$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/e7bb061f-6d3f-3bde-bee4-44c0fee4a277.roa File: e7bb061f-6d3f-3bde-bee4-44c0fee4a277.roa (raw, json) Hash identifier: DdcZqSLOd3Ida4CxDbW0+ZMmhM08qeCU0xIpyEPgnC4= Subject key identifier: 25:3C:86:C4:24:33:32:7B:06:A4:BB:59:F7:0B:2D:77:92:FC:15:BD Certificate issuer: /CN=032085af-3c11-4e53-8db4-4604b4f13aa1 Certificate serial: 010D0C9F4328584B21CC2D699685AABADF296180 Authority key identifier: AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/e7bb061f-6d3f-3bde-bee4-44c0fee4a277.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 398471 IP address blocks: 204.108.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:2d:69:96:85:aa:ba:df:29:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032085af-3c11-4e53-8db4-4604b4f13aa1 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=ca987170-9664-49ef-a272-87c443e2ee9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:72:ac:72:de:48:51:c5:a5:b0:6d:e6:e3:45: 5c:eb:98:6d:7f:b9:e4:72:55:09:c6:28:a7:2a:02: fb:a6:11:2b:cf:0a:5e:74:1e:da:c3:a1:73:89:87: ea:b9:78:9c:2c:70:14:3a:1a:bd:9c:09:bf:4c:1f: 69:53:f1:89:19:46:c2:97:86:eb:36:c2:e7:1c:fa: 77:bd:e1:25:fc:44:8d:b0:08:a3:30:9a:56:63:35: 0a:98:72:93:6c:6c:d4:03:97:2d:81:97:8e:6f:53: 46:ab:52:5e:86:48:31:31:3d:68:14:a6:fb:33:48: dc:a4:e8:b9:1b:9c:10:85:d7:1d:d8:ce:ff:58:a6: 67:60:ca:9f:b7:9a:a4:de:90:18:a2:9b:cf:ad:64: 9b:74:8f:82:59:24:37:1e:13:9e:cd:23:30:9b:0b: eb:24:03:d2:08:95:fb:cb:7e:70:93:ee:18:71:94: 81:9d:f8:87:55:7e:a5:d6:5a:7b:9e:9b:93:a2:d5: bc:ce:0e:d9:85:b1:d0:52:d3:95:7f:32:82:49:0e: 4b:81:78:80:69:5f:81:05:9a:a2:38:cb:6d:d6:31: 86:cc:06:87:74:1e:a6:02:13:dd:2f:13:c9:5d:74: 9a:2a:ea:91:c4:df:4f:6f:9c:5d:99:09:be:8f:b8: 4c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:3C:86:C4:24:33:32:7B:06:A4:BB:59:F7:0B:2D:77:92:FC:15:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/e7bb061f-6d3f-3bde-bee4-44c0fee4a277.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl X509v3 Authority Key Identifier: keyid:AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer sbgp-ipAddrBlock: critical IPv4: 204.108.186.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:64:a3:18:8b:a5:66:84:b5:32:ff:c7:5f:ab:1b:f4:86:01: f6:7b:88:69:22:46:a1:6a:28:69:ed:22:e9:a8:68:90:cb:9c: c7:bf:fd:a0:89:af:dc:5f:69:27:4d:ad:83:03:3b:e2:11:79: e6:1c:52:74:70:34:8b:3f:78:99:a3:07:b1:5a:fc:af:6a:f7: 3f:57:98:1e:74:a4:4a:d9:54:31:1b:14:79:76:6a:2b:24:a4: 7a:98:5d:9b:93:d7:d0:d5:d7:6e:dc:4b:0a:f8:de:bd:6f:11: 61:44:b7:96:6c:1a:00:ee:ca:81:1c:52:b1:24:d3:60:82:29: 6c:e6:21:5a:40:fb:19:a3:4d:d9:6e:56:23:cd:f1:b8:e6:32: 37:78:f1:4f:0d:60:81:41:f1:40:37:c0:bc:33:28:bd:e4:c7: 86:2a:a3:2c:b2:0f:f1:32:37:d7:48:cf:01:82:8f:08:78:0a: 66:d8:9a:0a:53:74:5b:3d:41:c0:8e:b1:58:8d:c5:9d:e9:75: bb:d6:8c:fd:0c:85:aa:c8:e6:55:3f:7a:35:a2:63:60:0d:b6: 99:be:30:30:9a:a3:a4:49:4a:f1:06:4d:3f:10:85:8e:7a:cc: 37:c2:4d:2c:ed:60:b8:42:5c:13:5f:c1:2b:f5:7e:3c:56:59: 8a:fc:0e:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzC1ploWqut8pYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDMyMDg1YWYtM2MxMS00ZTUzLThkYjQtNDYwNGI0ZjEz YWExMB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk Y2E5ODcxNzAtOTY2NC00OWVmLWEyNzItODdjNDQzZTJlZTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHKsct5IUcWlsG3m40Vc65htf7nkclUJxiin KgL7phErzwpedB7aw6FziYfquXicLHAUOhq9nAm/TB9pU/GJGUbCl4brNsLnHPp3 veEl/ESNsAijMJpWYzUKmHKTbGzUA5ctgZeOb1NGq1JehkgxMT1oFKb7M0jcpOi5 G5wQhdcd2M7/WKZnYMqft5qk3pAYopvPrWSbdI+CWSQ3HhOezSMwmwvrJAPSCJX7 y35wk+4YcZSBnfiHVX6l1lp7npuTotW8zg7ZhbHQUtOVfzKCSQ5LgXiAaV+BBZqi OMtt1jGGzAaHdB6mAhPdLxPJXXSaKuqRxN9Pb5xdmQm+j7hMMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCU8hsQkMzJ7BqS7WfcLLXeS/BW9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wMzIw ODVhZi0zYzExLTRlNTMtOGRiNC00NjA0YjRmMTNhYTEvZTdiYjA2MWYtNmQzZi0z YmRlLWJlZTQtNDRjMGZlZTRhMjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDMyMDg1YWYtM2MxMS00ZTUzLThk YjQtNDYwNGI0ZjEzYWExLzAzMjA4NWFmLTNjMTEtNGU1My04ZGI0LTQ2MDRiNGYx M2FhMS5jcmwwHwYDVR0jBBgwFoAUq4NOju9jcwdU7TdH6JtfuoYMDFYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wMzIwODVhZi0zYzExLTRlNTMtOGRiNC00NjA0 YjRmMTNhYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzGy6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtkoxiLpWaEtTL/x1+rG/SGAfZ7iGkiRqFqKGntIumoaJDLnMe//aCJ r9xfaSdNrYMDO+IReeYcUnRwNIs/eJmjB7Fa/K9q9z9XmB50pErZVDEbFHl2aisk pHqYXZuT19DV127cSwr43r1vEWFEt5ZsGgDuyoEcUrEk02CCKWzmIVpA+xmjTdlu ViPN8bjmMjd48U8NYIFB8UA3wLwzKL3kx4YqoyyyD/EyN9dIzwGCjwh4CmbYmgpT dFs9QcCOsViNxZ3pdbvWjP0MharI5lU/ejWiY2ANtpm+MDCao6RJSvEGTT8QhY56 zDfCTSztYLhCXBNfwSv1fjxWWYr8Dv0= -----END CERTIFICATE-----Generated at Wed Nov 5 11:05:31 2025 by rpki-client