$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/ae3e7880-cb87-3d85-8e01-d1ee8a570604.roa File: ae3e7880-cb87-3d85-8e01-d1ee8a570604.roa (raw, json) Hash identifier: 0NASh0zxMqHynSpNH71LiMjB9Lb1eL+HYRiQXHEa1KY= Subject key identifier: 33:9A:1C:97:23:F4:97:32:FE:AB:AC:67:6B:5C:FD:19:5E:10:0C:0A Certificate issuer: /CN=487abf98-3073-43c6-b10e-a615e64ccc65 Certificate serial: 010D0C9F4328584B98A96AB099123FD782D6DB70 Authority key identifier: 50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/ae3e7880-cb87-3d85-8e01-d1ee8a570604.roa Signing time: Tue 21 Oct 2025 14:51:55 +0000 ROA not before: Tue 21 Oct 2025 14:51:55 +0000 ROA not after: Mon 19 Jan 2026 15:51:55 +0000 asID: 16509 IP address blocks: 208.89.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:a9:6a:b0:99:12:3f:d7:82:d6:db:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=487abf98-3073-43c6-b10e-a615e64ccc65 Validity Not Before: Oct 21 14:51:55 2025 GMT Not After : Jan 19 15:51:55 2026 GMT Subject: CN=57b940b3-85cd-4136-b6e2-c0eaa541dc5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:53:79:f4:45:54:ff:65:62:75:a8:95:b0:62: dd:f9:76:52:dc:c7:80:f0:df:01:90:58:69:40:34: cf:6e:a5:05:0b:9b:26:2d:02:01:b8:97:0d:90:f6: 87:62:13:57:13:6e:32:ee:ab:fa:67:1c:ce:cf:03: 35:5b:75:64:ce:6a:3a:fa:27:22:7c:18:3e:50:d8: 14:2a:c8:cf:7c:5b:41:62:a0:ff:64:0f:9f:b9:e1: f3:87:c7:9e:dc:b4:3b:93:a6:1d:35:6c:6f:c3:f9: 95:06:87:63:83:e3:a3:b3:57:6d:97:21:32:94:25: 6b:92:bd:95:f4:90:27:44:c0:e6:c7:b7:e1:b8:0d: 44:b3:63:44:22:b3:66:ae:e1:e3:73:20:f8:99:1f: 8d:6d:cb:b4:53:97:ee:f1:bb:ea:14:05:72:5a:e5: d2:0d:56:53:5c:51:4d:12:a7:03:4c:fc:2e:29:ec: e1:62:8c:1e:c7:3f:75:b2:93:1d:5b:70:0e:78:b0: c7:8a:48:fc:1d:17:32:59:31:ec:21:a7:81:e1:a8: b2:16:b9:1f:b2:08:91:b8:ef:d6:a3:27:fb:c9:84: 37:c4:9f:e2:5c:de:ce:0d:7c:3d:8e:33:94:42:28: 9f:05:72:1e:2d:a5:51:bc:a2:b0:7f:f2:c6:47:ce: cc:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9A:1C:97:23:F4:97:32:FE:AB:AC:67:6B:5C:FD:19:5E:10:0C:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/ae3e7880-cb87-3d85-8e01-d1ee8a570604.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl X509v3 Authority Key Identifier: keyid:50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer sbgp-ipAddrBlock: critical IPv4: 208.89.