$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d99b52cf-3f59-3923-9d2f-f64a1233a235.roa File: d99b52cf-3f59-3923-9d2f-f64a1233a235.roa (raw, json) Hash identifier: PXCHiylpt79XS9NOggO7x8CHL+Rks7P9vjf8YhkoK7g= Subject key identifier: 9F:E7:41:4D:DD:EC:40:9D:0D:F4:3D:34:D9:D6:30:8C:E4:0A:9B:7A Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7 Certificate serial: 010D0C9F4328584B64CE0CC1521F47112AF64380 Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d99b52cf-3f59-3923-9d2f-f64a1233a235.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 36040 IP address blocks: 208.117.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:0c:c1:52:1f:47:11:2a:f6:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=567b6ed9-ac55-49cb-a35e-457fd4087bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ae:fd:25:1f:49:2c:4f:fb:85:74:23:cd:f6: 22:4d:a3:e8:91:db:d6:e2:56:82:33:de:ad:ad:f8: 00:34:70:45:66:36:5e:4e:d4:fd:53:bb:44:50:e4: 11:d8:d0:26:3d:9e:fe:fd:63:14:f0:b1:ea:05:43: db:8d:d3:ce:ed:ed:5c:85:95:14:03:94:b9:1f:d8: 50:18:63:f2:0a:84:dc:09:66:db:ae:70:3d:10:0b: 9a:06:b3:e3:33:73:97:be:ce:5e:7d:08:3b:99:b4: b8:c6:3f:03:12:e4:cf:aa:79:e0:00:09:9b:32:51: 5e:c4:15:da:ef:a3:40:fa:7e:76:e6:e1:b0:31:2b: b8:5d:cf:b2:69:f6:52:83:a5:ab:92:61:24:fe:b6: fb:1e:57:1f:a2:d8:b3:17:c6:26:c8:fb:5b:34:e3: 88:18:14:1d:6e:17:27:54:3c:d3:d5:60:2f:aa:b7: d6:50:4b:97:89:a6:92:60:5d:0f:22:2c:2b:8f:63: 59:09:49:a5:84:56:eb:c1:40:08:23:5d:c0:d6:fd: 10:37:d1:be:b8:c8:3d:17:00:94:c6:36:1c:70:5b: 5d:3f:74:29:19:a2:e0:4d:c4:d3:41:2f:eb:0a:7c: 3f:14:34:4f:53:e0:f8:50:73:fe:f9:b2:07:a8:29: 76:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E7:41:4D:DD:EC:40:9D:0D:F4:3D:34:D9:D6:30:8C:E4:0A:9B:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d99b52cf-3f59-3923-9d2f-f64a1233a235.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl X509v3 Authority Key Identifier: keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer sbgp-ipAddrBlock: critical IPv4: 208.117.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:25:03:8e:3d:15:c5:76:91:1d:a0:9f:67:63:44:8b:aa:cb: 6a:e6:7d:d6:e4:ab:cd:1c:6f:a8:b9:b0:63:fc:62:a7:66:7a: 5d:fa:ef:c5:b8:be:d7:ff:82:47:66:8f:b3:b9:7e:fd:34:df: fc:90:64:4d:5f:f6:52:26:4a:05:86:38:c3:f1:ee:05:58:2e: e3:dc:9c:99:60:37:81:14:c7:b4:ca:a7:1b:1c:ec:ff:ca:0a: 83:86:9a:bb:8a:68:6b:23:9e:34:93:29:99:cb:b5:ba:61:6d: cd:f1:2f:a0:de:35:f1:0a:ac:dc:ea:5d:48:5c:e5:04:29:4b: e1:52:bf:95:0b:07:96:ff:37:d1:5e:cf:3a:67:da:7e:96:82: 3a:21:ce:a8:3b:25:cf:9d:95:4f:68:6f:cd:46:cd:5b:2a:68: eb:f9:a0:95:58:c3:0b:44:ec:27:90:67:b9:84:a2:d9:4c:8a: bf:fd:d4:2e:31:11:fc:33:e1:17:4b:4a:75:70:7e:e2:ba:89: 57:5a:62:f8:af:00:f0:91:3f:d6:ef:75:4e:8d:ae:54:57:15: 47:08:35:8d:36:07:43:d0:ef:fa:63:32:14:b8:45:b7:ae:02: 07:96:b9:52:23:ec:61:75:14:a2:ad:de:69:69:00:38:0d:9a: 6b:f3:d9:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzgzBUh9HESr2Q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3 MmI3MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NTY3YjZlZDktYWM1NS00OWNiLWEzNWUtNDU3ZmQ0MDg3YmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnK79JR9JLE/7hXQjzfYiTaPokdvW4laCM96t rfgANHBFZjZeTtT9U7tEUOQR2NAmPZ7+/WMU8LHqBUPbjdPO7e1chZUUA5S5H9hQ GGPyCoTcCWbbrnA9EAuaBrPjM3OXvs5efQg7mbS4xj8DEuTPqnngAAmbMlFexBXa 76NA+n525uGwMSu4Xc+yafZSg6WrkmEk/rb7HlcfotizF8YmyPtbNOOIGBQdbhcn VDzT1WAvqrfWUEuXiaaSYF0PIiwrj2NZCUmlhFbrwUAII13A1v0QN9G+uMg9FwCU xjYccFtdP3QpGaLgTcTTQS/rCnw/FDRPU+D4UHP++bIHqCl2VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/nQU3d7ECdDfQ9NNnWMIzkCpt6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvZDk5YjUyY2YtM2Y1OS0z OTIzLTlkMmYtZjY0YTEyMzNhMjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0 NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2 ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0HXuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKElA449FcV2kR2gn2djRIuqy2rmfdbkq80cb6i5sGP8Yqdmel3678W4 vtf/gkdmj7O5fv003/yQZE1f9lImSgWGOMPx7gVYLuPcnJlgN4EUx7TKpxsc7P/K CoOGmruKaGsjnjSTKZnLtbphbc3xL6DeNfEKrNzqXUhc5QQpS+FSv5ULB5b/N9Fe zzpn2n6Wgjohzqg7Jc+dlU9ob81GzVsqaOv5oJVYwwtE7CeQZ7mEotlMir/91C4x Efwz4RdLSnVwfuK6iVdaYvivAPCRP9bvdU6NrlRXFUcINY02B0PQ7/pjMhS4Rbeu AgeWuVIj7GF1FKKt3mlpADgNmmvz2Uc= -----END CERTIFICATE-----Generated at Mon Oct 20 02:34:46 2025 by rpki-client