$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/da7256ed-b8b3-3316-80e4-db695c434382.roa File: da7256ed-b8b3-3316-80e4-db695c434382.roa (raw, json) Hash identifier: 4YdBR1zu99Bo/U10oHb05q2K84BMf+4TBGnxIGVupoE= Subject key identifier: C5:A3:AB:64:81:9D:B9:EB:0E:C2:6B:C2:25:1B:B6:6E:2B:AD:14:B3 Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Certificate serial: 010D0C9F4328584B5B0764A24FC24CED0D5912C0 Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/da7256ed-b8b3-3316-80e4-db695c434382.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 16417 IP address blocks: 208.90.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:64:a2:4f:c2:4c:ed:0d:59:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=ca3bb9fa-60fc-4a9f-a691-0f9f1a8743e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6b:6c:21:56:f9:d7:19:ba:45:90:6e:0c:74: b2:80:74:ef:ea:e0:a5:74:44:c0:e2:b0:b2:87:aa: 49:be:52:b0:2b:e2:b1:e4:a9:d8:19:a1:31:e0:02: 65:1d:ac:10:5f:3c:2c:18:88:da:75:4d:78:01:2f: 9d:e4:54:b9:76:29:17:23:ff:91:49:14:f2:4d:cb: 7b:9e:c0:b6:10:e6:b5:4a:05:5b:08:b5:a9:28:2c: c2:f4:c7:6c:42:d3:00:39:fc:b2:fd:67:f2:e2:db: 1c:25:50:38:9a:53:1c:a7:60:98:52:14:0a:83:8a: 53:3d:c1:13:46:ab:04:61:aa:21:ad:71:f6:51:b3: 79:ec:65:55:c7:d7:79:69:0c:e5:51:39:02:67:cc: dc:40:38:c0:0f:65:f6:d5:66:39:46:d1:b9:97:f2: 20:30:c1:9e:b2:b0:d3:34:aa:d5:a0:08:fc:2e:81: 66:b1:d0:75:15:11:e0:47:9d:60:2c:f2:80:a9:b9: f6:13:c1:84:81:11:3b:8b:62:75:53:40:46:e6:7a: 17:3c:e5:67:46:d4:45:fc:21:25:0c:40:84:c8:e5: ad:0f:da:8c:7d:9e:a9:04:49:ed:96:49:2a:9d:d1: 8d:33:d6:46:54:28:e6:9e:c4:8c:94:05:c4:f7:db: 6e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A3:AB:64:81:9D:B9:EB:0E:C2:6B:C2:25:1B:B6:6E:2B:AD:14:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/da7256ed-b8b3-3316-80e4-db695c434382.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl X509v3 Authority Key Identifier: keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer sbgp-ipAddrBlock: critical IPv4: 208.90.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:d0:f8:e5:f7:cb:db:2a:fa:a6:a2:17:9f:fe:7b:0b:5c:3a: 08:02:75:7d:93:ab:5d:83:cc:55:1f:9e:16:db:01:76:a2:74: 88:20:6e:cc:67:ff:86:15:f1:64:ef:de:f1:96:3c:b8:86:b6: 70:82:7e:a2:03:e4:7a:36:a1:76:dd:17:32:be:61:dc:f0:87: c7:70:c5:c6:f5:3f:48:0b:73:04:25:5a:f7:3d:39:0a:40:83: 0e:1b:52:e8:81:eb:41:9c:4d:7d:31:3c:fa:6b:af:a0:92:86: c6:ed:70:4a:c0:c0:62:6d:e5:e6:e6:a4:7f:61:1f:71:e6:82: e7:7a:5e:49:cb:c7:8b:6d:98:e1:02:58:0c:1c:e3:c8:df:3b: fc:0c:67:2d:f3:7d:bd:9b:4a:4e:91:0c:3b:4c:4e:fe:c1:fa: f7:aa:a3:d1:a4:4f:f2:ec:ef:a5:47:9f:84:32:bf:21:3a:7f: b2:0b:29:6c:3f:3a:b8:2f:3a:4d:ba:c0:a8:94:e9:79:c5:c7: 6f:8a:93:3c:8c:86:a5:0a:84:3e:ff:6e:d1:9b:fe:5e:53:01: ef:ee:6b:28:fd:2e:c1:78:14:08:b7:77:0a:74:c8:6f:2f:b7: 41:b0:c1:1c:bb:7a:54:c2:86:4a:9b:1f:ba:2c:fd:8d:4d:6c: 2e:eb:7e:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB2SiT8JM7Q1ZEsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZm NGM5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk Y2EzYmI5ZmEtNjBmYy00YTlmLWE2OTEtMGY5ZjFhODc0M2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WtsIVb51xm6RZBuDHSygHTv6uCldETA4rCy h6pJvlKwK+Kx5KnYGaEx4AJlHawQXzwsGIjadU14AS+d5FS5dikXI/+RSRTyTct7 nsC2EOa1SgVbCLWpKCzC9MdsQtMAOfyy/Wfy4tscJVA4mlMcp2CYUhQKg4pTPcET RqsEYaohrXH2UbN57GVVx9d5aQzlUTkCZ8zcQDjAD2X21WY5RtG5l/IgMMGesrDT NKrVoAj8LoFmsdB1FRHgR51gLPKAqbn2E8GEgRE7i2J1U0BG5noXPOVnRtRF/CEl DECEyOWtD9qMfZ6pBEntlkkqndGNM9ZGVCjmnsSMlAXE99tuqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWjq2SBnbnrDsJrwiUbtm4rrRSzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4 OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvZGE3MjU2ZWQtYjhiMy0z MzE2LTgwZTQtZGI2OTVjNDM0MzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGY1ODlkMDgtM2Q2OC00MDBmLWE4 NjItNGMyNGUwYmZmNGM5LzhmNTg5ZDA4LTNkNjgtNDAwZi1hODYyLTRjMjRlMGJm ZjRjOS5jcmwwHwYDVR0jBBgwFoAUCzcgTfdOC+y8F4HQXv0mrxWky4UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0 ZTBiZmY0YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fo/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL3Q+OX3y9sq+qaiF5/+ewtcOggCdX2Tq12DzFUfnhbbAXaidIggbsxn /4YV8WTv3vGWPLiGtnCCfqID5Ho2oXbdFzK+Ydzwh8dwxcb1P0gLcwQlWvc9OQpA gw4bUuiB60GcTX0xPPprr6CShsbtcErAwGJt5ebmpH9hH3Hmgud6XknLx4ttmOEC WAwc48jfO/wMZy3zfb2bSk6RDDtMTv7B+veqo9GkT/Ls76VHn4QyvyE6f7ILKWw/ OrgvOk26wKiU6XnFx2+KkzyMhqUKhD7/btGb/l5TAe/uayj9LsF4FAi3dwp0yG8v t0GwwRy7elTChkqbH7os/Y1NbC7rfg8= -----END CERTIFICATE-----Generated at Tue Oct 21 02:14:28 2025 by rpki-client