$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/4a8b2c09-7e35-3de4-b10d-4b3ca01febec.roa File: 4a8b2c09-7e35-3de4-b10d-4b3ca01febec.roa (raw, json) Hash identifier: J1SCuct5qmGat8OeP83cdcWTHIjp63GI5VYUsf8C2rg= Subject key identifier: 2B:97:79:CB:38:56:6A:10:E0:9A:B3:82:20:9B:3B:D0:4D:88:91:20 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584B8EACE7A12FA4E017C0DDB100 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/4a8b2c09-7e35-3de4-b10d-4b3ca01febec.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 7018 IP address blocks: 208.52.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:e7:a1:2f:a4:e0:17:c0:dd:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=4d951638-58ee-4212-9e05-c74f0fdf6186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:24:1a:f7:ad:65:03:54:df:ff:f8:4a:2a:35: 2e:93:62:05:25:73:2b:5c:29:9f:bf:e3:fb:d6:ef: f7:e0:58:98:d5:ce:91:32:ef:b4:35:38:c0:58:ab: e5:c5:94:aa:2b:8e:96:12:8d:d9:9c:5a:4b:55:b0: 9e:2d:91:6d:75:17:e9:34:f5:7d:6f:43:8c:6e:52: 72:9f:53:92:57:c2:ad:42:cf:fc:7e:ba:e5:fb:e0: a6:cc:9a:1c:6d:50:98:02:c9:e7:44:6d:b8:19:94: b0:e0:51:6c:5e:25:29:57:00:1c:9c:7f:d6:1f:e1: 53:b0:e8:a6:62:24:61:e1:5c:74:0d:3f:15:08:cb: 82:f5:a7:b5:73:65:6a:c8:0a:c6:ca:3f:03:f8:65: 29:15:64:da:79:13:bf:34:2b:49:6a:17:5a:99:65: 24:2d:08:4b:8c:54:99:2f:c1:fd:06:40:83:f7:ae: 20:ba:13:ed:c2:43:db:45:f2:82:90:55:66:a3:fe: fa:a1:23:5b:ac:1b:dc:f4:cd:db:dc:d7:d7:ab:c0: c8:61:5d:bc:3b:2f:92:f3:5c:b9:af:d5:f5:32:b8: 5f:1a:1b:43:8d:ec:82:a9:de:28:d7:1f:2a:ad:bf: 63:ab:dc:42:00:fd:37:26:93:c1:8a:e6:0d:e5:27: de:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:97:79:CB:38:56:6A:10:E0:9A:B3:82:20:9B:3B:D0:4D:88:91:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/4a8b2c09-7e35-3de4-b10d-4b3ca01febec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 208.52.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:4a:e4:a0:7f:ce:d6:6b:19:ec:1c:6d:9c:d8:7d:49:9a:6a: 70:9c:43:cf:85:c2:9d:30:b6:b1:56:bd:d3:88:c8:3e:d8:c3: 31:92:1f:44:56:a8:d4:2b:26:25:9e:7f:80:d2:aa:69:8f:ff: 5c:fd:4d:b8:d4:49:c2:32:97:05:e1:33:32:1f:c6:70:03:14: e0:6e:9a:c0:5e:cd:dc:c2:db:0c:16:08:96:3e:3c:16:ee:d8: 2e:38:d2:6f:1c:9a:7a:1a:a1:28:7d:40:03:b5:50:5d:97:07: f2:8d:d0:28:6f:d1:97:0c:0e:1e:81:ca:5c:82:0b:2f:48:92: 87:e9:54:f6:d2:81:13:4d:25:20:ca:02:93:40:4e:12:46:e2: 03:13:53:7e:e0:19:41:32:bd:ae:6e:1c:03:f5:25:22:c6:6f: f2:41:f8:52:5c:33:50:e2:a9:40:df:97:1c:a3:1b:c7:98:d6: 5d:d7:23:38:92:f1:27:72:9d:0e:26:02:9c:27:17:58:60:1a: 67:e3:91:97:ad:34:7b:0b:71:5d:39:df:f2:7a:34:85:92:1e: 66:9f:2f:a6:4c:85:d1:75:3c:ea:68:37:60:a6:42:88:dc:da: b7:48:3f:73:45:3f:ea:b3:5e:a7:9d:36:24:78:2f:ff:91:5f: 52:f6:36:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrOehL6TgF8DdsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk NGQ5NTE2MzgtNThlZS00MjEyLTllMDUtYzc0ZjBmZGY2MTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCQa961lA1Tf//hKKjUuk2IFJXMrXCmfv+P7 1u/34FiY1c6RMu+0NTjAWKvlxZSqK46WEo3ZnFpLVbCeLZFtdRfpNPV9b0OMblJy n1OSV8KtQs/8frrl++CmzJocbVCYAsnnRG24GZSw4FFsXiUpVwAcnH/WH+FTsOim YiRh4Vx0DT8VCMuC9ae1c2VqyArGyj8D+GUpFWTaeRO/NCtJahdamWUkLQhLjFSZ L8H9BkCD964guhPtwkPbRfKCkFVmo/76oSNbrBvc9M3b3NfXq8DIYV28Oy+S81y5 r9X1MrhfGhtDjeyCqd4o1x8qrb9jq9xCAP03JpPBiuYN5Sfe3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuXecs4VmoQ4JqzgiCbO9BNiJEgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvNGE4YjJjMDktN2UzNS0z ZGU0LWIxMGQtNGIzY2EwMWZlYmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DSBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVK5KB/ztZrGewcbZzYfUmaanCcQ8+Fwp0wtrFWvdOIyD7YwzGSH0RW qNQrJiWef4DSqmmP/1z9TbjUScIylwXhMzIfxnADFOBumsBezdzC2wwWCJY+PBbu 2C440m8cmnoaoSh9QAO1UF2XB/KN0Chv0ZcMDh6BylyCCy9IkofpVPbSgRNNJSDK ApNAThJG4gMTU37gGUEyva5uHAP1JSLGb/JB+FJcM1DiqUDflxyjG8eY1l3XIziS 8SdynQ4mApwnF1hgGmfjkZetNHsLcV053/J6NIWSHmafL6ZMhdF1POpoN2CmQojc 2rdIP3NFP+qzXqedNiR4L/+RX1L2Nno= -----END CERTIFICATE-----Generated at Mon Oct 20 03:37:25 2025 by rpki-client