$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/db5ee974-efb8-37ae-8b96-c339cbc8523b.roa File: db5ee974-efb8-37ae-8b96-c339cbc8523b.roa (raw, json) Hash identifier: kXhM52GFlGq++Rvse6/drhT68WPe80WYz/WerIpRH9o= Subject key identifier: 62:A8:E3:8C:AA:AD:B4:2A:04:20:10:33:26:22:82:49:E6:00:A6:03 Certificate issuer: /CN=2f9f859b-6735-4c5f-8f00-0526da777ec4 Certificate serial: 010D0C9F4328584AF95144F6B9AE5BFD6486EEC0 Authority key identifier: 58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/db5ee974-efb8-37ae-8b96-c339cbc8523b.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 397966 IP address blocks: 170.205.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:44:f6:b9:ae:5b:fd:64:86:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f9f859b-6735-4c5f-8f00-0526da777ec4 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=a2500c37-f446-4556-a7a2-b4a71f1fbe3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:dd:f7:bb:98:fb:29:84:75:27:c6:7d:2f:71: 89:7a:dd:d5:16:c9:5b:13:3a:23:78:0e:41:e6:f1: a3:96:5d:a9:2a:86:f6:01:9c:f1:29:83:0c:37:f1: 5b:1c:bd:40:53:09:75:68:f5:01:82:5a:54:87:b2: a7:49:9d:7f:6d:2b:44:fd:90:ca:c6:2e:a2:2e:08: 56:74:87:aa:84:4d:4e:2c:84:19:9b:7c:ab:51:70: 02:0f:33:8c:e5:3c:f0:80:1b:f4:69:a3:d5:e5:da: 0d:24:6d:b0:4f:3e:75:23:a9:51:6a:99:85:7e:ce: db:3b:32:ca:c4:e8:c4:9f:12:c5:b7:e7:91:67:fa: 7e:d0:18:1c:44:cb:d5:16:8b:07:16:7a:da:dc:01: ce:c8:fe:17:0f:80:ff:5f:62:79:41:b7:f0:25:55: 26:3d:40:b6:5d:44:5a:4b:c6:8a:ec:4b:eb:e2:a3: 2f:bb:2f:7f:41:b5:d2:b9:47:bd:5b:14:58:4c:5a: ce:7d:8b:a5:d8:34:b2:63:e5:48:48:da:29:b0:b2: fa:eb:7b:dc:c6:ba:91:73:9c:0e:76:ef:e4:f9:73: 5e:51:95:ff:36:aa:7e:14:10:ec:62:f9:19:15:18: a1:57:82:f0:a5:95:c3:85:65:b2:2c:b8:c2:05:d7: a4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:A8:E3:8C:AA:AD:B4:2A:04:20:10:33:26:22:82:49:E6:00:A6:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/db5ee974-efb8-37ae-8b96-c339cbc8523b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl X509v3 Authority Key Identifier: keyid:58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer sbgp-ipAddrBlock: critical IPv4: 170.205.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:81:2e:eb:49:4d:22:9b:ea:87:2a:ef:4a:aa:e9:f8:92:3a: 53:09:50:63:56:fb:d6:17:e1:1d:d1:3b:d2:c0:62:7a:a4:26: f1:56:14:87:76:59:ff:9a:d7:6e:0b:bb:67:e5:6c:83:84:37: 55:28:7f:34:bd:2b:67:2c:b3:ae:7b:43:1e:65:ed:c4:e2:f3: e5:51:7a:32:ea:fc:f1:dd:f0:84:85:76:09:d3:75:56:c6:11: a8:12:ad:ec:65:e9:a2:10:05:85:09:25:f0:41:4f:bc:03:44: 1c:18:f1:8e:31:bb:c9:ee:f4:8f:d9:b0:5d:43:04:d4:37:89: 17:d6:78:c1:a3:59:c3:ef:b5:19:03:8a:92:05:90:02:7a:1e: dc:ef:5d:0c:fa:4f:32:e4:94:f4:65:32:50:af:ed:e1:a0:1e: ca:50:47:0f:a4:98:8c:d7:d5:80:14:af:bd:a7:3f:99:1e:ec: 27:e0:ea:9e:e2:11:f7:6e:0a:0f:07:01:52:14:a6:f5:90:05: 24:95:1c:19:da:22:74:3c:ba:4f:5e:06:6f:3c:33:02:63:8b: 4c:d4:db:34:fc:5d:79:e3:2e:0e:8a:3a:85:d0:ac:28:3b:66: 13:02:70:99:70:95:08:59:0b:e8:f1:91:92:85:5e:62:09:a1: e1:ed:9f:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UUT2ua5b/WSG7sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmY5Zjg1OWItNjczNS00YzVmLThmMDAtMDUyNmRhNzc3 ZWM0MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YTI1MDBjMzctZjQ0Ni00NTU2LWE3YTItYjRhNzFmMWZiZTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd33u5j7KYR1J8Z9L3GJet3VFslbEzojeA5B 5vGjll2pKob2AZzxKYMMN/FbHL1AUwl1aPUBglpUh7KnSZ1/bStE/ZDKxi6iLghW dIeqhE1OLIQZm3yrUXACDzOM5TzwgBv0aaPV5doNJG2wTz51I6lRapmFfs7bOzLK xOjEnxLFt+eRZ/p+0BgcRMvVFosHFnra3AHOyP4XD4D/X2J5QbfwJVUmPUC2XURa S8aK7Evr4qMvuy9/QbXSuUe9WxRYTFrOfYul2DSyY+VISNopsLL663vcxrqRc5wO du/k+XNeUZX/Nqp+FBDsYvkZFRihV4LwpZXDhWWyLLjCBdekEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKo44yqrbQqBCAQMyYigknmAKYDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yZjlm ODU5Yi02NzM1LTRjNWYtOGYwMC0wNTI2ZGE3NzdlYzQvZGI1ZWU5NzQtZWZiOC0z N2FlLThiOTYtYzMzOWNiYzg1MjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmY5Zjg1OWItNjczNS00YzVmLThm MDAtMDUyNmRhNzc3ZWM0LzJmOWY4NTliLTY3MzUtNGM1Zi04ZjAwLTA1MjZkYTc3 N2VjNC5jcmwwHwYDVR0jBBgwFoAUWI+fR0ta6F5LtvUPbC68dpiUqyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yZjlmODU5Yi02NzM1LTRjNWYtOGYwMC0wNTI2 ZGE3NzdlYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqs01MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCBLutJTSKb6ocq70qq6fiSOlMJUGNW+9YX4R3RO9LAYnqkJvFWFId2 Wf+a124Lu2flbIOEN1UofzS9K2css657Qx5l7cTi8+VRejLq/PHd8ISFdgnTdVbG EagSrexl6aIQBYUJJfBBT7wDRBwY8Y4xu8nu9I/ZsF1DBNQ3iRfWeMGjWcPvtRkD ipIFkAJ6HtzvXQz6TzLklPRlMlCv7eGgHspQRw+kmIzX1YAUr72nP5ke7Cfg6p7i EfduCg8HAVIUpvWQBSSVHBnaInQ8uk9eBm88MwJji0zU2zT8XXnjLg6KOoXQrCg7 ZhMCcJlwlQhZC+jxkZKFXmIJoeHtn14= -----END CERTIFICATE-----Generated at Fri Sep 19 14:32:19 2025 by rpki-client