$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6288b107-8745-49f8-b949-e602f91d5026/08fc9025-57ac-3ac6-b75c-483c6d02f044.roa File: 08fc9025-57ac-3ac6-b75c-483c6d02f044.roa (raw, json) Hash identifier: H7WAz5CYXWA/3sl0MEC/rf25cfjK5aMFrng8mzXhWUg= Subject key identifier: 99:87:C3:8B:63:32:89:F6:3F:E3:72:9D:B7:5C:DB:7C:F3:C6:86:85 Certificate issuer: /CN=6288b107-8745-49f8-b949-e602f91d5026 Certificate serial: 010D0C9F4328584B8EACD079CFD69E6D7972A690 Authority key identifier: F0:DC:CE:63:8F:B0:25:4F:5B:05:A0:04:1C:CA:11:B2:47:7C:24:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6288b107-8745-49f8-b949-e602f91d5026.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6288b107-8745-49f8-b949-e602f91d5026/08fc9025-57ac-3ac6-b75c-483c6d02f044.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 23462 IP address blocks: 208.71.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6288b107-8745-49f8-b949-e602f91d5026/6288b107-8745-49f8-b949-e602f91d5026.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6288b107-8745-49f8-b949-e602f91d5026/6288b107-8745-49f8-b949-e602f91d5026.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6288b107-8745-49f8-b949-e602f91d5026.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:d0:79:cf:d6:9e:6d:79:72:a6:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6288b107-8745-49f8-b949-e602f91d5026 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=1e20046e-e019-4697-b1dc-27ac21857a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b6:ea:fd:71:96:48:5c:5b:63:0c:54:cb:e2: 54:8e:51:03:cb:08:2b:50:92:b2:08:dc:3b:fb:46: 25:de:d4:41:77:6d:c2:1d:68:d9:e6:25:11:36:e5: 86:5c:2e:dd:a9:49:76:f9:3a:2a:ce:08:dc:a3:48: b4:b6:ed:5b:8c:73:17:f7:ec:ff:f6:9a:e8:24:60: a1:0b:4c:ca:7d:cf:07:8f:b8:79:a8:6f:ed:ad:4d: 0c:66:73:30:23:68:94:08:7c:d7:e4:4c:2e:27:fb: c4:f8:e7:1f:7f:89:5c:b6:32:5c:36:07:68:1a:99: 40:3b:4e:92:40:56:f8:b3:95:53:91:e7:25:39:71: 74:cd:73:a7:f7:bf:0c:32:de:84:73:ba:a5:98:cc: c9:d6:09:9d:23:79:ce:ec:c5:8e:73:b8:9b:8a:19: ee:2f:1e:37:60:ea:85:3a:1c:cf:d5:67:b8:52:c6: 17:ad:73:cf:fb:17:b2:10:d9:23:e3:40:f6:b0:85: 2e:11:0a:16:d0:f0:98:db:2d:f0:9a:92:b0:02:6f: 5f:23:63:42:5d:5f:19:28:70:91:ce:10:cd:cd:d2: c8:b0:92:a3:b3:11:42:de:8d:f6:b5:81:08:66:88: 0b:fa:f2:6e:94:b9:63:84:56:ce:18:f5:2a:92:46: f5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:87:C3:8B:63:32:89:F6:3F:E3:72:9D:B7:5C:DB:7C:F3:C6:86:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6288b107-8745-49f8-b949-e602f91d5026/08fc9025-57ac-3ac6-b75c-483c6d02f044.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6288b107-8745-49f8-b949-e602f91d5026/6288b107-8745-49f8-b949-e602f91d5026.crl X509v3 Authority Key Identifier: keyid:F0:DC:CE:63:8F:B0:25:4F:5B:05:A0:04:1C:CA:11:B2:47:7C:24:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6288b107-8745-49f8-b949-e602f91d5026.cer sbgp-ipAddrBlock: critical IPv4: 208.71.