$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/06aa229e-21d5-3132-8604-c88f6941821b.roa File: 06aa229e-21d5-3132-8604-c88f6941821b.roa (raw, json) Hash identifier: J1lb8j+h5bCBxQ1T5K7LUj4DfvQUmRzrDsVRBS3wU+c= Subject key identifier: 1D:BF:75:2F:BD:FB:BE:49:A9:F2:A1:0B:F0:99:60:6A:85:62:96:15 Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Certificate serial: 010D0C9F4328584B110C03434BF62529DBA22B40 Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/06aa229e-21d5-3132-8604-c88f6941821b.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 46432 IP address blocks: 208.88.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:03:43:4b:f6:25:29:db:a2:2b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=6292ae65-7f1e-4912-aebf-637f80b41fcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e9:ed:b1:b1:3b:56:07:27:ff:1b:11:f4:80: 7e:35:f7:b2:a6:37:ce:81:d6:25:2b:70:18:41:46: 84:36:11:ef:36:66:bf:f3:d8:30:8d:e7:0c:f4:5b: ac:7c:ca:b6:dc:e7:95:05:75:6b:ed:f3:97:b5:5c: fa:e3:f5:93:a8:63:91:ab:2e:78:3d:7d:a3:34:4c: 53:b2:94:fb:9a:d3:19:9d:71:41:4a:78:d1:a8:b2: 99:37:6b:65:d5:3a:6c:91:a6:f9:19:5f:d6:25:07: 36:7d:e4:b5:e2:6a:01:85:10:1e:dc:23:b3:0e:c9: 1f:ae:f9:a8:6b:4f:2e:17:e4:21:ba:74:08:fb:50: 25:db:a4:40:49:ab:1c:31:ed:1c:9f:56:c5:fc:97: 03:95:41:57:f5:af:df:c1:69:fe:83:c5:3a:df:59: af:fa:3f:33:d0:59:a1:15:ff:95:29:23:70:25:7d: ac:6c:7e:5e:9b:f8:57:a6:e8:68:ce:fa:ea:11:2b: 24:9f:1d:c2:4f:3d:f2:55:d9:9f:77:c9:20:32:a1: 73:b2:ca:ba:1d:fc:16:fd:08:30:53:db:9f:89:71: cf:2d:11:ed:d5:7a:58:44:77:e5:87:35:fd:76:54: e8:e7:00:10:0e:16:99:d2:2a:75:0b:c4:6b:7e:d2: 07:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:BF:75:2F:BD:FB:BE:49:A9:F2:A1:0B:F0:99:60:6A:85:62:96:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/06aa229e-21d5-3132-8604-c88f6941821b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl X509v3 Authority Key Identifier: keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer sbgp-ipAddrBlock: critical IPv4: 208.88.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:8a:27:f7:78:98:ff:b9:49:f8:77:35:70:fb:4e:6f:f0:1e: 81:61:d1:a2:0f:42:e2:55:3c:c5:fa:9b:28:7d:14:72:28:ec: 9f:b4:f5:64:5f:69:00:4e:8c:23:da:88:09:4b:5b:dc:fe:47: 74:bd:c1:f0:c6:8d:d9:7f:d1:17:de:4c:f0:b9:d5:5f:21:93: 02:02:7e:32:d0:5a:78:df:30:86:cb:c0:89:88:db:6a:7e:f5: 43:0f:73:51:a4:80:9d:a0:e0:7b:f6:5f:42:49:c3:7b:66:54: 12:ee:69:ba:4f:6a:f9:dd:d8:df:e3:38:3c:b0:2d:91:d3:85: 25:70:b3:9c:1e:6d:d0:f9:11:bf:2c:af:f4:41:b3:12:b7:c1: b1:b5:c4:85:b7:f7:52:b2:46:0f:48:a7:6a:aa:de:19:64:8a: 5d:9d:44:34:1b:df:d1:4e:88:07:83:24:5f:3a:13:08:9e:20: ad:e5:41:e5:4d:47:f8:e8:5f:ed:0b:bd:d6:c7:52:9e:58:14: 4f:60:67:78:9c:0f:78:b3:26:4d:c7:00:33:b2:dc:19:83:99: 1d:a3:fa:c0:51:76:0f:74:d6:a0:02:04:4f:fd:52:e9:4d:f1: 93:f1:80:0e:8a:69:ea:04:c6:8f:51:98:cf:ce:f8:f6:1e:87: 14:94:a3:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRDANDS/YlKduiK0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm Yjg1MB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk NjI5MmFlNjUtN2YxZS00OTEyLWFlYmYtNjM3ZjgwYjQxZmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOntsbE7Vgcn/xsR9IB+NfeypjfOgdYlK3AY QUaENhHvNma/89gwjecM9FusfMq23OeVBXVr7fOXtVz64/WTqGORqy54PX2jNExT spT7mtMZnXFBSnjRqLKZN2tl1Tpskab5GV/WJQc2feS14moBhRAe3COzDskfrvmo a08uF+QhunQI+1Al26RASascMe0cn1bF/JcDlUFX9a/fwWn+g8U631mv+j8z0Fmh Ff+VKSNwJX2sbH5em/hXpuhozvrqESsknx3CTz3yVdmfd8kgMqFzssq6HfwW/Qgw U9ufiXHPLRHt1XpYRHflhzX9dlTo5wAQDhaZ0ip1C8RrftIH5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2/dS+9+75JqfKhC/CZYGqFYpYVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvMDZhYTIyOWUtMjFkNS0z MTMyLTg2MDQtYzg4ZjY5NDE4MjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1 Y2U3ZmZiODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fj2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuKJ/d4mP+5Sfh3NXD7Tm/wHoFh0aIPQuJVPMX6myh9FHIo7J+09WRf aQBOjCPaiAlLW9z+R3S9wfDGjdl/0RfeTPC51V8hkwICfjLQWnjfMIbLwImI22p+ 9UMPc1GkgJ2g4Hv2X0JJw3tmVBLuabpPavnd2N/jODywLZHThSVws5webdD5Eb8s r/RBsxK3wbG1xIW391KyRg9Ip2qq3hlkil2dRDQb39FOiAeDJF86EwieIK3lQeVN R/joX+0LvdbHUp5YFE9gZ3icD3izJk3HADOy3BmDmR2j+sBRdg901qACBE/9UulN 8ZPxgA6KaeoExo9RmM/O+PYehxSUo7I= -----END CERTIFICATE-----Generated at Wed Nov 5 14:44:28 2025 by rpki-client