$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/e2c64b42-3241-3020-b640-0b5ca595529a.roa File: e2c64b42-3241-3020-b640-0b5ca595529a.roa (raw, json) Hash identifier: CK2zLIbNJ6qmZ1t/P1D1klUb/2cIv5efqB3TqBJ7oSM= Subject key identifier: 20:BD:F1:61:80:89:A4:3F:17:71:0C:A5:61:39:0D:37:0D:C9:33:35 Certificate issuer: /CN=2de5d746-3402-4263-b880-ea4d7ecfc168 Certificate serial: 010D0C9F4328584F268D056582E9AAA4157BB800 Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/e2c64b42-3241-3020-b640-0b5ca595529a.roa Signing time: Sat 12 Sep 2026 13:00:13 +0000 ROA not before: Sat 12 Sep 2026 13:00:13 +0000 ROA not after: Fri 11 Dec 2026 14:00:13 +0000 asID: 22359 IP address blocks: 208.52.177.2/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:26:8d:05:65:82:e9:aa:a4:15:7b:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168 Validity Not Before: Sep 12 13:00:13 2026 GMT Not After : Dec 11 14:00:13 2026 GMT Subject: CN=12b5ab55-1b15-499a-97f0-88a119d3487d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:bc:9f:ab:df:7f:7f:95:70:02:be:f6:24:c9: b7:9c:fa:46:62:c9:8d:57:dc:af:2d:59:89:78:b0: db:6a:ec:eb:eb:2d:7b:b7:17:25:e6:93:59:83:46: 0f:0c:91:a7:ff:0e:f6:7f:07:76:7f:52:81:f7:89: cf:14:23:41:25:34:1c:41:4a:be:00:92:ae:49:13: 32:25:ef:24:36:70:6d:1f:c8:2a:53:df:68:de:e1: c1:f2:8f:41:91:26:9b:ea:82:cc:f0:78:7e:cf:7e: 79:a1:93:ab:53:54:9e:68:08:0e:0b:54:7f:b3:bb: 50:8c:10:f9:8d:9f:b1:12:62:b8:94:3a:7b:d8:cd: 7d:27:46:d3:f9:3e:a7:73:8c:7e:07:58:64:e0:07: 9a:ef:dc:cf:e6:31:ff:19:5c:08:1f:0c:81:9c:ae: 91:a1:a4:52:b3:cb:6e:48:8b:2d:fa:42:39:9f:0b: 4d:ba:fe:51:30:d1:1a:d5:c5:be:f6:a4:2b:c6:45: c4:22:38:e7:7e:43:fb:9f:c2:74:0d:41:88:03:63: 19:57:8a:dd:74:98:45:c0:57:72:20:96:b4:d1:93: bd:e7:9c:0f:92:9f:82:d3:b5:1a:a6:99:ff:68:12: c5:96:f3:48:a0:8f:78:ba:3c:4d:07:d8:67:aa:3e: 91:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:BD:F1:61:80:89:A4:3F:17:71:0C:A5:61:39:0D:37:0D:C9:33:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/e2c64b42-3241-3020-b640-0b5ca595529a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl X509v3 Authority Key Identifier: keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer sbgp-ipAddrBlock: critical IPv4: 208.52.177.2/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:17:d6:be:1e:e1:4b:0f:ea:55:a7:31:bd:7a:4d:4e:c8:6b: e3:19:ff:76:49:0f:d5:60:7e:6d:35:50:2c:02:7f:5d:81:89: df:ba:3f:64:8d:3a:f7:d6:14:78:bf:61:b5:bc:70:b5:f9:54: 23:fa:cc:58:29:e4:29:09:44:ca:bd:ac:dc:d4:61:a7:02:a1: f9:ac:26:4b:7c:16:78:7c:2b:23:b9:5c:37:5e:da:97:63:2e: 3c:ce:83:14:72:27:51:92:c3:6b:de:ce:72:04:f7:96:a1:b4: 17:06:b4:88:b5:65:a9:93:0b:37:f4:d9:c0:af:10:88:83:88: b4:e4:92:6c:62:af:32:21:d8:2b:b5:18:49:48:92:22:60:97: ad:21:df:3e:5c:9e:57:08:8c:66:5a:eb:99:9b:dc:c3:a7:a0: fe:19:76:9d:4e:db:d4:67:a3:83:39:17:47:7f:f3:a4:6e:a1: a8:22:de:25:cb:39:98:b0:a0:1e:cb:90:7c:86:f1:78:e8:77: f8:03:d7:61:46:f1:93:6c:12:87:d8:0c:e2:15:31:43:45:11: b6:89:a9:50:7d:a5:74:08:d2:fd:1d:86:87:ce:6c:7b:03:e1: e8:c5:e3:0a:a8:67:95:84:cb:18:4a:7c:0f:bf:20:10:2e:af: f7:86:31:03 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8mjQVlgumqpBV7uAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRlNWQ3NDYtMzQwMi00MjYzLWI4ODAtZWE0ZDdlY2Zj MTY4MB4XDTI2MDkxMjEzMDAxM1oXDTI2MTIxMTE0MDAxM1owLzEtMCsGA1UEAxMk MTJiNWFiNTUtMWIxNS00OTlhLTk3ZjAtODhhMTE5ZDM0ODdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbyfq99/f5VwAr72JMm3nPpGYsmNV9yvLVmJ eLDbauzr6y17txcl5pNZg0YPDJGn/w72fwd2f1KB94nPFCNBJTQcQUq+AJKuSRMy Je8kNnBtH8gqU99o3uHB8o9BkSab6oLM8Hh+z355oZOrU1SeaAgOC1R/s7tQjBD5 jZ+xEmK4lDp72M19J0bT+T6nc4x+B1hk4Aea79zP5jH/GVwIHwyBnK6RoaRSs8tu SIst+kI5nwtNuv5RMNEa1cW+9qQrxkXEIjjnfkP7n8J0DUGIA2MZV4rddJhFwFdy IJa00ZO955wPkp+C07Uappn/aBLFlvNIoI94ujxNB9hnqj6RcwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCC98WGAiaQ/F3EMpWE5DTcNyTM1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1 ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRkN2VjZmMxNjgvZTJjNjRiNDItMzI0MS0z MDIwLWI2NDAtMGI1Y2E1OTU1MjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmRlNWQ3NDYtMzQwMi00MjYzLWI4 ODAtZWE0ZDdlY2ZjMTY4LzJkZTVkNzQ2LTM0MDItNDI2My1iODgwLWVhNGQ3ZWNm YzE2OC5jcmwwHwYDVR0jBBgwFoAUa7vQBHnN1sRmwfvAalg6KhVtSHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRk N2VjZmMxNjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0DSxAjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCDF9a+HuFLD+pVpzG9ek1OyGvjGf92SQ/VYH5tNVAsAn9dgYnfuj9k jTr31hR4v2G1vHC1+VQj+sxYKeQpCUTKvazc1GGnAqH5rCZLfBZ4fCsjuVw3XtqX Yy48zoMUcidRksNr3s5yBPeWobQXBrSItWWpkws39NnArxCIg4i05JJsYq8yIdgr tRhJSJIiYJetId8+XJ5XCIxmWuuZm9zDp6D+GXadTtvUZ6ODORdHf/OkbqGoIt4l yzmYsKAey5B8hvF46Hf4A9dhRvGTbBKH2AziFTFDRRG2ialQfaV0CNL9HYaHzmx7 A+HoxeMKqGeVhMsYSnwPvyAQLq/3hjED -----END CERTIFICATE-----Generated at Tue Sep 29 13:38:08 2026 by rpki-client