$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/5c5ef67e-c743-3dd0-8a4b-4975a1e8b5f8.roa File: 5c5ef67e-c743-3dd0-8a4b-4975a1e8b5f8.roa (raw, json) Hash identifier: f7Wt8Uede9B8/Jp/DsTEiNryM/DasKO8dqB4zTEyuN0= Subject key identifier: 6C:EE:07:3A:ED:42:F1:96:25:EF:8F:3B:D9:3D:D6:B8:7B:E7:6D:1A Certificate issuer: /CN=2de5d746-3402-4263-b880-ea4d7ecfc168 Certificate serial: 010D0C9F4328584B2B9195BE16878849B0B23A40 Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/5c5ef67e-c743-3dd0-8a4b-4975a1e8b5f8.roa Signing time: Fri 12 Sep 2025 13:00:42 +0000 ROA not before: Fri 12 Sep 2025 13:00:42 +0000 ROA not after: Thu 11 Dec 2025 14:00:42 +0000 asID: 46265 IP address blocks: 208.52.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:91:95:be:16:87:88:49:b0:b2:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168 Validity Not Before: Sep 12 13:00:42 2025 GMT Not After : Dec 11 14:00:42 2025 GMT Subject: CN=e5de6432-db6d-4ace-b2c5-4c892805bb84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c9:2c:6b:07:2b:c9:89:11:2f:01:c5:90:2a: 75:09:75:eb:da:14:7f:93:30:1e:21:24:2e:55:e3: 29:df:50:bb:b2:90:45:b7:3c:d4:8d:87:9f:d4:fb: 2d:0e:c7:0c:52:68:d2:27:83:c2:94:57:55:47:50: cc:b3:1b:91:f2:3a:a0:1e:3b:f8:fb:c8:fc:a2:4a: a3:c3:8a:b9:18:57:e3:8d:9b:3f:d3:04:ef:d7:d8: 58:1e:e4:74:ce:2c:14:9f:b5:71:0e:a8:1e:67:1f: 62:cf:33:0e:f3:7c:b0:e5:60:c0:0e:a9:fc:eb:f0: a8:c8:81:12:c4:6f:d9:fb:0e:15:0d:cb:36:83:50: c2:7a:31:ec:c2:60:17:a7:6a:7f:61:50:60:ae:dd: f7:0d:6f:f0:70:dc:35:aa:c1:9f:a3:86:79:21:1c: e2:20:87:27:01:f7:1a:95:51:4a:99:03:24:db:de: 36:6c:6d:6e:b7:a1:9f:5b:66:a5:c0:aa:5a:f1:01: b0:be:12:6a:07:1a:16:94:4d:f4:7f:05:26:9e:09: 52:53:15:e6:05:26:dc:f8:ea:27:ac:8b:93:69:c8: fd:0a:9c:df:76:2a:a5:01:bd:57:6f:c8:46:ef:fc: ee:1e:4c:75:58:41:6e:50:36:f1:dd:c1:9c:b4:e8: f4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:EE:07:3A:ED:42:F1:96:25:EF:8F:3B:D9:3D:D6:B8:7B:E7:6D:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/5c5ef67e-c743-3dd0-8a4b-4975a1e8b5f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl X509v3 Authority Key Identifier: keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer sbgp-ipAddrBlock: critical IPv4: 208.52.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:0d:cd:cc:93:c5:ec:4e:39:33:b8:1a:10:3d:33:05:41:20: 93:b0:95:49:f8:cd:1b:bb:46:12:c3:de:45:bd:26:d6:ac:46: 11:4b:4c:78:70:92:3a:58:d7:c0:46:a6:f2:6b:7d:f5:42:3f: ba:cb:06:c0:25:6e:7b:91:36:f9:ff:03:40:04:a7:eb:10:1f: f8:4c:e3:bc:67:12:85:e0:6b:56:e5:2f:bb:57:82:ca:a9:db: 33:76:ad:34:bf:b7:7b:94:1e:c6:08:42:b5:c4:f4:58:3c:ed: 47:ce:b8:a4:c9:31:66:c8:b5:94:70:e7:8b:26:ba:10:d6:54: 59:ab:38:4c:1d:90:07:0a:f1:b4:cc:9b:a9:14:e4:3a:1d:ac: fd:61:43:ac:a7:96:d6:0b:c4:39:88:4f:34:f2:a0:dd:6d:33: 8d:fa:02:c9:55:39:56:ef:1b:6e:c2:58:b6:0c:73:35:78:ee: bc:78:08:52:52:90:43:d9:76:d1:7e:67:de:bd:1e:bf:69:00: 14:dc:2e:fe:a5:07:84:9c:f9:7f:56:5c:ed:12:22:29:c3:c4: 81:24:ff:7b:c4:72:78:c1:9f:44:e1:d4:85:aa:50:48:d9:7d: f9:a6:4e:66:6d:39:26:b3:71:a8:7f:eb:d7:15:f7:b0:ac:be: 88:60:78:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsrkZW+FoeISbCyOkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRlNWQ3NDYtMzQwMi00MjYzLWI4ODAtZWE0ZDdlY2Zj MTY4MB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk ZTVkZTY0MzItZGI2ZC00YWNlLWIyYzUtNGM4OTI4MDViYjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsksawcryYkRLwHFkCp1CXXr2hR/kzAeISQu VeMp31C7spBFtzzUjYef1PstDscMUmjSJ4PClFdVR1DMsxuR8jqgHjv4+8j8okqj w4q5GFfjjZs/0wTv19hYHuR0ziwUn7VxDqgeZx9izzMO83yw5WDADqn86/CoyIES xG/Z+w4VDcs2g1DCejHswmAXp2p/YVBgrt33DW/wcNw1qsGfo4Z5IRziIIcnAfca lVFKmQMk2942bG1ut6GfW2alwKpa8QGwvhJqBxoWlE30fwUmnglSUxXmBSbc+Oon rIuTacj9CpzfdiqlAb1Xb8hG7/zuHkx1WEFuUDbx3cGctOj0owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzuBzrtQvGWJe+PO9k91rh7520aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1 ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRkN2VjZmMxNjgvNWM1ZWY2N2UtYzc0My0z ZGQwLThhNGItNDk3NWExZThiNWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmRlNWQ3NDYtMzQwMi00MjYzLWI4 ODAtZWE0ZDdlY2ZjMTY4LzJkZTVkNzQ2LTM0MDItNDI2My1iODgwLWVhNGQ3ZWNm YzE2OC5jcmwwHwYDVR0jBBgwFoAUa7vQBHnN1sRmwfvAalg6KhVtSHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRk N2VjZmMxNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DSxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoNzcyTxexOOTO4GhA9MwVBIJOwlUn4zRu7RhLD3kW9JtasRhFLTHhw kjpY18BGpvJrffVCP7rLBsAlbnuRNvn/A0AEp+sQH/hM47xnEoXga1blL7tXgsqp 2zN2rTS/t3uUHsYIQrXE9Fg87UfOuKTJMWbItZRw54smuhDWVFmrOEwdkAcK8bTM m6kU5DodrP1hQ6ynltYLxDmITzTyoN1tM436AslVOVbvG27CWLYMczV47rx4CFJS kEPZdtF+Z969Hr9pABTcLv6lB4Sc+X9WXO0SIinDxIEk/3vEcnjBn0Th1IWqUEjZ ffmmTmZtOSazcah/69cV97CsvohgeOA= -----END CERTIFICATE-----Generated at Mon Oct 20 11:15:08 2025 by rpki-client