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:28:72:6c:cf:8d:9e:86:44:ca:74:d9:dd:94:cc:38:57:19: 8f:ed:95:70:c7:68:cd:b8:52:35:e4:2e:83:37:da:3e:a8:c5: 77:42:cf:45:8b:26:f9:6e:01:44:79:af:87:fb:6a:a7:23:bc: 6d:60:6f:fd:5c:55:5d:1d:5b:c9:8f:35:70:05:4f:fd:91:f5: df:e5:00:bf:7c:6a:17:c3:b8:f3:71:26:bf:f5:42:c7:d8:eb: 08:b0:c7:b9:ad:8e:39:f7:d9:d0:65:1c:09:ae:d0:59:3c:56: 88:2a:88:e3:24:a1:09:88:c0:a3:bf:93:d4:78:d7:01:c4:a2: 9d:1e:37:4f:e2:b0:49:ce:68:60:15:4b:b5:cb:43:cf:6d:f9: 76:ff:d7:fc:7c:fd:dd:38:ed:5d:df:b1:44:28:70:58:f3:95: aa:2c:db:e6:ee:2e:01:f6:53:7a:39:2d:c6:3c:10:39:de:97: 8a:be:2a:41:85:61:62:19:80:ae:fb:26:55:49:d9:04:0e:98: c3:7d:ad:3d:36:38:e4:51:91:9f:2b:f4:b3:5b:e0:52:75:b8: 27:97:e2:b3:af:54:bf:f2:cc:ce:ed:fe:ae:68:fa:93:f1:59: 95:4d:f7:56:37:d5:a8:37:84:36:77:6b:c3:0b:71:7e:3f:71: e2:91:5d:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrNB5z9aebXlyppAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjI4OGIxMDctODc0NS00OWY4LWI5NDktZTYwMmY5MWQ1 MDI2MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MWUyMDA0NmUtZTAxOS00Njk3LWIxZGMtMjdhYzIxODU3YTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7bq/XGWSFxbYwxUy+JUjlEDywgrUJKyCNw7 +0Yl3tRBd23CHWjZ5iURNuWGXC7dqUl2+Toqzgjco0i0tu1bjHMX9+z/9proJGCh C0zKfc8Hj7h5qG/trU0MZnMwI2iUCHzX5EwuJ/vE+Ocff4lctjJcNgdoGplAO06S QFb4s5VTkeclOXF0zXOn978MMt6Ec7qlmMzJ1gmdI3nO7MWOc7ibihnuLx43YOqF OhzP1We4UsYXrXPP+xeyENkj40D2sIUuEQoW0PCY2y3wmpKwAm9fI2NCXV8ZKHCR zhDNzdLIsJKjsxFC3o32tYEIZogL+vJulLljhFbOGPUqkkb1QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmHw4tjMon2P+Nynbdc23zzxoaFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82Mjg4 YjEwNy04NzQ1LTQ5ZjgtYjk0OS1lNjAyZjkxZDUwMjYvMDhmYzkwMjUtNTdhYy0z YWM2LWI3NWMtNDgzYzZkMDJmMDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjI4OGIxMDctODc0NS00OWY4LWI5 NDktZTYwMmY5MWQ1MDI2LzYyODhiMTA3LTg3NDUtNDlmOC1iOTQ5LWU2MDJmOTFk NTAyNi5jcmwwHwYDVR0jBBgwFoAU8NzOY4+wJU9bBaAEHMoRskd8JBUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82Mjg4YjEwNy04NzQ1LTQ5ZjgtYjk0OS1lNjAy ZjkxZDUwMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EckMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgocmzPjZ6GRMp02d2UzDhXGY/tlXDHaM24UjXkLoM32j6oxXdCz0WL JvluAUR5r4f7aqcjvG1gb/1cVV0dW8mPNXAFT/2R9d/lAL98ahfDuPNxJr/1QsfY 6wiwx7mtjjn32dBlHAmu0Fk8VogqiOMkoQmIwKO/k9R41wHEop0eN0/isEnOaGAV S7XLQ89t+Xb/1/x8/d047V3fsUQocFjzlaos2+buLgH2U3o5LcY8EDnel4q+KkGF YWIZgK77JlVJ2QQOmMN9rT02OORRkZ8r9LNb4FJ1uCeX4rOvVL/yzM7t/q5o+pPx WZVN91Y31ag3hDZ3a8MLcX4/ceKRXQE= -----END CERTIFICATE-----Generated at Wed Oct 22 00:42:13 2025 by rpki-client