$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/8502887d-b3a6-3227-8f27-6e8c73f1d4a5.roa File: 8502887d-b3a6-3227-8f27-6e8c73f1d4a5.roa (raw, json) Hash identifier: 44Re9xorY+HxX45Fe28VCJWU/MyHjRVc8Rd+rU72ncA= Subject key identifier: FC:DF:2E:F7:16:D1:9B:83:87:74:02:6D:44:DB:00:58:FE:4F:73:4D Certificate issuer: /CN=6f37bf68-67e7-4e67-a093-c88a3d7fe04d Certificate serial: 010D0C9F4328584B8BE23CF1ECCD9DA170D1B680 Authority key identifier: 28:4F:CF:92:96:C8:B0:BE:A6:99:D3:7F:06:B3:7E:9A:39:EA:8B:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/8502887d-b3a6-3227-8f27-6e8c73f1d4a5.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 22295 IP address blocks: 208.84.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:3c:f1:ec:cd:9d:a1:70:d1:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f37bf68-67e7-4e67-a093-c88a3d7fe04d Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=87b1e5b2-4fb5-4e8a-82fe-8c9bb9e2e082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f2:cb:ef:86:a0:7e:50:25:26:16:c1:d8:97: 4b:25:45:71:35:a0:42:a3:51:a4:70:6a:ae:c5:55: 72:6d:fe:c6:f5:31:15:c0:a9:39:0f:81:e6:b7:00: d0:26:23:01:af:3b:93:b2:5a:53:f6:6b:1b:d9:be: 7b:b9:a8:90:d4:26:a8:a5:be:27:c8:e5:4b:c4:e1: ba:15:db:42:0d:96:36:35:d6:53:60:89:41:d2:8e: 0c:34:86:0d:d7:05:a1:5c:1c:03:09:5e:d5:5f:9c: ce:3f:c6:60:f9:01:99:6d:05:a3:27:e7:5b:2a:5c: fc:4a:21:df:e7:bc:21:aa:ce:ca:47:ee:d4:bf:17: 00:c2:01:78:3a:b1:3a:e8:c5:66:5b:27:d9:6e:c3: 25:0f:21:78:1e:b4:76:58:90:3b:bf:52:36:01:c9: 08:2f:f4:03:a8:61:51:4c:7b:64:ae:5f:ff:6d:4f: 16:87:4a:ff:45:2b:ef:fc:cb:48:de:06:30:ec:c7: 35:a0:c6:c7:43:2a:50:68:79:6c:48:ba:b0:8f:4e: 79:48:55:65:2f:19:74:a9:19:4a:e7:6e:b3:8f:0e: 57:22:b6:51:ad:a1:a9:68:aa:96:8e:d3:ad:31:95: 8c:1b:50:97:73:c2:8b:a7:79:bf:4f:27:d0:2b:87: e8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:DF:2E:F7:16:D1:9B:83:87:74:02:6D:44:DB:00:58:FE:4F:73:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/8502887d-b3a6-3227-8f27-6e8c73f1d4a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.crl X509v3 Authority Key Identifier: keyid:28:4F:CF:92:96:C8:B0:BE:A6:99:D3:7F:06:B3:7E:9A:39:EA:8B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.cer sbgp-ipAddrBlock: critical IPv4: 208.84.