$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/2dbef95c-c607-3c9a-a265-4a14cc6c3fe5.roa File: 2dbef95c-c607-3c9a-a265-4a14cc6c3fe5.roa (raw, json) Hash identifier: fE6WqiMETUqGWQmwNJAuVtn7VlNO8Uip6CKHyUR22WU= Subject key identifier: 99:0C:DB:BC:0D:38:88:E0:00:2F:E0:C9:A6:BE:46:6E:6C:54:E0:50 Certificate issuer: /CN=b02b2a27-63d2-435f-8114-d98e289edc6c Certificate serial: 010D0C9F4328584B9E0795A44AD844BB09927580 Authority key identifier: 68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/2dbef95c-c607-3c9a-a265-4a14cc6c3fe5.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 208.71.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:95:a4:4a:d8:44:bb:09:92:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02b2a27-63d2-435f-8114-d98e289edc6c Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=4bb3c105-0c46-4803-a2db-9717189765b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:de:a3:48:86:1a:69:d6:52:70:c2:a1:c6:b3: 34:3d:60:9a:ab:31:70:44:a9:21:96:be:c4:7c:bf: b6:1c:cc:d8:15:07:22:3c:60:4d:1e:f9:99:0f:83: fb:ca:66:b3:1c:6f:4a:f1:4d:4f:04:fe:8f:54:a5: cb:9b:bb:87:8a:1e:72:f2:f2:cf:6d:1b:a3:66:87: 0b:62:63:b2:06:63:ec:0a:60:38:91:5f:35:5a:d9: f1:00:ff:79:bb:7f:78:5c:bf:11:c3:a5:91:e2:e8: 38:e2:b6:cb:ed:37:41:87:60:c4:35:ce:98:f5:be: 43:e1:e5:7a:44:bc:91:6b:10:1e:15:6a:b5:8d:56: ff:b4:d7:a9:48:38:c1:af:4c:2d:7c:64:73:a1:7b: 33:a6:20:a3:d6:d1:2c:5d:75:e4:1b:a0:a2:8b:f2: 68:42:9e:5c:9c:46:6f:5a:dc:c7:d9:07:1e:da:6d: b1:b0:8f:0e:d0:0b:63:9e:13:e8:dc:37:da:8c:2e: 3b:9f:14:2a:49:ec:cb:f1:a2:ab:dc:d4:6f:e7:2d: 1f:21:6c:c7:5f:ed:c9:ae:06:9b:49:08:99:72:70: 6b:74:36:b1:a3:7a:54:4f:36:e7:fc:8d:48:a6:1c: 6e:90:f6:c1:8d:96:e6:44:1f:99:39:a0:47:46:d5: 84:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:0C:DB:BC:0D:38:88:E0:00:2F:E0:C9:A6:BE:46:6E:6C:54:E0:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/2dbef95c-c607-3c9a-a265-4a14cc6c3fe5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl X509v3 Authority Key Identifier: keyid:68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer sbgp-ipAddrBlock: critical IPv4: 208.71.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:b1:b0:c1:8b:2a:0b:e7:78:e4:a2:cb:32:31:7a:ef:5c:1d: 4a:b9:06:f6:8a:25:18:eb:56:5f:58:0a:67:33:45:96:4f:76: 3a:30:f4:74:9a:11:18:80:ac:2c:48:ed:89:0b:32:be:af:ef: 6b:10:78:06:6d:48:a5:2d:60:15:dc:c4:bf:99:db:87:26:db: 87:f9:28:7c:e7:8d:01:b2:51:12:73:42:a2:73:8f:87:49:78: cf:7e:6f:4c:07:20:0f:55:3b:fd:ca:39:97:41:bb:a5:54:d4: 75:8c:9c:84:48:3a:5a:10:0e:72:72:64:59:2c:d7:b3:63:26: 4e:68:37:62:af:c2:52:7d:9f:48:51:82:d4:2a:42:f3:19:1c: 59:a5:62:cd:71:fb:5b:c1:04:31:ba:f0:5a:6e:aa:bd:da:14: fa:75:ae:1d:46:fd:7c:97:f2:24:8b:ba:75:51:28:75:99:84: 5d:5d:83:3b:9e:d5:6e:09:a0:67:59:10:54:b1:75:f4:44:39: aa:1f:ff:e5:a2:0a:99:74:94:da:37:c6:d2:21:70:b9:cb:fb: ae:13:4a:23:02:15:24:9a:67:a9:c1:35:12:85:27:5f:04:cc: 95:13:25:27:c2:ec:c9:28:5e:8b:e6:6f:70:72:70:71:a3:bc: 1d:95:81:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB5WkSthEuwmSdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyYjJhMjctNjNkMi00MzVmLTgxMTQtZDk4ZTI4OWVk YzZjMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk NGJiM2MxMDUtMGM0Ni00ODAzLWEyZGItOTcxNzE4OTc2NWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA196jSIYaadZScMKhxrM0PWCaqzFwRKkhlr7E fL+2HMzYFQciPGBNHvmZD4P7ymazHG9K8U1PBP6PVKXLm7uHih5y8vLPbRujZocL YmOyBmPsCmA4kV81WtnxAP95u394XL8Rw6WR4ug44rbL7TdBh2DENc6Y9b5D4eV6 RLyRaxAeFWq1jVb/tNepSDjBr0wtfGRzoXszpiCj1tEsXXXkG6Cii/JoQp5cnEZv WtzH2Qce2m2xsI8O0AtjnhPo3DfajC47nxQqSezL8aKr3NRv5y0fIWzHX+3Jrgab SQiZcnBrdDaxo3pUTzbn/I1IphxukPbBjZbmRB+ZOaBHRtWEFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkM27wNOIjgAC/gyaa+Rm5sVOBQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMDJi MmEyNy02M2QyLTQzNWYtODExNC1kOThlMjg5ZWRjNmMvMmRiZWY5NWMtYzYwNy0z YzlhLWEyNjUtNGExNGNjNmMzZmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjAyYjJhMjctNjNkMi00MzVmLTgx MTQtZDk4ZTI4OWVkYzZjL2IwMmIyYTI3LTYzZDItNDM1Zi04MTE0LWQ5OGUyODll ZGM2Yy5jcmwwHwYDVR0jBBgwFoAUaP0QqXb6CaxECs/rlUyyMr81kckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMDJiMmEyNy02M2QyLTQzNWYtODExNC1kOThl Mjg5ZWRjNmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOxsMGLKgvneOSiyzIxeu9cHUq5BvaKJRjrVl9YCmczRZZPdjow9HSa ERiArCxI7YkLMr6v72sQeAZtSKUtYBXcxL+Z24cm24f5KHznjQGyURJzQqJzj4dJ eM9+b0wHIA9VO/3KOZdBu6VU1HWMnIRIOloQDnJyZFks17NjJk5oN2KvwlJ9n0hR gtQqQvMZHFmlYs1x+1vBBDG68Fpuqr3aFPp1rh1G/XyX8iSLunVRKHWZhF1dgzue 1W4JoGdZEFSxdfREOaof/+WiCpl0lNo3xtIhcLnL+64TSiMCFSSaZ6nBNRKFJ18E zJUTJSfC7MkoXovmb3BycHGjvB2VgU4= -----END CERTIFICATE-----Generated at Wed Nov 5 05:40:27 2025 by rpki-client