$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/60ee8622-9109-33d6-910b-dbcc8263baa3.roa File: 60ee8622-9109-33d6-910b-dbcc8263baa3.roa (raw, json) Hash identifier: Z6B2Pfgowp9eNOShjsVKag8gI1sweIXCO+s/T8Y7jSk= Subject key identifier: 2B:55:A4:E8:DA:65:5E:10:10:B8:18:8B:35:35:F7:6B:96:FC:61:83 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584B4E770A75418B7B5812CDD780 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/60ee8622-9109-33d6-910b-dbcc8263baa3.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 396112 IP address blocks: 208.40.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:0a:75:41:8b:7b:58:12:cd:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=d964a2fd-dc9e-4ae4-ae11-df6e9c9ba43a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2d:45:eb:1c:bc:a4:97:c9:be:e0:be:e7:77: cc:89:83:b1:a7:a4:64:34:61:23:8e:c6:d4:a2:54: f2:fc:6b:06:ef:af:d5:ea:55:ad:32:2d:0d:19:14: c9:56:76:2f:b1:1e:41:d4:73:42:af:b3:8d:80:dd: f4:30:42:15:b7:3d:6e:41:2f:28:60:8c:cd:55:b1: 78:a5:97:60:be:e4:14:1f:ee:41:b7:c8:be:24:16: 7a:f2:43:d8:23:c4:36:ec:44:bf:02:25:a6:c3:a6: 44:77:c7:fc:70:17:02:f2:92:8e:48:9d:2c:2a:a0: b7:dc:fa:59:ce:31:a6:b0:11:3b:e4:3c:5b:64:92: 02:fb:84:88:ea:81:4a:fb:8e:ed:e9:03:84:3d:e7: 72:21:fa:01:be:22:56:3e:bd:44:12:f3:ba:80:57: 46:ea:a9:5d:3a:76:44:89:39:17:af:b3:62:9e:26: 6e:46:e9:99:43:67:3c:65:94:94:62:ce:1e:b7:6d: ef:f7:bb:7c:57:4a:39:31:8a:4d:d1:06:85:b7:0e: b9:69:a8:a2:37:b4:7a:0c:f0:c0:83:90:0f:64:e3: ea:22:a4:04:a6:30:97:16:f2:d3:a9:69:92:84:19: 92:4e:6e:aa:3e:73:6f:7b:10:07:66:5d:32:29:8c: 67:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:55:A4:E8:DA:65:5E:10:10:B8:18:8B:35:35:F7:6B:96:FC:61:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/60ee8622-9109-33d6-910b-dbcc8263baa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 208.40.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:eb:12:aa:6b:dd:02:00:06:5b:e9:37:97:e3:59:10:08:8d: f8:e2:9e:6d:fe:12:a5:5e:09:d6:fe:2f:38:d7:a2:5e:a1:9c: 85:6c:88:3e:8d:d3:00:6b:1b:c2:bc:87:b3:bf:88:b4:64:e7: b8:a6:6c:b1:06:55:3f:4e:c4:68:c1:24:72:18:9d:2f:6d:87: 86:0e:f2:dc:ee:a3:d8:1f:50:66:52:9c:34:b9:15:c2:df:0c: 3f:87:21:fa:d6:6b:47:03:03:2d:c2:0e:4f:49:25:bd:15:3d: 03:d5:4d:35:d7:6c:98:cc:a6:9a:7a:5c:77:03:b3:99:b1:e4: db:d7:66:67:1d:2d:f2:56:8c:f7:5c:df:33:7a:3b:4c:9d:53: e6:e5:40:26:26:f8:bb:7f:f5:82:a8:66:86:e7:8c:62:81:36: be:1e:51:62:87:8e:07:97:c2:21:2b:27:9e:3a:cb:11:b4:07: 9c:44:2c:21:ad:75:82:5a:a2:47:23:61:c7:7d:8c:c8:8e:4b: a5:05:14:a1:41:0b:04:03:51:79:d7:7d:42:a0:12:c2:78:a8: b4:7c:36:8d:71:24:bf:c0:9b:22:4c:8b:39:c2:4e:04:46:47: 63:9b:2f:9b:27:b4:85:24:1f:cf:22:9c:1f:3b:cf:91:c1:eb: 24:17:35:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdwp1QYt7WBLN14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk ZDk2NGEyZmQtZGM5ZS00YWU0LWFlMTEtZGY2ZTljOWJhNDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAii1F6xy8pJfJvuC+53fMiYOxp6RkNGEjjsbU olTy/GsG76/V6lWtMi0NGRTJVnYvsR5B1HNCr7ONgN30MEIVtz1uQS8oYIzNVbF4 pZdgvuQUH+5Bt8i+JBZ68kPYI8Q27ES/AiWmw6ZEd8f8cBcC8pKOSJ0sKqC33PpZ zjGmsBE75DxbZJIC+4SI6oFK+47t6QOEPedyIfoBviJWPr1EEvO6gFdG6qldOnZE iTkXr7NiniZuRumZQ2c8ZZSUYs4et23v97t8V0o5MYpN0QaFtw65aaiiN7R6DPDA g5APZOPqIqQEpjCXFvLTqWmShBmSTm6qPnNvexAHZl0yKYxnNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtVpOjaZV4QELgYizU192uW/GGDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvNjBlZTg2MjItOTEwOS0z M2Q2LTkxMGItZGJjYzgyNjNiYWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Cj0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3rEqpr3QIABlvpN5fjWRAIjfjinm3+EqVeCdb+LzjXol6hnIVsiD6N 0wBrG8K8h7O/iLRk57imbLEGVT9OxGjBJHIYnS9th4YO8tzuo9gfUGZSnDS5FcLf DD+HIfrWa0cDAy3CDk9JJb0VPQPVTTXXbJjMppp6XHcDs5mx5NvXZmcdLfJWjPdc 3zN6O0ydU+blQCYm+Lt/9YKoZobnjGKBNr4eUWKHjgeXwiErJ546yxG0B5xELCGt dYJaokcjYcd9jMiOS6UFFKFBCwQDUXnXfUKgEsJ4qLR8No1xJL/AmyJMiznCTgRG R2ObL5sntIUkH88inB87z5HB6yQXNYg= -----END CERTIFICATE-----Generated at Tue Oct 21 02:32:31 2025 by rpki-client