$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919/8688f611-6998-3489-95fe-612bf6872077.roa File: 8688f611-6998-3489-95fe-612bf6872077.roa (raw, json) Hash identifier: GtH6AXWt7O8Rp7BYQHg2CAG/PHLjxN5CAFUhtO5rCZo= Subject key identifier: 2B:8D:F0:E8:38:20:CE:D6:7E:D8:A5:3F:8C:B5:80:6E:6E:B9:8D:EB Certificate issuer: /CN=ad013889-a60a-4a2c-a0dd-eb8e8d310919 Certificate serial: 010D0C9F4328584B8EACF45A1F35D3BAC2B71D80 Authority key identifier: FA:B0:95:34:5C:31:D1:7E:9F:14:DD:5D:2D:92:A0:CC:18:7B:97:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919/8688f611-6998-3489-95fe-612bf6872077.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 63023 IP address blocks: 98.159.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919/ad013889-a60a-4a2c-a0dd-eb8e8d310919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919/ad013889-a60a-4a2c-a0dd-eb8e8d310919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:f4:5a:1f:35:d3:ba:c2:b7:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad013889-a60a-4a2c-a0dd-eb8e8d310919 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=b1b05dbf-8f03-423b-8862-47e9dc10b7b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:50:a1:3f:05:ed:16:3f:0f:5b:9e:6e:c3:e0: dc:2e:37:d6:73:bf:5a:6e:ba:9f:1d:c9:f2:2b:c2: ec:48:e3:68:94:24:78:f5:35:86:da:f2:19:ba:37: 31:5c:0c:2f:d8:2a:b8:93:1c:80:47:7d:f7:cc:61: 81:f5:a9:99:50:69:2a:a0:f7:66:1b:d9:5b:d8:21: a5:63:a1:3a:45:29:73:b5:83:fa:6e:14:93:66:d4: 31:71:9e:0f:55:64:d6:98:fd:1d:fa:8e:1e:db:31: 4b:67:b8:60:5d:b7:48:0f:f4:a4:b3:e2:e6:c2:f6: 9e:a0:8d:cb:e0:8e:84:4e:31:de:cc:63:74:eb:00: 7d:f0:78:71:03:06:91:3c:1e:e5:7b:f7:13:f0:42: 22:21:58:58:5f:96:23:4c:af:8a:68:de:ea:c5:ad: 93:ed:85:36:27:07:4c:2e:fa:0d:7f:ea:5d:32:cb: a4:93:80:52:b6:be:0c:5f:fa:aa:25:74:a9:9a:32: dc:da:9b:b7:a2:98:fd:be:d8:59:8e:56:9f:1d:65: cb:a0:36:fc:42:27:87:dd:dc:26:ee:1b:dc:cf:ee: 1d:44:ca:53:fb:42:ec:e2:8c:1d:43:b8:15:cf:06: d4:37:d0:6d:49:d0:0f:ae:c5:43:18:f1:65:09:0e: 51:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:8D:F0:E8:38:20:CE:D6:7E:D8:A5:3F:8C:B5:80:6E:6E:B9:8D:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919/8688f611-6998-3489-95fe-612bf6872077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919/ad013889-a60a-4a2c-a0dd-eb8e8d310919.crl X509v3 Authority Key Identifier: keyid:FA:B0:95:34:5C:31:D1:7E:9F:14:DD:5D:2D:92:A0:CC:18:7B:97:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919.cer sbgp-ipAddrBlock: critical IPv4: 98.159.