$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/e087c521-5034-3635-8959-9eef60d95ac7.roa File: e087c521-5034-3635-8959-9eef60d95ac7.roa (raw, json) Hash identifier: 1VfXucqfgihhebXSkZbSZAo1UBsAHHYg2LBHaBSxttk= Subject key identifier: E0:28:27:23:E1:7D:CB:B9:1F:F9:36:D7:EF:9B:36:08:BB:EB:06:BA Certificate issuer: /CN=088404f8-82fb-4330-8ac4-ad17a88d2e28 Certificate serial: 010D0C9F4328584B48E1B31E1CED6D276B8FC100 Authority key identifier: 6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/e087c521-5034-3635-8959-9eef60d95ac7.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 393581 IP address blocks: 206.57.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:b3:1e:1c:ed:6d:27:6b:8f:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088404f8-82fb-4330-8ac4-ad17a88d2e28 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=bca1fefc-7cf9-4960-a0d7-61486e59102c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4c:a7:cf:44:13:2d:e5:c8:af:b4:be:9a:57: 9f:51:59:fa:5a:ee:1f:fe:72:ac:4f:85:7c:46:92: f6:f9:25:e9:6a:aa:85:0e:19:c6:fc:3a:47:e9:c8: 0a:53:bd:02:fc:83:db:4b:c6:d5:e9:d6:43:64:ec: 14:be:d2:f2:11:da:c9:11:ad:ef:7a:2b:72:2e:ce: 45:48:9f:c0:da:1e:f3:13:b8:a4:c4:5d:05:8a:f1: c7:c0:f0:ff:30:aa:be:e7:db:59:1c:6e:19:e4:ee: ab:d8:cc:6e:9e:ce:a1:ee:80:01:c8:1f:56:37:f9: 1d:14:d8:b0:b7:ee:a2:87:5c:a0:7d:84:3a:56:f7: 68:27:65:e3:7f:bc:96:be:92:1e:bc:5c:bb:6f:26: 29:27:9c:92:30:d2:ab:27:80:0b:4f:cd:21:7e:b0: 47:31:5f:9c:4f:45:ce:97:7e:5d:53:74:33:c9:43: 4f:e9:eb:60:04:47:7e:46:f2:01:74:2a:6c:e9:ab: b8:b4:93:bc:d4:25:76:73:f8:04:ca:22:47:ae:5e: 38:e5:00:17:03:85:61:c1:dc:6f:67:7c:fb:aa:5e: f9:f8:30:3c:da:c2:74:6a:19:cd:16:86:ab:ae:44: 7c:d4:f1:50:67:51:d5:d9:5e:11:24:e5:88:10:c8: cc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:28:27:23:E1:7D:CB:B9:1F:F9:36:D7:EF:9B:36:08:BB:EB:06:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/e087c521-5034-3635-8959-9eef60d95ac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.crl X509v3 Authority Key Identifier: keyid:6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer sbgp-ipAddrBlock: critical IPv4: 206.57.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:d2:e1:aa:9b:32:6e:a8:2b:1a:0d:06:db:b6:75:bb:ef:83: c0:10:ea:57:80:71:41:34:bc:47:a3:88:14:b6:37:b5:d6:ca: 78:f8:d2:1e:b5:6d:9f:86:b3:4e:6a:49:d3:1a:31:0e:ae:d7: 0b:ad:58:0d:90:a8:a7:2f:7b:88:f4:e6:54:97:f3:33:57:66: ec:5b:03:bb:90:a4:e6:c9:07:ec:1e:29:16:12:6f:07:d9:16: 51:b4:79:45:26:74:8b:23:26:34:84:2f:de:6d:87:6f:03:f1: 37:cc:25:b2:03:9f:43:2c:17:44:f8:ff:0c:68:c9:7d:86:e8: 28:1a:48:45:a9:c6:e1:ae:95:80:93:56:13:15:70:c1:fb:fe: 72:d2:77:d2:93:bf:db:b7:59:f6:c3:4d:94:a1:89:a1:76:45: f3:ee:ca:36:9f:31:0a:bf:fe:be:dd:82:52:a9:d1:4e:37:4c: 37:49:e7:34:2d:74:9f:c8:11:99:1b:09:e9:7b:33:97:17:8c: 6f:2a:f5:73:33:ec:b6:69:c4:ef:bd:98:7e:66:43:be:72:f0: 63:d3:d9:12:de:81:11:99:46:d7:25:5f:32:14:f2:39:84:da: 28:65:4a:dc:9c:29:df:a4:c3:a0:a8:fd:d7:e4:ae:08:ce:6c: b9:3c:d0:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4bMeHO1tJ2uPwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg4NDA0ZjgtODJmYi00MzMwLThhYzQtYWQxN2E4OGQy ZTI4MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk YmNhMWZlZmMtN2NmOS00OTYwLWEwZDctNjE0ODZlNTkxMDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0ynz0QTLeXIr7S+mlefUVn6Wu4f/nKsT4V8 RpL2+SXpaqqFDhnG/DpH6cgKU70C/IPbS8bV6dZDZOwUvtLyEdrJEa3veityLs5F SJ/A2h7zE7ikxF0FivHHwPD/MKq+59tZHG4Z5O6r2Mxuns6h7oAByB9WN/kdFNiw t+6ih1ygfYQ6VvdoJ2Xjf7yWvpIevFy7byYpJ5ySMNKrJ4ALT80hfrBHMV+cT0XO l35dU3QzyUNP6etgBEd+RvIBdCps6au4tJO81CV2c/gEyiJHrl445QAXA4Vhwdxv Z3z7ql75+DA82sJ0ahnNFoarrkR81PFQZ1HV2V4RJOWIEMjM4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAoJyPhfcu5H/k21++bNgi76wa6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wODg0 MDRmOC04MmZiLTQzMzAtOGFjNC1hZDE3YTg4ZDJlMjgvZTA4N2M1MjEtNTAzNC0z NjM1LTg5NTktOWVlZjYwZDk1YWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDg4NDA0ZjgtODJmYi00MzMwLThh YzQtYWQxN2E4OGQyZTI4LzA4ODQwNGY4LTgyZmItNDMzMC04YWM0LWFkMTdhODhk MmUyOC5jcmwwHwYDVR0jBBgwFoAUaxY4lmCv1VKU2vJhn2NBujL55FwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wODg0MDRmOC04MmZiLTQzMzAtOGFjNC1hZDE3 YTg4ZDJlMjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzjn9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3S4aqbMm6oKxoNBtu2dbvvg8AQ6leAcUE0vEejiBS2N7XWynj40h61 bZ+Gs05qSdMaMQ6u1wutWA2QqKcve4j05lSX8zNXZuxbA7uQpObJB+weKRYSbwfZ FlG0eUUmdIsjJjSEL95th28D8TfMJbIDn0MsF0T4/wxoyX2G6CgaSEWpxuGulYCT VhMVcMH7/nLSd9KTv9u3WfbDTZShiaF2RfPuyjafMQq//r7dglKp0U43TDdJ5zQt dJ/IEZkbCel7M5cXjG8q9XMz7LZpxO+9mH5mQ75y8GPT2RLegRGZRtclXzIU8jmE 2ihlStycKd+kw6Co/dfkrgjObLk80HU= -----END CERTIFICATE-----Generated at Wed Oct 22 00:51:39 2025 by rpki-client