$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/e830da66-f60b-3f6e-b42e-49ec6ba64356.roa File: e830da66-f60b-3f6e-b42e-49ec6ba64356.roa (raw, json) Hash identifier: tApfSAOXtbX6xWdks0oaid5bJl4N7lBo2ULRtdCmXAM= Subject key identifier: A4:CC:43:2D:CE:FC:38:13:55:C3:C4:4D:6E:5F:BB:EE:6D:08:D3:EB Certificate issuer: /CN=db859a2a-df82-4532-a984-71176499699e Certificate serial: 010D0C9F4328584BAD6250C2F72E44302CA9DD00 Authority key identifier: FF:41:AE:1C:A8:12:8D:60:CC:21:3E:5F:ED:61:49:62:AD:36:89:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/e830da66-f60b-3f6e-b42e-49ec6ba64356.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 14618 IP address blocks: 208.83.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/db859a2a-df82-4532-a984-71176499699e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/db859a2a-df82-4532-a984-71176499699e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:50:c2:f7:2e:44:30:2c:a9:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db859a2a-df82-4532-a984-71176499699e Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=d36c4cfe-a768-458b-9027-6ae56c0052d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:14:67:1d:7f:d3:57:60:1a:e1:22:49:3c:80: 85:ec:d5:5d:c6:09:79:b7:58:4f:de:95:38:43:3e: 83:f2:9b:33:80:14:8d:bc:d3:cf:1f:8b:6b:d4:ea: 13:85:7f:80:82:4a:0f:d3:c7:a7:e1:db:82:e5:af: ce:f8:44:d0:66:a8:0f:93:cf:35:1e:21:03:28:ec: c1:92:ff:74:ef:3d:ae:c6:07:76:a3:05:e3:7a:43: dc:48:03:7a:ac:8d:19:9e:d0:5e:6d:34:1e:49:6c: f3:e2:33:0d:66:b0:1f:65:83:46:aa:c2:ac:82:a4: a3:17:ca:00:8a:15:9d:7b:25:f9:d9:2c:0a:15:2d: 63:9e:6c:21:85:9e:52:2f:27:9f:4e:c5:ae:8f:25: 96:f0:f3:96:34:94:71:bb:32:e7:8c:de:a7:6b:03: 3a:49:91:e7:db:ad:5c:82:5e:0c:51:9f:fd:94:7d: c5:d7:8c:e0:54:0c:6c:b6:dc:56:6a:37:d4:00:4e: 1c:b6:03:6b:ba:0f:8f:b1:61:b4:25:b3:86:53:66: b6:15:39:1e:cf:75:2b:c8:d3:92:dd:65:fa:37:11: 11:40:a5:31:88:27:fe:d1:25:a4:a3:4f:dc:43:c8: 5a:e3:b3:3e:45:6c:22:47:cd:c8:86:3f:81:a1:76: 99:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CC:43:2D:CE:FC:38:13:55:C3:C4:4D:6E:5F:BB:EE:6D:08:D3:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/e830da66-f60b-3f6e-b42e-49ec6ba64356.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/db859a2a-df82-4532-a984-71176499699e.crl X509v3 Authority Key Identifier: keyid:FF:41:AE:1C:A8:12:8D:60:CC:21:3E:5F:ED:61:49:62:AD:36:89:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e.cer sbgp-ipAddrBlock: critical IPv4: 208.83.