$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/dfac5974-f75e-3282-b330-4ac930e4be2c.roa File: dfac5974-f75e-3282-b330-4ac930e4be2c.roa (raw, json) Hash identifier: oaVbkPrTs62/DgeCfypwtABusor1B5ZQTQVbJYNl55M= Subject key identifier: D9:3F:40:F2:39:67:5F:6B:02:09:58:D2:36:07:A8:45:63:B4:5E:62 Certificate issuer: /CN=e0222b33-d953-40bd-9e16-838d515a3e80 Certificate serial: 010D0C9F4328584B84E7756CD3265785F913A880 Authority key identifier: 53:EB:13:69:3B:D7:1E:45:8A:7B:81:DF:7C:FB:F4:D4:63:23:1C:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/dfac5974-f75e-3282-b330-4ac930e4be2c.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 30708 IP address blocks: 208.86.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/e0222b33-d953-40bd-9e16-838d515a3e80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/e0222b33-d953-40bd-9e16-838d515a3e80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:75:6c:d3:26:57:85:f9:13:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0222b33-d953-40bd-9e16-838d515a3e80 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=b7506937-375f-4a5e-ad2e-34cea9ed9a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e6:78:32:03:cb:d1:63:3b:2d:99:3b:58:c5: df:dd:23:f6:f9:25:b3:bc:5e:d4:e9:47:fe:91:75: 1a:2e:b3:8e:b5:e8:1c:ae:51:75:f4:d1:53:69:11: 93:b9:08:c0:f7:6a:02:4b:8b:e4:9f:c5:27:44:ae: d8:dc:ee:cc:06:fc:a7:61:ad:e3:48:62:d1:94:67: 5e:72:32:85:d5:41:19:c2:64:68:eb:73:c7:09:b0: bb:30:89:99:80:2a:1a:46:d3:5b:22:53:ee:ec:da: 93:2a:bb:e8:d3:10:13:64:63:f6:cd:29:dc:b9:ef: 53:fe:d6:4b:b5:23:8b:7e:1e:59:00:92:f8:99:ba: 8d:9a:2c:30:6e:81:56:0a:31:76:b1:48:5b:3a:fc: 8d:5b:41:ee:1c:f2:6f:b1:d4:1a:23:02:d4:d1:05: a4:82:43:89:a0:73:72:5d:9b:e8:fe:f2:6f:52:35: f3:70:e7:54:66:49:f3:a8:14:40:0e:ad:c6:4d:9c: 8b:12:59:d1:7d:c7:f8:24:24:a4:45:58:a1:6a:c9: 3d:44:3d:84:d0:d8:54:77:3e:95:d3:68:56:4c:bc: 42:2b:fe:23:73:7e:f6:a3:ae:15:ab:6f:ac:76:bd: b8:6c:48:d0:a0:65:8d:1f:39:d6:cf:9e:37:ba:cf: af:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:3F:40:F2:39:67:5F:6B:02:09:58:D2:36:07:A8:45:63:B4:5E:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/dfac5974-f75e-3282-b330-4ac930e4be2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/e0222b33-d953-40bd-9e16-838d515a3e80.crl X509v3 Authority Key Identifier: keyid:53:EB:13:69:3B:D7:1E:45:8A:7B:81:DF:7C:FB:F4:D4:63:23:1C:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80.cer sbgp-ipAddrBlock: critical IPv4: 208.86.