$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/d98a63f5-e0de-35bf-ac2d-d4c829125068.roa File: d98a63f5-e0de-35bf-ac2d-d4c829125068.roa (raw, json) Hash identifier: 2/lDtczl6ny2mNLanBb8tRGg88j2F9nB7HJDHpiJXd4= Subject key identifier: C1:0F:41:AA:5B:56:76:A4:7C:81:66:87:0D:07:DB:7C:54:8A:05:A8 Certificate issuer: /CN=7334a22a-f222-4457-889f-5478966ecf96 Certificate serial: 010D0C9F4328584B1806C337FC507E48708561C0 Authority key identifier: C4:3E:A5:1C:D6:FA:F5:2F:16:D6:43:A2:C3:7D:EC:33:8F:FF:48:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/d98a63f5-e0de-35bf-ac2d-d4c829125068.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 397085 IP address blocks: 208.91.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:c3:37:fc:50:7e:48:70:85:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7334a22a-f222-4457-889f-5478966ecf96 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=5f286e9e-e298-4f99-818f-defc0064c67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e1:38:47:49:cb:de:53:4d:0f:51:b3:45:d7: 25:08:95:51:f3:d9:f6:dc:d6:77:eb:0c:a2:47:54: 4d:eb:1c:73:a6:36:f3:6d:94:4a:95:17:f4:11:f4: 30:d4:47:9a:e1:cd:05:5a:15:fd:ea:70:9e:9b:b7: c3:4d:b6:af:d9:f3:93:27:5f:42:7e:cf:54:6e:3a: 07:4d:40:03:a0:03:04:5b:af:81:cb:65:9c:a1:c4: c5:a7:dc:cc:b2:ad:58:8d:96:19:50:f5:5a:03:22: ac:d7:c9:e9:4a:1a:36:4b:83:1f:c5:d7:70:38:d1: c9:a7:7f:82:58:4d:0b:58:51:09:93:44:d6:cd:c9: 0e:8f:9b:b4:f8:36:e9:af:e7:17:34:c1:d0:15:05: 73:0b:ca:25:15:a4:e1:ac:52:cc:58:2d:33:07:be: e6:06:ca:e2:ad:bc:1c:7b:df:3c:1b:a8:9e:b9:ed: cf:6b:2a:a2:47:45:52:cc:26:41:16:ea:ac:a0:10: c5:9a:5c:43:d4:fd:ca:b4:16:9b:f5:af:4c:16:3a: a7:1a:f7:c7:52:e2:7a:20:14:ce:e2:30:75:18:cb: 7d:c6:1d:0a:4f:d4:c8:0c:70:02:74:ea:15:56:bb: 14:54:38:a4:97:44:fc:cf:5e:0d:d7:4f:1f:73:c4: 74:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:0F:41:AA:5B:56:76:A4:7C:81:66:87:0D:07:DB:7C:54:8A:05:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/d98a63f5-e0de-35bf-ac2d-d4c829125068.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96/7334a22a-f222-4457-889f-5478966ecf96.crl X509v3 Authority Key Identifier: keyid:C4:3E:A5:1C:D6:FA:F5:2F:16:D6:43:A2:C3:7D:EC:33:8F:FF:48:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7334a22a-f222-4457-889f-5478966ecf96.cer sbgp-ipAddrBlock: critical IPv4: 208.91.