$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/f8408be1-8ad9-3d76-aaad-afb8a780f13e.roa File: f8408be1-8ad9-3d76-aaad-afb8a780f13e.roa (raw, json) Hash identifier: RAmZwmt032T2nEW6bUbMxrMp4squ7sb30Iei8AqAu0s= Subject key identifier: EE:17:07:4D:A0:59:61:80:D4:25:E9:82:8B:DB:CA:9D:2B:CB:FE:A8 Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F4328584B16A15E76AEEC0991BDEABD3A Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/f8408be1-8ad9-3d76-aaad-afb8a780f13e.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 6621 IP address blocks: 184.52.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:5e:76:ae:ec:09:91:bd:ea:bd:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=0f46ec27-4751-4832-a18b-cf8c311ae516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f9:38:c1:0e:94:8c:83:78:01:2f:cd:cf:96: ec:b0:67:7e:6d:1b:c8:ca:7e:b4:e9:04:d7:b6:ab: 43:43:21:a2:8d:88:a6:a3:f8:14:21:55:52:4a:da: 5f:fe:89:ca:97:1b:7b:a7:55:ac:21:7c:37:0d:76: b5:f5:96:65:fb:e8:a9:01:3e:66:15:42:8d:44:d6: 40:3a:ea:30:dd:d5:ad:48:e3:2b:87:73:de:94:23: a8:35:ab:17:95:ed:ea:b3:44:26:a3:07:a0:12:e5: 38:a6:18:36:79:2a:ed:8f:eb:8b:10:02:f2:17:1e: 77:f8:91:c9:cc:ca:6d:a1:91:fe:3e:04:02:26:3f: 34:8c:6c:cd:4f:6f:2b:2b:70:40:6c:9f:4e:b2:39: 10:ac:68:4b:54:09:a1:7e:f2:0d:00:df:bf:c4:46: 41:37:5b:6a:96:a9:e4:88:96:31:05:c3:c6:b1:a8: 37:59:cb:63:bc:6f:2f:5c:4e:41:86:db:bd:b6:16: 66:51:a6:85:1c:1f:44:09:78:48:79:04:14:e5:da: 1d:aa:bf:b0:94:29:a0:91:27:e8:00:09:97:c6:da: eb:63:31:c9:59:53:47:b4:07:12:32:cc:e0:b1:1a: 3e:c8:5e:29:e8:f1:ba:a1:cd:76:df:b6:b8:7d:a8: 2f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:17:07:4D:A0:59:61:80:D4:25:E9:82:8B:DB:CA:9D:2B:CB:FE:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/f8408be1-8ad9-3d76-aaad-afb8a780f13e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 184.52.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:6b:62:59:6f:2e:aa:50:f2:72:38:85:0e:6c:53:1b:7e:50: 7d:e8:a2:54:74:6e:8b:6b:fb:06:4e:c6:c7:ab:33:49:31:5f: a1:b5:7f:ea:4c:01:00:53:a1:69:0d:99:33:9d:58:58:5e:74: ce:87:dc:ce:6c:bb:f8:70:a3:ce:0c:a5:89:7e:06:1c:77:d5: e8:ec:b1:1e:66:41:fd:fd:6b:7a:ef:bf:5e:f1:ac:7f:2b:5e: 29:3e:95:da:14:8d:47:e5:88:71:05:78:30:b4:aa:1b:c4:f5: 12:88:9b:55:f5:ea:ed:d4:78:ae:47:a7:b8:ca:de:83:d6:82: eb:93:20:21:82:8c:09:6b:37:86:ea:c8:23:68:65:78:1a:91: ea:d7:77:60:de:1b:31:e1:1e:01:fb:9d:6a:2a:63:9c:e6:46: 97:71:1d:a9:56:f1:34:36:00:a1:4e:7b:f0:90:7b:b1:24:41: 86:60:44:38:df:6e:5a:80:56:ec:89:38:b2:fe:1e:84:6e:ac: 02:6a:53:c6:52:4e:ea:15:74:19:8d:61:64:f4:a9:ff:f2:6a: 9c:b2:4c:15:d3:7b:2f:30:c1:60:c0:67:06:32:f8:05:50:e1: c2:78:ad:1f:1b:ae:ed:cd:e5:85:37:d8:0e:07:45:5b:52:e5: f9:eb:d5:e4 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEsWoV52ruwJkb3qvTowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk MGY0NmVjMjctNDc1MS00ODMyLWExOGItY2Y4YzMxMWFlNTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vk4wQ6UjIN4AS/Nz5bssGd+bRvIyn606QTX tqtDQyGijYimo/gUIVVSStpf/onKlxt7p1WsIXw3DXa19ZZl++ipAT5mFUKNRNZA Ouow3dWtSOMrh3PelCOoNasXle3qs0QmowegEuU4phg2eSrtj+uLEALyFx53+JHJ zMptoZH+PgQCJj80jGzNT28rK3BAbJ9OsjkQrGhLVAmhfvINAN+/xEZBN1tqlqnk iJYxBcPGsag3WctjvG8vXE5Bhtu9thZmUaaFHB9ECXhIeQQU5dodqr+wlCmgkSfo AAmXxtrrYzHJWVNHtAcSMszgsRo+yF4p6PG6oc1237a4fagvEQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFO4XB02gWWGA1CXpgovbyp0ry/6oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvZjg0MDhiZTEtOGFkOS0z ZDc2LWFhYWQtYWZiOGE3ODBmMTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBuDQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAAmtiWW8uqlDycjiFDmxTG35QfeiiVHRui2v7Bk7Gx6szSTFfobV/6kwB AFOhaQ2ZM51YWF50zofczmy7+HCjzgyliX4GHHfV6OyxHmZB/f1reu+/XvGsfyte KT6V2hSNR+WIcQV4MLSqG8T1EoibVfXq7dR4rkenuMreg9aC65MgIYKMCWs3hurI I2hleBqR6td3YN4bMeEeAfudaipjnOZGl3EdqVbxNDYAoU578JB7sSRBhmBEON9u WoBW7Ik4sv4ehG6sAmpTxlJO6hV0GY1hZPSp//JqnLJMFdN7LzDBYMBnBjL4BVDh wnitHxuu7c3lhTfYDgdFW1Ll+evV5A== -----END CERTIFICATE-----Generated at Sat Oct 11 13:24:30 2025 by rpki-client