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:3b:09:b5:5b:79:5b:59:05:c1:85:99:40:e4:b9:a1:bb:30: ec:66:c2:48:95:97:86:f2:40:71:32:a3:3c:6c:d3:a6:a2:4c: ac:97:7c:05:7c:b8:de:da:e3:ce:55:9c:59:0c:cd:9d:1f:46: d7:6c:1a:ce:6d:44:f5:e6:5f:94:c2:31:b6:e6:0e:2c:47:07: af:95:8a:f5:23:ec:cf:c2:04:7a:b4:0b:c4:f0:85:7b:bc:6d: c0:5c:38:e1:45:97:68:1c:a5:62:48:be:7e:d3:5a:01:84:78: 05:c4:0f:12:0a:b3:16:1a:5e:73:81:17:d7:02:83:9b:15:e0: fd:60:c8:61:f1:6e:30:dc:ea:05:a0:53:ba:c4:f5:b3:7f:c2: fc:da:a5:df:83:c6:36:91:f0:5d:4d:b3:7b:2e:40:b1:57:b7: 70:4e:33:a4:34:7f:b6:46:f4:85:58:1e:a6:aa:11:5c:7d:57: 49:03:06:6d:18:44:e3:01:37:32:0c:37:f1:1f:cb:f4:d7:a9: 55:b0:7e:e3:e2:2a:04:87:b2:0b:80:b0:e7:bc:96:00:71:51: b4:ea:bf:5a:7e:34:a6:72:8d:c2:36:43:c8:ab:88:49:89:0f: 73:7a:85:86:f7:29:2c:ee:16:ea:3b:db:8a:8b:07:3b:73:6f: f5:d6:67:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53Vs0yZXhfkTqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTAyMjJiMzMtZDk1My00MGJkLTllMTYtODM4ZDUxNWEz ZTgwMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk Yjc1MDY5MzctMzc1Zi00YTVlLWFkMmUtMzRjZWE5ZWQ5YTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+Z4MgPL0WM7LZk7WMXf3SP2+SWzvF7U6Uf+ kXUaLrOOtegcrlF19NFTaRGTuQjA92oCS4vkn8UnRK7Y3O7MBvynYa3jSGLRlGde cjKF1UEZwmRo63PHCbC7MImZgCoaRtNbIlPu7NqTKrvo0xATZGP2zSncue9T/tZL tSOLfh5ZAJL4mbqNmiwwboFWCjF2sUhbOvyNW0HuHPJvsdQaIwLU0QWkgkOJoHNy XZvo/vJvUjXzcOdUZknzqBRADq3GTZyLElnRfcf4JCSkRVihask9RD2E0NhUdz6V 02hWTLxCK/4jc372o64Vq2+sdr24bEjQoGWNHznWz543us+vFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNk/QPI5Z19rAglY0jYHqEVjtF5iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMDIy MmIzMy1kOTUzLTQwYmQtOWUxNi04MzhkNTE1YTNlODAvZGZhYzU5NzQtZjc1ZS0z MjgyLWIzMzAtNGFjOTMwZTRiZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTAyMjJiMzMtZDk1My00MGJkLTll MTYtODM4ZDUxNWEzZTgwL2UwMjIyYjMzLWQ5NTMtNDBiZC05ZTE2LTgzOGQ1MTVh M2U4MC5jcmwwHwYDVR0jBBgwFoAUU+sTaTvXHkWKe4HffPv01GMjHOYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMDIyMmIzMy1kOTUzLTQwYmQtOWUxNi04Mzhk NTE1YTNlODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FZcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFo7CbVbeVtZBcGFmUDkuaG7MOxmwkiVl4byQHEyozxs06aiTKyXfAV8 uN7a485VnFkMzZ0fRtdsGs5tRPXmX5TCMbbmDixHB6+VivUj7M/CBHq0C8TwhXu8 bcBcOOFFl2gcpWJIvn7TWgGEeAXEDxIKsxYaXnOBF9cCg5sV4P1gyGHxbjDc6gWg U7rE9bN/wvzapd+DxjaR8F1Ns3suQLFXt3BOM6Q0f7ZG9IVYHqaqEVx9V0kDBm0Y ROMBNzIMN/Efy/TXqVWwfuPiKgSHsguAsOe8lgBxUbTqv1p+NKZyjcI2Q8iriEmJ D3N6hYb3KSzuFuo724qLBztzb/XWZ7o= -----END CERTIFICATE-----Generated at Tue Oct 21 02:52:06 2025 by rpki-client