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:03:d0:62:0c:5c:3f:5e:6d:11:ff:98:1a:b2:2b:31:78:e2: c2:46:39:10:34:92:2e:01:30:62:db:4d:76:15:48:00:65:f2: 29:e2:56:dc:65:9d:3b:f4:1e:ee:e9:0a:01:3b:3b:b9:81:00: 3b:35:16:ab:4e:c2:b2:47:7c:00:ba:ba:8f:81:e0:1a:a8:d1: 48:ff:f7:08:ad:8c:5d:8d:61:6b:9a:91:cf:c0:e0:c8:71:e2: 2e:73:45:16:fe:79:04:5d:21:9b:f7:e6:dd:e9:96:e6:41:20: 38:36:7f:6f:59:02:22:f2:c9:4f:a6:3c:84:a2:19:7b:46:47: 88:d4:2d:b1:d9:a1:86:27:65:99:c4:84:13:ec:4f:10:52:54: c6:2a:fa:8f:0d:dc:c4:0f:00:79:90:f4:37:5d:66:5e:d5:1b: 7a:fd:e9:7c:3a:c1:65:5c:7b:55:79:cc:6d:7c:5f:a7:a0:e2: 15:b1:5b:05:2e:36:5b:a4:e7:93:d8:4f:37:91:24:4b:33:76: a6:ee:44:9d:6d:00:28:7d:98:7a:ae:d8:31:bf:76:4c:d4:33: ba:49:bb:da:63:f6:96:12:c8:f4:2e:be:d0:c5:6d:79:25:24: 6c:68:14:d4:a4:f6:6e:12:39:d2:97:b2:03:31:28:bb:7b:cf: 92:2c:02:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYqWqwmRI/14LW23AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg3YWJmOTgtMzA3My00M2M2LWIxMGUtYTYxNWU2NGNj YzY1MB4XDTI1MTAyMTE0NTE1NVoXDTI2MDExOTE1NTE1NVowLzEtMCsGA1UEAxMk NTdiOTQwYjMtODVjZC00MTM2LWI2ZTItYzBlYWE1NDFkYzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFN59EVU/2VidaiVsGLd+XZS3MeA8N8BkFhp QDTPbqUFC5smLQIBuJcNkPaHYhNXE24y7qv6ZxzOzwM1W3Vkzmo6+icifBg+UNgU KsjPfFtBYqD/ZA+fueHzh8ee3LQ7k6YdNWxvw/mVBodjg+Ojs1dtlyEylCVrkr2V 9JAnRMDmx7fhuA1Es2NEIrNmruHjcyD4mR+Nbcu0U5fu8bvqFAVyWuXSDVZTXFFN EqcDTPwuKezhYowexz91spMdW3AOeLDHikj8HRcyWTHsIaeB4aiyFrkfsgiRuO/W oyf7yYQ3xJ/iXN7ODXw9jjOUQiifBXIeLaVRvKKwf/LGR87MhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOaHJcj9Jcy/qusZ2tc/RleEAwKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdh YmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1ZTY0Y2NjNjUvYWUzZTc4ODAtY2I4Ny0z ZDg1LThlMDEtZDFlZThhNTcwNjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDg3YWJmOTgtMzA3My00M2M2LWIx MGUtYTYxNWU2NGNjYzY1LzQ4N2FiZjk4LTMwNzMtNDNjNi1iMTBlLWE2MTVlNjRj Y2M2NS5jcmwwHwYDVR0jBBgwFoAUUHrkAjzYg+et9qTUFubnFT8KBQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdhYmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1 ZTY0Y2NjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAD0GIMXD9ebRH/mBqyKzF44sJGORA0ki4BMGLbTXYVSABl8iniVtxl nTv0Hu7pCgE7O7mBADs1FqtOwrJHfAC6uo+B4Bqo0Uj/9witjF2NYWuakc/A4Mhx 4i5zRRb+eQRdIZv35t3pluZBIDg2f29ZAiLyyU+mPISiGXtGR4jULbHZoYYnZZnE hBPsTxBSVMYq+o8N3MQPAHmQ9DddZl7VG3r96Xw6wWVce1V5zG18X6eg4hWxWwUu Nluk55PYTzeRJEszdqbuRJ1tACh9mHqu2DG/dkzUM7pJu9pj9pYSyPQuvtDFbXkl JGxoFNSk9m4SOdKXsgMxKLt7z5IsAg0= -----END CERTIFICATE-----Generated at Wed Nov 5 09:29:02 2025 by rpki-client