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:7c:c4:a1:d7:8f:03:33:7a:fe:44:35:ee:51:a9:ec:81:e8: 74:cb:35:7d:c2:c6:12:78:47:44:d8:c7:01:2d:3b:de:d7:28: 62:65:28:4d:53:58:a5:73:13:2b:28:a1:96:e1:44:98:fc:9b: 16:ed:a3:e9:65:5f:03:37:c4:de:b6:3a:c6:68:72:de:70:d5: 1a:dd:e6:ee:76:2d:e5:b2:68:c4:96:72:09:07:2a:c4:69:15: 16:92:07:f3:5c:a2:b6:ee:49:d9:5e:4b:3f:49:7d:c8:03:54: dd:2b:74:99:db:9d:c6:65:35:e9:50:ef:77:b4:bf:a5:f5:a5: ae:72:a1:56:44:37:f3:d5:0e:37:6f:99:1f:b0:1f:e0:dd:f8: 2e:68:a3:93:5c:e3:68:5a:e4:e6:92:e8:57:17:2d:4b:79:0f: cf:7a:f8:6a:fe:51:f3:59:e2:e0:e0:af:26:bd:e6:9c:c2:ad: 9e:10:0a:de:9c:c2:27:ff:a3:b1:77:7c:7e:bc:29:d1:86:b5: 0c:64:b7:15:23:7c:8f:cf:3e:9f:aa:99:bb:cd:70:5d:c7:d5: 16:f4:74:f9:73:c9:b4:ab:a2:33:99:c7:b0:5c:fd:70:56:b5: 80:6c:24:43:c3:bf:57:8b:67:59:7b:7b:73:43:9e:e4:9a:a9: 9f:b1:39:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYlDC9y5EMCyp3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI4NTlhMmEtZGY4Mi00NTMyLWE5ODQtNzExNzY0OTk2 OTllMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk ZDM2YzRjZmUtYTc2OC00NThiLTkwMjctNmFlNTZjMDA1MmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghRnHX/TV2Aa4SJJPICF7NVdxgl5t1hP3pU4 Qz6D8pszgBSNvNPPH4tr1OoThX+AgkoP08en4duC5a/O+ETQZqgPk881HiEDKOzB kv907z2uxgd2owXjekPcSAN6rI0ZntBebTQeSWzz4jMNZrAfZYNGqsKsgqSjF8oA ihWdeyX52SwKFS1jnmwhhZ5SLyefTsWujyWW8POWNJRxuzLnjN6nawM6SZHn261c gl4MUZ/9lH3F14zgVAxsttxWajfUAE4ctgNrug+PsWG0JbOGU2a2FTkez3UryNOS 3WX6NxERQKUxiCf+0SWko0/cQ8ha47M+RWwiR83Ihj+BoXaZiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTMQy3O/DgTVcPETW5fu+5tCNPrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kYjg1 OWEyYS1kZjgyLTQ1MzItYTk4NC03MTE3NjQ5OTY5OWUvZTgzMGRhNjYtZjYwYi0z ZjZlLWI0MmUtNDllYzZiYTY0MzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGI4NTlhMmEtZGY4Mi00NTMyLWE5 ODQtNzExNzY0OTk2OTllL2RiODU5YTJhLWRmODItNDUzMi1hOTg0LTcxMTc2NDk5 Njk5ZS5jcmwwHwYDVR0jBBgwFoAU/0GuHKgSjWDMIT5f7WFJYq02iV4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kYjg1OWEyYS1kZjgyLTQ1MzItYTk4NC03MTE3 NjQ5OTY5OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FMPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIx8xKHXjwMzev5ENe5RqeyB6HTLNX3CxhJ4R0TYxwEtO97XKGJlKE1T WKVzEysooZbhRJj8mxbto+llXwM3xN62OsZoct5w1Rrd5u52LeWyaMSWcgkHKsRp FRaSB/NcorbuSdleSz9JfcgDVN0rdJnbncZlNelQ73e0v6X1pa5yoVZEN/PVDjdv mR+wH+Dd+C5oo5Nc42ha5OaS6FcXLUt5D896+Gr+UfNZ4uDgrya95pzCrZ4QCt6c wif/o7F3fH68KdGGtQxktxUjfI/PPp+qmbvNcF3H1Rb0dPlzybSrojOZx7Bc/XBW tYBsJEPDv1eLZ1l7e3NDnuSaqZ+xOf4= -----END CERTIFICATE-----Generated at Wed Nov 5 05:41:15 2025 by rpki-client