$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ecc0e04b-6c0e-3ab4-a892-7f0285e1aeae.roa File: ecc0e04b-6c0e-3ab4-a892-7f0285e1aeae.roa (raw, json) Hash identifier: QTlOWd11tar1heGQSRen8TOQalHYHNUKbYphfmfPUyw= Subject key identifier: A2:D0:56:BC:37:AF:AA:F3:97:41:F8:68:BE:90:F1:66:91:FF:21:34 Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7 Certificate serial: 010D0C9F4328584B64CE114B07A1B10D07039F80 Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ecc0e04b-6c0e-3ab4-a892-7f0285e1aeae.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 36040 IP address blocks: 208.117.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:11:4b:07:a1:b1:0d:07:03:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=756469a2-60b7-42f5-9136-2eccc2a9edf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5a:d9:e8:1a:d7:72:39:61:75:20:ee:ab:d1: 93:b6:30:fd:4f:1a:58:1a:eb:6f:de:f5:53:f5:6d: a4:5f:ab:86:c3:00:b1:c2:0a:3d:51:d6:7a:9d:a2: eb:fb:44:9c:65:fb:2b:d3:5c:c4:38:fe:95:b3:15: ef:ae:e8:e1:a6:0f:8c:aa:59:82:ab:ff:47:ba:65: 1d:ab:9e:62:97:92:22:fe:cf:0d:60:89:de:6d:eb: 79:89:2b:91:43:8c:7a:2b:b3:aa:da:bf:0a:41:92: 29:ba:c4:fe:a9:48:68:f9:40:88:96:70:4d:01:8b: 23:35:29:7d:75:fa:fa:09:45:ca:25:57:f4:10:41: a2:61:b9:0f:0b:27:0c:39:e9:43:e2:16:eb:d3:73: dd:52:a9:ba:07:db:ef:23:5f:a2:c5:2d:35:87:cc: f6:72:28:cb:13:e3:e1:6f:18:c2:c2:45:dd:99:77: 96:23:81:47:2c:68:30:41:d4:f8:4d:6e:ca:f2:03: a1:6c:81:86:ce:de:ef:26:a3:1e:aa:72:e6:79:68: 71:ed:14:a1:4a:56:b4:c2:cf:4f:f2:63:84:fb:0c: d5:54:b9:e8:23:9b:f6:b8:6f:ab:48:43:5c:20:15: b4:86:c0:b7:25:05:e1:05:64:10:e4:6e:5d:a8:80: b3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D0:56:BC:37:AF:AA:F3:97:41:F8:68:BE:90:F1:66:91:FF:21:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/ecc0e04b-6c0e-3ab4-a892-7f0285e1aeae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl X509v3 Authority Key Identifier: keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer sbgp-ipAddrBlock: critical IPv4: 208.117.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:a8:4f:a3:e0:65:ca:99:eb:55:b9:05:db:d3:8d:82:99:79: 84:3e:b6:52:be:1e:40:c3:7d:44:30:17:33:59:99:7f:15:58: a5:cb:1e:4c:c9:37:de:ea:8a:0a:b5:bd:61:03:85:e5:80:d2: 3c:26:3e:4d:c1:8b:8f:b7:22:15:01:f4:e9:d3:6d:93:fc:30: 55:3b:4f:be:63:a4:51:f9:ed:e1:24:ae:da:c5:f2:49:02:14: 44:94:ff:dd:8b:71:3e:96:dc:f5:cd:81:3f:92:e4:2c:ff:8b: c2:21:7e:d5:0c:c9:9f:5d:3f:c4:f0:26:1b:6e:13:3b:d9:18: 12:eb:bd:64:df:76:3f:ec:e4:88:b6:8d:c4:e8:ed:70:cd:e4: b5:33:0a:f3:d8:22:46:ad:e9:e0:d1:f0:da:18:40:bb:c8:e1: e1:80:5c:b2:00:4e:c3:dd:e9:39:17:2f:c4:2d:ae:36:71:19: 78:0a:e3:95:ef:a6:e9:cf:ee:ef:47:51:67:a9:98:8a:ef:49: ed:b3:a5:74:84:07:18:c7:ad:28:66:6a:21:86:08:ab:f2:23: 95:d4:5b:e5:d7:02:fc:f7:b0:ce:75:6d:dd:43:ac:a6:3a:4a: a8:5c:a1:75:92:45:f6:20:c4:b1:51:e9:1a:2b:9d:e8:0a:a4: 07:1f:0b:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzhFLB6GxDQcDn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3 MmI3MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NzU2NDY5YTItNjBiNy00MmY1LTkxMzYtMmVjY2MyYTllZGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolrZ6BrXcjlhdSDuq9GTtjD9TxpYGutv3vVT 9W2kX6uGwwCxwgo9UdZ6naLr+0ScZfsr01zEOP6VsxXvrujhpg+MqlmCq/9HumUd q55il5Ii/s8NYInebet5iSuRQ4x6K7Oq2r8KQZIpusT+qUho+UCIlnBNAYsjNSl9 dfr6CUXKJVf0EEGiYbkPCycMOelD4hbr03PdUqm6B9vvI1+ixS01h8z2cijLE+Ph bxjCwkXdmXeWI4FHLGgwQdT4TW7K8gOhbIGGzt7vJqMeqnLmeWhx7RShSla0ws9P 8mOE+wzVVLnoI5v2uG+rSENcIBW0hsC3JQXhBWQQ5G5dqICz4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLQVrw3r6rzl0H4aL6Q8WaR/yE0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvZWNjMGUwNGItNmMwZS0z YWI0LWE4OTItN2YwMjg1ZTFhZWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0 NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2 ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0HXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+oT6PgZcqZ61W5BdvTjYKZeYQ+tlK+HkDDfUQwFzNZmX8VWKXLHkzJ N97qigq1vWEDheWA0jwmPk3Bi4+3IhUB9OnTbZP8MFU7T75jpFH57eEkrtrF8kkC FESU/92LcT6W3PXNgT+S5Cz/i8IhftUMyZ9dP8TwJhtuEzvZGBLrvWTfdj/s5Ii2 jcTo7XDN5LUzCvPYIkat6eDR8NoYQLvI4eGAXLIATsPd6TkXL8QtrjZxGXgK45Xv punP7u9HUWepmIrvSe2zpXSEBxjHrShmaiGGCKvyI5XUW+XXAvz3sM51bd1DrKY6 SqhcoXWSRfYgxLFR6RornegKpAcfC2Y= -----END CERTIFICATE-----Generated at Mon Oct 20 02:34:19 2025 by rpki-client