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:66:2f:43:61:8f:26:69:52:28:2c:30:4e:4e:d5:10:34:45: 9a:8d:ba:d3:69:9b:fb:23:3f:0f:51:72:38:93:07:40:08:4a: 9a:82:10:d5:6d:14:6f:67:38:26:3d:a8:3b:37:85:2f:ac:b6: 2c:24:d1:26:b4:c1:4e:1a:d4:71:63:e8:2f:9a:ee:dc:66:f4: 22:3f:53:8c:72:8c:3b:d6:fc:6b:a1:7a:d5:fd:61:29:71:50: 73:66:4c:e6:50:53:31:a3:54:7e:18:9a:0f:24:9a:4d:f5:d0: b4:a1:58:0b:79:0e:d6:42:30:94:7e:01:55:08:cc:1c:eb:79: c4:29:6c:58:fb:e9:8c:d4:64:1d:2b:f4:eb:9c:2c:c9:95:7c: a4:d7:7b:60:1c:2f:87:fb:ef:92:44:da:8b:bd:6e:e7:25:d9: 7d:63:70:05:c5:0c:f1:23:b3:5d:3f:7e:ab:e6:8e:51:9d:e5: 44:13:fb:4a:5b:cb:d5:8e:6d:98:7d:db:05:a8:67:71:eb:4d: 66:29:9f:f8:4c:6d:d4:44:d5:a1:e4:e4:b6:8a:2f:f5:01:b1: 03:5f:83:c5:88:6d:06:68:45:89:2d:79:11:1e:93:f4:7c:12: 0f:75:9a:48:e4:20:6d:1b:de:87:09:9f:32:b7:c0:c9:b1:e2: 38:88:ed:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4jzx7M2doXDRtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmYzN2JmNjgtNjdlNy00ZTY3LWEwOTMtYzg4YTNkN2Zl MDRkMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk ODdiMWU1YjItNGZiNS00ZThhLTgyZmUtOGM5YmI5ZTJlMDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPLL74agflAlJhbB2JdLJUVxNaBCo1GkcGqu xVVybf7G9TEVwKk5D4HmtwDQJiMBrzuTslpT9msb2b57uaiQ1Caopb4nyOVLxOG6 FdtCDZY2NdZTYIlB0o4MNIYN1wWhXBwDCV7VX5zOP8Zg+QGZbQWjJ+dbKlz8SiHf 57whqs7KR+7UvxcAwgF4OrE66MVmWyfZbsMlDyF4HrR2WJA7v1I2AckIL/QDqGFR THtkrl//bU8Wh0r/RSvv/MtI3gYw7Mc1oMbHQypQaHlsSLqwj055SFVlLxl0qRlK 526zjw5XIrZRraGpaKqWjtOtMZWMG1CXc8KLp3m/TyfQK4foDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzfLvcW0ZuDh3QCbUTbAFj+T3NNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82ZjM3 YmY2OC02N2U3LTRlNjctYTA5My1jODhhM2Q3ZmUwNGQvODUwMjg4N2QtYjNhNi0z MjI3LThmMjctNmU4YzczZjFkNGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNmYzN2JmNjgtNjdlNy00ZTY3LWEw OTMtYzg4YTNkN2ZlMDRkLzZmMzdiZjY4LTY3ZTctNGU2Ny1hMDkzLWM4OGEzZDdm ZTA0ZC5jcmwwHwYDVR0jBBgwFoAUKE/PkpbIsL6mmdN/BrN+mjnqi7EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82ZjM3YmY2OC02N2U3LTRlNjctYTA5My1jODhh M2Q3ZmUwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FRkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5mL0NhjyZpUigsME5O1RA0RZqNutNpm/sjPw9RcjiTB0AISpqCENVt FG9nOCY9qDs3hS+stiwk0Sa0wU4a1HFj6C+a7txm9CI/U4xyjDvW/GuhetX9YSlx UHNmTOZQUzGjVH4Ymg8kmk310LShWAt5DtZCMJR+AVUIzBzrecQpbFj76YzUZB0r 9OucLMmVfKTXe2AcL4f775JE2ou9bucl2X1jcAXFDPEjs10/fqvmjlGd5UQT+0pb y9WObZh92wWoZ3HrTWYpn/hMbdRE1aHk5LaKL/UBsQNfg8WIbQZoRYkteREek/R8 Eg91mkjkIG0b3ocJnzK3wMmx4jiI7as= -----END CERTIFICATE-----Generated at Mon Oct 20 15:59:03 2025 by rpki-client