$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/7ae06a15-6dd6-362c-be0a-fd21de184c1e.roa File: 7ae06a15-6dd6-362c-be0a-fd21de184c1e.roa (raw, json) Hash identifier: MHsBLrlTDMbVdR62S42B4xrlefkcIzb6llFUhzt59ho= Subject key identifier: 99:B0:2C:98:0E:01:40:48:9C:4B:22:25:5F:6A:E5:E4:08:05:C9:6E Certificate issuer: /CN=a5e2d89d-6269-4405-9578-836517825b32 Certificate serial: 010D0C9F4328584B583C85FA4D69B951AEA2C700 Authority key identifier: E7:D0:41:7E:41:CB:15:E0:97:1D:1B:5B:D5:41:A1:BC:EB:5A:8B:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/7ae06a15-6dd6-362c-be0a-fd21de184c1e.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 397293 IP address blocks: 208.77.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:85:fa:4d:69:b9:51:ae:a2:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5e2d89d-6269-4405-9578-836517825b32 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=f0d0f225-a7ba-43f6-8de8-e3726e7911b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b7:7f:ea:37:62:28:e3:3f:59:18:7d:36:79: ca:8e:4d:00:34:ec:0a:6f:c2:48:66:c9:0c:20:fe: b3:db:ad:56:f1:21:d7:48:58:95:0d:fa:33:e7:b2: 14:06:28:80:ef:f7:af:98:36:b7:fb:83:10:a6:8b: 67:05:ae:b7:3c:5a:9c:93:36:79:9d:91:f8:09:6d: a2:2f:ea:2b:a3:f1:3d:d2:fc:20:ec:0d:2a:dd:30: 9c:0f:38:06:cb:43:01:c8:fd:52:88:d5:d2:db:a3: 5a:0f:92:bf:13:2c:99:3c:b3:b3:6f:13:27:af:83: c4:62:e3:53:a8:75:6d:8c:7b:50:45:1f:4c:6f:c9: 28:27:44:73:16:fe:ff:2e:17:44:64:c0:d4:39:22: f9:ef:ae:6d:3a:0e:95:cb:6f:4c:ca:e6:5b:3e:36: bd:ff:82:2f:e7:d4:a7:c9:e4:a7:53:c9:b3:1e:c2: 70:64:f5:9d:cb:71:71:97:98:5a:a2:68:fb:51:62: 98:8d:39:76:a0:3f:53:dc:c2:71:86:6a:4e:6d:57: 34:8a:8c:e3:9e:c7:b1:af:63:f7:66:e7:f3:42:0f: 66:43:94:32:bb:61:43:7c:c7:18:f4:d9:b8:cd:4e: b6:9a:24:f9:11:fc:dd:7f:04:e8:51:8c:5a:22:37: 9f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B0:2C:98:0E:01:40:48:9C:4B:22:25:5F:6A:E5:E4:08:05:C9:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/7ae06a15-6dd6-362c-be0a-fd21de184c1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.crl X509v3 Authority Key Identifier: keyid:E7:D0:41:7E:41:CB:15:E0:97:1D:1B:5B:D5:41:A1:BC:EB:5A:8B:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer sbgp-ipAddrBlock: critical IPv4: 208.77.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:4b:98:65:09:08:f3:f0:a2:37:be:4b:ae:32:d8:08:63:2d: 70:de:c9:43:84:e2:23:c0:dc:03:49:f9:9d:60:f5:2b:a0:82: aa:63:9f:de:52:6c:48:01:05:16:a2:05:8e:63:2c:a7:ff:af: 51:57:30:0e:0e:99:2a:47:4e:d0:93:98:cc:c6:86:3f:a9:2c: 0c:0b:8d:37:96:88:45:3d:59:ea:6d:47:c9:61:2b:4a:a1:28: 83:cd:2b:c2:bb:40:5c:5f:b8:58:0c:54:f7:62:1e:79:ea:50: af:c0:40:ae:42:48:42:e1:13:20:87:63:90:f9:47:c5:7d:3f: 95:fe:12:ed:a0:83:52:61:ad:bb:08:7f:f3:a9:60:ac:a6:a8: 0c:7b:6b:b1:85:d0:41:4d:4b:d2:df:3a:35:ec:e1:62:9f:74: 58:a0:73:4d:07:5a:5c:20:b7:c0:26:7c:fe:1b:9b:73:76:af: 8b:76:9f:ae:c5:fc:d4:71:3d:c0:ab:7a:9c:30:e3:52:08:b4: 41:ee:a5:a5:21:09:43:5a:db:7a:ac:cb:5f:57:c8:e6:5e:67: ee:07:43:05:13:f5:7b:54:c7:a5:5e:05:8f:0a:ce:9a:a6:1e: 8a:72:e7:0a:84:a6:69:03:4f:91:2b:85:1d:b2:5c:6b:d2:6c: 45:9b:9c:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPIX6TWm5Ua6ixwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTVlMmQ4OWQtNjI2OS00NDA1LTk1NzgtODM2NTE3ODI1 YjMyMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZjBkMGYyMjUtYTdiYS00M2Y2LThkZTgtZTM3MjZlNzkxMWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrd/6jdiKOM/WRh9NnnKjk0ANOwKb8JIZskM IP6z261W8SHXSFiVDfoz57IUBiiA7/evmDa3+4MQpotnBa63PFqckzZ5nZH4CW2i L+oro/E90vwg7A0q3TCcDzgGy0MByP1SiNXS26NaD5K/EyyZPLOzbxMnr4PEYuNT qHVtjHtQRR9Mb8koJ0RzFv7/LhdEZMDUOSL5765tOg6Vy29MyuZbPja9/4Iv59Sn yeSnU8mzHsJwZPWdy3Fxl5haomj7UWKYjTl2oD9T3MJxhmpObVc0iozjnsexr2P3 ZufzQg9mQ5Qyu2FDfMcY9Nm4zU62miT5EfzdfwToUYxaIjef5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmwLJgOAUBInEsiJV9q5eQIBcluMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hNWUy ZDg5ZC02MjY5LTQ0MDUtOTU3OC04MzY1MTc4MjViMzIvN2FlMDZhMTUtNmRkNi0z NjJjLWJlMGEtZmQyMWRlMTg0YzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTVlMmQ4OWQtNjI2OS00NDA1LTk1 NzgtODM2NTE3ODI1YjMyL2E1ZTJkODlkLTYyNjktNDQwNS05NTc4LTgzNjUxNzgy NWIzMi5jcmwwHwYDVR0jBBgwFoAU59BBfkHLFeCXHRtb1UGhvOtai84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hNWUyZDg5ZC02MjY5LTQ0MDUtOTU3OC04MzY1 MTc4MjViMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0E1YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBLmGUJCPPwoje+S64y2AhjLXDeyUOE4iPA3ANJ+Z1g9Suggqpjn95S bEgBBRaiBY5jLKf/r1FXMA4OmSpHTtCTmMzGhj+pLAwLjTeWiEU9WeptR8lhK0qh KIPNK8K7QFxfuFgMVPdiHnnqUK/AQK5CSELhEyCHY5D5R8V9P5X+Eu2gg1JhrbsI f/OpYKymqAx7a7GF0EFNS9LfOjXs4WKfdFigc00HWlwgt8AmfP4bm3N2r4t2n67F /NRxPcCrepww41IItEHupaUhCUNa23qsy19XyOZeZ+4HQwUT9XtUx6VeBY8Kzpqm Hopy5wqEpmkDT5ErhR2yXGvSbEWbnN0= -----END CERTIFICATE-----Generated at Sat Oct 11 17:11:38 2025 by rpki-client