$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/90a9dec8-a24a-3de0-9901-58e74af63e3e.roa File: 90a9dec8-a24a-3de0-9901-58e74af63e3e.roa (raw, json) Hash identifier: yjCCyq9lIM5EPgD/ppNPKf+UtCcFXKl3SDSTLl5PgGM= Subject key identifier: DB:D1:B7:AC:CE:A3:2A:54:A1:F7:CE:87:66:05:E6:C9:42:E7:2D:43 Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Certificate serial: 010D0C9F4328584AAB2658B6BDE4D86B4CEFAC80 Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/90a9dec8-a24a-3de0-9901-58e74af63e3e.roa Signing time: Mon 28 Jul 2025 13:01:04 +0000 ROA not before: Mon 28 Jul 2025 13:01:04 +0000 ROA not after: Sun 26 Oct 2025 13:01:04 +0000 asID: 22147 IP address blocks: 208.118.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:26:58:b6:bd:e4:d8:6b:4c:ef:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Validity Not Before: Jul 28 13:01:04 2025 GMT Not After : Oct 26 13:01:04 2025 GMT Subject: CN=4b201eef-b798-4c32-9107-5df668717b9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2f:3f:9d:5a:86:c7:4c:08:e9:39:9b:26:7d: 5d:56:8b:f1:43:02:98:54:ae:4a:ea:47:50:22:bd: ff:77:a2:5f:2a:c1:70:a6:9a:05:80:1f:ed:a0:55: bc:62:44:7f:42:25:de:b6:cc:1e:f2:8d:d3:50:9b: ee:eb:62:46:8d:b7:4d:82:79:08:f9:5f:cb:31:0b: ad:fb:02:33:fe:2d:fe:8a:ec:02:b6:4b:bc:5a:37: 75:39:5b:4b:93:d3:97:46:b8:41:b9:24:7b:bb:9a: c5:6b:f3:cb:e4:a8:85:75:df:e3:f5:4e:b0:3a:0c: d6:fd:5b:89:ed:17:90:1e:61:2d:e9:af:f5:4b:fc: 4d:a3:8b:d7:59:30:ba:eb:24:4b:2a:8d:6e:75:20: b8:55:40:1c:8f:2b:32:89:2f:11:8f:4a:8f:e9:66: 3a:31:7e:96:ca:5d:23:8a:6e:53:ac:3c:a7:0a:42: 31:0e:b1:61:a5:92:2d:73:f9:1c:3c:21:5c:13:f0: 32:c9:4a:5a:83:ae:58:8f:c5:82:0d:57:c6:1f:1b: 1e:b9:ed:cd:f6:4c:ab:47:b2:86:6b:45:34:0a:06: 51:03:ed:93:1a:0b:8f:b9:08:11:20:e9:29:20:34: 0b:3b:1f:71:0d:66:47:cb:cc:9e:2f:2e:ae:f7:c1: 7e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D1:B7:AC:CE:A3:2A:54:A1:F7:CE:87:66:05:E6:C9:42:E7:2D:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/90a9dec8-a24a-3de0-9901-58e74af63e3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl X509v3 Authority Key Identifier: keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer sbgp-ipAddrBlock: critical IPv4: 208.118.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:9d:e7:d0:a5:0e:e7:89:ed:63:62:ee:05:6f:80:22:6b:f3: 2b:1b:9d:e7:f6:87:1e:ef:fe:0f:71:b2:66:a7:21:c4:2c:76: 13:54:c6:c8:70:59:4f:6d:9e:4b:3c:55:66:2f:7a:6c:bb:7c: 4f:5b:1c:62:d2:2b:e0:2b:aa:de:02:5f:64:17:51:63:f4:5f: 6b:df:a1:bb:d7:82:ab:47:a4:7a:1c:57:a5:a9:27:cb:25:df: 79:16:79:14:27:11:82:b4:01:a8:8d:a6:e9:87:05:a7:ab:81: dd:f6:b5:4f:39:c7:c0:3d:90:ce:7c:15:17:e4:7e:a0:53:91: 3d:3e:17:d2:f4:aa:06:28:34:ac:a5:ae:a7:e8:81:5a:4b:d5: eb:01:0b:20:30:bd:89:9a:19:6e:5b:1e:57:2b:19:35:05:49: 2f:03:4e:da:08:f1:62:5a:8f:93:78:59:4e:65:15:18:13:64: 00:98:c5:f4:c7:1b:bc:3a:9e:78:5d:e4:9b:66:78:14:f7:2a: 41:34:70:5e:29:67:a5:bc:f3:2d:b8:8f:fa:c4:80:6b:ab:f0: 01:4f:38:c1:fb:61:b1:1e:8a:4d:af:c4:86:5b:f7:7e:af:f6: 1d:12:15:9a:f9:e2:99:7f:3b:64:4d:db:d2:85:27:b0:81:77: 36:fe:6b:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJli2veTYa0zvrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5 MWRkMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk NGIyMDFlZWYtYjc5OC00YzMyLTkxMDctNWRmNjY4NzE3YjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji8/nVqGx0wI6TmbJn1dVovxQwKYVK5K6kdQ Ir3/d6JfKsFwppoFgB/toFW8YkR/QiXetswe8o3TUJvu62JGjbdNgnkI+V/LMQut +wIz/i3+iuwCtku8Wjd1OVtLk9OXRrhBuSR7u5rFa/PL5KiFdd/j9U6wOgzW/VuJ 7ReQHmEt6a/1S/xNo4vXWTC66yRLKo1udSC4VUAcjysyiS8Rj0qP6WY6MX6Wyl0j im5TrDynCkIxDrFhpZItc/kcPCFcE/AyyUpag65Yj8WCDVfGHxseue3N9kyrR7KG a0U0CgZRA+2TGguPuQgRIOkpIDQLOx9xDWZHy8yeLy6u98F+bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvRt6zOoypUoffOh2YF5slC5y1DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2 MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvOTBhOWRlYzgtYTI0YS0z ZGUwLTk5MDEtNThlNzRhZjYzZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1 NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl ZGQ4MTkxZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HbuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2d59ClDueJ7WNi7gVvgCJr8ysbnef2hx7v/g9xsmanIcQsdhNUxshw WU9tnks8VWYvemy7fE9bHGLSK+Arqt4CX2QXUWP0X2vfobvXgqtHpHocV6WpJ8sl 33kWeRQnEYK0AaiNpumHBaergd32tU85x8A9kM58FRfkfqBTkT0+F9L0qgYoNKyl rqfogVpL1esBCyAwvYmaGW5bHlcrGTUFSS8DTtoI8WJaj5N4WU5lFRgTZACYxfTH G7w6nnhd5JtmeBT3KkE0cF4pZ6W88y24j/rEgGur8AFPOMH7YbEeik2vxIZb936v 9h0SFZr54pl/O2RN29KFJ7CBdzb+a00= -----END CERTIFICATE-----Generated at Mon Aug 4 18:59:48 2025 by rpki-client