$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/55304d86-38bb-30a6-9c19-973accc138e1.roa File: 55304d86-38bb-30a6-9c19-973accc138e1.roa (raw, json) Hash identifier: Vvnr9w9uu0ksKclRwFTZmxZvai/wUYYyGEbXhDG05wg= Subject key identifier: FB:17:38:DF:8A:F6:BC:29:48:B8:9C:F9:BD:D8:C5:D8:DC:F6:6C:98 Certificate issuer: /CN=ea68408f-7dee-415b-a1c1-b76df0a87a93 Certificate serial: 010D0C9F4328584B1C36C126FF484BBC3C538980 Authority key identifier: 16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/55304d86-38bb-30a6-9c19-973accc138e1.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 396982 IP address blocks: 208.94.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:c1:26:ff:48:4b:bc:3c:53:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea68408f-7dee-415b-a1c1-b76df0a87a93 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=a58354de-bb2d-4f1c-855b-4a931975b114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:90:7f:e8:a3:73:85:05:80:9a:e1:a2:7c:e9: 07:fc:c6:59:24:d8:e9:d5:38:8d:ff:dc:f5:b9:1a: c2:86:49:17:82:03:8c:3b:ad:f8:d3:54:f9:2b:cd: c9:ba:bf:27:f2:2a:b9:35:26:89:b5:39:6e:de:16: db:46:95:c9:e0:5a:69:e2:91:37:4e:ea:b5:b0:35: a8:b7:2a:ed:c6:a2:e7:ae:60:28:5c:a6:f7:2b:b4: ab:91:92:44:02:14:30:99:93:55:85:1a:75:ec:4c: 41:ba:1f:92:31:1a:14:a7:f4:03:ca:59:62:ea:a8: b2:40:0a:c2:84:e2:83:d4:f8:bc:a4:c4:c4:e9:fe: 91:ab:4e:87:27:1e:cc:f7:98:40:b2:51:c1:12:12: f3:74:6e:19:e1:71:b1:73:59:34:74:a8:86:d4:63: 40:c5:4a:09:e9:db:3e:4d:ed:b3:6a:70:5f:3e:ef: 97:bf:e2:60:e5:34:29:ba:1b:0c:5d:4c:43:5c:5c: 69:4b:99:95:39:6d:5c:dc:dc:f3:61:46:d0:04:6a: 37:f4:cc:4b:1f:cd:a2:c0:2b:ae:b7:13:1b:7f:cc: c7:58:e4:0f:8a:c0:e6:b8:b6:df:1b:22:ab:6e:4a: 96:8b:ba:4a:74:f0:4d:b9:ad:7f:e9:7f:0d:6c:cb: d3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:17:38:DF:8A:F6:BC:29:48:B8:9C:F9:BD:D8:C5:D8:DC:F6:6C:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/55304d86-38bb-30a6-9c19-973accc138e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl X509v3 Authority Key Identifier: keyid:16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer sbgp-ipAddrBlock: critical IPv4: 208.94.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:2e:a3:9b:64:5c:35:52:93:5e:0a:ac:ed:41:9b:d1:e9:ab: 12:e9:3c:c5:48:40:92:17:4d:d9:9b:7e:ef:d4:ed:fa:04:f0: 97:f3:6c:2c:ec:12:18:84:61:a6:9f:1d:3c:6d:d1:bb:08:10: 7f:24:19:55:cd:e8:40:7e:c2:cc:74:5c:13:96:e2:2d:83:14: 4f:7b:f4:f2:f5:15:30:de:dd:b7:e9:ca:fb:b8:80:be:98:1b: da:df:18:32:f3:29:c1:af:1a:bd:b8:e6:74:0c:c6:b5:f0:00: 3a:05:26:33:5a:ca:76:f1:87:eb:bb:b7:cc:eb:ad:c0:35:59: 94:ce:cf:c7:44:7b:5b:42:5d:1a:6c:7e:2e:9e:36:5e:7d:3c: 60:66:e4:a9:00:dd:5f:a1:f7:f1:3d:5f:cf:44:df:16:c8:be: 91:26:43:76:5a:95:a4:72:39:a0:b6:75:5d:d4:c4:a7:49:29: cf:b1:90:91:d9:4d:57:e3:59:ed:9c:49:d2:c7:2e:c1:44:8c: b2:c0:3e:46:ba:ac:bf:e6:99:40:7d:d0:3a:79:88:11:d4:02: e7:a7:8a:d7:2a:f9:f2:08:46:b2:fa:6c:f4:78:87:28:21:e7: c9:4b:37:e8:c5:8f:60:02:e6:40:e9:a6:28:19:f8:c0:01:cd: 0e:e0:ea:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNsEm/0hLvDxTiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWE2ODQwOGYtN2RlZS00MTViLWExYzEtYjc2ZGYwYTg3 YTkzMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk YTU4MzU0ZGUtYmIyZC00ZjFjLTg1NWItNGE5MzE5NzViMTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZB/6KNzhQWAmuGifOkH/MZZJNjp1TiN/9z1 uRrChkkXggOMO63401T5K83Jur8n8iq5NSaJtTlu3hbbRpXJ4Fpp4pE3Tuq1sDWo tyrtxqLnrmAoXKb3K7SrkZJEAhQwmZNVhRp17ExBuh+SMRoUp/QDylli6qiyQArC hOKD1Pi8pMTE6f6Rq06HJx7M95hAslHBEhLzdG4Z4XGxc1k0dKiG1GNAxUoJ6ds+ Te2zanBfPu+Xv+Jg5TQpuhsMXUxDXFxpS5mVOW1c3NzzYUbQBGo39MxLH82iwCuu txMbf8zHWOQPisDmuLbfGyKrbkqWi7pKdPBNua1/6X8NbMvTIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsXON+K9rwpSLic+b3Yxdjc9myYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYTY4 NDA4Zi03ZGVlLTQxNWItYTFjMS1iNzZkZjBhODdhOTMvNTUzMDRkODYtMzhiYi0z MGE2LTljMTktOTczYWNjYzEzOGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWE2ODQwOGYtN2RlZS00MTViLWEx YzEtYjc2ZGYwYTg3YTkzL2VhNjg0MDhmLTdkZWUtNDE1Yi1hMWMxLWI3NmRmMGE4 N2E5My5jcmwwHwYDVR0jBBgwFoAUFphb3M+6SOUGLSTwgm6NQ0VLLqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYTY4NDA4Zi03ZGVlLTQxNWItYTFjMS1iNzZk ZjBhODdhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F7fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALsuo5tkXDVSk14KrO1Bm9HpqxLpPMVIQJIXTdmbfu/U7foE8JfzbCzs EhiEYaafHTxt0bsIEH8kGVXN6EB+wsx0XBOW4i2DFE979PL1FTDe3bfpyvu4gL6Y G9rfGDLzKcGvGr245nQMxrXwADoFJjNaynbxh+u7t8zrrcA1WZTOz8dEe1tCXRps fi6eNl59PGBm5KkA3V+h9/E9X89E3xbIvpEmQ3ZalaRyOaC2dV3UxKdJKc+xkJHZ TVfjWe2cSdLHLsFEjLLAPka6rL/mmUB90Dp5iBHUAuenitcq+fIIRrL6bPR4hygh 58lLN+jFj2AC5kDppigZ+MABzQ7g6qc= -----END CERTIFICATE-----Generated at Mon Nov 3 21:52:27 2025 by rpki-client