$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dd8cf987-e31d-3aad-aa3c-c2a969971a17.roa File: dd8cf987-e31d-3aad-aa3c-c2a969971a17.roa (raw, json) Hash identifier: Wq8L+eB4pRjF4ygY/K1WBg14BOU1hqVeH7sJCuNDcXQ= Subject key identifier: 76:6A:83:29:BA:61:21:01:53:22:C0:56:E4:B2:73:E6:79:90:11:AF Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F5240A066F89938B4604640 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dd8cf987-e31d-3aad-aa3c-c2a969971a17.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 7018 IP address blocks: 208.89.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:40:a0:66:f8:99:38:b4:60:46:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=a36c955b-a2c7-499b-b6ec-a2a52185f6d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:51:fb:70:fb:59:d1:03:19:f6:7a:9e:52:5e: 85:f7:ef:b9:ed:42:47:be:75:be:74:ef:a8:0d:c1: 3a:08:2c:31:e7:1f:42:fb:75:f1:93:b4:1d:65:55: 1e:df:13:ec:53:dc:29:96:86:c9:f6:ee:37:da:15: b1:8f:82:84:5a:7f:b9:1a:31:c1:12:f5:79:69:35: 9d:a8:22:28:84:4c:86:54:2c:62:f4:59:3d:53:02: 04:b4:cb:d8:cc:08:80:98:26:4d:8c:f8:b5:76:93: 82:02:2b:3c:ee:cd:54:e3:5a:97:bf:39:c7:a5:69: 88:c8:d6:37:96:0b:c0:d9:3b:aa:70:cd:56:4c:fe: ef:57:39:fd:f5:8a:d5:7f:44:0b:fd:6e:ee:8c:f7: 93:65:fc:fb:59:55:8e:5d:b1:be:a5:f7:96:9d:9d: 39:7c:f7:8c:ab:ff:0e:8d:5f:51:b1:e4:50:de:5d: a9:2c:ca:7f:10:a7:3b:dc:41:76:d2:5e:ac:ca:e9: df:04:09:53:b0:44:5d:47:ac:8d:2e:e4:71:49:a0: dd:21:5a:a4:38:3c:7a:1f:6a:bd:30:4f:a8:68:f0: 23:de:e1:bf:ab:a4:3f:46:96:42:7d:9e:c8:f2:16: ac:c3:34:a4:5c:02:f1:78:cf:dd:a4:79:f0:7e:ed: 64:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:6A:83:29:BA:61:21:01:53:22:C0:56:E4:B2:73:E6:79:90:11:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/dd8cf987-e31d-3aad-aa3c-c2a969971a17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 208.89.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:28:e7:6e:65:ca:a2:b4:f2:64:a2:f1:51:d7:f4:5d:35:12: 83:22:64:02:f4:51:25:63:87:67:fc:d6:8d:82:cf:af:19:bf: 2c:71:14:28:a4:da:93:06:b6:d8:1d:7d:76:d0:4d:42:88:22: 02:b2:42:c4:28:fd:77:99:f7:a4:60:25:d3:0b:61:f9:f7:47: 9f:f1:ee:3c:48:4f:58:d7:f2:1a:d3:e9:ae:36:38:41:08:c7: c1:2f:42:d2:61:2a:99:6d:f8:b7:0c:45:2c:28:97:64:b4:90: b8:8d:34:34:34:8f:9e:73:b2:99:d7:5a:ef:30:4c:dc:e5:47: b5:0b:5d:27:19:20:e1:8c:a1:73:a4:c5:85:c0:d9:a3:87:14: a5:c2:19:81:e4:17:8f:e5:62:30:1d:4c:7d:7a:23:19:3c:f7: b7:6a:da:44:8f:22:50:01:fe:ae:b2:51:2a:4d:30:98:ae:61: 9a:35:3d:07:f1:0e:1c:d4:2e:8f:42:5e:2f:b6:ad:c6:1a:f0: 9e:51:ce:0c:5d:6d:7d:2d:b4:c0:6a:e9:c6:1d:38:79:f0:17: e9:de:2d:21:dd:de:53:a8:c9:e6:14:a0:54:d1:b4:18:e3:e8: b2:a0:59:3c:b2:df:0b:69:71:a7:3c:8c:9b:69:0f:12:e7:19: d8:3c:a2:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UkCgZviZOLRgRkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk YTM2Yzk1NWItYTJjNy00OTliLWI2ZWMtYTJhNTIxODVmNmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1H7cPtZ0QMZ9nqeUl6F9++57UJHvnW+dO+o DcE6CCwx5x9C+3Xxk7QdZVUe3xPsU9wplobJ9u432hWxj4KEWn+5GjHBEvV5aTWd qCIohEyGVCxi9Fk9UwIEtMvYzAiAmCZNjPi1dpOCAis87s1U41qXvznHpWmIyNY3 lgvA2TuqcM1WTP7vVzn99YrVf0QL/W7ujPeTZfz7WVWOXbG+pfeWnZ05fPeMq/8O jV9RseRQ3l2pLMp/EKc73EF20l6syunfBAlTsERdR6yNLuRxSaDdIVqkODx6H2q9 ME+oaPAj3uG/q6Q/RpZCfZ7I8haswzSkXALxeM/dpHnwfu1kVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZqgym6YSEBUyLAVuSyc+Z5kBGvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZGQ4Y2Y5ODctZTMxZC0z YWFkLWFhM2MtYzJhOTY5OTcxYTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FkHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEo525lyqK08mSi8VHX9F01EoMiZAL0USVjh2f81o2Cz68ZvyxxFCik 2pMGttgdfXbQTUKIIgKyQsQo/XeZ96RgJdMLYfn3R5/x7jxIT1jX8hrT6a42OEEI x8EvQtJhKplt+LcMRSwol2S0kLiNNDQ0j55zspnXWu8wTNzlR7ULXScZIOGMoXOk xYXA2aOHFKXCGYHkF4/lYjAdTH16Ixk897dq2kSPIlAB/q6yUSpNMJiuYZo1PQfx DhzULo9CXi+2rcYa8J5RzgxdbX0ttMBq6cYdOHnwF+neLSHd3lOoyeYUoFTRtBjj 6LKgWTyy3wtpcac8jJtpDxLnGdg8om8= -----END CERTIFICATE-----Generated at Mon Oct 20 08:17:01 2025 by rpki-client