$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/940897aa-37fe-3fcf-805a-63ddb933a32a.roa File: 940897aa-37fe-3fcf-805a-63ddb933a32a.roa (raw, json) Hash identifier: V0DGcir0zR3YKXBvUxSMsZeOchSdSXsblnvkccTFNJw= Subject key identifier: 99:2C:A9:36:BF:75:3A:10:96:2F:DE:94:16:6B:54:A8:37:18:04:EB Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76C2A11018642D46467160 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/940897aa-37fe-3fcf-805a-63ddb933a32a.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 54858 IP address blocks: 208.52.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:c2:a1:10:18:64:2d:46:46:71:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=eb53cff9-6502-4329-bd96-4327ec33bc12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:27:16:c3:a3:b6:53:4c:9f:95:06:6a:e1:6b: a4:7d:dc:dc:47:1e:bd:6c:f2:28:94:3f:43:86:42: e3:ba:bf:f0:0b:36:5e:ab:7f:87:81:3d:6d:a3:f1: 14:1f:1b:5e:20:c8:23:2a:f9:9e:4d:e8:3c:69:84: 90:ba:ae:cf:a1:87:26:8f:f8:d9:31:bb:21:14:45: cb:f4:7e:19:4c:f9:81:45:44:94:03:ba:7b:82:34: 7a:0e:2c:46:e7:83:64:63:27:0e:9a:d4:ec:4c:19: ae:21:35:29:d6:17:b2:be:6a:06:9a:05:6e:ba:27: 2e:b5:d8:d3:d8:d6:a7:31:5b:1c:c9:8d:93:e1:9a: 42:86:da:08:54:f9:12:a0:a4:06:25:51:b8:70:b4: f6:f8:22:6a:7e:aa:65:3e:15:6d:81:d7:4d:aa:aa: 3c:2a:15:e7:85:36:af:38:5a:54:43:ef:77:78:c2: d3:79:7d:54:9b:86:31:ae:d6:60:8e:02:c6:59:cd: 1b:6c:5b:c8:5b:e0:9d:63:76:92:96:84:d6:5b:f1: 40:b6:e7:30:42:73:32:f0:9e:55:cd:d0:ca:53:d7: cb:d0:e8:5e:fe:c1:5a:1d:4e:83:3f:28:f4:90:d1: dc:1f:81:47:07:0e:81:8c:fe:a2:8b:fa:67:76:0b: d2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2C:A9:36:BF:75:3A:10:96:2F:DE:94:16:6B:54:A8:37:18:04:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/940897aa-37fe-3fcf-805a-63ddb933a32a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 208.52.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:60:42:e1:20:e7:69:e0:42:05:40:6c:f8:3f:de:78:3c:54: 3d:0b:fd:4a:78:94:f4:a4:92:1b:d5:45:71:02:52:2b:42:4d: f3:19:f0:9b:97:36:d1:14:a0:2a:bc:69:35:1d:b6:3a:dc:d9: 9e:4e:37:f3:ad:6c:83:1e:4c:1c:1c:06:55:22:10:59:35:f1: 9b:38:b8:f9:ee:3a:18:b8:1d:3d:36:c8:86:2b:6c:85:04:e2: b9:19:0d:94:c0:88:0a:84:ee:0f:66:2e:39:25:60:d8:7d:89: 71:97:7f:4f:5e:2d:f1:e1:ae:b5:c5:2a:d6:31:bb:1c:ad:07: 44:57:ef:00:0a:34:78:0f:89:ca:37:26:0b:23:75:57:86:51: 5a:dd:48:48:bb:03:43:a9:42:50:2d:57:cf:cf:11:36:9b:ea: 6c:14:3d:1d:cc:be:14:30:b9:51:5e:ae:97:0b:de:fd:43:9b: e5:2c:28:0e:62:a6:10:7c:98:87:90:db:06:38:1a:7e:85:6d: e7:1c:06:5e:37:e1:53:f3:b6:64:a6:71:b0:e6:7d:2c:cc:08: 7b:6e:e8:50:7e:17:91:51:28:05:6f:65:57:59:44:f7:ff:2e: 9b:7a:8a:c7:5c:d5:c0:4a:de:d1:bb:30:e0:e5:03:a9:cb:a4: 97:d0:5f:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdsKhEBhkLUZGcWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZWI1M2NmZjktNjUwMi00MzI5LWJkOTYtNDMyN2VjMzNiYzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0icWw6O2U0yflQZq4WukfdzcRx69bPIolD9D hkLjur/wCzZeq3+HgT1to/EUHxteIMgjKvmeTeg8aYSQuq7PoYcmj/jZMbshFEXL 9H4ZTPmBRUSUA7p7gjR6DixG54NkYycOmtTsTBmuITUp1heyvmoGmgVuuicutdjT 2NanMVscyY2T4ZpChtoIVPkSoKQGJVG4cLT2+CJqfqplPhVtgddNqqo8KhXnhTav OFpUQ+93eMLTeX1Um4YxrtZgjgLGWc0bbFvIW+CdY3aSloTWW/FAtucwQnMy8J5V zdDKU9fL0Ohe/sFaHU6DPyj0kNHcH4FHBw6BjP6ii/pndgvSYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJksqTa/dToQli/elBZrVKg3GATrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvOTQwODk3YWEtMzdmZS0z ZmNmLTgwNWEtNjNkZGI5MzNhMzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0DQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRgQuEg52ngQgVAbPg/3ng8VD0L/Up4lPSkkhvVRXECUitCTfMZ8JuX NtEUoCq8aTUdtjrc2Z5ON/OtbIMeTBwcBlUiEFk18Zs4uPnuOhi4HT02yIYrbIUE 4rkZDZTAiAqE7g9mLjklYNh9iXGXf09eLfHhrrXFKtYxuxytB0RX7wAKNHgPico3 JgsjdVeGUVrdSEi7A0OpQlAtV8/PETab6mwUPR3MvhQwuVFerpcL3v1Dm+UsKA5i phB8mIeQ2wY4Gn6FbeccBl434VPztmSmcbDmfSzMCHtu6FB+F5FRKAVvZVdZRPf/ Lpt6isdc1cBK3tG7MODlA6nLpJfQXzM= -----END CERTIFICATE-----Generated at Fri Oct 10 21:34:38 2025 by rpki-client