$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/67704826-2c58-324d-b3ac-37ab0e49ba09.roa File: 67704826-2c58-324d-b3ac-37ab0e49ba09.roa (raw, json) Hash identifier: GjrPgFYQLeSlhXwpmNXXL/L/8Ts0Mdvr+slVFSMTd2c= Subject key identifier: 2E:11:BD:A4:07:5E:E2:1F:DC:1D:34:00:63:CD:E8:42:08:5E:D8:AF Certificate issuer: /CN=2de5d746-3402-4263-b880-ea4d7ecfc168 Certificate serial: 010D0C9F4328584B7F520C8720639C77FDF21D80 Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/67704826-2c58-324d-b3ac-37ab0e49ba09.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 14618 IP address blocks: 208.52.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:0c:87:20:63:9c:77:fd:f2:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=11f2e2fa-4f48-4399-a549-df3ba2bb4bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d3:0d:b3:62:42:75:45:bd:99:93:4e:40:1c: 79:40:38:a3:88:1e:c7:48:34:85:89:9a:ea:08:5d: 73:1d:70:8b:2f:e1:aa:d9:cf:22:e7:5c:f5:4e:9f: ed:06:0a:8f:e0:9a:57:aa:7f:f6:ba:e7:08:0b:19: 36:19:28:e4:3f:89:a4:1e:e4:37:37:d7:0f:ff:55: b5:38:c3:20:ad:b7:40:58:cb:80:2b:5a:1a:b8:93: da:99:c1:50:ff:f2:48:ad:0d:12:12:cb:23:6c:b3: 83:7b:61:a5:2e:e9:9b:02:30:ca:2b:5c:09:36:14: 49:c8:b6:43:74:d0:20:45:94:62:01:5a:d4:ba:1a: 3b:e6:89:5e:07:fe:92:77:68:af:5d:7e:66:09:4e: b3:8a:52:03:5b:15:2a:aa:eb:0c:5c:a3:60:a0:bf: d1:1f:d0:35:e4:4d:6d:22:c2:bb:2b:01:c9:ab:c4: 8d:a3:6e:96:56:fe:6b:d9:f6:b4:1f:4a:c9:10:2e: f3:4a:0f:96:bf:6d:42:d1:65:f2:05:52:06:81:7b: 21:73:3f:30:20:fc:f6:c2:67:db:ca:66:44:62:83: a2:2f:1a:26:f7:7f:1d:43:f2:9b:74:3d:98:10:ef: 0d:14:28:f0:67:e4:f3:d1:67:08:b4:8c:32:ac:0e: 7a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:11:BD:A4:07:5E:E2:1F:DC:1D:34:00:63:CD:E8:42:08:5E:D8:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/67704826-2c58-324d-b3ac-37ab0e49ba09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl X509v3 Authority Key Identifier: keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer sbgp-ipAddrBlock: critical IPv4: 208.52.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:94:a8:f9:cd:d5:92:14:e6:1f:be:f5:be:15:be:54:27:da: 10:6a:54:41:97:be:9b:53:97:51:07:cb:4b:51:85:d9:db:59: 32:28:9b:05:e7:f5:0b:c7:5e:e6:b7:77:26:63:25:51:2d:71: 32:a8:53:e7:a2:b1:f6:24:24:51:c5:68:0d:d2:01:54:9a:b2: 59:0c:dd:c6:28:60:1c:b2:ea:d9:76:d0:92:cf:65:b7:6f:02: 7e:d6:63:c1:67:12:19:7b:ce:d0:84:88:66:65:fc:2d:be:d7: 30:89:27:b8:a4:94:a5:29:ff:33:c6:99:81:71:72:c1:2e:03: 8d:c5:59:39:3e:84:d0:bb:7c:57:16:9e:18:35:da:9b:fa:8e: 24:ea:4c:84:ce:58:05:bf:1d:28:41:50:a1:47:5e:d2:ff:2c: e6:c9:42:ee:c0:3d:2d:35:6c:69:18:be:11:3e:d6:ba:1e:b4: 15:04:c2:f4:8e:49:b6:a2:db:9c:07:06:c6:5a:a6:f7:9a:c1: dc:14:f9:46:6a:ac:f9:fb:27:b9:a3:09:71:20:bb:7d:10:ff: e9:5c:03:50:3a:44:90:6c:ee:1f:30:7f:0e:ff:0e:37:2c:b6: c7:07:1c:82:ee:2d:cb:0f:fb:8f:c0:72:06:99:ba:da:d0:49: 37:a3:24:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UgyHIGOcd/3yHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRlNWQ3NDYtMzQwMi00MjYzLWI4ODAtZWE0ZDdlY2Zj MTY4MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MTFmMmUyZmEtNGY0OC00Mzk5LWE1NDktZGYzYmEyYmI0YmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNMNs2JCdUW9mZNOQBx5QDijiB7HSDSFiZrq CF1zHXCLL+Gq2c8i51z1Tp/tBgqP4JpXqn/2uucICxk2GSjkP4mkHuQ3N9cP/1W1 OMMgrbdAWMuAK1oauJPamcFQ//JIrQ0SEssjbLODe2GlLumbAjDKK1wJNhRJyLZD dNAgRZRiAVrUuho75oleB/6Sd2ivXX5mCU6zilIDWxUqqusMXKNgoL/RH9A15E1t IsK7KwHJq8SNo26WVv5r2fa0H0rJEC7zSg+Wv21C0WXyBVIGgXshcz8wIPz2wmfb ymZEYoOiLxom938dQ/KbdD2YEO8NFCjwZ+Tz0WcItIwyrA56MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4RvaQHXuIf3B00AGPN6EIIXtivMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1 ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRkN2VjZmMxNjgvNjc3MDQ4MjYtMmM1OC0z MjRkLWIzYWMtMzdhYjBlNDliYTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmRlNWQ3NDYtMzQwMi00MjYzLWI4 ODAtZWE0ZDdlY2ZjMTY4LzJkZTVkNzQ2LTM0MDItNDI2My1iODgwLWVhNGQ3ZWNm YzE2OC5jcmwwHwYDVR0jBBgwFoAUa7vQBHnN1sRmwfvAalg6KhVtSHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRk N2VjZmMxNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DSxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2UqPnN1ZIU5h++9b4VvlQn2hBqVEGXvptTl1EHy0tRhdnbWTIomwXn 9QvHXua3dyZjJVEtcTKoU+eisfYkJFHFaA3SAVSaslkM3cYoYByy6tl20JLPZbdv An7WY8FnEhl7ztCEiGZl/C2+1zCJJ7iklKUp/zPGmYFxcsEuA43FWTk+hNC7fFcW nhg12pv6jiTqTITOWAW/HShBUKFHXtL/LObJQu7APS01bGkYvhE+1roetBUEwvSO Sbai25wHBsZapveawdwU+UZqrPn7J7mjCXEgu30Q/+lcA1A6RJBs7h8wfw7/Djcs tscHHILuLcsP+4/AcgaZutrQSTejJNE= -----END CERTIFICATE-----Generated at Mon Oct 20 04:24:23 2025 by rpki-client