$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/a569e485-6b37-3b02-a56e-74b826b6659a.roa File: a569e485-6b37-3b02-a56e-74b826b6659a.roa (raw, json) Hash identifier: qEnWfMwP7Q3Pc0ygyn2E3EuhgGSH3zVnOl8iBYFY96o= Subject key identifier: E9:95:F3:09:6D:30:90:15:29:83:E2:E8:A0:03:36:03:D0:EC:C1:D5 Certificate issuer: /CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86 Certificate serial: 010D0C9F4328584AFC1BF52436B77800707A4800 Authority key identifier: 9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/a569e485-6b37-3b02-a56e-74b826b6659a.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 20326 IP address blocks: 208.91.104.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:f5:24:36:b7:78:00:70:7a:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=93e7887e-1c94-4919-9ee9-eb18db46dbac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:bd:d0:2f:9b:b5:4f:69:6d:af:ae:68:fb:22: 8f:2c:5a:8a:54:27:b0:b8:e0:2a:93:3c:e9:d5:11: e4:5d:58:3f:0c:b4:00:be:02:5a:02:20:c1:fa:21: 19:fd:4c:e8:6b:3f:99:89:e9:ed:69:17:31:2e:fe: 26:bc:38:ea:be:6f:62:5f:6e:83:12:93:25:98:e6: 28:cd:48:64:7d:17:00:ab:dd:68:f8:f0:c3:22:c1: 3b:98:53:b0:3b:de:69:4a:4c:2e:de:88:3c:ee:45: 7d:41:e3:f0:96:dd:f4:73:24:b5:54:ad:69:8a:08: a2:20:03:bb:40:32:e0:4b:c8:58:6b:51:6a:0f:b9: 58:2e:5c:64:ed:63:3f:77:17:68:28:97:ff:ae:15: c3:68:00:f9:81:8e:89:a2:40:f4:65:e7:a4:7d:58: 05:1e:0f:0b:c7:40:81:75:6a:42:e8:74:6e:40:01: 4e:99:33:c2:50:b6:af:41:51:ae:a4:72:20:6c:4a: d3:11:65:12:ef:88:47:cf:48:f8:a7:63:4b:f1:22: b4:3d:b0:c3:6a:14:ca:b4:96:15:38:63:c1:ff:6c: 75:c5:d0:0d:fc:74:88:14:46:12:a2:84:85:12:f7: e3:fe:d6:48:b5:ee:8f:29:df:44:b3:1b:55:c2:95: 4a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:95:F3:09:6D:30:90:15:29:83:E2:E8:A0:03:36:03:D0:EC:C1:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/a569e485-6b37-3b02-a56e-74b826b6659a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl X509v3 Authority Key Identifier: keyid:9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer sbgp-ipAddrBlock: critical IPv4: 208.91.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:b3:9e:68:e6:cb:e3:16:a4:62:45:a4:19:fd:a4:d4:82:3b: 2a:11:b9:75:09:30:72:d7:4b:57:96:16:26:ac:c0:57:5d:17: 9b:b7:bb:b3:44:50:55:4f:7a:cb:da:8b:d8:5c:09:2c:20:34: d1:56:f1:33:f8:5c:95:d5:91:42:93:ca:47:71:c3:7f:00:8a: 0f:9b:09:d3:e3:16:c6:26:7f:25:61:53:86:41:1f:74:b0:2a: f7:6f:4d:00:0a:4b:13:1a:fd:e1:42:4e:e6:b1:f2:47:79:3c: f6:7c:55:41:6c:4c:33:b5:75:cd:29:4c:67:a5:c8:0c:e2:03: 16:4b:df:57:29:fc:ec:fa:ae:6c:31:cd:ea:27:2e:87:d7:75: 3f:7c:ff:bb:ee:d3:eb:e4:f1:76:bb:ce:c0:2b:f0:ac:7b:52: 91:ce:59:29:03:92:52:a9:1c:87:82:d9:8b:b4:26:ea:2d:47: 09:5c:8f:df:b0:5a:86:77:c4:77:0a:07:4f:fb:04:94:0a:9e: e0:dd:6e:03:85:ba:50:6e:05:a4:2f:9b:a8:dd:9d:12:24:2d: fd:18:0a:4c:7c:f7:16:48:2b:26:e5:9a:99:c5:b2:68:9b:20: 38:2c:57:2a:2d:9b:8a:e3:a1:58:e7:44:83:91:b7:65:0c:a3: c9:5d:56:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G/UkNrd4AHB6SAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODYwYjRjMzgtMmNhNi00ZWRkLTgwZWYtMTE3M2E4ZDdl Zjg2MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk OTNlNzg4N2UtMWM5NC00OTE5LTllZTktZWIxOGRiNDZkYmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9r3QL5u1T2ltr65o+yKPLFqKVCewuOAqkzzp 1RHkXVg/DLQAvgJaAiDB+iEZ/Uzoaz+ZientaRcxLv4mvDjqvm9iX26DEpMlmOYo zUhkfRcAq91o+PDDIsE7mFOwO95pSkwu3og87kV9QePwlt30cyS1VK1pigiiIAO7 QDLgS8hYa1FqD7lYLlxk7WM/dxdoKJf/rhXDaAD5gY6JokD0ZeekfVgFHg8Lx0CB dWpC6HRuQAFOmTPCULavQVGupHIgbErTEWUS74hHz0j4p2NL8SK0PbDDahTKtJYV OGPB/2x1xdAN/HSIFEYSooSFEvfj/tZIte6PKd9EsxtVwpVKlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmV8wltMJAVKYPi6KADNgPQ7MHVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NjBi NGMzOC0yY2E2LTRlZGQtODBlZi0xMTczYThkN2VmODYvYTU2OWU0ODUtNmIzNy0z YjAyLWE1NmUtNzRiODI2YjY2NTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODYwYjRjMzgtMmNhNi00ZWRkLTgw ZWYtMTE3M2E4ZDdlZjg2Lzg2MGI0YzM4LTJjYTYtNGVkZC04MGVmLTExNzNhOGQ3 ZWY4Ni5jcmwwHwYDVR0jBBgwFoAUnBoKe0BtQfxOmXCKeMmGhJl8eI0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84NjBiNGMzOC0yY2E2LTRlZGQtODBlZi0xMTcz YThkN2VmODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaznmjmy+MWpGJFpBn9pNSCOyoRuXUJMHLXS1eWFiaswFddF5u3u7NE UFVPesvai9hcCSwgNNFW8TP4XJXVkUKTykdxw38Aig+bCdPjFsYmfyVhU4ZBH3Sw KvdvTQAKSxMa/eFCTuax8kd5PPZ8VUFsTDO1dc0pTGelyAziAxZL31cp/Oz6rmwx zeonLofXdT98/7vu0+vk8Xa7zsAr8Kx7UpHOWSkDklKpHIeC2Yu0JuotRwlcj9+w WoZ3xHcKB0/7BJQKnuDdbgOFulBuBaQvm6jdnRIkLf0YCkx89xZIKyblmpnFsmib IDgsVyotm4rjoVjnRIORt2UMo8ldVtQ= -----END CERTIFICATE-----Generated at Fri Sep 5 08:50:09 2025 by rpki-client