$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/08d994b0-98f1-323a-8f29-58eb272417bd.roa File: 08d994b0-98f1-323a-8f29-58eb272417bd.roa (raw, json) Hash identifier: eXajImyCrIJXOj7++pEFKufiGllKi5IABAFvHKqfY58= Subject key identifier: 41:14:59:FB:CB:98:CD:80:08:C6:90:D3:E4:DC:D1:68:67:A5:11:F6 Certificate issuer: /CN=88842878-1050-4df7-822b-ea8ec25db83d Certificate serial: 010D0C9F4328584B80B762EE9B37B827CF2FE780 Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/08d994b0-98f1-323a-8f29-58eb272417bd.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 16826 IP address blocks: 198.248.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:62:ee:9b:37:b8:27:cf:2f:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=52c72deb-5c08-4849-9a8e-fda783f34e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a1:c5:c1:4f:dd:04:3e:ae:0e:0d:c4:e5:91: a8:ec:48:cb:3e:72:c9:2d:e6:82:59:fc:66:f1:02: f9:11:8b:d8:e0:ee:c3:44:a6:36:fc:c3:56:34:26: 4d:45:bb:ca:d1:79:b4:0c:b5:99:c5:f2:ec:f0:5d: 50:01:33:53:39:a5:ee:f3:97:9c:62:14:40:61:df: 52:1a:f6:2f:b9:04:50:1e:c4:a5:76:1c:5e:22:10: 27:5c:7d:86:1e:4a:c8:c2:b4:bd:50:37:52:48:34: e1:72:eb:4f:03:cf:6e:1d:be:cb:d5:b9:00:e2:99: 41:7b:e5:c1:03:8f:32:55:b9:80:3c:58:b6:39:83: 02:08:a3:a9:5b:06:a4:cc:1d:88:9d:0a:04:cb:8e: 46:24:9f:87:60:23:a5:5f:dc:d3:2e:09:bf:2c:a0: 43:a2:ff:18:b2:dd:cb:65:1f:69:f3:86:96:4b:6f: 8e:43:1f:f0:7e:e3:54:1e:9a:2f:86:25:3c:91:93: 1b:fa:60:08:af:e0:26:33:0c:e6:45:5b:6b:de:70: b3:cd:f4:33:72:d6:cf:7d:da:ec:1b:39:5b:a3:2b: 4a:98:74:3e:1b:02:f7:39:9a:98:1c:36:74:82:ab: c4:d2:d0:b5:af:5a:91:14:d9:ce:e3:64:0f:0b:50: 51:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:14:59:FB:CB:98:CD:80:08:C6:90:D3:E4:DC:D1:68:67:A5:11:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/08d994b0-98f1-323a-8f29-58eb272417bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl X509v3 Authority Key Identifier: keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer sbgp-ipAddrBlock: critical IPv4: 198.248.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:c0:d8:d2:14:08:c3:46:3b:24:59:00:da:18:3a:0b:0a:e1: 55:11:0a:11:f7:bb:b2:be:4d:d7:fb:68:a3:6d:c9:27:98:60: aa:01:00:81:a7:93:3a:28:11:7b:59:93:22:09:4f:ab:67:22: 6c:5f:5c:52:56:00:8d:56:4c:94:06:fc:23:ec:d1:76:39:54: b8:08:1d:6d:b7:de:05:1c:5b:89:4d:74:75:06:2d:3e:0a:01: dd:46:83:d9:b5:83:d3:bb:6c:d3:c1:de:ac:f7:ee:71:95:e0: 69:dc:a9:1d:2d:bf:94:f7:4c:b2:9d:0c:67:98:89:8a:a4:e8: 68:77:e5:3e:f4:98:7d:1a:8d:74:5d:b7:4a:64:57:85:f9:eb: fb:88:b3:88:b7:f4:15:c6:23:e9:b9:01:40:85:06:57:45:45: 15:ab:45:20:e4:15:ae:30:ba:1b:6f:4f:66:52:84:b7:85:de: 77:6c:7c:5e:d4:5e:ee:3c:2f:0e:37:6e:bd:a1:63:af:01:c5: 2a:ed:96:d9:a8:69:c2:0c:c3:04:35:95:47:55:01:fb:4e:c9: 7c:e8:64:d5:78:4d:d2:21:0d:37:14:ef:98:1b:5e:28:de:ab: 38:89:d6:cb:a2:62:8d:4e:b0:49:01:35:33:f7:e2:db:1e:df: e2:29:79:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt2Lumze4J88v54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg4NDI4NzgtMTA1MC00ZGY3LTgyMmItZWE4ZWMyNWRi ODNkMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk NTJjNzJkZWItNWMwOC00ODQ5LTlhOGUtZmRhNzgzZjM0ZTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqHFwU/dBD6uDg3E5ZGo7EjLPnLJLeaCWfxm 8QL5EYvY4O7DRKY2/MNWNCZNRbvK0Xm0DLWZxfLs8F1QATNTOaXu85ecYhRAYd9S GvYvuQRQHsSldhxeIhAnXH2GHkrIwrS9UDdSSDThcutPA89uHb7L1bkA4plBe+XB A48yVbmAPFi2OYMCCKOpWwakzB2InQoEy45GJJ+HYCOlX9zTLgm/LKBDov8Yst3L ZR9p84aWS2+OQx/wfuNUHpovhiU8kZMb+mAIr+AmMwzmRVtr3nCzzfQzctbPfdrs GzlboytKmHQ+GwL3OZqYHDZ0gqvE0tC1r1qRFNnO42QPC1BRzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEUWfvLmM2ACMaQ0+Tc0WhnpRH2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0 Mjg3OC0xMDUwLTRkZjctODIyYi1lYThlYzI1ZGI4M2QvMDhkOTk0YjAtOThmMS0z MjNhLThmMjktNThlYjI3MjQxN2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODg4NDI4NzgtMTA1MC00ZGY3LTgy MmItZWE4ZWMyNWRiODNkLzg4ODQyODc4LTEwNTAtNGRmNy04MjJiLWVhOGVjMjVk YjgzZC5jcmwwHwYDVR0jBBgwFoAUCvQvaSDxqtdtZzyGmgTIgB6tfZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ODg0Mjg3OC0xMDUwLTRkZjctODIyYi1lYThl YzI1ZGI4M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExvhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK7A2NIUCMNGOyRZANoYOgsK4VURChH3u7K+Tdf7aKNtySeYYKoBAIGn kzooEXtZkyIJT6tnImxfXFJWAI1WTJQG/CPs0XY5VLgIHW233gUcW4lNdHUGLT4K Ad1Gg9m1g9O7bNPB3qz37nGV4GncqR0tv5T3TLKdDGeYiYqk6Gh35T70mH0ajXRd t0pkV4X56/uIs4i39BXGI+m5AUCFBldFRRWrRSDkFa4wuhtvT2ZShLeF3ndsfF7U Xu48Lw43br2hY68BxSrtltmoacIMwwQ1lUdVAftOyXzoZNV4TdIhDTcU75gbXije qziJ1suiYo1OsEkBNTP34tse3+IpefE= -----END CERTIFICATE-----Generated at Mon Oct 20 04:46:17 2025 by rpki-client