$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/de98df6b-6564-3a5b-810b-1d3750e05855.roa File: de98df6b-6564-3a5b-810b-1d3750e05855.roa (raw, json) Hash identifier: TQ0TNdl35rSx80GY6Mfc+GPMp/EImO/NU7zDfrYLLpQ= Subject key identifier: 65:19:FC:09:4C:78:D3:FC:8B:D7:E9:8F:9A:BC:2C:52:C1:0D:39:F2 Certificate issuer: /CN=c6830b98-b6ce-461c-8849-244186a13d62 Certificate serial: 010D0C9F4328584AECC13F54895513E35146E4C0 Authority key identifier: F2:9F:00:B6:E4:BF:76:05:6A:00:05:2E:85:74:E4:F9:EE:9B:69:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/de98df6b-6564-3a5b-810b-1d3750e05855.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 7018 IP address blocks: 208.73.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/c6830b98-b6ce-461c-8849-244186a13d62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/c6830b98-b6ce-461c-8849-244186a13d62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:3f:54:89:55:13:e3:51:46:e4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6830b98-b6ce-461c-8849-244186a13d62 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=e27ee02d-fd89-427a-bbda-8ee290824cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7c:d8:b9:f1:d3:70:6f:bf:b0:ee:c7:f1:90: 7b:93:62:e8:21:b2:64:e1:64:5f:bb:b9:68:32:eb: 3e:95:45:66:2c:d9:a5:d8:18:2b:53:24:35:75:57: d1:7f:dd:63:8a:41:51:80:0c:23:69:7f:06:70:d8: e0:3f:f9:9d:b9:c8:3c:bd:33:ed:23:d6:c4:8e:ec: d9:98:c1:2d:e2:a9:f5:52:3a:f5:ed:2d:28:42:d8: 5f:81:cd:80:37:92:e7:99:9c:eb:1c:00:48:bc:c2: 8d:08:dc:65:fe:78:e9:42:a5:20:83:8e:d8:57:0e: 55:68:c9:2a:10:c9:4a:6b:c9:11:d3:fb:0c:e0:d7: 33:f2:af:0b:fb:49:58:c7:ec:e6:b6:7d:55:92:78: 12:0f:12:68:eb:88:66:c7:6f:cf:f1:f1:c1:b6:0b: e5:99:77:57:f1:83:3f:4d:92:b6:89:7a:fe:34:a6: 54:c5:fe:15:97:77:30:6a:8b:39:b8:58:20:6e:63: e9:80:4b:ba:31:6c:0f:0e:34:f8:1d:2f:70:6e:f0: 71:93:eb:58:26:19:b9:f7:69:db:1d:e3:d8:8f:cc: 73:89:ae:6e:cc:a7:8f:bc:29:a5:63:0c:1a:a0:35: 73:40:6f:d0:85:dd:49:08:77:fb:da:c4:79:57:65: 31:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:19:FC:09:4C:78:D3:FC:8B:D7:E9:8F:9A:BC:2C:52:C1:0D:39:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/de98df6b-6564-3a5b-810b-1d3750e05855.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/c6830b98-b6ce-461c-8849-244186a13d62.crl X509v3 Authority Key Identifier: keyid:F2:9F:00:B6:E4:BF:76:05:6A:00:05:2E:85:74:E4:F9:EE:9B:69:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62.cer sbgp-ipAddrBlock: critical IPv4: 208.73.