$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/ebc24dac-d08e-3367-a6d1-6ba22970e1b7.roa File: ebc24dac-d08e-3367-a6d1-6ba22970e1b7.roa (raw, json) Hash identifier: U766g0DnLyshOM2gFGS5nfwyAVBtyu78hbm7hIoTCY0= Subject key identifier: 73:54:56:CF:0A:90:BF:6D:06:1B:62:E9:E4:C1:BE:3A:90:CC:24:6E Certificate issuer: /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Certificate serial: 010D0C9F4328584B87EB58B319E028F701C14780 Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/ebc24dac-d08e-3367-a6d1-6ba22970e1b7.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 30383 IP address blocks: 198.208.9.0/24 maxlen: 24 198.208.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:87:eb:58:b3:19:e0:28:f7:01:c1:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=9552a34f-199f-4d0c-8429-31e1d43f64e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a6:77:ac:32:cc:ed:32:ba:9c:79:a9:be:84: 70:5d:55:6c:43:4f:0a:1e:5f:47:8a:fd:d0:90:93: 4f:0f:a4:b1:06:46:20:f6:66:8d:3f:60:57:8c:45: da:f7:d4:2e:41:ab:7b:fd:ed:29:0f:3e:fc:9d:a7: ff:63:4a:e6:b0:c1:5b:07:8c:25:3e:cb:f6:4f:6f: 6b:e8:e5:12:85:f7:45:33:0b:bd:bc:f6:88:3b:20: d6:6a:83:1e:db:0e:bf:bd:af:e8:b9:fa:3c:f7:8a: 41:85:d7:05:64:4d:5f:2d:ff:de:ed:48:aa:37:75: 29:b8:14:b4:87:86:cc:e0:d4:84:d6:29:79:9c:df: e0:f6:e8:c2:5f:a0:6e:a1:c4:e2:81:bb:c5:e2:17: 6c:99:41:53:b3:ad:69:9b:c8:4b:d3:00:e3:5e:5e: 5c:d2:d0:f5:15:09:3f:6f:16:75:f1:ce:5a:d6:52: 64:88:69:58:68:e9:5f:49:f0:0e:fd:78:f3:53:9d: 0a:e2:c3:27:b0:58:09:3f:4f:fb:cc:da:b8:d5:47: c8:38:04:dd:87:78:6b:49:80:de:f2:58:f2:f5:1b: ae:38:10:22:c9:c9:74:bd:15:83:4f:d7:76:90:1e: ef:71:81:fd:1a:60:a1:10:15:25:23:fe:f7:04:34: d7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:54:56:CF:0A:90:BF:6D:06:1B:62:E9:E4:C1:BE:3A:90:CC:24:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/ebc24dac-d08e-3367-a6d1-6ba22970e1b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl X509v3 Authority Key Identifier: keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer sbgp-ipAddrBlock: critical IPv4: 198.208.9.0/24 198.208.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:e3:0b:56:01:ee:bb:1d:b6:03:d2:44:74:d4:bc:97:f9:8b: 16:99:fa:95:1c:cf:d4:f8:bf:fe:89:4f:44:f5:3a:af:98:a3: db:cd:57:e7:c5:54:8e:c4:55:05:6d:36:b8:82:95:93:ba:a4: 67:56:0b:b9:6f:97:aa:e1:eb:47:bf:ba:0e:85:31:ec:4a:d1: 19:7e:09:14:3f:1e:24:30:fe:55:d1:62:37:c3:8c:8e:39:3e: b9:2d:59:19:1d:51:d2:21:bb:c4:da:d4:6a:5f:82:df:9e:25: 98:97:94:e9:cf:79:1b:d0:82:54:b6:0f:09:08:d5:ad:17:72: e3:47:69:bf:ea:bf:eb:4a:d5:d3:22:1b:b4:17:ac:4d:8d:d5: f3:a8:0a:2d:14:da:a8:73:36:a4:72:4a:96:db:3d:a0:45:8b: 83:48:d0:6b:74:5f:65:e8:ca:d5:bd:65:ea:cd:41:3b:3e:e2: d2:7a:b7:58:24:08:29:6e:05:c7:6f:db:d0:b6:24:97:08:c6: f3:97:70:12:38:c3:1c:86:2d:4d:c4:22:84:09:b7:81:21:dc: fd:70:f9:7d:e5:9f:65:e0:07:9b:d5:97:ba:31:0c:a2:a6:29: a9:05:db:e1:60:1d:48:96:b9:4e:39:5c:8c:88:b4:21:a3:52: 41:9f:03:fb -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuH61izGeAo9wHBR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkNjdlNTQtN2RkNy00MGJhLWFmYTMtNWU4YzQ5NTRl M2U0MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk OTU1MmEzNGYtMTk5Zi00ZDBjLTg0MjktMzFlMWQ0M2Y2NGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqZ3rDLM7TK6nHmpvoRwXVVsQ08KHl9Hiv3Q kJNPD6SxBkYg9maNP2BXjEXa99QuQat7/e0pDz78naf/Y0rmsMFbB4wlPsv2T29r 6OUShfdFMwu9vPaIOyDWaoMe2w6/va/oufo894pBhdcFZE1fLf/e7UiqN3UpuBS0 h4bM4NSE1il5nN/g9ujCX6BuocTigbvF4hdsmUFTs61pm8hL0wDjXl5c0tD1FQk/ bxZ18c5a1lJkiGlYaOlfSfAO/XjzU50K4sMnsFgJP0/7zNq41UfIOATdh3hrSYDe 8ljy9RuuOBAiycl0vRWDT9d2kB7vcYH9GmChEBUlI/73BDTXrwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHNUVs8KkL9tBhti6eTBvjqQzCRuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2 N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThjNDk1NGUzZTQvZWJjMjRkYWMtZDA4ZS0z MzY3LWE2ZDEtNmJhMjI5NzBlMWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdkNjdlNTQtN2RkNy00MGJhLWFm YTMtNWU4YzQ5NTRlM2U0L2Q3ZDY3ZTU0LTdkZDctNDBiYS1hZmEzLTVlOGM0OTU0 ZTNlNC5jcmwwHwYDVR0jBBgwFoAUDncEDXJF/Vqw2VztD25SNx11Lh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThj NDk1NGUzZTQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAxtAJAwQA xtDQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAELjC1YB7rsdtgPSRHTUvJf5ixaZ+pUcz9T4v/6JT0T1Oq+Y o9vNV+fFVI7EVQVtNriClZO6pGdWC7lvl6rh60e/ug6FMexK0Rl+CRQ/HiQw/lXR YjfDjI45PrktWRkdUdIhu8Ta1Gpfgt+eJZiXlOnPeRvQglS2DwkI1a0XcuNHab/q v+tK1dMiG7QXrE2N1fOoCi0U2qhzNqRySpbbPaBFi4NI0Gt0X2XoytW9ZerNQTs+ 4tJ6t1gkCCluBcdv29C2JJcIxvOXcBI4wxyGLU3EIoQJt4Eh3P1w+X3ln2XgB5vV l7oxDKKmKakF2+FgHUiWuU45XIyItCGjUkGfA/s= -----END CERTIFICATE-----Generated at Mon Oct 20 16:22:52 2025 by rpki-client