$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/b650279d-e7c5-3317-ad0a-2a7bbbe24d14.roa File: b650279d-e7c5-3317-ad0a-2a7bbbe24d14.roa (raw, json) Hash identifier: kSYU3iwRj+Yzh7tiohqTx2usfqw1Tqp6tIayRM1x7To= Subject key identifier: 9C:CE:83:99:6D:AB:C9:EE:1F:68:9E:23:26:77:F2:B9:FC:BB:19:60 Certificate issuer: /CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c Certificate serial: 010D0C9F4328584B0CDC0C28903BE58F8E47FD98 Authority key identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/b650279d-e7c5-3317-ad0a-2a7bbbe24d14.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 16509 IP address blocks: 205.157.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:0c:28:90:3b:e5:8f:8e:47:fd:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=ff51c252-8e15-410f-88f6-fa433f127f96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e2:2b:c4:0f:3b:80:db:3e:69:8f:65:b6:1a: 98:1a:21:50:bf:ad:b6:6a:04:a5:38:3c:89:2a:2f: a3:93:68:2e:84:33:cf:6d:37:1f:b4:67:46:70:7d: 3f:3c:70:5d:98:33:ab:28:ad:4b:3a:60:e9:d2:5c: 06:e1:41:90:0a:fe:2e:67:50:91:d0:19:9e:1d:74: f0:a1:29:e8:23:fc:f1:d0:15:f9:0b:67:29:08:ef: 6d:a2:9f:9b:98:66:c7:5a:6d:f7:f0:8f:ba:1f:7d: ea:30:05:20:ca:aa:83:20:85:ff:34:a8:1d:54:68: 6b:75:ca:84:6d:28:1b:0a:37:e2:93:18:d4:61:d1: 09:15:c8:ef:bb:77:a1:0c:0e:69:42:55:e4:dd:cf: 2f:33:6d:c0:0a:28:c6:d2:9a:02:73:20:85:60:53: 4e:3e:b1:89:92:4c:91:32:ca:17:63:d1:c4:f7:ff: ed:b7:92:47:31:52:01:7e:5f:bf:92:b9:59:cd:c8: fc:d4:8f:0f:3c:03:20:42:81:dc:db:69:e3:2a:74: d5:a5:46:6c:22:69:c7:f5:79:a5:a0:0a:57:7b:4e: 7d:67:fc:22:e3:56:98:48:58:4c:19:a0:c3:9f:da: 86:cf:a4:0b:3b:93:c3:e1:88:3e:de:76:9b:e8:cf: b6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CE:83:99:6D:AB:C9:EE:1F:68:9E:23:26:77:F2:B9:FC:BB:19:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/b650279d-e7c5-3317-ad0a-2a7bbbe24d14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl X509v3 Authority Key Identifier: keyid:80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer sbgp-ipAddrBlock: critical IPv4: 205.157.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:9e:e6:2d:17:37:84:33:7c:04:11:3b:ae:01:24:b4:83:9c: 36:e9:ae:ba:5e:ff:11:cf:9c:d3:02:47:9c:b3:95:97:77:bc: 1a:20:c7:cb:96:14:18:45:f5:27:47:ee:52:ef:8f:b6:7e:a8: 5f:cb:50:39:ae:ef:8f:ca:19:20:ed:7d:7e:fd:20:b5:09:38: f8:6c:6d:15:cf:60:cc:1d:97:eb:91:df:65:2a:5c:e4:b1:0c: c0:aa:e2:2f:40:f1:8d:14:65:26:23:a5:f0:58:d0:70:2c:da: a3:43:5e:ab:8e:5e:d5:d9:a5:d6:5a:03:a3:88:ff:1b:a9:3f: f1:c1:b8:76:87:9b:90:66:2d:0f:ad:4b:a6:9a:c1:b1:9c:2a: 1b:c4:a8:10:a4:67:c3:a5:72:41:81:35:a1:46:4b:4c:ac:60: e1:6f:f8:90:5f:e4:9c:12:e8:a4:c6:bf:1e:46:81:37:20:42: c0:4b:a4:a5:64:c1:81:8e:47:6d:fa:b6:25:b9:5d:de:95:2b: 6d:60:72:0c:8b:75:7c:a2:95:c0:d5:63:20:1e:45:f7:40:0a: 9c:1f:42:07:87:43:91:b9:d5:51:89:74:2a:46:b3:8e:a8:9c: 98:07:5a:8b:54:6d:8f:a7:14:89:d3:71:66:49:6b:13:7c:d4: c4:ec:d0:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3AwokDvlj45H/ZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4Y2M4ZTUtMWZjZi00YzI4LTlhZGItNDVlMmNjMWMw MjNjMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk ZmY1MWMyNTItOGUxNS00MTBmLTg4ZjYtZmE0MzNmMTI3Zjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOIrxA87gNs+aY9lthqYGiFQv622agSlODyJ Ki+jk2guhDPPbTcftGdGcH0/PHBdmDOrKK1LOmDp0lwG4UGQCv4uZ1CR0BmeHXTw oSnoI/zx0BX5C2cpCO9top+bmGbHWm338I+6H33qMAUgyqqDIIX/NKgdVGhrdcqE bSgbCjfikxjUYdEJFcjvu3ehDA5pQlXk3c8vM23ACijG0poCcyCFYFNOPrGJkkyR MsoXY9HE9//tt5JHMVIBfl+/krlZzcj81I8PPAMgQoHc22njKnTVpUZsImnH9Xml oApXe059Z/wi41aYSFhMGaDDn9qGz6QLO5PD4Yg+3nab6M+2DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzOg5ltq8nuH2ieIyZ38rn8uxlgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThj YzhlNS0xZmNmLTRjMjgtOWFkYi00NWUyY2MxYzAyM2MvYjY1MDI3OWQtZTdjNS0z MzE3LWFkMGEtMmE3YmJiZTI0ZDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4Y2M4ZTUtMWZjZi00YzI4LTlh ZGItNDVlMmNjMWMwMjNjL2U5OGNjOGU1LTFmY2YtNGMyOC05YWRiLTQ1ZTJjYzFj MDIzYy5jcmwwHwYDVR0jBBgwFoAUgLK/cdOkjVQ54bafi7AyMY4ObJowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThjYzhlNS0xZmNmLTRjMjgtOWFkYi00NWUy Y2MxYzAyM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzZ3YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKe5i0XN4QzfAQRO64BJLSDnDbprrpe/xHPnNMCR5yzlZd3vBogx8uW FBhF9SdH7lLvj7Z+qF/LUDmu74/KGSDtfX79ILUJOPhsbRXPYMwdl+uR32UqXOSx DMCq4i9A8Y0UZSYjpfBY0HAs2qNDXquOXtXZpdZaA6OI/xupP/HBuHaHm5BmLQ+t S6aawbGcKhvEqBCkZ8OlckGBNaFGS0ysYOFv+JBf5JwS6KTGvx5GgTcgQsBLpKVk wYGOR236tiW5Xd6VK21gcgyLdXyilcDVYyAeRfdACpwfQgeHQ5G51VGJdCpGs46o nJgHWotUbY+nFInTcWZJaxN81MTs0Lo= -----END CERTIFICATE-----Generated at Sun Oct 19 11:00:40 2025 by rpki-client