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:12:73:5a:47:20:d4:ff:f4:fb:d3:68:11:ee:df:a7:c3:52: 35:36:2e:13:13:61:68:31:88:9b:a1:03:f7:33:d0:35:78:4e: 3e:4b:65:a5:b5:3a:fa:49:e5:bb:d6:8e:79:a2:13:da:b3:be: a5:7e:75:51:51:d9:90:37:38:94:f8:74:d9:0c:8e:b2:b2:2e: f7:7e:5e:9f:b5:3f:bc:ef:8f:aa:de:91:95:d0:b2:83:75:e7: b1:14:6e:34:67:79:75:3d:d2:c2:8e:ce:d1:04:ac:28:f6:64: ce:91:4a:20:fa:d5:66:38:cd:2a:f9:f5:70:23:83:c3:d9:a5: aa:73:cc:ec:78:ac:b1:85:32:15:66:a2:0e:99:f7:f0:90:4f: 2d:f7:fe:56:9e:ca:0e:5d:ac:c4:01:d8:d0:89:a4:e7:16:cb: 5e:91:95:94:db:4e:46:fd:26:33:1e:57:94:4b:64:b7:41:85: 70:70:6a:46:1b:62:07:60:f6:23:e0:33:08:a7:10:c7:cd:47: 93:cd:2f:1d:90:20:e0:a8:dd:ba:94:ed:6d:4b:b2:42:85:19: 65:bb:b7:96:99:4c:69:c4:73:73:df:c7:b8:b9:43:44:90:dd: 97:f6:80:44:61:1d:b0:c3:d5:9a:2a:43:77:31:eb:ba:75:c6: 10:7b:2d:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrPRaHzXTusK3HYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQwMTM4ODktYTYwYS00YTJjLWEwZGQtZWI4ZThkMzEw OTE5MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk YjFiMDVkYmYtOGYwMy00MjNiLTg4NjItNDdlOWRjMTBiN2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VChPwXtFj8PW55uw+DcLjfWc79abrqfHcny K8LsSONolCR49TWG2vIZujcxXAwv2Cq4kxyAR333zGGB9amZUGkqoPdmG9lb2CGl Y6E6RSlztYP6bhSTZtQxcZ4PVWTWmP0d+o4e2zFLZ7hgXbdID/Sks+LmwvaeoI3L 4I6ETjHezGN06wB98HhxAwaRPB7le/cT8EIiIVhYX5YjTK+KaN7qxa2T7YU2JwdM LvoNf+pdMsukk4BStr4MX/qqJXSpmjLc2pu3opj9vthZjlafHWXLoDb8QieH3dwm 7hvcz+4dRMpT+0Ls4owdQ7gVzwbUN9BtSdAPrsVDGPFlCQ5RLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuN8Og4IM7WftilP4y1gG5uuY3rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZDAx Mzg4OS1hNjBhLTRhMmMtYTBkZC1lYjhlOGQzMTA5MTkvODY4OGY2MTEtNjk5OC0z NDg5LTk1ZmUtNjEyYmY2ODcyMDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWQwMTM4ODktYTYwYS00YTJjLWEw ZGQtZWI4ZThkMzEwOTE5L2FkMDEzODg5LWE2MGEtNGEyYy1hMGRkLWViOGU4ZDMx MDkxOS5jcmwwHwYDVR0jBBgwFoAU+rCVNFwx0X6fFN1dLZKgzBh7l7MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZDAxMzg4OS1hNjBhLTRhMmMtYTBkZC1lYjhl OGQzMTA5MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYp9sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkSc1pHINT/9PvTaBHu36fDUjU2LhMTYWgxiJuhA/cz0DV4Tj5LZaW1 OvpJ5bvWjnmiE9qzvqV+dVFR2ZA3OJT4dNkMjrKyLvd+Xp+1P7zvj6rekZXQsoN1 57EUbjRneXU90sKOztEErCj2ZM6RSiD61WY4zSr59XAjg8PZpapzzOx4rLGFMhVm og6Z9/CQTy33/laeyg5drMQB2NCJpOcWy16RlZTbTkb9JjMeV5RLZLdBhXBwakYb Ygdg9iPgMwinEMfNR5PNLx2QIOCo3bqU7W1LskKFGWW7t5aZTGnEc3Pfx7i5Q0SQ 3Zf2gERhHbDD1ZoqQ3cx67p1xhB7Lbo= -----END CERTIFICATE-----Generated at Mon Oct 20 19:04:39 2025 by rpki-client