$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/dbda1118-9914-33ac-a372-020cfd89d214.roa File: dbda1118-9914-33ac-a372-020cfd89d214.roa (raw, json) Hash identifier: fF5ATih7/OpSY3Nlq4FQr0/l9rs/EGFO2flmScUXgxA= Subject key identifier: BE:85:F3:B8:AB:CC:44:28:22:02:59:F4:A5:AE:CC:A9:25:19:3B:46 Certificate issuer: /CN=ea68408f-7dee-415b-a1c1-b76df0a87a93 Certificate serial: 010D0C9F4328584B1C36C11405CEA48007784EC0 Authority key identifier: 16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/dbda1118-9914-33ac-a372-020cfd89d214.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 13629 IP address blocks: 208.94.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:c1:14:05:ce:a4:80:07:78:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea68408f-7dee-415b-a1c1-b76df0a87a93 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=cf6b32cd-e5a3-4f5e-aa92-0ec8af173943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:14:02:c4:db:d1:a5:64:18:21:2b:10:ea:d3: 1e:9a:8c:2d:ed:7e:1e:0b:ad:b3:6b:d5:f1:b6:22: fc:d6:f0:3e:5e:05:4a:88:a0:40:40:96:79:94:54: 3a:6c:c6:19:d7:f7:a5:03:ea:a0:d3:8a:c9:47:b4: f3:32:ec:cc:b6:0b:c3:09:34:a6:70:ad:39:09:f6: 7c:62:93:5a:08:dc:86:dc:b4:2d:f0:66:1d:67:4a: 80:ca:57:85:e1:3a:eb:46:d5:6a:14:1b:0e:67:bf: 20:92:58:e1:18:1d:f3:ec:ed:1e:c6:16:09:e4:86: 12:ee:55:b5:32:9b:3c:84:47:28:3c:b8:e4:b3:b6: f4:fc:f3:07:de:5f:62:ec:e9:3f:15:3a:7c:89:dc: 38:41:1b:8c:c4:8a:d8:6a:47:6b:26:3d:0e:8e:d4: f5:b2:73:94:71:0f:d9:c0:4b:7c:ce:3c:cf:1f:3a: f7:f0:1d:d0:71:af:a4:87:25:a0:d8:37:ff:ac:5b: ee:7f:50:74:66:d1:35:fc:77:4c:0e:df:c4:e1:f7: a9:c6:cb:f3:be:6e:4f:68:a8:0f:d5:5c:02:40:67: da:a6:28:b8:30:3e:3b:cc:d5:34:2a:94:fe:a2:b3: f6:cb:53:e3:e0:1b:5c:97:12:96:28:62:0c:f4:57: c8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:85:F3:B8:AB:CC:44:28:22:02:59:F4:A5:AE:CC:A9:25:19:3B:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/dbda1118-9914-33ac-a372-020cfd89d214.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl X509v3 Authority Key Identifier: keyid:16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer sbgp-ipAddrBlock: critical IPv4: 208.94.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:ba:b8:3a:c1:7b:ef:61:3b:c9:e3:22:23:b1:6e:a3:6a:d6: 19:b3:6e:ea:3f:69:28:ef:14:6e:84:62:35:a6:d9:e6:04:7b: 33:66:f1:c8:b1:e6:cb:83:b0:8b:ce:32:35:c1:42:e7:f5:0d: ba:6a:fc:f4:7f:a1:c0:9a:55:f0:76:03:2f:bf:f9:7d:af:f6: 11:2c:65:09:b8:fa:dd:27:02:51:b7:7c:06:7d:ae:05:be:97: 16:6f:b0:8b:35:6f:df:ac:52:f1:cf:82:e5:a9:fa:d1:6f:3e: d7:81:49:6e:b6:88:66:c5:56:c1:f4:44:f6:29:5a:94:f2:fd: 42:1a:ea:eb:67:02:a8:31:05:94:dc:d7:db:98:f3:45:66:c0: c7:d7:55:c4:ca:f4:7a:d6:0b:ca:6f:ee:3e:b3:19:a0:ac:74: da:6b:66:c9:d2:e0:48:9f:00:4f:97:6f:0a:81:24:3e:a7:8d: 67:f4:6f:fc:f2:e4:d1:a4:04:4b:2c:a7:4f:28:fd:75:b0:5a: 5a:0e:5e:3f:c3:cf:46:72:e6:ac:34:0e:d6:d6:f8:23:8b:87: d0:71:ed:e5:4d:df:30:90:37:c8:bf:02:a8:47:33:79:76:8a: 5d:0a:46:f0:6b:ab:50:98:92:6a:e6:2c:b2:12:c8:26:71:21: f6:70:9f:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNsEUBc6kgAd4TsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWE2ODQwOGYtN2RlZS00MTViLWExYzEtYjc2ZGYwYTg3 YTkzMB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk Y2Y2YjMyY2QtZTVhMy00ZjVlLWFhOTItMGVjOGFmMTczOTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRQCxNvRpWQYISsQ6tMemowt7X4eC62za9Xx tiL81vA+XgVKiKBAQJZ5lFQ6bMYZ1/elA+qg04rJR7TzMuzMtgvDCTSmcK05CfZ8 YpNaCNyG3LQt8GYdZ0qAyleF4TrrRtVqFBsOZ78gkljhGB3z7O0exhYJ5IYS7lW1 Mps8hEcoPLjks7b0/PMH3l9i7Ok/FTp8idw4QRuMxIrYakdrJj0OjtT1snOUcQ/Z wEt8zjzPHzr38B3Qca+khyWg2Df/rFvuf1B0ZtE1/HdMDt/E4fepxsvzvm5PaKgP 1VwCQGfapii4MD47zNU0KpT+orP2y1Pj4BtclxKWKGIM9FfIbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6F87irzEQoIgJZ9KWuzKklGTtGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYTY4 NDA4Zi03ZGVlLTQxNWItYTFjMS1iNzZkZjBhODdhOTMvZGJkYTExMTgtOTkxNC0z M2FjLWEzNzItMDIwY2ZkODlkMjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWE2ODQwOGYtN2RlZS00MTViLWEx YzEtYjc2ZGYwYTg3YTkzL2VhNjg0MDhmLTdkZWUtNDE1Yi1hMWMxLWI3NmRmMGE4 N2E5My5jcmwwHwYDVR0jBBgwFoAUFphb3M+6SOUGLSTwgm6NQ0VLLqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYTY4NDA4Zi03ZGVlLTQxNWItYTFjMS1iNzZk ZjBhODdhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F7fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADK6uDrBe+9hO8njIiOxbqNq1hmzbuo/aSjvFG6EYjWm2eYEezNm8cix 5suDsIvOMjXBQuf1Dbpq/PR/ocCaVfB2Ay+/+X2v9hEsZQm4+t0nAlG3fAZ9rgW+ lxZvsIs1b9+sUvHPguWp+tFvPteBSW62iGbFVsH0RPYpWpTy/UIa6utnAqgxBZTc 19uY80VmwMfXVcTK9HrWC8pv7j6zGaCsdNprZsnS4EifAE+XbwqBJD6njWf0b/zy 5NGkBEssp08o/XWwWloOXj/Dz0Zy5qw0DtbW+COLh9Bx7eVN3zCQN8i/AqhHM3l2 il0KRvBrq1CYkmrmLLISyCZxIfZwn6A= -----END CERTIFICATE-----Generated at Mon Oct 20 05:23:14 2025 by rpki-client