$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/fe7a2ac0-2823-3a8b-a2c0-d830dd1928a8.roa File: fe7a2ac0-2823-3a8b-a2c0-d830dd1928a8.roa (raw, json) Hash identifier: t2qcMGbyjDRrkPU79DOGez7XaZl7cArrHSrcGOKhA9o= Subject key identifier: 87:D7:38:49:FC:81:65:2A:F6:FC:D4:36:28:04:57:E3:3B:9F:6A:BF Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7 Certificate serial: 010D0C9F4328584B64CE128EAA9B452E939A4640 Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/fe7a2ac0-2823-3a8b-a2c0-d830dd1928a8.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 36040 IP address blocks: 208.117.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:12:8e:aa:9b:45:2e:93:9a:46:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=c10324ce-2dcc-4966-aa22-30dac488f02b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:68:da:a3:b6:bd:a4:0d:a1:30:43:16:90:1d: 39:57:d4:bf:c2:18:5d:4d:40:9e:d6:de:70:0a:27: 55:61:ca:91:c0:e6:69:d2:ea:d0:24:44:37:aa:44: ca:db:d5:01:a4:92:ef:55:36:c0:19:c6:ab:29:6b: f8:a4:ff:66:d0:2f:fd:04:8f:d8:22:ad:12:87:4e: 3d:a6:d9:19:40:6d:20:b7:58:9b:3c:59:25:50:8e: 0c:ff:a9:65:7a:69:10:35:bf:ad:c3:06:ab:fb:cc: d1:b4:78:1e:5a:19:38:18:29:b3:67:5c:ff:9d:de: b7:d9:79:66:79:05:cd:02:af:dd:21:30:0d:10:52: 49:c0:f9:87:f2:77:56:7c:9e:ca:04:16:28:58:1f: 8b:0e:ab:1d:2a:1a:75:15:62:92:56:27:a5:70:d8: 4c:59:b2:26:81:f4:b5:7a:ab:57:e3:5e:52:bc:0d: 8f:fa:19:29:9f:43:7a:46:06:14:e4:35:ee:02:19: 91:ca:0c:9e:4c:88:da:14:f4:5d:98:79:b5:44:0f: 1f:19:35:b2:e2:df:df:a6:01:33:2a:8f:59:78:48: 0f:95:f0:3a:51:4c:d5:38:3a:ab:2d:98:1a:9c:f4: 0c:46:7b:39:2b:c5:db:d0:dc:fe:65:4e:61:76:17: 44:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D7:38:49:FC:81:65:2A:F6:FC:D4:36:28:04:57:E3:3B:9F:6A:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/fe7a2ac0-2823-3a8b-a2c0-d830dd1928a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl X509v3 Authority Key Identifier: keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer sbgp-ipAddrBlock: critical IPv4: 208.117.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:bf:aa:98:f3:b1:8d:86:26:dc:6f:61:78:29:ca:55:06:e0: 35:d8:c1:a9:59:92:1d:9c:d5:32:2c:8a:88:b3:66:66:1c:6f: 80:5f:ad:1f:3a:b5:6a:11:5b:59:d5:51:08:f3:80:d6:8a:e4: 3f:15:0f:d8:96:70:fd:46:b5:94:91:38:dd:74:3d:29:25:1a: 8c:3d:6d:61:8a:d3:3b:a8:be:c9:e4:05:d9:d0:11:65:48:bb: 69:3a:58:07:0d:44:4b:5e:a1:de:07:b0:aa:13:9d:cc:5c:dc: b2:6a:40:9a:b3:b4:18:91:05:13:79:36:51:38:f2:90:9e:03: 70:5e:88:19:68:80:71:25:53:af:72:6c:3e:c6:17:b6:cd:6a: 50:77:e7:34:80:d0:fd:09:1e:c2:9c:fa:2b:c4:4b:ef:00:3a: 7e:9b:43:c7:72:a7:b0:4d:c8:52:19:c0:20:b8:6f:ad:a4:b3: 49:1b:54:81:eb:33:dd:9d:10:8c:d7:fa:12:78:17:5b:5d:0f: d7:2c:b0:d0:66:21:ab:fb:ba:e9:57:76:da:b9:28:e1:e2:bf: 34:fc:52:5d:ad:84:7d:d3:cb:2a:6b:dd:f2:63:b6:7b:23:59: 4b:25:4f:1a:24:04:04:49:72:5a:36:94:1b:ab:78:09:48:6d: be:77:d5:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzhKOqptFLpOaRkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3 MmI3MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YzEwMzI0Y2UtMmRjYy00OTY2LWFhMjItMzBkYWM0ODhmMDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmjao7a9pA2hMEMWkB05V9S/whhdTUCe1t5w CidVYcqRwOZp0urQJEQ3qkTK29UBpJLvVTbAGcarKWv4pP9m0C/9BI/YIq0Sh049 ptkZQG0gt1ibPFklUI4M/6llemkQNb+twwar+8zRtHgeWhk4GCmzZ1z/nd632Xlm eQXNAq/dITANEFJJwPmH8ndWfJ7KBBYoWB+LDqsdKhp1FWKSVielcNhMWbImgfS1 eqtX415SvA2P+hkpn0N6RgYU5DXuAhmRygyeTIjaFPRdmHm1RA8fGTWy4t/fpgEz Ko9ZeEgPlfA6UUzVODqrLZganPQMRns5K8Xb0Nz+ZU5hdhdE4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfXOEn8gWUq9vzUNigEV+M7n2q/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvZmU3YTJhYzAtMjgyMy0z YThiLWEyYzAtZDgzMGRkMTkyOGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0 NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2 ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0HX4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADO/qpjzsY2GJtxvYXgpylUG4DXYwalZkh2c1TIsioizZmYcb4BfrR86 tWoRW1nVUQjzgNaK5D8VD9iWcP1GtZSRON10PSklGow9bWGK0zuovsnkBdnQEWVI u2k6WAcNREteod4HsKoTncxc3LJqQJqztBiRBRN5NlE48pCeA3BeiBlogHElU69y bD7GF7bNalB35zSA0P0JHsKc+ivES+8AOn6bQ8dyp7BNyFIZwCC4b62ks0kbVIHr M92dEIzX+hJ4F1tdD9cssNBmIav7uulXdtq5KOHivzT8Ul2thH3Tyypr3fJjtnsj WUslTxokBARJclo2lBureAlIbb531R8= -----END CERTIFICATE-----Generated at Wed Nov 5 16:59:44 2025 by rpki-client