$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/d5dbc3b9-a47b-3dc0-9d94-e66d19626956.roa File: d5dbc3b9-a47b-3dc0-9d94-e66d19626956.roa (raw, json) Hash identifier: 8UMlm3pPHBxvUfY1TTYAI975CkE0npxSZFYQYSuEsPc= Subject key identifier: 08:3F:63:21:BE:2D:F8:F9:A6:78:2C:89:44:64:CD:5B:6F:91:47:E9 Certificate issuer: /CN=c9aa1567-89a9-4ce4-8bd7-e624999091e3 Certificate serial: 010D0C9F4328584B0CDC10FA6662ACD99EB87880 Authority key identifier: F6:E2:9D:DC:F3:98:69:7C:13:B9:E8:52:1D:40:07:88:1D:21:4D:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/d5dbc3b9-a47b-3dc0-9d94-e66d19626956.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 16509 IP address blocks: 208.71.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:10:fa:66:62:ac:d9:9e:b8:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9aa1567-89a9-4ce4-8bd7-e624999091e3 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=dbe14f59-e8da-4f23-ada3-647f453bf4e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:da:a9:1d:0b:75:e6:4a:82:1e:9b:2d:57:b3: 47:82:51:4a:80:af:37:89:1e:2d:0f:36:4d:c5:16: 99:2d:88:1d:7c:58:57:c3:20:aa:5f:2a:87:da:e0: d2:ff:57:b2:94:2e:c6:ce:7f:32:b4:a5:b3:0c:c3: 0d:6b:2c:a6:fa:dc:75:c4:8b:78:68:68:8e:37:b7: 8d:50:5d:56:f6:7f:58:8c:a5:3f:35:23:e2:eb:d6: 60:2e:46:bd:de:81:7b:14:ba:50:85:84:97:15:21: 5d:23:05:a1:cb:d8:00:b1:56:95:9b:37:ff:9c:79: 61:70:a5:5a:ff:20:39:68:05:ea:88:72:94:92:87: bd:cb:61:c0:4d:b8:88:3f:1f:64:39:b8:fa:b9:f2: 83:27:cf:b4:15:20:c3:c1:32:85:dc:dc:69:a0:03: 40:5b:94:56:18:0b:f6:28:f0:09:e2:37:54:e7:1b: a3:32:85:b4:ee:b2:f5:0a:fd:ce:33:ec:20:55:12: da:0c:d2:87:1c:ea:16:a5:91:3f:fb:99:9e:53:4d: d1:4d:f5:91:eb:ed:3d:0a:a0:2d:c5:55:42:e1:db: 51:dc:06:cd:1c:1c:6e:20:08:03:04:fc:06:c8:cb: d4:06:d6:dd:81:88:a6:ec:59:ad:1d:ec:1a:38:09: 98:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3F:63:21:BE:2D:F8:F9:A6:78:2C:89:44:64:CD:5B:6F:91:47:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/d5dbc3b9-a47b-3dc0-9d94-e66d19626956.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.crl X509v3 Authority Key Identifier: keyid:F6:E2:9D:DC:F3:98:69:7C:13:B9:E8:52:1D:40:07:88:1D:21:4D:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer sbgp-ipAddrBlock: critical IPv4: 208.71.