$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a943a62e-8af4-3728-ac21-db958b531f7a.roa File: a943a62e-8af4-3728-ac21-db958b531f7a.roa (raw, json) Hash identifier: Iz4B6BGamI5A/V0j0dPNYjooh6yFCEXGVt0P9fr16FI= Subject key identifier: 74:50:20:9A:23:44:6B:EE:B3:8B:5B:38:1D:49:B9:2A:D8:56:41:45 Certificate issuer: /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Certificate serial: 010D0C9F4328584B110BFE9286BE1EFE666D49E0 Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a943a62e-8af4-3728-ac21-db958b531f7a.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 46432 IP address blocks: 208.88.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0b:fe:92:86:be:1e:fe:66:6d:49:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85 Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=8fdede37-2fa8-4f0b-8ea3-406a12a7c84e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:36:b2:77:22:f9:1d:3c:87:2b:04:de:54:c9: e1:29:01:dc:ec:4c:3e:49:24:04:af:e6:c0:7a:15: b4:f6:33:be:58:fd:e6:ca:50:6a:01:2a:53:74:ce: b0:71:25:f9:ca:c4:10:ab:40:4a:05:4c:35:c0:ef: cb:bd:e8:66:91:46:a6:07:73:83:b3:ff:4d:14:f1: f0:7a:a8:8d:d6:54:de:da:cb:dd:8c:f8:b3:f9:53: 18:40:a0:d3:58:90:c0:de:5a:63:95:67:f5:8b:cb: 3c:13:c6:a0:3e:c7:6d:2d:de:e7:79:fc:d1:59:17: db:b5:7d:3e:fd:d3:bd:8e:3f:74:32:0c:04:ee:6d: d0:59:42:11:7a:ab:fc:e5:6f:32:f9:7e:97:42:2d: 36:e5:3d:8d:8e:f0:c6:95:ee:24:1c:33:b6:e6:9c: 76:53:96:d8:d8:03:4a:b6:a6:c2:24:00:3d:17:4f: bd:22:19:39:f6:c1:1c:53:09:d7:78:ca:2c:0b:f7: e7:89:ad:c3:40:95:79:2f:09:63:38:88:03:fe:eb: ff:07:00:a6:70:fd:9a:aa:fb:d2:4d:65:e2:62:11: 34:cb:9d:19:69:2f:04:c7:a1:7d:46:f5:34:e8:0c: f8:6b:b6:ea:50:00:b4:be:c4:ba:2c:7b:e2:7a:47: e8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:50:20:9A:23:44:6B:EE:B3:8B:5B:38:1D:49:B9:2A:D8:56:41:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/a943a62e-8af4-3728-ac21-db958b531f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl X509v3 Authority Key Identifier: keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer sbgp-ipAddrBlock: critical IPv4: 208.88.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:12:80:54:1f:85:1f:77:fe:a8:55:cd:66:de:ea:f1:a4:49: ff:13:a1:ec:1c:4e:31:0d:0b:a1:6c:4f:c3:36:59:a7:3e:50: be:ed:52:b4:e8:0e:39:1b:ac:d3:ef:63:5c:04:c1:97:72:05: 53:64:65:9c:39:a7:54:17:ea:54:30:64:91:de:3a:c0:30:8c: 0f:c7:96:83:5e:48:37:d1:1d:77:b2:66:c1:c9:96:0a:d9:5a: 5c:68:2d:30:70:60:6e:92:2d:32:73:2a:71:7f:7c:ed:95:41: 52:09:6f:9f:f1:0c:39:e9:93:c0:af:34:22:26:65:f2:42:28: 13:2b:7e:89:6e:23:e6:b4:49:5f:71:a1:94:aa:26:35:e9:bd: 48:50:ca:11:31:d0:3f:c7:0a:50:a1:e6:3c:28:10:73:a3:63: d7:a3:a7:88:23:b8:e5:a4:d6:ad:d1:18:cc:5d:14:1e:7d:e3: f3:ff:61:62:5c:bb:e8:98:02:a0:af:b2:65:e4:29:8f:9d:4a: 23:d8:1c:91:a0:38:ee:b3:85:c3:b6:b5:8d:38:83:30:2f:6f: f4:a6:0b:1c:34:52:0a:7d:46:f9:52:bc:f6:eb:a8:05:f6:c5: a9:7e:06:dc:d0:f3:10:06:d7:f4:5f:64:a5:d9:86:68:1d:fb: de:cf:0e:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRC/6Shr4e/mZtSeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg5MGYzOTAtNWU1My00ZDA4LWFhNTItMWRlNWNlN2Zm Yjg1MB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk OGZkZWRlMzctMmZhOC00ZjBiLThlYTMtNDA2YTEyYTdjODRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTaydyL5HTyHKwTeVMnhKQHc7Ew+SSQEr+bA ehW09jO+WP3mylBqASpTdM6wcSX5ysQQq0BKBUw1wO/LvehmkUamB3ODs/9NFPHw eqiN1lTe2svdjPiz+VMYQKDTWJDA3lpjlWf1i8s8E8agPsdtLd7nefzRWRfbtX0+ /dO9jj90MgwE7m3QWUIReqv85W8y+X6XQi025T2NjvDGle4kHDO25px2U5bY2ANK tqbCJAA9F0+9Ihk59sEcUwnXeMosC/fnia3DQJV5LwljOIgD/uv/BwCmcP2aqvvS TWXiYhE0y50ZaS8Ex6F9RvU06Az4a7bqUAC0vsS6LHviekfoAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRQIJojRGvus4tbOB1JuSrYVkFFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODkw ZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1Y2U3ZmZiODUvYTk0M2E2MmUtOGFmNC0z NzI4LWFjMjEtZGI5NThiNTMxZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg5MGYzOTAtNWU1My00ZDA4LWFh NTItMWRlNWNlN2ZmYjg1LzI4OTBmMzkwLTVlNTMtNGQwOC1hYTUyLTFkZTVjZTdm ZmI4NS5jcmwwHwYDVR0jBBgwFoAUXnMjmPwrZDKunNds1h9bwHoUOBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODkwZjM5MC01ZTUzLTRkMDgtYWE1Mi0xZGU1 Y2U3ZmZiODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Fj1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4SgFQfhR93/qhVzWbe6vGkSf8ToewcTjENC6FsT8M2Wac+UL7tUrTo DjkbrNPvY1wEwZdyBVNkZZw5p1QX6lQwZJHeOsAwjA/HloNeSDfRHXeyZsHJlgrZ WlxoLTBwYG6SLTJzKnF/fO2VQVIJb5/xDDnpk8CvNCImZfJCKBMrfoluI+a0SV9x oZSqJjXpvUhQyhEx0D/HClCh5jwoEHOjY9ejp4gjuOWk1q3RGMxdFB594/P/YWJc u+iYAqCvsmXkKY+dSiPYHJGgOO6zhcO2tY04gzAvb/SmCxw0Ugp9RvlSvPbrqAX2 xal+BtzQ8xAG1/RfZKXZhmgd+97PDgs= -----END CERTIFICATE-----Generated at Wed Nov 5 07:10:28 2025 by rpki-client