$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/611daa3e-9168-338f-b65f-1c641fb5f7f7.roa File: 611daa3e-9168-338f-b65f-1c641fb5f7f7.roa (raw, json) Hash identifier: HUARrmM9K03vMtmniwCKFdubakf1pdTlsvVrc7HSG38= Subject key identifier: 66:93:E1:D7:D7:05:97:40:C7:32:37:3A:D7:C1:EC:1E:6A:F8:5C:81 Certificate issuer: /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Certificate serial: 010D0C9F4328584AF5214406841DCE5C7ED5B3C0 Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/611daa3e-9168-338f-b65f-1c641fb5f7f7.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 56274 IP address blocks: 198.208.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:44:06:84:1d:ce:5c:7e:d5:b3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=2967dc04-d908-4ef0-8bb4-c44c5453846a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e0:e5:e5:0e:d0:98:63:9c:54:89:9b:a0:f3: 6e:79:79:fa:e6:80:76:18:80:93:7a:4f:b5:fe:49: 08:c3:7a:ab:44:b8:5b:4d:eb:8f:5c:2e:e0:18:5e: 3b:7d:8c:d0:ff:86:43:47:b0:3b:32:32:69:34:cd: 07:8a:89:0f:66:c3:a2:e3:fa:26:d8:d9:81:84:49: c8:72:66:17:9a:bc:8b:42:77:4e:d8:9e:67:8d:f1: 5f:95:84:49:83:d7:e4:01:f4:25:e4:db:2c:50:0f: 12:df:f6:8a:71:2e:40:f9:75:b8:dd:a3:2a:78:08: 0e:a0:c8:8c:d5:35:01:3f:83:03:9e:ea:66:d4:1a: 04:8a:64:13:ac:9b:75:e7:71:a1:44:72:7d:1b:04: d1:47:8e:21:0a:c1:f6:37:98:20:9b:6c:9a:1c:d1: ba:57:65:77:15:41:48:a2:9f:7f:ce:33:27:b1:e1: bb:96:4a:97:b4:71:dd:1e:81:d8:29:49:43:06:39: 39:13:34:6f:ed:a3:0f:e8:8f:76:de:84:d0:17:e0: 7a:03:5e:be:b7:2a:41:94:48:e6:da:9a:30:1e:02: 8b:4c:f9:a1:1f:ae:1e:fb:e9:bf:3e:b3:de:0a:39: 0f:68:6b:c6:b0:89:09:0d:67:fd:b6:77:09:2e:43: 4a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:93:E1:D7:D7:05:97:40:C7:32:37:3A:D7:C1:EC:1E:6A:F8:5C:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/611daa3e-9168-338f-b65f-1c641fb5f7f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl X509v3 Authority Key Identifier: keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer sbgp-ipAddrBlock: critical IPv4: 198.208.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:e1:fc:d6:90:a7:cb:87:0d:d0:e0:14:b8:68:46:a4:1e:de: 8b:d1:08:1c:62:e9:47:a7:7c:8f:44:da:b3:b0:1e:bb:61:63: 60:8d:3e:16:e1:df:16:53:52:9f:19:f4:71:71:31:f4:60:73: 31:69:f6:d8:8b:27:c6:ef:94:08:1a:3b:71:96:97:1d:a0:4b: f0:88:2b:0f:7b:7d:c3:81:94:a6:bc:15:46:f7:ae:04:80:4c: aa:33:9c:94:9c:b5:11:fd:75:8c:31:8e:70:8b:68:b1:4e:ba: 93:47:9c:02:15:8f:cc:ce:4d:6b:2a:5e:91:4b:6e:e0:0f:34: c2:e5:1b:ed:aa:16:ba:65:d3:55:29:af:bb:45:bc:bb:6f:7c: e6:98:95:e7:ef:ca:c2:5b:19:fe:82:f7:77:25:cb:c5:6e:6e: 95:7a:dc:96:0f:78:bb:8e:9b:97:5a:d4:31:2d:90:33:6b:0d: 3d:20:bf:91:e3:ad:7d:34:b1:3b:ee:7a:1c:51:bd:20:3a:b1: 0f:83:75:43:24:0d:ac:76:88:88:89:c5:26:40:59:ae:17:ec: 08:46:a2:64:3f:27:9c:d2:8c:a7:f9:06:01:fe:7b:0e:79:3c: 05:69:ec:dc:c1:fb:e3:e0:27:bb:f8:c8:d3:95:ad:b2:6c:39: eb:9f:22:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IUQGhB3OXH7Vs8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkNjdlNTQtN2RkNy00MGJhLWFmYTMtNWU4YzQ5NTRl M2U0MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk Mjk2N2RjMDQtZDkwOC00ZWYwLThiYjQtYzQ0YzU0NTM4NDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuDl5Q7QmGOcVImboPNueXn65oB2GICTek+1 /kkIw3qrRLhbTeuPXC7gGF47fYzQ/4ZDR7A7MjJpNM0HiokPZsOi4/om2NmBhEnI cmYXmryLQndO2J5njfFflYRJg9fkAfQl5NssUA8S3/aKcS5A+XW43aMqeAgOoMiM 1TUBP4MDnupm1BoEimQTrJt153GhRHJ9GwTRR44hCsH2N5ggm2yaHNG6V2V3FUFI op9/zjMnseG7lkqXtHHdHoHYKUlDBjk5EzRv7aMP6I923oTQF+B6A16+typBlEjm 2powHgKLTPmhH64e++m/PrPeCjkPaGvGsIkJDWf9tncJLkNKuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaT4dfXBZdAxzI3OtfB7B5q+FyBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2 N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThjNDk1NGUzZTQvNjExZGFhM2UtOTE2OC0z MzhmLWI2NWYtMWM2NDFmYjVmN2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdkNjdlNTQtN2RkNy00MGJhLWFm YTMtNWU4YzQ5NTRlM2U0L2Q3ZDY3ZTU0LTdkZDctNDBiYS1hZmEzLTVlOGM0OTU0 ZTNlNC5jcmwwHwYDVR0jBBgwFoAUDncEDXJF/Vqw2VztD25SNx11Lh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThj NDk1NGUzZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxtDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzh/NaQp8uHDdDgFLhoRqQe3ovRCBxi6UenfI9E2rOwHrthY2CNPhbh 3xZTUp8Z9HFxMfRgczFp9tiLJ8bvlAgaO3GWlx2gS/CIKw97fcOBlKa8FUb3rgSA TKoznJSctRH9dYwxjnCLaLFOupNHnAIVj8zOTWsqXpFLbuAPNMLlG+2qFrpl01Up r7tFvLtvfOaYlefvysJbGf6C93cly8VubpV63JYPeLuOm5da1DEtkDNrDT0gv5Hj rX00sTvuehxRvSA6sQ+DdUMkDax2iIiJxSZAWa4X7AhGomQ/J5zSjKf5BgH+ew55 PAVp7NzB++PgJ7v4yNOVrbJsOeufIp8= -----END CERTIFICATE-----Generated at Tue Nov 4 17:20:19 2025 by rpki-client