZIRyrUTskjJ0M= -----END CERTIFICATE-----Generated at Sun Nov 2 07:04:03 2025 by rpki-client