$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/99891767-1d2a-33b2-ae5b-882cf5d6301f.roa File: 99891767-1d2a-33b2-ae5b-882cf5d6301f.roa (raw, json) Hash identifier: ocrDsUaLTb0PkIx/9CT8CgcmaFzuP0e5A0T54f11KRk= Subject key identifier: 73:F6:7F:25:0C:F6:54:8B:D9:CC:65:D3:71:9B:93:D5:57:3B:D9:E2 Certificate issuer: /CN=ea68408f-7dee-415b-a1c1-b76df0a87a93 Certificate serial: 010D0C9F4328584B1C36C17E455E8EED9028E700 Authority key identifier: 16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/99891767-1d2a-33b2-ae5b-882cf5d6301f.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 396982 IP address blocks: 208.94.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:c1:7e:45:5e:8e:ed:90:28:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea68408f-7dee-415b-a1c1-b76df0a87a93 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=10f729b6-58d0-4130-bede-e1f885a27a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7b:34:fd:68:f2:f0:ef:ad:66:6d:ad:42:ea: f7:a1:2f:40:83:97:2d:a8:ef:6f:fa:0c:7e:e0:05: 20:1b:03:14:a8:91:31:d2:00:ca:a5:7c:3b:ea:84: 94:ad:1f:28:f2:ae:54:fe:02:f6:df:c3:54:58:2c: 9e:93:08:48:75:b9:5d:94:47:70:cb:3f:47:56:03: ac:6a:2d:67:67:ed:00:8f:ef:35:06:53:5b:0a:3d: ef:03:72:3d:59:b7:74:b8:11:c8:3e:7e:ce:21:0d: 9d:1c:33:e0:6a:54:d8:c0:e6:a7:78:91:3e:a5:03: d9:cd:22:71:a8:48:45:22:52:b9:86:bc:e5:39:26: 48:1c:f7:4b:4e:ae:26:0d:72:2b:c3:84:65:94:25: 00:94:ed:3c:c0:11:29:ec:29:df:31:71:02:71:b4: 26:9a:a9:77:6b:f6:a2:68:51:03:ab:c6:64:1f:83: 65:57:0f:bf:02:77:67:05:91:61:71:82:fd:51:74: f8:5d:64:69:44:0a:8a:4c:de:0d:9d:eb:a4:9c:54: a3:8a:68:fe:e5:8b:c5:f9:93:88:49:b7:50:1d:9f: 6a:01:b6:cc:f0:07:68:0e:2f:85:f7:99:61:17:9f: e6:1c:36:0a:ec:1a:86:a4:94:89:fe:1f:d4:f5:c2: 68:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F6:7F:25:0C:F6:54:8B:D9:CC:65:D3:71:9B:93:D5:57:3B:D9:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/99891767-1d2a-33b2-ae5b-882cf5d6301f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl X509v3 Authority Key Identifier: keyid:16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer sbgp-ipAddrBlock: critical IPv4: 208.94.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:c9:b6:ce:da:67:5a:f6:c8:dc:7c:6c:f6:2d:f0:5b:e6:42: dd:4f:fc:63:83:9f:1d:53:2d:1b:79:02:72:58:78:39:98:89: 92:35:4b:c2:0c:7b:e5:d0:1f:4e:d8:b7:3b:c9:76:c2:c2:3c: 60:73:64:1d:fc:60:84:67:34:2e:e0:f7:44:3c:dc:42:7f:d8: 90:f2:a4:f6:92:76:26:f9:b5:34:4f:39:d5:fc:91:6e:ca:f1: 18:dd:8f:68:68:49:b3:69:c5:12:ba:6a:db:60:9f:2d:7c:fb: f9:a1:b0:11:2d:29:01:ff:3a:cb:9b:55:92:b7:50:da:6f:77: e1:a4:d3:2d:65:70:67:95:58:fa:8c:62:34:48:1d:88:ff:f7: 46:f5:38:ae:49:91:1a:52:05:a9:88:ae:ae:8c:ad:74:87:a4: f9:00:51:7f:9f:95:39:b2:74:8f:0e:5b:49:3a:69:65:d5:70: 49:1b:0f:8f:63:5f:05:70:5a:72:43:f9:ab:6f:b8:2f:9e:65: c7:11:c1:b5:99:a8:4f:5e:c8:d6:28:46:48:55:0e:2b:e8:ef: 98:1e:80:14:8f:81:f0:b3:34:28:d9:45:65:27:df:1f:c3:57: dd:69:3d:d0:17:90:f6:62:09:bb:48:e2:7c:4b:38:ec:28:a5: 5f:a2:38:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNsF+RV6O7ZAo5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWE2ODQwOGYtN2RlZS00MTViLWExYzEtYjc2ZGYwYTg3 YTkzMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MTBmNzI5YjYtNThkMC00MTMwLWJlZGUtZTFmODg1YTI3YTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHs0/Wjy8O+tZm2tQur3oS9Ag5ctqO9v+gx+ 4AUgGwMUqJEx0gDKpXw76oSUrR8o8q5U/gL238NUWCyekwhIdbldlEdwyz9HVgOs ai1nZ+0Aj+81BlNbCj3vA3I9Wbd0uBHIPn7OIQ2dHDPgalTYwOaneJE+pQPZzSJx qEhFIlK5hrzlOSZIHPdLTq4mDXIrw4RllCUAlO08wBEp7CnfMXECcbQmmql3a/ai aFEDq8ZkH4NlVw+/AndnBZFhcYL9UXT4XWRpRAqKTN4NneuknFSjimj+5YvF+ZOI SbdQHZ9qAbbM8AdoDi+F95lhF5/mHDYK7BqGpJSJ/h/U9cJoSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHP2fyUM9lSL2cxl03Gbk9VXO9niMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYTY4 NDA4Zi03ZGVlLTQxNWItYTFjMS1iNzZkZjBhODdhOTMvOTk4OTE3NjctMWQyYS0z M2IyLWFlNWItODgyY2Y1ZDYzMDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWE2ODQwOGYtN2RlZS00MTViLWEx YzEtYjc2ZGYwYTg3YTkzL2VhNjg0MDhmLTdkZWUtNDE1Yi1hMWMxLWI3NmRmMGE4 N2E5My5jcmwwHwYDVR0jBBgwFoAUFphb3M+6SOUGLSTwgm6NQ0VLLqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYTY4NDA4Zi03ZGVlLTQxNWItYTFjMS1iNzZk ZjBhODdhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F7YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvJts7aZ1r2yNx8bPYt8FvmQt1P/GODnx1TLRt5AnJYeDmYiZI1S8IM e+XQH07YtzvJdsLCPGBzZB38YIRnNC7g90Q83EJ/2JDypPaSdib5tTRPOdX8kW7K 8Rjdj2hoSbNpxRK6attgny18+/mhsBEtKQH/OsubVZK3UNpvd+Gk0y1lcGeVWPqM YjRIHYj/90b1OK5JkRpSBamIrq6MrXSHpPkAUX+flTmydI8OW0k6aWXVcEkbD49j XwVwWnJD+atvuC+eZccRwbWZqE9eyNYoRkhVDivo75gegBSPgfCzNCjZRWUn3x/D V91pPdAXkPZiCbtI4nxLOOwopV+iOCI= -----END CERTIFICATE-----Generated at Mon Oct 20 02:11:09 2025 by rpki-client