$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/d8ce3f7b-9507-3637-9ed2-0792cb53930c.roa File: d8ce3f7b-9507-3637-9ed2-0792cb53930c.roa (raw, json) Hash identifier: 6DydVtG8NCo2W+/az+Q9EVv8L2S40xTj59VVmPkf5YA= Subject key identifier: B3:0C:4F:08:FE:C9:02:6D:F6:83:89:24:A4:54:C3:82:B0:13:74:54 Certificate issuer: /CN=487abf98-3073-43c6-b10e-a615e64ccc65 Certificate serial: 010D0C9F4328584B98A9C7D82D997DBD914129C0 Authority key identifier: 50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/d8ce3f7b-9507-3637-9ed2-0792cb53930c.roa Signing time: Tue 21 Oct 2025 14:52:39 +0000 ROA not before: Tue 21 Oct 2025 14:52:39 +0000 ROA not after: Mon 19 Jan 2026 15:52:39 +0000 asID: 14618 IP address blocks: 208.89.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:a9:c7:d8:2d:99:7d:bd:91:41:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=487abf98-3073-43c6-b10e-a615e64ccc65 Validity Not Before: Oct 21 14:52:39 2025 GMT Not After : Jan 19 15:52:39 2026 GMT Subject: CN=8cb3e549-f4b4-4ad3-9bea-b5e1ca738fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:af:f4:e6:d0:8d:8e:c6:15:2a:8d:99:8e:e5: 6d:a9:c6:52:82:6a:64:bf:f5:57:56:8e:69:67:1e: a6:fb:1f:47:6d:49:7f:ae:9c:db:89:0a:52:5c:be: d8:e3:2e:c5:63:db:63:92:fe:22:97:b2:42:59:df: fa:80:ad:c0:42:59:1a:46:66:a9:29:75:72:81:b0: 42:f6:69:fb:e2:7b:8a:a4:3b:b4:b8:ca:16:f6:ce: ef:9a:a9:13:df:4d:a3:64:8c:66:67:7a:cc:5d:0d: a2:87:13:80:23:7b:87:ef:4c:fe:ba:c5:74:f5:59: bf:e6:e4:5a:85:55:36:d9:77:04:3c:f8:8e:69:e9: 8d:08:f7:84:1a:41:ae:06:49:53:41:a9:92:28:06: c7:c6:ec:e6:72:02:68:14:17:f6:6c:a2:60:69:ac: 23:52:63:8f:ab:3f:e9:9b:87:8d:6c:b7:dd:1b:08: 75:1f:75:3a:cb:de:f5:93:96:01:be:2c:eb:68:bd: 9a:5c:cc:70:41:70:21:8c:90:f3:f8:71:a5:b9:f8: e3:3f:06:0a:60:94:33:51:6e:57:11:22:70:4b:67: 82:56:0b:1f:e6:85:71:83:c8:bf:93:b1:3b:7e:e0: 57:ad:9c:5f:a4:63:c7:55:b9:34:a9:89:6e:05:09: 6f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:0C:4F:08:FE:C9:02:6D:F6:83:89:24:A4:54:C3:82:B0:13:74:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/d8ce3f7b-9507-3637-9ed2-0792cb53930c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl X509v3 Authority Key Identifier: keyid:50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer sbgp-ipAddrBlock: critical IPv4: 208.89.