$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/9e39e998-69ae-3487-82e5-5922bdecd66c.roa File: 9e39e998-69ae-3487-82e5-5922bdecd66c.roa (raw, json) Hash identifier: 01upxX7Y9/RzY/urVqDuFn3QbdHG+UsixkSbmLJ09hM= Subject key identifier: DE:28:41:DD:B9:2A:7B:72:28:2B:34:AB:20:2B:66:7D:61:18:2E:72 Certificate issuer: /CN=3df29669-3733-4127-bbde-a71cc4b5a661 Certificate serial: 010D0C9F4328584B80B76258F7250AA6AEA4F5C0 Authority key identifier: 95:AD:24:54:D0:1F:09:B5:B4:E4:A5:D2:66:AE:73:F2:D4:9B:55:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/9e39e998-69ae-3487-82e5-5922bdecd66c.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 55247 IP address blocks: 208.82.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:62:58:f7:25:0a:a6:ae:a4:f5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3df29669-3733-4127-bbde-a71cc4b5a661 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=0e04a6c5-d073-438a-bee1-17efed76a579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:74:a8:cc:4e:12:31:de:53:bb:15:4e:ff:11: ac:4a:ce:45:57:1e:52:4b:6f:4e:ca:a8:1a:00:15: b8:03:8e:d6:19:f4:9d:e5:d4:9a:0a:59:5c:7a:b8: 4f:82:82:54:81:40:06:2c:25:dd:a4:3e:57:f4:68: 7b:08:1f:7b:c7:21:12:ef:09:0c:d1:90:9a:1a:c6: cf:b1:d8:43:5b:e7:20:bb:3a:83:84:58:a0:bb:f8: f9:d5:88:79:db:c3:67:ab:db:d1:1e:a3:f3:06:29: a0:6e:96:d0:29:87:ba:9f:44:85:9a:b1:67:c5:4b: 24:18:d7:1a:ff:f2:77:43:da:fc:d6:7f:3b:e4:ea: 23:be:37:9e:09:93:56:98:fc:a8:2a:1f:bc:7e:de: 19:1b:ac:66:4a:d4:d1:eb:e2:59:e3:8d:82:fc:e3: 4c:e3:ee:6d:cc:eb:5d:c4:6c:4c:5f:ec:70:d6:ed: c5:3f:ff:2f:31:70:7d:62:01:96:0b:6a:12:9e:cd: 1c:92:00:71:38:e6:e6:d1:25:a9:b4:97:11:08:34: 15:d4:86:3a:40:93:ce:78:33:89:fb:e2:5b:77:2a: cc:6e:f2:db:c8:d4:d9:fe:6f:13:0d:ea:6d:fb:ce: 0c:d1:9b:6e:fc:7b:25:8a:49:c5:f6:19:d7:4e:cd: cd:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:28:41:DD:B9:2A:7B:72:28:2B:34:AB:20:2B:66:7D:61:18:2E:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/9e39e998-69ae-3487-82e5-5922bdecd66c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.crl X509v3 Authority Key Identifier: keyid:95:AD:24:54:D0:1F:09:B5:B4:E4:A5:D2:66:AE:73:F2:D4:9B:55:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer sbgp-ipAddrBlock: critical IPv4: 208.82.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:e2:1b:bb:48:0b:de:28:33:c8:2d:4b:96:32:c5:df:94:8f: 48:a1:58:5d:46:f4:dd:2d:c9:bc:b4:fb:65:c4:7b:bf:53:8e: ec:11:f8:a2:61:b2:61:a6:db:cb:80:7c:ef:39:27:4d:0b:4e: bb:07:d6:9d:ba:fe:e2:68:28:92:26:b4:9e:c8:80:3a:ac:9f: fc:7f:c3:af:44:8a:6a:93:c9:3a:c4:65:9c:e4:8d:93:da:3d: 33:42:19:c4:c0:44:92:56:1d:16:b5:0b:71:7b:dd:62:70:b5: 8f:bd:74:38:b5:fe:2e:4f:3f:48:a4:fc:d0:28:aa:88:da:30: 75:55:69:57:72:b1:d3:b2:97:e6:a1:f0:67:1a:84:a9:68:32: 3c:3e:2a:69:fe:13:0e:90:40:48:ad:0b:2d:30:de:79:94:1a: 29:35:1a:51:e0:7a:54:56:ec:6e:02:a3:b2:10:84:8f:8d:44: 77:fe:80:07:1d:a9:41:bb:9d:ef:37:8f:bd:71:a4:f5:81:35: ea:5a:e3:c8:4a:79:da:56:3a:58:60:fd:51:6d:1f:93:a8:e2: e3:5e:99:62:e8:f2:dc:0a:f3:18:ee:a7:84:d4:98:20:ec:fa: 6c:04:b7:e9:13:ce:9e:0e:c3:51:74:b4:20:7f:05:89:3f:00: 3e:21:c3:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt2JY9yUKpq6k9cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2RmMjk2NjktMzczMy00MTI3LWJiZGUtYTcxY2M0YjVh NjYxMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk MGUwNGE2YzUtZDA3My00MzhhLWJlZTEtMTdlZmVkNzZhNTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nSozE4SMd5TuxVO/xGsSs5FVx5SS29Oyqga ABW4A47WGfSd5dSaCllcerhPgoJUgUAGLCXdpD5X9Gh7CB97xyES7wkM0ZCaGsbP sdhDW+cguzqDhFigu/j51Yh528Nnq9vRHqPzBimgbpbQKYe6n0SFmrFnxUskGNca //J3Q9r81n875OojvjeeCZNWmPyoKh+8ft4ZG6xmStTR6+JZ442C/ONM4+5tzOtd xGxMX+xw1u3FP/8vMXB9YgGWC2oSns0ckgBxOObm0SWptJcRCDQV1IY6QJPOeDOJ ++JbdyrMbvLbyNTZ/m8TDept+84M0Ztu/HsliknF9hnXTs3NCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4oQd25KntyKCs0qyArZn1hGC5yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZGYy OTY2OS0zNzMzLTQxMjctYmJkZS1hNzFjYzRiNWE2NjEvOWUzOWU5OTgtNjlhZS0z NDg3LTgyZTUtNTkyMmJkZWNkNjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2RmMjk2NjktMzczMy00MTI3LWJi ZGUtYTcxY2M0YjVhNjYxLzNkZjI5NjY5LTM3MzMtNDEyNy1iYmRlLWE3MWNjNGI1 YTY2MS5jcmwwHwYDVR0jBBgwFoAUla0kVNAfCbW05KXSZq5z8tSbVdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZGYyOTY2OS0zNzMzLTQxMjctYmJkZS1hNzFj YzRiNWE2NjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FKqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3iG7tIC94oM8gtS5Yyxd+Uj0ihWF1G9N0tyby0+2XEe79TjuwR+KJh smGm28uAfO85J00LTrsH1p26/uJoKJImtJ7IgDqsn/x/w69EimqTyTrEZZzkjZPa PTNCGcTARJJWHRa1C3F73WJwtY+9dDi1/i5PP0ik/NAoqojaMHVVaVdysdOyl+ah 8GcahKloMjw+Kmn+Ew6QQEitCy0w3nmUGik1GlHgelRW7G4Co7IQhI+NRHf+gAcd qUG7ne83j71xpPWBNepa48hKedpWOlhg/VFtH5Oo4uNemWLo8twK8xjup4TUmCDs +mwEt+kTzp4Ow1F0tCB/BYk/AD4hwyY= -----END CERTIFICATE-----Generated at Mon Oct 20 17:25:37 2025 by rpki-client