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:cf:6d:13:7a:23:c4:2f:1c:7f:e7:9d:3f:fc:38:fe:4a:15: e2:b3:41:fd:01:83:b6:08:c7:76:4b:3a:ca:a1:f4:18:a7:5d: f7:5d:3d:1f:be:2a:ad:78:f1:f3:3f:de:ca:91:07:b7:18:49: eb:ed:0d:5f:9c:a6:04:36:d8:b7:08:1f:b9:9e:c8:49:6c:ea: 95:40:be:02:68:5b:c1:01:e8:b3:e0:e6:4a:51:b1:26:05:54: c1:87:ba:23:a3:fe:9e:b2:d1:eb:01:26:15:7f:6d:1f:3d:e1: 92:48:60:38:2e:40:20:43:75:92:5a:1e:c2:99:cc:49:e8:a1: a0:fc:7e:80:47:71:21:15:08:76:64:c8:ba:36:38:2e:fa:39: 16:28:e2:d2:27:b7:89:ba:c5:f2:a9:3b:25:03:9f:04:b3:48: 5e:eb:cb:fc:8c:24:5b:3c:f0:34:1f:d2:df:10:8f:40:99:a1: 48:cc:55:8e:5c:ad:e0:f8:a9:b3:75:a3:57:b3:08:01:ce:b5: b2:4a:e8:d5:7f:7b:84:f6:4f:e5:e2:34:68:68:a3:d8:76:76: 0f:13:6b:c5:d5:5d:49:f5:5e:02:ac:c8:d4:36:ac:20:b1:c7: 5c:6a:1f:0a:df:65:71:d2:44:0a:40:58:e3:f3:7d:07:33:26: c5:64:aa:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBsM3/FB+SHCFYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMzNGEyMmEtZjIyMi00NDU3LTg4OWYtNTQ3ODk2NmVj Zjk2MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NWYyODZlOWUtZTI5OC00Zjk5LTgxOGYtZGVmYzAwNjRjNjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOE4R0nL3lNND1GzRdclCJVR89n23NZ36wyi R1RN6xxzpjbzbZRKlRf0EfQw1Eea4c0FWhX96nCem7fDTbav2fOTJ19Cfs9UbjoH TUADoAMEW6+By2WcocTFp9zMsq1YjZYZUPVaAyKs18npSho2S4MfxddwONHJp3+C WE0LWFEJk0TWzckOj5u0+Dbpr+cXNMHQFQVzC8olFaThrFLMWC0zB77mBsrirbwc e988G6ieue3PayqiR0VSzCZBFuqsoBDFmlxD1P3KtBab9a9MFjqnGvfHUuJ6IBTO 4jB1GMt9xh0KT9TIDHACdOoVVrsUVDikl0T8z14N108fc8R03wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEPQapbVnakfIFmhw0H23xUigWoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzM0 YTIyYS1mMjIyLTQ0NTctODg5Zi01NDc4OTY2ZWNmOTYvZDk4YTYzZjUtZTBkZS0z NWJmLWFjMmQtZDRjODI5MTI1MDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMzNGEyMmEtZjIyMi00NDU3LTg4 OWYtNTQ3ODk2NmVjZjk2LzczMzRhMjJhLWYyMjItNDQ1Ny04ODlmLTU0Nzg5NjZl Y2Y5Ni5jcmwwHwYDVR0jBBgwFoAUxD6lHNb69S8W1kOiw33sM4//SG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzM0YTIyYS1mMjIyLTQ0NTctODg5Zi01NDc4 OTY2ZWNmOTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0FtmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7PbRN6I8QvHH/nnT/8OP5KFeKzQf0Bg7YIx3ZLOsqh9BinXfddPR++ Kq148fM/3sqRB7cYSevtDV+cpgQ22LcIH7meyEls6pVAvgJoW8EB6LPg5kpRsSYF VMGHuiOj/p6y0esBJhV/bR894ZJIYDguQCBDdZJaHsKZzEnooaD8foBHcSEVCHZk yLo2OC76ORYo4tInt4m6xfKpOyUDnwSzSF7ry/yMJFs88DQf0t8Qj0CZoUjMVY5c reD4qbN1o1ezCAHOtbJK6NV/e4T2T+XiNGhoo9h2dg8Ta8XVXUn1XgKsyNQ2rCCx x1xqHwrfZXHSRApAWOPzfQczJsVkqvo= -----END CERTIFICATE-----Generated at Sat Sep 20 09:03:43 2025 by rpki-client