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:60:e3:a6:f9:75:c3:84:06:94:84:61:68:2e:9f:cd:6b:e7: 46:6a:a9:5f:de:42:cd:55:0e:3b:f5:65:c9:c4:26:58:73:89: 89:56:a4:9f:78:e5:04:53:61:fc:61:29:0b:4e:1d:30:94:63: fb:b6:32:ac:54:0c:e3:6a:87:84:26:65:40:31:b7:95:25:f8: 22:19:83:c5:01:43:ef:7b:b0:1a:0c:f1:99:a5:79:cf:ca:b8: d1:0f:97:3f:dc:70:25:65:da:55:df:f0:bf:a2:35:88:57:05: 0f:31:96:9f:6f:e6:ac:11:84:9f:b9:a2:ed:60:f1:48:02:ba: 1b:2a:7f:4e:c5:92:a4:a8:a5:3b:48:c3:0c:23:66:19:5f:ac: 73:7a:32:f1:74:c5:a5:50:f6:f8:35:d3:0d:cd:d9:5b:dc:1f: 8b:fe:08:ad:cb:20:aa:e4:b4:9d:2a:c8:b4:f9:f1:62:4c:39: 60:0f:7f:b1:a6:52:dc:c7:4b:7f:af:e4:c6:b0:3d:b4:77:d0: d3:3e:61:ae:1e:de:b8:93:7b:b2:65:11:d3:d8:8a:f2:d8:da: 54:e9:5e:cd:ad:59:42:1e:08:55:4c:73:30:b7:e6:09:c1:ad: ab:40:13:40:92:ad:cc:b6:b5:c5:34:84:fc:26:0a:ed:28:19: 8a:fb:20:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswT9UiVUT41FG5MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY4MzBiOTgtYjZjZS00NjFjLTg4NDktMjQ0MTg2YTEz ZDYyMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk ZTI3ZWUwMmQtZmQ4OS00MjdhLWJiZGEtOGVlMjkwODI0Y2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHzYufHTcG+/sO7H8ZB7k2LoIbJk4WRfu7lo Mus+lUVmLNml2BgrUyQ1dVfRf91jikFRgAwjaX8GcNjgP/mducg8vTPtI9bEjuzZ mMEt4qn1Ujr17S0oQthfgc2AN5LnmZzrHABIvMKNCNxl/njpQqUgg47YVw5VaMkq EMlKa8kR0/sM4Ncz8q8L+0lYx+zmtn1VkngSDxJo64hmx2/P8fHBtgvlmXdX8YM/ TZK2iXr+NKZUxf4Vl3cwaos5uFggbmPpgEu6MWwPDjT4HS9wbvBxk+tYJhm592nb HePYj8xzia5uzKePvCmlYwwaoDVzQG/Qhd1JCHf72sR5V2UxmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUZ/AlMeNP8i9fpj5q8LFLBDTnyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jNjgz MGI5OC1iNmNlLTQ2MWMtODg0OS0yNDQxODZhMTNkNjIvZGU5OGRmNmItNjU2NC0z YTViLTgxMGItMWQzNzUwZTA1ODU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzY4MzBiOTgtYjZjZS00NjFjLTg4 NDktMjQ0MTg2YTEzZDYyL2M2ODMwYjk4LWI2Y2UtNDYxYy04ODQ5LTI0NDE4NmEx M2Q2Mi5jcmwwHwYDVR0jBBgwFoAU8p8AtuS/dgVqAAUuhXTk+e6bacwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jNjgzMGI5OC1iNmNlLTQ2MWMtODg0OS0yNDQx ODZhMTNkNjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKxg46b5dcOEBpSEYWgun81r50ZqqV/eQs1VDjv1ZcnEJlhziYlWpJ94 5QRTYfxhKQtOHTCUY/u2MqxUDONqh4QmZUAxt5Ul+CIZg8UBQ+97sBoM8Zmlec/K uNEPlz/ccCVl2lXf8L+iNYhXBQ8xlp9v5qwRhJ+5ou1g8UgCuhsqf07FkqSopTtI wwwjZhlfrHN6MvF0xaVQ9vg10w3N2VvcH4v+CK3LIKrktJ0qyLT58WJMOWAPf7Gm UtzHS3+v5MawPbR30NM+Ya4e3riTe7JlEdPYivLY2lTpXs2tWUIeCFVMczC35gnB ratAE0CSrcy2tcU0hPwmCu0oGYr7IMc= -----END CERTIFICATE-----Generated at Wed Nov 5 09:02:40 2025 by rpki-client