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:8a:fa:5b:be:e0:de:89:36:19:12:31:e4:2f:77:bd:9c:58: c6:37:d2:2f:ba:25:f2:e0:91:6c:65:7b:8d:a4:ef:25:b1:fc: 8c:89:45:c1:22:4c:95:6d:55:c0:4d:0c:ec:a6:f8:71:a1:dd: c3:4d:1b:ae:0a:29:22:34:74:73:02:4b:91:f8:f0:aa:f5:1e: 50:97:87:0b:9f:4d:18:a6:e8:de:4c:ef:f0:c6:76:a3:8f:c5: a1:2a:06:16:83:f9:a2:d8:3e:61:ef:47:43:56:77:6c:ed:bd: d7:91:89:3b:2e:19:7f:10:8c:18:3e:d4:9d:a5:57:ab:31:4b: 1f:26:9e:95:27:28:f6:08:88:a3:06:7d:f7:b0:47:f3:03:05: d7:7b:bc:5b:b8:ef:44:0d:c3:94:6c:88:8d:77:a3:4a:40:75: 3d:7f:25:73:9d:d6:5c:50:0a:5f:98:b0:22:89:c1:74:e2:3b: e2:4f:a2:8b:f7:49:b9:0e:e0:72:ab:a3:fb:82:be:31:dc:bc: 85:51:71:dc:b8:c0:bc:7f:e4:f9:b9:08:ac:fe:63:8e:82:03: 0a:67:06:7d:fb:50:b6:76:f2:95:2e:a9:c9:eb:14:28:e0:02: 90:c6:cd:60:da:54:6d:08:de:96:f4:d5:38:f6:c6:4c:23:94: 9f:6a:bc:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3BD6ZmKs2Z64eIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlhYTE1NjctODlhOS00Y2U0LThiZDctZTYyNDk5OTA5 MWUzMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk ZGJlMTRmNTktZThkYS00ZjIzLWFkYTMtNjQ3ZjQ1M2JmNGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tqpHQt15kqCHpstV7NHglFKgK83iR4tDzZN xRaZLYgdfFhXwyCqXyqH2uDS/1eylC7Gzn8ytKWzDMMNayym+tx1xIt4aGiON7eN UF1W9n9YjKU/NSPi69ZgLka93oF7FLpQhYSXFSFdIwWhy9gAsVaVmzf/nHlhcKVa /yA5aAXqiHKUkoe9y2HATbiIPx9kObj6ufKDJ8+0FSDDwTKF3NxpoANAW5RWGAv2 KPAJ4jdU5xujMoW07rL1Cv3OM+wgVRLaDNKHHOoWpZE/+5meU03RTfWR6+09CqAt xVVC4dtR3AbNHBxuIAgDBPwGyMvUBtbdgYim7FmtHewaOAmYuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAg/YyG+Lfj5pngsiURkzVtvkUfpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOWFh MTU2Ny04OWE5LTRjZTQtOGJkNy1lNjI0OTk5MDkxZTMvZDVkYmMzYjktYTQ3Yi0z ZGMwLTlkOTQtZTY2ZDE5NjI2OTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzlhYTE1NjctODlhOS00Y2U0LThi ZDctZTYyNDk5OTA5MWUzL2M5YWExNTY3LTg5YTktNGNlNC04YmQ3LWU2MjQ5OTkw OTFlMy5jcmwwHwYDVR0jBBgwFoAU9uKd3POYaXwTuehSHUAHiB0hTQgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOWFhMTU2Ny04OWE5LTRjZTQtOGJkNy1lNjI0 OTk5MDkxZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EdqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6K+lu+4N6JNhkSMeQvd72cWMY30i+6JfLgkWxle42k7yWx/IyJRcEi TJVtVcBNDOym+HGh3cNNG64KKSI0dHMCS5H48Kr1HlCXhwufTRim6N5M7/DGdqOP xaEqBhaD+aLYPmHvR0NWd2ztvdeRiTsuGX8QjBg+1J2lV6sxSx8mnpUnKPYIiKMG ffewR/MDBdd7vFu470QNw5RsiI13o0pAdT1/JXOd1lxQCl+YsCKJwXTiO+JPoov3 SbkO4HKro/uCvjHcvIVRcdy4wLx/5Pm5CKz+Y46CAwpnBn37ULZ28pUuqcnrFCjg ApDGzWDaVG0I3pb01Tj2xkwjlJ9qvNY= -----END CERTIFICATE-----Generated at Wed Sep 17 00:41:19 2025 by rpki-client