$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/f9e7e933-128d-38a2-b25e-e0a196d59e4a.roa File: f9e7e933-128d-38a2-b25e-e0a196d59e4a.roa (raw, json) Hash identifier: TDwJO0otmcvXXRBa2kOefbCQwZLIpxhDpOIInrJcq48= Subject key identifier: 1C:D6:77:A6:FD:0F:56:6B:42:A6:7C:AC:BD:BB:D6:4B:DA:36:B9:51 Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Certificate serial: 010D0C9F4328584B0B76A10E98B7530F3CA381C0 Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/f9e7e933-128d-38a2-b25e-e0a196d59e4a.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 22267 IP address blocks: 208.118.228.128/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:a1:0e:98:b7:53:0f:3c:a3:81:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=5c0319c4-a96e-48e2-9fa4-786607175f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:19:20:67:71:4b:48:18:3b:f4:b7:40:b9:93: 0a:c4:8e:fd:cc:b4:93:25:58:1b:1c:0b:87:87:f3: 7f:05:c8:36:42:9b:7d:54:ce:22:88:bc:c2:15:76: a9:0e:f7:a1:10:fc:0d:cb:a4:11:34:5b:24:32:4c: 9a:74:d1:84:0a:d5:41:f2:89:31:31:61:99:2a:d6: 56:77:82:ee:7d:1f:eb:86:e5:fd:6c:e3:4d:82:f1: 6f:e9:ba:76:0b:73:99:de:fe:ab:64:b2:77:d8:6b: 15:85:ce:35:dd:7d:78:05:c2:e2:8d:24:8e:08:ad: ca:37:56:e2:83:8d:5d:05:a1:04:2a:38:6e:24:dc: e0:40:4f:cd:13:dc:1e:0f:5e:b5:96:1e:1c:64:27: 98:46:d5:82:8f:4f:e7:b1:57:02:15:17:52:25:e1: a8:b1:4f:c3:85:2c:77:e2:d4:df:c9:19:fe:b6:fe: 3c:7f:78:c4:54:8d:8a:95:99:c1:fa:2a:7a:b2:fb: 15:72:ce:cf:fa:23:b5:28:de:2b:15:ed:eb:00:9e: 5c:cc:72:24:dc:37:a7:58:2a:fb:34:ba:9c:60:db: 5e:c2:b2:52:fd:a7:a0:c0:f6:2a:a7:70:b3:60:08: d6:cb:21:b1:a5:81:7d:00:42:25:ea:60:06:5a:1c: 7a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D6:77:A6:FD:0F:56:6B:42:A6:7C:AC:BD:BB:D6:4B:DA:36:B9:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/f9e7e933-128d-38a2-b25e-e0a196d59e4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl X509v3 Authority Key Identifier: keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer sbgp-ipAddrBlock: critical IPv4: 208.118.228.128/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:ab:c1:f7:f2:fc:4a:46:07:e3:2d:18:8f:d0:4c:18:01:89: 38:61:d6:2c:25:d7:5f:00:ac:51:0d:f6:0e:6b:3c:1f:75:03: eb:c7:9e:fa:54:b0:9c:41:1d:ff:36:98:c0:de:90:44:8c:62: 02:22:89:99:9b:46:23:30:69:c1:33:ba:1c:c1:7a:a3:fe:80: de:b7:92:42:70:6c:ba:e3:39:2b:35:e4:71:a7:8b:5f:ab:32: 4e:a3:96:2a:60:f6:2a:83:d0:b4:66:0d:c8:d9:95:8f:c5:00: c8:c5:19:76:32:61:29:87:5e:bb:27:e8:2f:ca:df:eb:ea:43: e8:71:86:ab:77:e9:0c:a5:21:0a:7d:20:3b:32:02:eb:46:34: 57:ff:35:da:58:7f:0f:a6:0a:85:df:91:1e:e6:b3:3d:0e:f4: d3:15:b5:55:58:6c:9e:59:bf:78:d7:27:7b:0d:af:42:06:f0: 48:01:cd:32:71:9a:02:73:07:35:5b:1d:7b:10:66:b6:e2:c0: e9:2b:f0:19:c5:f7:47:8f:f9:70:d3:ed:69:73:2a:b4:b7:bd: 12:08:c1:46:2f:ba:92:4e:bc:72:b3:7a:92:de:85:c6:ec:c1: 06:90:ab:6a:fa:ad:93:ce:3e:12:95:fe:e5:51:c7:5a:e9:13: c0:39:16:e3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsLdqEOmLdTDzyjgcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5 MWRkMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NWMwMzE5YzQtYTk2ZS00OGUyLTlmYTQtNzg2NjA3MTc1Zjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRkgZ3FLSBg79LdAuZMKxI79zLSTJVgbHAuH h/N/Bcg2Qpt9VM4iiLzCFXapDvehEPwNy6QRNFskMkyadNGECtVB8okxMWGZKtZW d4LufR/rhuX9bONNgvFv6bp2C3OZ3v6rZLJ32GsVhc413X14BcLijSSOCK3KN1bi g41dBaEEKjhuJNzgQE/NE9weD161lh4cZCeYRtWCj0/nsVcCFRdSJeGosU/DhSx3 4tTfyRn+tv48f3jEVI2KlZnB+ip6svsVcs7P+iO1KN4rFe3rAJ5czHIk3DenWCr7 NLqcYNtewrJS/aegwPYqp3CzYAjWyyGxpYF9AEIl6mAGWhx6fQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBzWd6b9D1ZrQqZ8rL271kvaNrlRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2 MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvZjllN2U5MzMtMTI4ZC0z OGEyLWIyNWUtZTBhMTk2ZDU5ZTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1 NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl ZGQ4MTkxZGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUE0HbkgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA3q8H38vxKRgfjLRiP0EwYAYk4YdYsJddfAKxRDfYOazwfdQPrx576 VLCcQR3/NpjA3pBEjGICIomZm0YjMGnBM7ocwXqj/oDet5JCcGy64zkrNeRxp4tf qzJOo5YqYPYqg9C0Zg3I2ZWPxQDIxRl2MmEph167J+gvyt/r6kPocYard+kMpSEK fSA7MgLrRjRX/zXaWH8PpgqF35Ee5rM9DvTTFbVVWGyeWb941yd7Da9CBvBIAc0y cZoCcwc1Wx17EGa24sDpK/AZxfdHj/lw0+1pcyq0t70SCMFGL7qSTrxys3qS3oXG 7MEGkKtq+q2Tzj4Slf7lUcda6RPAORbj -----END CERTIFICATE-----Generated at Sat Oct 18 14:54:43 2025 by rpki-client