$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/ba8f26f9-324a-37ae-86d6-34a5fdf55b34.roa File: ba8f26f9-324a-37ae-86d6-34a5fdf55b34.roa (raw, json) Hash identifier: 8vDPkgyukcGLF5twO7UAiIGUoKgtslu4qmAO5QiDvkg= Subject key identifier: CC:66:1E:9A:57:69:1E:75:DD:CF:49:3A:8B:BA:5B:BA:75:B3:23:20 Certificate issuer: /CN=0e002701-2485-4643-ba40-3ea23fa41085 Certificate serial: 010D0C9F4328584AD7D1299182BC04D260D1B530 Authority key identifier: 89:24:57:81:82:9B:18:63:45:EE:40:AE:69:58:AB:9A:35:E5:62:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/ba8f26f9-324a-37ae-86d6-34a5fdf55b34.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 394997 IP address blocks: 208.86.98.0/23 maxlen: 23 208.86.98.0/24 maxlen: 24 208.86.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/0e002701-2485-4643-ba40-3ea23fa41085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/0e002701-2485-4643-ba40-3ea23fa41085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:29:91:82:bc:04:d2:60:d1:b5:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e002701-2485-4643-ba40-3ea23fa41085 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=c594d6f6-e099-4b96-8bd2-0958bc28955c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a5:ee:c4:e7:b6:72:fd:36:55:fd:b3:e1:57: b6:09:4f:58:ed:1e:2c:e9:71:73:7b:63:a3:c8:27: 99:02:a7:9d:db:d6:22:7c:a7:32:12:54:95:ab:96: 68:f6:d4:53:8f:9c:3a:6a:64:a1:9e:2d:4b:73:a7: d5:0c:c5:dd:fb:db:3a:3b:db:92:ae:3c:47:67:aa: 40:79:3a:36:e6:59:21:02:e5:9d:d9:d0:fd:2b:f5: 2b:e5:76:76:93:ad:45:9d:e6:95:f6:05:79:20:a5: 6d:cd:fa:54:81:49:ab:4c:a1:00:6c:06:23:84:8d: af:c5:47:cd:c5:5f:57:2f:04:9e:8b:0e:64:dd:f8: 18:e6:13:ae:ec:8a:b3:ee:ef:54:8f:50:62:4f:50: 4a:e7:6a:49:5e:89:a8:2c:34:02:86:18:34:32:20: 9c:4c:be:d7:4e:0f:bf:4a:22:c1:6c:9f:70:69:8b: 25:52:21:9d:ac:9a:38:70:1e:9b:42:32:1a:bb:09: 20:21:7a:a0:cf:7d:36:0d:f9:b6:52:19:7e:bb:de: 05:0b:e5:d4:f5:a5:92:b0:b8:35:7c:2a:0f:bf:be: e8:54:0b:34:09:5a:4a:5a:7f:24:62:98:0e:16:69: b0:57:9d:33:a4:29:41:fb:d4:e9:57:4c:10:d0:bf: 46:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:66:1E:9A:57:69:1E:75:DD:CF:49:3A:8B:BA:5B:BA:75:B3:23:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/ba8f26f9-324a-37ae-86d6-34a5fdf55b34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/0e002701-2485-4643-ba40-3ea23fa41085.crl X509v3 Authority Key Identifier: keyid:89:24:57:81:82:9B:18:63:45:EE:40:AE:69:58:AB:9A:35:E5:62:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085.cer sbgp-ipAddrBlock: critical IPv4: 208.86.