$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/0296df01-a208-3212-875e-64b1e80b1100.roa File: 0296df01-a208-3212-875e-64b1e80b1100.roa (raw, json) Hash identifier: /lCA4zwXlzT+n6shdBl9fLaB0NAcS7NSEvQOncJ+zXI= Subject key identifier: 54:38:F6:52:0B:1B:61:D8:E5:41:E0:FD:D1:0D:75:53:77:2B:6B:67 Certificate issuer: /CN=088404f8-82fb-4330-8ac4-ad17a88d2e28 Certificate serial: 010D0C9F4328584B48E1C39A5B8C059727BD2480 Authority key identifier: 6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/0296df01-a208-3212-875e-64b1e80b1100.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 11718 IP address blocks: 206.57.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:c3:9a:5b:8c:05:97:27:bd:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088404f8-82fb-4330-8ac4-ad17a88d2e28 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=d7e225ec-75ad-44bd-bbfd-bd4373c3ff73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fe:48:87:42:c1:36:71:c8:b2:b7:a8:37:6d: 4d:93:d0:39:9e:25:66:4e:75:7c:39:f5:6e:8f:1d: 4a:99:74:75:cd:e4:a1:7b:2a:60:7f:43:a2:d0:f9: 2f:80:2b:c6:7e:12:46:f4:60:24:a8:19:7c:9f:0d: 21:eb:35:81:b7:35:28:d1:60:3e:41:4e:e9:7a:bd: 8c:a3:3f:91:ac:a0:be:5c:50:55:41:36:ce:ab:df: 7a:15:f5:95:8b:08:1f:cf:9a:f7:34:f4:6e:59:0d: f4:02:92:86:b8:2d:de:1c:06:75:57:7b:a8:44:1e: cd:7b:b7:4c:6a:c3:2d:b1:15:b0:2e:da:58:1d:e6: 2d:a0:04:cb:f7:ae:aa:21:04:b9:cd:59:a1:d8:11: b2:88:40:04:49:f2:72:19:2a:38:6d:92:ef:16:d5: 40:e1:74:01:03:cf:9d:55:33:21:fa:4f:63:7a:32: b5:85:79:67:b3:21:a7:0d:2e:8c:cb:a9:26:db:55: 70:35:98:7c:16:a1:b0:c1:06:b1:7b:6a:f6:a1:48: e7:ef:3b:70:8d:42:c5:45:61:7c:67:ab:24:a6:34: b8:05:a2:ed:26:2d:6d:65:c6:8c:26:31:d4:23:eb: ba:e4:e4:62:4d:59:14:f3:90:96:ad:8f:df:7e:65: 56:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:38:F6:52:0B:1B:61:D8:E5:41:E0:FD:D1:0D:75:53:77:2B:6B:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/0296df01-a208-3212-875e-64b1e80b1100.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.crl X509v3 Authority Key Identifier: keyid:6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer sbgp-ipAddrBlock: critical IPv4: 206.57.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:fd:1d:c1:4b:27:b5:e1:8a:db:fd:e7:14:22:48:93:9d:dd: 8c:5f:d1:91:f0:ce:da:f2:98:c5:05:66:4c:3c:c7:cc:f0:ba: 35:26:0b:69:62:5e:33:aa:dc:73:ff:dc:fd:30:49:bb:a4:de: cf:57:84:cd:03:d3:d6:10:7a:e9:6e:36:dd:71:ae:e3:33:96: 21:bc:3c:83:4b:53:40:e2:e7:80:b1:14:fe:4e:dd:bf:4e:20: 52:87:c2:da:17:ac:30:91:00:c9:fd:2e:15:9c:eb:0e:c2:1b: 95:c7:be:d8:e2:fe:43:82:8b:49:1c:c5:cb:35:da:b8:aa:99: 08:d3:d9:fc:d5:5f:ee:3a:48:98:0f:1f:ba:7b:25:39:74:25: 40:a4:3e:99:49:f9:4a:2f:66:98:62:bc:01:66:9e:0e:e2:08: 73:32:61:87:42:bb:13:8f:67:ed:b0:fb:b8:f3:5d:16:a7:92: 77:1b:d5:d4:e2:09:48:3d:12:6e:92:27:ad:97:33:3a:c6:a4: 4d:b4:e4:7f:2d:77:8f:29:f8:16:f3:3f:91:a7:33:15:3e:c2: 0e:bf:fc:c3:5c:aa:ed:43:7c:2d:59:7a:86:8e:3b:60:1c:f8: a3:f5:cb:86:c7:7c:c6:b6:c8:88:7c:56:39:82:2f:f9:27:f0: 0c:2d:e3:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4cOaW4wFlye9JIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg4NDA0ZjgtODJmYi00MzMwLThhYzQtYWQxN2E4OGQy ZTI4MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZDdlMjI1ZWMtNzVhZC00NGJkLWJiZmQtYmQ0MzczYzNmZjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhP5Ih0LBNnHIsreoN21Nk9A5niVmTnV8OfVu jx1KmXR1zeSheypgf0Oi0PkvgCvGfhJG9GAkqBl8nw0h6zWBtzUo0WA+QU7per2M oz+RrKC+XFBVQTbOq996FfWViwgfz5r3NPRuWQ30ApKGuC3eHAZ1V3uoRB7Ne7dM asMtsRWwLtpYHeYtoATL966qIQS5zVmh2BGyiEAESfJyGSo4bZLvFtVA4XQBA8+d VTMh+k9jejK1hXlnsyGnDS6My6km21VwNZh8FqGwwQaxe2r2oUjn7ztwjULFRWF8 Z6skpjS4BaLtJi1tZcaMJjHUI+u65ORiTVkU85CWrY/ffmVWdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQ49lILG2HY5UHg/dENdVN3K2tnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wODg0 MDRmOC04MmZiLTQzMzAtOGFjNC1hZDE3YTg4ZDJlMjgvMDI5NmRmMDEtYTIwOC0z MjEyLTg3NWUtNjRiMWU4MGIxMTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDg4NDA0ZjgtODJmYi00MzMwLThh YzQtYWQxN2E4OGQyZTI4LzA4ODQwNGY4LTgyZmItNDMzMC04YWM0LWFkMTdhODhk MmUyOC5jcmwwHwYDVR0jBBgwFoAUaxY4lmCv1VKU2vJhn2NBujL55FwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wODg0MDRmOC04MmZiLTQzMzAtOGFjNC1hZDE3 YTg4ZDJlMjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzjmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK79HcFLJ7Xhitv95xQiSJOd3Yxf0ZHwztrymMUFZkw8x8zwujUmC2li XjOq3HP/3P0wSbuk3s9XhM0D09YQeuluNt1xruMzliG8PINLU0Di54CxFP5O3b9O IFKHwtoXrDCRAMn9LhWc6w7CG5XHvtji/kOCi0kcxcs12riqmQjT2fzVX+46SJgP H7p7JTl0JUCkPplJ+UovZphivAFmng7iCHMyYYdCuxOPZ+2w+7jzXRankncb1dTi CUg9Em6SJ62XMzrGpE205H8td48p+BbzP5GnMxU+wg6//MNcqu1DfC1ZeoaOO2Ac +KP1y4bHfMa2yIh8VjmCL/kn8Awt45Q= -----END CERTIFICATE-----Generated at Wed Oct 22 00:40:19 2025 by rpki-client