$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/e8a4e9ef-e6df-392b-b42b-db3c5f8d0b12.roa File: e8a4e9ef-e6df-392b-b42b-db3c5f8d0b12.roa (raw, json) Hash identifier: xa3swq7gDy6G9yPY0DD7zuWi1pf4teXHUVqZOdHcJYA= Subject key identifier: 8C:7B:86:FF:64:17:51:D7:DB:85:DD:B4:E3:36:6B:C2:9B:FD:A9:A4 Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F4328584B8BE20F6CF2B72807B2F29980 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/e8a4e9ef-e6df-392b-b42b-db3c5f8d0b12.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 42 IP address blocks: 208.67.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:0f:6c:f2:b7:28:07:b2:f2:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=a7d6a65a-9e62-4a18-b13f-db91e8798d06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f6:04:6e:f4:02:eb:ca:b6:7b:9f:3e:7f:62: 85:e3:71:77:ed:d2:4b:31:f0:87:52:2d:16:72:69: d8:1a:67:0a:78:db:43:79:ab:3e:6a:15:43:c1:bd: 76:70:9e:d7:6c:bb:b6:83:b7:bb:64:0c:e1:3d:ff: b5:c1:92:7a:a4:4e:17:e6:4a:25:29:72:77:ba:59: 38:7c:71:54:46:51:e0:d7:ae:1c:4f:70:51:4d:28: 34:7f:c7:8d:c6:51:73:26:ad:e7:4c:4a:85:6d:2f: 6d:d4:b7:56:34:03:6f:43:98:6b:78:5e:f4:79:f2: 80:b2:d4:43:de:6c:f3:d1:be:79:4f:e9:d3:5c:28: c9:85:9d:74:64:40:8c:63:d3:c1:e2:8d:8e:b1:48: 44:57:8b:1c:cc:82:27:b9:c6:cf:55:80:1b:e2:cd: 9d:9f:60:ed:31:16:ee:2f:07:38:0b:25:53:58:c8: ea:82:07:d7:a1:4d:e8:d0:1e:b2:a1:09:f7:fb:7d: 5b:91:9c:e6:b7:70:a3:10:90:59:44:be:69:da:38: 5d:d3:c5:6d:3d:04:3c:22:37:ae:e7:c8:1f:94:8f: 29:f0:ad:98:b6:05:85:70:1b:aa:5e:51:42:54:34: d3:ff:a6:7f:1d:11:b2:d8:c2:31:36:29:e1:f7:7c: ba:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7B:86:FF:64:17:51:D7:DB:85:DD:B4:E3:36:6B:C2:9B:FD:A9:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/e8a4e9ef-e6df-392b-b42b-db3c5f8d0b12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv4: 208.67.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:9a:4d:24:7b:d8:46:97:48:a0:d7:ed:87:2e:ab:75:83:29: 2f:dc:e8:0e:7a:65:1a:ff:b4:ea:37:50:4d:d7:a9:0f:5a:22: d1:d7:70:80:4c:28:f4:e9:22:d4:a8:02:fc:ee:fc:02:25:66: 47:97:98:14:fd:df:7d:98:bc:21:4d:b3:7f:c4:e0:45:e9:49: f7:d4:77:e4:b8:7f:10:69:f8:44:a9:7f:23:3d:81:bf:46:95: ab:c8:c2:12:66:e7:db:6a:3a:f5:38:e0:b6:41:df:c1:fc:99: 3c:b2:c7:3d:0b:8d:ff:18:e7:8f:fc:ac:40:d0:c2:fc:3c:31: 59:0e:08:c2:cf:c3:f8:03:13:60:55:f8:de:cd:87:d8:a3:3c: ff:44:ab:3f:e0:53:7e:40:dd:d6:5d:d3:9c:4b:0e:37:96:73: 44:7a:68:a2:56:15:d6:00:f9:1a:ff:ba:d1:09:ac:ba:1a:cb: b8:47:80:6d:b3:7d:80:4e:aa:1e:9e:ca:88:06:1b:12:ac:db: 31:3d:de:cc:3b:73:05:23:0b:ab:07:c4:d9:e6:27:5d:9f:f9: 0b:bb:c5:63:87:4d:ab:ec:8a:4c:70:35:e1:23:4b:a4:7e:59: 4e:65:ba:dd:ab:1b:ae:3a:02:f5:f5:e8:0f:7a:ac:d1:4e:4f: 90:99:22:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4g9s8rcoB7LymYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk YTdkNmE2NWEtOWU2Mi00YTE4LWIxM2YtZGI5MWU4Nzk4ZDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvYEbvQC68q2e58+f2KF43F37dJLMfCHUi0W cmnYGmcKeNtDeas+ahVDwb12cJ7XbLu2g7e7ZAzhPf+1wZJ6pE4X5kolKXJ3ulk4 fHFURlHg164cT3BRTSg0f8eNxlFzJq3nTEqFbS9t1LdWNANvQ5hreF70efKAstRD 3mzz0b55T+nTXCjJhZ10ZECMY9PB4o2OsUhEV4sczIInucbPVYAb4s2dn2DtMRbu Lwc4CyVTWMjqggfXoU3o0B6yoQn3+31bkZzmt3CjEJBZRL5p2jhd08VtPQQ8Ijeu 58gflI8p8K2YtgWFcBuqXlFCVDTT/6Z/HRGy2MIxNinh93y6AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIx7hv9kF1HX24XdtOM2a8Kb/amkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvZThhNGU5ZWYtZTZkZi0z OTJiLWI0MmItZGIzYzVmOGQwYjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ENYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+aTSR72EaXSKDX7Ycuq3WDKS/c6A56ZRr/tOo3UE3XqQ9aItHXcIBM KPTpItSoAvzu/AIlZkeXmBT9332YvCFNs3/E4EXpSffUd+S4fxBp+ESpfyM9gb9G lavIwhJm59tqOvU44LZB38H8mTyyxz0Ljf8Y54/8rEDQwvw8MVkOCMLPw/gDE2BV +N7Nh9ijPP9Eqz/gU35A3dZd05xLDjeWc0R6aKJWFdYA+Rr/utEJrLoay7hHgG2z fYBOqh6eyogGGxKs2zE93sw7cwUjC6sHxNnmJ12f+Qu7xWOHTavsikxwNeEjS6R+ WU5lut2rG646AvX16A96rNFOT5CZIsM= -----END CERTIFICATE-----Generated at Mon Oct 20 04:31:13 2025 by rpki-client