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:43:21:37:9d:4e:58:ad:f0:b3:fb:0d:f3:0d:9d:a6:05:33: c9:f3:92:17:c9:9a:45:d3:29:6f:80:ec:7e:e0:a7:7d:7b:6d: 0f:5b:97:f7:a9:10:5d:b5:30:80:da:ca:94:1f:a3:07:e7:e9: 32:73:45:72:42:bf:5d:1c:fc:5b:04:aa:2b:77:9f:4f:fd:84: cb:70:10:c4:29:79:97:7e:e1:bb:b3:7d:03:48:3b:76:0a:6e: f3:d8:92:2d:ea:70:39:12:28:3b:d1:db:83:7a:4b:4d:dd:15: 4b:43:3f:ca:68:98:b7:2d:d0:89:bd:ef:6a:fe:42:2a:d6:e3: 5a:c0:3a:07:1a:4c:0a:ab:fe:cd:a2:af:e5:a0:2c:d9:97:b1: 84:7e:81:a8:f8:84:54:4f:89:15:dc:14:b1:87:a2:38:19:e4: 45:a0:ee:31:bf:6e:fc:53:d0:88:3f:a4:1f:2d:4d:38:2c:b1: 7c:5a:f7:fe:e5:d7:e3:d3:8b:54:f2:93:1f:35:37:08:b9:ff: 5c:39:61:7f:dd:e5:6b:37:c0:b7:c1:62:b6:7e:29:c8:29:da: c7:e4:af:11:85:7c:17:18:9e:65:1c:c5:5f:aa:a2:31:42:3c: 04:41:7e:ac:e2:51:3d:57:14:25:bc:d9:25:a9:f4:f1:ba:36: 5b:2a:32:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0SmRgrwE0mDRtTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGUwMDI3MDEtMjQ4NS00NjQzLWJhNDAtM2VhMjNmYTQx MDg1MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk YzU5NGQ2ZjYtZTA5OS00Yjk2LThiZDItMDk1OGJjMjg5NTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KXuxOe2cv02Vf2z4Ve2CU9Y7R4s6XFze2Oj yCeZAqed29YifKcyElSVq5Zo9tRTj5w6amShni1Lc6fVDMXd+9s6O9uSrjxHZ6pA eTo25lkhAuWd2dD9K/Ur5XZ2k61FneaV9gV5IKVtzfpUgUmrTKEAbAYjhI2vxUfN xV9XLwSeiw5k3fgY5hOu7Iqz7u9Uj1BiT1BK52pJXomoLDQChhg0MiCcTL7XTg+/ SiLBbJ9waYslUiGdrJo4cB6bQjIauwkgIXqgz302Dfm2Uhl+u94FC+XU9aWSsLg1 fCoPv77oVAs0CVpKWn8kYpgOFmmwV50zpClB+9TpV0wQ0L9GVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxmHppXaR513c9JOou6W7p1syMgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wZTAw MjcwMS0yNDg1LTQ2NDMtYmE0MC0zZWEyM2ZhNDEwODUvYmE4ZjI2ZjktMzI0YS0z N2FlLTg2ZDYtMzRhNWZkZjU1YjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMGUwMDI3MDEtMjQ4NS00NjQzLWJh NDAtM2VhMjNmYTQxMDg1LzBlMDAyNzAxLTI0ODUtNDY0My1iYTQwLTNlYTIzZmE0 MTA4NS5jcmwwHwYDVR0jBBgwFoAUiSRXgYKbGGNF7kCuaVirmjXlYqIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wZTAwMjcwMS0yNDg1LTQ2NDMtYmE0MC0zZWEy M2ZhNDEwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0FZiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5DITedTlit8LP7DfMNnaYFM8nzkhfJmkXTKW+A7H7gp317bQ9bl/ep EF21MIDaypQfowfn6TJzRXJCv10c/FsEqit3n0/9hMtwEMQpeZd+4buzfQNIO3YK bvPYki3qcDkSKDvR24N6S03dFUtDP8pomLct0Im972r+QirW41rAOgcaTAqr/s2i r+WgLNmXsYR+gaj4hFRPiRXcFLGHojgZ5EWg7jG/bvxT0Ig/pB8tTTgssXxa9/7l 1+PTi1Tykx81Nwi5/1w5YX/d5Ws3wLfBYrZ+Kcgp2sfkrxGFfBcYnmUcxV+qojFC PARBfqziUT1XFCW82SWp9PG6NlsqMj8= -----END CERTIFICATE-----Generated at Sun Aug 24 06:22:19 2025 by rpki-client