$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/5fe505e7-92bb-3ecc-8d03-b9755c95bd78.roa File: 5fe505e7-92bb-3ecc-8d03-b9755c95bd78.roa (raw, json) Hash identifier: umEf81FDfkjKtx6yQCXTNZtKwwzgWVnvACueF+t4qQE= Subject key identifier: 3A:5A:0F:0E:6D:76:42:C0:67:35:BC:28:B7:AF:67:65:6D:16:97:61 Certificate issuer: /CN=8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c Certificate serial: 010D0C9F4328584AEE2683138BBDBF2B7C05DE40 Authority key identifier: B3:27:C8:6E:2F:06:AC:4E:AE:62:5D:34:43:F4:B8:F5:E6:0A:6C:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/5fe505e7-92bb-3ecc-8d03-b9755c95bd78.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 396982 IP address blocks: 209.188.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:83:13:8b:bd:bf:2b:7c:05:de:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=b0ed6e40-a72a-48cf-9014-1be1cc79aa4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1b:2e:49:89:b8:e2:fe:7c:50:54:0d:e2:eb: f0:cc:c2:4c:35:e5:68:c0:9c:f7:8f:25:39:b4:31: 45:33:d4:40:37:54:64:a2:f8:70:c8:36:91:2d:22: b0:c5:1a:f2:84:c9:4e:b6:4b:97:37:01:37:e0:ce: 90:f1:08:3b:51:f5:e1:4b:f2:6d:95:44:f6:46:01: b4:24:91:ef:d8:30:5f:07:7c:c1:c0:e2:22:6b:ea: 41:1e:83:53:3d:81:5e:b8:04:0b:c9:fb:44:cb:45: aa:cd:bf:3c:e0:68:4a:f7:60:2c:f7:b3:a0:43:18: 93:d4:8d:c2:b2:81:b0:89:42:15:79:9f:d8:84:b1: 65:7f:2b:2f:db:17:20:94:ad:67:af:8f:e9:32:4b: 18:1f:78:30:93:f8:d7:e3:d0:ee:ae:56:61:9c:2c: 2b:96:26:eb:f8:62:50:67:a8:af:61:cb:f7:d4:a3: 39:b3:74:76:a6:44:dc:ee:1a:11:09:f5:23:c2:8e: 91:82:a0:cb:3a:ad:bc:41:16:3b:2f:f5:18:e0:09: fe:47:4a:ca:61:57:ab:48:16:4f:0d:a8:93:b2:d1: 74:53:3b:a1:39:eb:3b:dd:95:00:0e:43:2b:bc:24: 7b:2f:e4:dc:7e:38:a2:da:1d:17:8e:50:7d:ba:a0: d6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:5A:0F:0E:6D:76:42:C0:67:35:BC:28:B7:AF:67:65:6D:16:97:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/5fe505e7-92bb-3ecc-8d03-b9755c95bd78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.crl X509v3 Authority Key Identifier: keyid:B3:27:C8:6E:2F:06:AC:4E:AE:62:5D:34:43:F4:B8:F5:E6:0A:6C:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.cer sbgp-ipAddrBlock: critical IPv4: 209.188.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:a3:4e:43:75:1d:a0:ad:78:36:b7:e6:a1:f9:6b:07:6d:c6: b1:54:31:e9:0e:d1:de:25:0b:a5:3e:78:ac:5b:b6:3a:d9:96: 29:c5:f5:9c:f6:20:39:1c:a6:cf:d5:bd:28:a9:71:fe:1d:a9: 54:7c:46:f9:ff:30:43:8c:8a:f3:bc:dd:de:53:ff:69:54:e5: ea:79:85:e6:3c:bb:3d:68:00:b2:b4:ab:24:12:2b:d0:70:9a: 27:42:9c:06:33:90:a7:9e:73:6d:49:a0:cc:38:dd:b6:fb:47: c3:9a:92:47:7d:5f:70:61:33:bb:27:14:89:61:d7:d2:f9:63: d0:f9:0f:5d:07:e5:b9:e0:46:6b:5f:fc:40:66:6a:79:d5:09: 0d:1a:14:a9:ad:61:86:42:ed:b0:1e:d8:bb:42:23:d3:ad:c9: 5a:0d:73:b2:ed:8a:e6:08:d7:b9:2f:09:8d:86:fa:7e:6f:2a: 14:8b:69:8a:b0:e4:e3:ee:9d:7b:7c:b4:a8:01:be:b5:a5:51: f1:f3:0d:6e:44:1b:5d:14:0f:cf:3a:30:ce:2b:bc:58:7b:73: 82:7b:05:fd:51:e4:67:7a:ee:14:ad:27:01:a1:be:c1:74:2c: 00:1f:5c:0b:c4:57:e3:58:32:91:72:dc:50:9b:fc:4b:b7:a8: 62:40:da:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruJoMTi72/K3wF3kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1YWM1YmQtMjZjOC00ZWNhLTlmMTUtZmQyMzI3NmMw ZDRjMB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk YjBlZDZlNDAtYTcyYS00OGNmLTkwMTQtMWJlMWNjNzlhYTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhsuSYm44v58UFQN4uvwzMJMNeVowJz3jyU5 tDFFM9RAN1RkovhwyDaRLSKwxRryhMlOtkuXNwE34M6Q8Qg7UfXhS/JtlUT2RgG0 JJHv2DBfB3zBwOIia+pBHoNTPYFeuAQLyftEy0Wqzb884GhK92As97OgQxiT1I3C soGwiUIVeZ/YhLFlfysv2xcglK1nr4/pMksYH3gwk/jX49DurlZhnCwrlibr+GJQ Z6ivYcv31KM5s3R2pkTc7hoRCfUjwo6RgqDLOq28QRY7L/UY4An+R0rKYVerSBZP DaiTstF0UzuhOes73ZUADkMrvCR7L+Tcfjii2h0XjlB9uqDW1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpaDw5tdkLAZzW8KLevZ2VtFpdhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84ZTVh YzViZC0yNmM4LTRlY2EtOWYxNS1mZDIzMjc2YzBkNGMvNWZlNTA1ZTctOTJiYi0z ZWNjLThkMDMtYjk3NTVjOTViZDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGU1YWM1YmQtMjZjOC00ZWNhLTlm MTUtZmQyMzI3NmMwZDRjLzhlNWFjNWJkLTI2YzgtNGVjYS05ZjE1LWZkMjMyNzZj MGQ0Yy5jcmwwHwYDVR0jBBgwFoAUsyfIbi8GrE6uYl00Q/S49eYKbJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84ZTVhYzViZC0yNmM4LTRlY2EtOWYxNS1mZDIz Mjc2YzBkNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bxiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGjTkN1HaCteDa35qH5awdtxrFUMekO0d4lC6U+eKxbtjrZlinF9Zz2 IDkcps/VvSipcf4dqVR8Rvn/MEOMivO83d5T/2lU5ep5heY8uz1oALK0qyQSK9Bw midCnAYzkKeec21JoMw43bb7R8Oakkd9X3BhM7snFIlh19L5Y9D5D10H5bngRmtf /EBmannVCQ0aFKmtYYZC7bAe2LtCI9OtyVoNc7LtiuYI17kvCY2G+n5vKhSLaYqw 5OPunXt8tKgBvrWlUfHzDW5EG10UD886MM4rvFh7c4J7Bf1R5Gd67hStJwGhvsF0 LAAfXAvEV+NYMpFy3FCb/Eu3qGJA2pw= -----END CERTIFICATE-----Generated at Sun Aug 24 04:51:57 2025 by rpki-client