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:3a:48:6f:04:a0:32:40:6c:bd:de:5a:33:1d:9d:78:7b:b2: c8:25:8a:85:e3:f1:c2:f1:74:08:c4:54:82:f2:7e:aa:70:42: e2:bc:69:b9:40:81:30:4d:a7:c6:95:31:e5:67:f2:d8:4c:8b: d1:a7:37:4f:2f:74:22:e4:a7:de:ce:c0:5c:59:db:be:1b:e8: 03:c5:9e:ec:a2:3e:f0:3f:dd:df:a6:f5:65:16:b2:ed:2a:f0: b2:77:60:ef:80:7b:2d:90:88:d7:e1:5e:d7:2c:ac:b5:7d:4b: 09:58:1a:44:70:f8:70:1a:7c:5f:52:2a:12:8e:7f:0e:86:e3: fc:81:56:2c:92:73:ee:f1:9e:f9:0d:3a:a1:f2:04:b5:f7:e7: 3e:31:4d:c1:80:9f:43:f4:b2:c0:bb:a6:69:7d:68:af:46:63: 4f:b9:6b:52:70:6f:7c:58:46:ab:b8:81:af:06:bd:cd:cd:51: 27:f3:ea:f1:a7:b7:c7:23:f0:e8:a9:fa:74:b3:5b:aa:17:9e: bd:cf:01:35:36:b8:43:b3:5e:e2:97:b7:5e:74:7f:16:1f:eb: c7:5b:4c:d5:b6:2d:14:79:72:28:e1:e8:63:0a:f7:d7:c3:4b: 3a:d3:05:cb:12:ec:70:4a:e8:1f:5f:c0:e1:fc:1f:bc:77:db: 66:46:9e:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYqcfYLZl9vZFBKcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg3YWJmOTgtMzA3My00M2M2LWIxMGUtYTYxNWU2NGNj YzY1MB4XDTI1MTAyMTE0NTIzOVoXDTI2MDExOTE1NTIzOVowLzEtMCsGA1UEAxMk OGNiM2U1NDktZjRiNC00YWQzLTliZWEtYjVlMWNhNzM4ZmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK/05tCNjsYVKo2ZjuVtqcZSgmpkv/VXVo5p Zx6m+x9HbUl/rpzbiQpSXL7Y4y7FY9tjkv4il7JCWd/6gK3AQlkaRmapKXVygbBC 9mn74nuKpDu0uMoW9s7vmqkT302jZIxmZ3rMXQ2ihxOAI3uH70z+usV09Vm/5uRa hVU22XcEPPiOaemNCPeEGkGuBklTQamSKAbHxuzmcgJoFBf2bKJgaawjUmOPqz/p m4eNbLfdGwh1H3U6y971k5YBvizraL2aXMxwQXAhjJDz+HGlufjjPwYKYJQzUW5X ESJwS2eCVgsf5oVxg8i/k7E7fuBXrZxfpGPHVbk0qYluBQlvXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMMTwj+yQJt9oOJJKRUw4KwE3RUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdh YmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1ZTY0Y2NjNjUvZDhjZTNmN2ItOTUwNy0z NjM3LTllZDItMDc5MmNiNTM5MzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDg3YWJmOTgtMzA3My00M2M2LWIx MGUtYTYxNWU2NGNjYzY1LzQ4N2FiZjk4LTMwNzMtNDNjNi1iMTBlLWE2MTVlNjRj Y2M2NS5jcmwwHwYDVR0jBBgwFoAUUHrkAjzYg+et9qTUFubnFT8KBQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdhYmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1 ZTY0Y2NjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIo6SG8EoDJAbL3eWjMdnXh7ssglioXj8cLxdAjEVILyfqpwQuK8ablA gTBNp8aVMeVn8thMi9GnN08vdCLkp97OwFxZ274b6APFnuyiPvA/3d+m9WUWsu0q 8LJ3YO+Aey2QiNfhXtcsrLV9SwlYGkRw+HAafF9SKhKOfw6G4/yBViySc+7xnvkN OqHyBLX35z4xTcGAn0P0ssC7pml9aK9GY0+5a1Jwb3xYRqu4ga8Gvc3NUSfz6vGn t8cj8Oip+nSzW6oXnr3PATU2uEOzXuKXt150fxYf68dbTNW2LRR5cijh6GMK99fD SzrTBcsS7HBK6B9fwOH8H7x322ZGnhg= -----END CERTIFICATE-----Generated at Wed Nov 5 10:32:39 2025 by rpki-client