$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/19ef7954-6449-382b-9f58-1bc212e37279.roa File: 19ef7954-6449-382b-9f58-1bc212e37279.roa (raw, json) Hash identifier: 9RIuUIO+iiAlyFzSmLRZTG686SdUbPGw0OnUBtNvSlk= Subject key identifier: 79:96:00:05:00:77:A8:51:F2:43:3E:97:D3:5B:88:C1:93:27:14:D1 Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Certificate serial: 010D0C9F4328584B8BE213F36BBDBE506A2CAD00 Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/19ef7954-6449-382b-9f58-1bc212e37279.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 22147 IP address blocks: 208.118.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:13:f3:6b:bd:be:50:6a:2c:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=a3a48f54-17c5-4e98-a8b8-2bf81d44aa32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e6:78:88:65:1a:3e:61:94:b8:71:28:4e:66: 0e:a8:4f:50:cd:b5:0b:d8:c4:94:9a:02:e2:30:fe: ac:14:9e:6e:8c:14:3a:8f:11:06:17:9c:3b:40:ec: 61:56:7b:66:71:28:a2:2d:b8:07:b8:7c:a0:a0:ea: 2e:e1:0f:e6:8c:1c:3e:e5:a6:88:78:dc:d7:62:a6: b7:5d:d7:e4:12:6b:2b:18:61:55:10:b0:c1:f1:72: d7:29:90:82:80:91:40:10:1d:68:c1:3f:df:46:3d: 34:b1:58:53:30:cb:1e:79:37:1d:83:df:16:44:58: c4:3f:83:b3:ee:f2:01:1e:c4:f8:95:b7:a4:04:bc: 6a:10:50:ee:ee:79:4a:91:c4:7e:e4:3e:12:2e:a9: 61:32:80:79:e6:e4:05:37:06:b3:8a:a1:ad:3f:95: 6b:10:12:45:5d:a0:e0:4a:c4:7c:c9:23:e6:da:e5: a2:41:91:49:b1:83:3b:e7:ae:3a:d5:30:75:a6:d4: e3:15:d7:35:c7:1e:d0:2f:97:3d:ab:eb:f9:55:e4: 12:9f:cb:10:0f:28:ea:40:98:70:70:2d:7e:b7:d8: c5:62:b3:f3:d1:81:16:48:2a:53:91:2f:2d:ac:2e: 1c:4f:b9:0e:52:39:f1:b0:47:c9:4e:cd:52:1a:c4: 87:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:96:00:05:00:77:A8:51:F2:43:3E:97:D3:5B:88:C1:93:27:14:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/19ef7954-6449-382b-9f58-1bc212e37279.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl X509v3 Authority Key Identifier: keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer sbgp-ipAddrBlock: critical IPv4: 208.118.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:c0:85:01:38:00:9a:ee:54:78:66:7d:4c:f2:2d:ff:78:88: 17:40:f5:94:7a:38:e3:9b:f9:0a:81:9c:19:df:84:f4:4d:98: 03:a6:e2:41:70:09:71:3a:2c:e1:f7:27:67:93:a3:a6:09:a1: 51:cf:a4:60:77:af:a8:10:09:3c:93:46:e8:e8:42:4c:c2:a8: 6b:5a:4f:cb:d5:34:14:63:37:a6:e1:96:6e:4b:1c:50:cc:07: f9:e5:b1:c0:2c:c6:d3:ec:80:99:4e:38:2a:f5:27:3c:0a:01: c6:6a:56:03:0d:88:19:fb:f2:4b:f4:34:80:aa:57:77:e5:c8: b7:82:b6:13:1a:a4:e7:f6:d6:17:d3:96:ce:26:c2:05:9c:79: 08:9e:29:25:ad:95:ca:97:46:90:bb:c8:ce:28:f4:cf:0a:70: bb:e2:f8:59:58:2c:af:4e:a7:8a:2e:0b:98:f5:20:34:4a:cd: f9:3c:e7:b6:9d:8f:20:dd:ad:46:e7:e9:dd:64:fa:32:36:75: 5c:b4:d3:eb:fc:a9:3d:61:9a:ca:dc:47:20:3d:93:4f:2a:8f: 0f:5c:ca:a6:06:91:ac:dd:5f:db:4d:2e:4b:e0:32:60:47:a5: ed:c2:30:ae:1f:d0:51:5b:7e:13:ed:c2:54:55:0a:1b:69:f0: 4f:6b:71:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4hPza72+UGosrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5 MWRkMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk YTNhNDhmNTQtMTdjNS00ZTk4LWE4YjgtMmJmODFkNDRhYTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeZ4iGUaPmGUuHEoTmYOqE9QzbUL2MSUmgLi MP6sFJ5ujBQ6jxEGF5w7QOxhVntmcSiiLbgHuHygoOou4Q/mjBw+5aaIeNzXYqa3 XdfkEmsrGGFVELDB8XLXKZCCgJFAEB1owT/fRj00sVhTMMseeTcdg98WRFjEP4Oz 7vIBHsT4lbekBLxqEFDu7nlKkcR+5D4SLqlhMoB55uQFNwaziqGtP5VrEBJFXaDg SsR8ySPm2uWiQZFJsYM756461TB1ptTjFdc1xx7QL5c9q+v5VeQSn8sQDyjqQJhw cC1+t9jFYrPz0YEWSCpTkS8trC4cT7kOUjnxsEfJTs1SGsSHpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmWAAUAd6hR8kM+l9NbiMGTJxTRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2 MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvMTllZjc5NTQtNjQ0OS0z ODJiLTlmNTgtMWJjMjEyZTM3Mjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1 NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl ZGQ4MTkxZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HbvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7AhQE4AJruVHhmfUzyLf94iBdA9ZR6OOOb+QqBnBnfhPRNmAOm4kFw CXE6LOH3J2eTo6YJoVHPpGB3r6gQCTyTRujoQkzCqGtaT8vVNBRjN6bhlm5LHFDM B/nlscAsxtPsgJlOOCr1JzwKAcZqVgMNiBn78kv0NICqV3flyLeCthMapOf21hfT ls4mwgWceQieKSWtlcqXRpC7yM4o9M8KcLvi+FlYLK9Op4ouC5j1IDRKzfk857ad jyDdrUbn6d1k+jI2dVy00+v8qT1hmsrcRyA9k08qjw9cyqYGkazdX9tNLkvgMmBH pe3CMK4f0FFbfhPtwlRVChtp8E9rcc0= -----END CERTIFICATE-----Generated at Wed Nov 5 10:57:38 2025 by rpki-client