$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/52823a9b-61d5-38a1-8207-fbf196df3766.roa File: 52823a9b-61d5-38a1-8207-fbf196df3766.roa (raw, json) Hash identifier: 2nlB7hdNPhB3A754lif013yW67TRe7v3fj2HbYf5tCk= Subject key identifier: 7A:5A:4D:95:CE:C7:96:50:53:3C:9C:A2:F6:CD:96:CA:D6:85:73:93 Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584B1271649185E1F295B8810080 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/52823a9b-61d5-38a1-8207-fbf196df3766.roa Signing time: Wed 03 Sep 2025 13:00:41 +0000 ROA not before: Wed 03 Sep 2025 13:00:41 +0000 ROA not after: Tue 02 Dec 2025 14:00:41 +0000 asID: 21947 IP address blocks: 192.225.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:12:71:64:91:85:e1:f2:95:b8:81:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Sep 3 13:00:41 2025 GMT Not After : Dec 2 14:00:41 2025 GMT Subject: CN=75a34789-64c1-465f-a859-1391d53e5840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e2:3d:ed:92:39:31:94:8f:62:97:59:ae:62: 09:2a:71:85:a2:5f:f1:30:a2:d9:df:51:ee:61:46: e3:ee:15:a3:bd:fa:58:b6:22:10:3c:15:5a:e5:2e: 1a:fe:53:61:5d:ae:72:1e:20:06:b3:5e:35:c6:f5: a9:a5:15:db:d4:ff:5b:15:8e:92:9b:d3:bb:a9:48: af:b5:13:a4:9a:8f:50:9b:4d:0a:19:02:f6:e7:ae: 71:52:ca:05:12:13:f2:0e:22:0f:85:c8:e4:bc:96: da:dd:84:bb:95:9b:18:a5:6e:4a:3a:91:56:62:3a: b8:81:c8:3f:58:66:f0:c4:22:70:c6:a6:90:f1:8d: d3:b4:37:bc:3e:97:6b:69:14:ee:fa:a3:03:66:77: 0a:f0:6a:28:78:83:0a:ff:af:02:bd:b8:15:3b:7a: 6c:5a:b9:58:20:54:8d:f3:13:c3:2b:48:1a:a1:f5: ff:77:60:de:67:31:dd:74:92:c3:2a:03:3b:6e:28: 5b:86:4d:00:33:be:f8:e9:d3:8d:69:59:59:a9:ca: 9c:e1:e3:31:ea:49:66:70:9b:77:28:e7:fa:66:f5: da:33:b4:cf:6f:46:a2:6e:16:e7:3b:be:1c:06:58: f6:51:0c:20:d7:f7:6c:69:2d:ea:fd:16:90:38:58: 58:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5A:4D:95:CE:C7:96:50:53:3C:9C:A2:F6:CD:96:CA:D6:85:73:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/52823a9b-61d5-38a1-8207-fbf196df3766.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 192.225.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:94:d8:2a:67:93:e4:1e:10:0e:f8:b0:34:24:5f:0f:f4:53: 3e:2b:89:18:22:b4:3a:4c:a7:dd:34:c7:19:99:84:c1:d4:27: bd:a6:6c:fc:51:74:cf:df:a1:66:80:a3:b6:d0:fb:78:8c:53: 1c:46:a9:3f:5f:ac:9a:7d:b0:35:c3:e7:6d:bf:41:9c:f1:ab: 1b:28:14:e0:c7:6b:b5:4a:06:42:79:5f:e8:5a:1f:26:1c:e2: dd:61:d7:51:8d:82:fc:60:59:63:2b:1e:36:23:45:ee:39:ff: 9b:55:ff:6e:04:c4:5e:32:8e:db:b9:d6:a9:ab:1d:b4:16:89: cf:df:fd:98:10:ed:2a:66:ce:c9:08:0d:df:f7:de:d2:88:6f: 51:3a:f1:d1:af:b8:91:ea:b0:00:3f:ce:1c:ef:fb:48:07:ed: 1c:a5:3a:41:d0:69:a1:81:b1:30:45:61:bb:ea:67:b6:de:0d: 95:b5:97:24:79:4a:1e:58:50:02:fa:7c:82:5a:24:13:c2:06: c5:3c:10:2b:32:4d:df:b1:cd:a1:0b:8b:1f:48:36:3b:8d:8d: ae:aa:c9:88:8f:c7:a9:2c:16:fa:b3:7a:6e:67:58:85:a6:c7: 71:18:55:fb:51:05:5f:fc:32:aa:fa:cc:be:6f:ee:c0:98:d6: 5f:71:90:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsScWSRheHylbiBAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI1MDkwMzEzMDA0MVoXDTI1MTIwMjE0MDA0MVowLzEtMCsGA1UEAxMk NzVhMzQ3ODktNjRjMS00NjVmLWE4NTktMTM5MWQ1M2U1ODQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOI97ZI5MZSPYpdZrmIJKnGFol/xMKLZ31Hu YUbj7hWjvfpYtiIQPBVa5S4a/lNhXa5yHiAGs141xvWppRXb1P9bFY6Sm9O7qUiv tROkmo9Qm00KGQL2565xUsoFEhPyDiIPhcjkvJba3YS7lZsYpW5KOpFWYjq4gcg/ WGbwxCJwxqaQ8Y3TtDe8PpdraRTu+qMDZncK8GooeIMK/68CvbgVO3psWrlYIFSN 8xPDK0gaofX/d2DeZzHddJLDKgM7bihbhk0AM7746dONaVlZqcqc4eMx6klmcJt3 KOf6ZvXaM7TPb0aibhbnO74cBlj2UQwg1/dsaS3q/RaQOFhY+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpaTZXOx5ZQUzycovbNlsrWhXOTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvNTI4MjNhOWItNjFkNS0z OGExLTgyMDctZmJmMTk2ZGYzNzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwOGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKU2Cpnk+QeEA74sDQkXw/0Uz4riRgitDpMp900xxmZhMHUJ72mbPxR dM/foWaAo7bQ+3iMUxxGqT9frJp9sDXD522/QZzxqxsoFODHa7VKBkJ5X+haHyYc 4t1h11GNgvxgWWMrHjYjRe45/5tV/24ExF4yjtu51qmrHbQWic/f/ZgQ7SpmzskI Dd/33tKIb1E68dGvuJHqsAA/zhzv+0gH7RylOkHQaaGBsTBFYbvqZ7beDZW1lyR5 Sh5YUAL6fIJaJBPCBsU8ECsyTd+xzaELix9INjuNja6qyYiPx6ksFvqzem5nWIWm x3EYVftRBV/8Mqr6zL5v7sCY1l9xkKc= -----END CERTIFICATE-----Generated at Fri Oct 10 22:03:37 2025 by rpki-client