$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/4a7e1dbd-4704-342b-b741-56b0c8e759a8.roa File: 4a7e1dbd-4704-342b-b741-56b0c8e759a8.roa (raw, json) Hash identifier: bg3189z/EYzL5D7RJ3SUjWsFldBj38tRULcD1wuB7hs= Subject key identifier: EC:36:02:22:F3:F8:C8:51:69:A1:B0:D1:A2:07:3B:AF:F9:0A:8A:B8 Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Certificate serial: 010D0C9F4328584B9CA2335E5220EC94FD155A00 Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/4a7e1dbd-4704-342b-b741-56b0c8e759a8.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 16437 IP address blocks: 208.88.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:33:5e:52:20:ec:94:fd:15:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=c44f4f9e-e61b-4e9f-966e-58df283c6552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:62:82:7c:3a:9f:16:ca:c6:91:89:8c:2c:2a: e9:25:6d:0a:3e:0f:bd:c6:ca:9b:aa:f7:87:e7:32: 7c:f1:00:df:8c:d8:5e:01:03:3d:80:60:d3:60:c0: 41:3d:84:78:e8:24:97:72:4a:1f:b6:02:d7:e4:f2: 41:c6:e6:53:a3:bf:4c:5d:61:a5:6e:92:15:a9:37: 33:ec:ab:c3:f8:1c:e4:33:a5:c7:5f:dd:40:cb:a1: e8:1f:c7:be:f1:5c:b8:73:f6:ff:fc:9e:0b:98:71: 77:97:8a:d7:4b:98:98:7c:30:65:26:ab:e2:2e:76: da:02:53:50:c3:b4:52:3e:4d:11:2b:73:8b:8b:ac: 6b:48:68:61:25:65:cd:ab:f4:af:95:e7:3e:aa:75: b2:15:9c:ea:65:5a:28:1b:22:d5:99:2b:12:ca:ef: ee:6b:86:61:00:5e:dd:42:a1:81:d6:70:be:9a:77: b1:99:70:5b:46:e4:5b:dc:0b:4c:f0:26:4f:27:64: 12:7f:6e:5c:8f:6a:33:4a:af:e9:92:6a:59:fd:0d: a3:84:19:00:17:01:41:4a:14:8d:ea:65:c3:a6:04: d7:50:31:b0:64:06:b4:25:12:c2:28:d6:d2:46:0d: d5:9c:1e:90:c8:90:8c:47:f3:47:07:68:b3:0e:ae: 43:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:36:02:22:F3:F8:C8:51:69:A1:B0:D1:A2:07:3B:AF:F9:0A:8A:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/4a7e1dbd-4704-342b-b741-56b0c8e759a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl X509v3 Authority Key Identifier: keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer sbgp-ipAddrBlock: critical IPv4: 208.88.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:35:d6:de:b1:b8:6b:0c:90:c3:5e:4c:08:0e:6c:23:31:a5: c2:9f:8c:9c:93:cc:88:d7:5a:3e:7c:50:6d:ea:f3:51:89:49: cf:48:14:37:97:83:5e:93:0f:48:ab:35:fc:22:b4:58:5a:33: 34:c5:aa:58:d0:a7:e9:20:33:f3:c9:a9:cb:9c:26:b9:68:e4: ba:ff:86:58:c6:e1:45:c2:7e:40:e9:06:86:6a:0a:7f:74:91: ea:8f:c5:c8:31:03:e5:6a:a3:13:ed:ee:9e:34:a8:5d:4b:5f: ea:59:0a:a2:a4:70:8b:b5:38:35:49:3c:bb:a7:7f:13:38:92: c1:40:65:56:5c:93:53:03:8c:70:09:af:01:82:d8:c3:0e:42: c7:64:98:0a:45:e9:8d:31:88:e7:71:3b:5a:98:38:ec:7a:8f: 1f:05:53:3d:0e:2a:54:00:b5:be:d8:3a:ca:ce:c0:c6:b1:6f: 1b:f0:d0:b3:fc:01:1d:b8:64:15:eb:7f:f2:0d:5f:62:e2:fe: 20:f9:fb:d2:4f:d3:4d:91:d3:e2:fc:75:36:68:74:76:e4:34: a6:c6:a8:b0:08:29:89:6c:c9:9f:f1:ac:4a:20:ea:c2:fd:3d: 42:31:a7:0d:17:d4:5a:a5:95:c0:38:b9:88:b6:88:84:d7:bb: 3b:07:d3:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEucojNeUiDslP0VWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm Yjg1MB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk YzQ0ZjRmOWUtZTYxYi00ZTlmLTk2NmUtNThkZjI4M2M2NTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2KCfDqfFsrGkYmMLCrpJW0KPg+9xsqbqveH 5zJ88QDfjNheAQM9gGDTYMBBPYR46CSXckoftgLX5PJBxuZTo79MXWGlbpIVqTcz 7KvD+BzkM6XHX91Ay6HoH8e+8Vy4c/b//J4LmHF3l4rXS5iYfDBlJqviLnbaAlNQ w7RSPk0RK3OLi6xrSGhhJWXNq/Svlec+qnWyFZzqZVooGyLVmSsSyu/ua4ZhAF7d QqGB1nC+mnexmXBbRuRb3AtM8CZPJ2QSf25cj2ozSq/pkmpZ/Q2jhBkAFwFBShSN 6mXDpgTXUDGwZAa0JRLCKNbSRg3VnB6QyJCMR/NHB2izDq5DRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOw2AiLz+MhRaaGw0aIHO6/5Coq4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvNGE3ZTFkYmQtNDcwNC0z NDJiLWI3NDEtNTZiMGM4ZTc1OWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1 Y2U3ZmZiODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fj0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACM11t6xuGsMkMNeTAgObCMxpcKfjJyTzIjXWj58UG3q81GJSc9IFDeX g16TD0irNfwitFhaMzTFqljQp+kgM/PJqcucJrlo5Lr/hljG4UXCfkDpBoZqCn90 keqPxcgxA+VqoxPt7p40qF1LX+pZCqKkcIu1ODVJPLunfxM4ksFAZVZck1MDjHAJ rwGC2MMOQsdkmApF6Y0xiOdxO1qYOOx6jx8FUz0OKlQAtb7YOsrOwMaxbxvw0LP8 AR24ZBXrf/INX2Li/iD5+9JP002R0+L8dTZodHbkNKbGqLAIKYlsyZ/xrEog6sL9 PUIxpw0X1FqllcA4uYi2iITXuzsH09s= -----END CERTIFICATE-----Generated at Wed Nov 5 08:31:21 2025 by rpki-client