$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/52c2c681-fd3d-336a-8fc9-0f314d01fa8f.roa File: 52c2c681-fd3d-336a-8fc9-0f314d01fa8f.roa (raw, json) Hash identifier: QfKKXl51pD6/fRBTb5TYJhD1ko6tD0v6TVySmLvNZRI= Subject key identifier: 03:2C:DC:53:F5:F8:F0:F0:0E:4F:A1:1E:FE:8D:C8:A3:A9:E3:63:BD Certificate issuer: /CN=b02b2a27-63d2-435f-8114-d98e289edc6c Certificate serial: 010D0C9F4328584B2FC190151E90F48CE513E4C0 Authority key identifier: 68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/52c2c681-fd3d-336a-8fc9-0f314d01fa8f.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 208.71.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:90:15:1e:90:f4:8c:e5:13:e4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02b2a27-63d2-435f-8114-d98e289edc6c Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=03594d9c-1158-4b09-b099-fb40cb26b71e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:58:d0:a6:93:a1:5b:3b:15:3b:c6:2e:25:1b: 66:49:74:53:df:a3:b5:90:03:2b:12:f0:ac:2f:44: cb:b0:78:82:5e:0a:d6:5c:6d:91:32:29:f8:79:b8: c8:78:42:3f:e6:d7:e4:f5:6e:63:7a:bf:06:0a:e0: 46:c3:49:75:0b:49:a9:aa:79:cc:b0:68:dd:ca:84: be:f5:54:5f:9c:0b:0b:9b:42:5f:41:8c:43:28:9c: ef:b6:40:19:04:15:8d:c5:60:87:3e:16:44:5b:5f: c1:c2:02:6d:fc:d4:3c:b7:be:67:07:7c:6d:93:1a: 81:80:fd:1b:76:73:e5:8d:d1:44:b0:cb:a1:5f:38: c7:07:62:ef:84:86:35:d1:cc:bb:39:84:6d:87:aa: c9:e1:f4:16:4b:a1:e9:18:28:cf:5d:02:8d:81:42: 94:e1:0d:f0:1e:5d:ad:97:eb:be:fe:52:fe:1b:8f: b0:8d:1f:79:0d:0e:48:fa:9c:ef:75:12:1f:76:91: ac:ce:e1:6c:0e:da:55:92:03:a1:10:6a:62:bc:be: 6a:33:c5:14:de:11:89:bf:cc:76:f2:e5:25:8c:b5: 41:28:ee:4a:a2:eb:f4:1c:90:e6:cf:14:b1:df:79: 38:b5:9c:1b:7e:92:8a:f2:38:19:8a:20:ed:2c:eb: 6b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:2C:DC:53:F5:F8:F0:F0:0E:4F:A1:1E:FE:8D:C8:A3:A9:E3:63:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/52c2c681-fd3d-336a-8fc9-0f314d01fa8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl X509v3 Authority Key Identifier: keyid:68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer sbgp-ipAddrBlock: critical IPv4: 208.71.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:d4:7a:60:37:3d:4a:cd:40:6f:a8:33:63:68:b0:36:2d:bf: 2e:f4:31:fd:e2:21:74:70:0b:53:02:39:f5:b1:39:e0:4b:e5: d4:09:cc:f9:5d:ee:96:82:d8:78:3f:a5:90:9a:b4:3e:10:27: 15:f2:33:75:da:0f:f7:68:f4:0a:6c:97:a6:0a:99:e5:5f:67: f1:39:b6:ea:05:74:a1:4e:cc:9f:e2:32:08:5e:14:65:f6:54: 80:53:88:2e:29:6b:08:0a:e5:88:03:d1:b4:bf:c2:1b:7c:27: 32:cf:90:49:0e:1b:e5:d0:19:ca:c7:6e:b4:23:3e:90:e3:ca: cd:7f:48:58:3a:48:00:54:43:fa:78:7c:bf:cf:cd:11:43:cc: 02:09:26:ba:d9:fa:0a:47:56:2a:51:e0:51:f4:05:0d:f8:45: ce:2c:db:ee:0f:e4:dc:1b:41:04:55:83:fd:bf:9a:eb:cd:b3: a5:4c:e2:f8:c3:e7:8b:ee:9c:cc:f4:f6:ed:0f:22:67:13:ef: 20:20:19:29:4f:96:fe:a8:52:3d:ab:bb:c4:a7:30:9e:bb:4e: 0a:38:1d:e4:67:76:1e:c5:3d:47:46:1a:72:f7:94:3a:7a:75: cb:49:a1:66:c7:e4:7b:f2:d2:e5:e6:40:b5:ff:e7:02:f6:c1: 93:fe:02:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwZAVHpD0jOUT5MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyYjJhMjctNjNkMi00MzVmLTgxMTQtZDk4ZTI4OWVk YzZjMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk MDM1OTRkOWMtMTE1OC00YjA5LWIwOTktZmI0MGNiMjZiNzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVjQppOhWzsVO8YuJRtmSXRT36O1kAMrEvCs L0TLsHiCXgrWXG2RMin4ebjIeEI/5tfk9W5jer8GCuBGw0l1C0mpqnnMsGjdyoS+ 9VRfnAsLm0JfQYxDKJzvtkAZBBWNxWCHPhZEW1/BwgJt/NQ8t75nB3xtkxqBgP0b dnPljdFEsMuhXzjHB2LvhIY10cy7OYRth6rJ4fQWS6HpGCjPXQKNgUKU4Q3wHl2t l+u+/lL+G4+wjR95DQ5I+pzvdRIfdpGszuFsDtpVkgOhEGpivL5qM8UU3hGJv8x2 8uUljLVBKO5Kouv0HJDmzxSx33k4tZwbfpKK8jgZiiDtLOtr7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMs3FP1+PDwDk+hHv6NyKOp42O9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMDJi MmEyNy02M2QyLTQzNWYtODExNC1kOThlMjg5ZWRjNmMvNTJjMmM2ODEtZmQzZC0z MzZhLThmYzktMGYzMTRkMDFmYThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjAyYjJhMjctNjNkMi00MzVmLTgx MTQtZDk4ZTI4OWVkYzZjL2IwMmIyYTI3LTYzZDItNDM1Zi04MTE0LWQ5OGUyODll ZGM2Yy5jcmwwHwYDVR0jBBgwFoAUaP0QqXb6CaxECs/rlUyyMr81kckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMDJiMmEyNy02M2QyLTQzNWYtODExNC1kOThl Mjg5ZWRjNmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EfSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHUemA3PUrNQG+oM2NosDYtvy70Mf3iIXRwC1MCOfWxOeBL5dQJzPld 7paC2Hg/pZCatD4QJxXyM3XaD/do9Apsl6YKmeVfZ/E5tuoFdKFOzJ/iMgheFGX2 VIBTiC4pawgK5YgD0bS/wht8JzLPkEkOG+XQGcrHbrQjPpDjys1/SFg6SABUQ/p4 fL/PzRFDzAIJJrrZ+gpHVipR4FH0BQ34Rc4s2+4P5NwbQQRVg/2/muvNs6VM4vjD 54vunMz09u0PImcT7yAgGSlPlv6oUj2ru8SnMJ67Tgo4HeRndh7FPUdGGnL3lDp6 dctJoWbH5Hvy0uXmQLX/5wL2wZP+Agc= -----END CERTIFICATE-----Generated at Mon Oct 20 02:02:44 2025 by rpki-client