$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f2bf5543-269c-3fbb-bb59-b3484366fb78.roa File: f2bf5543-269c-3fbb-bb59-b3484366fb78.roa (raw, json) Hash identifier: TILoCCzlfDM3i+8fphCViDCSNcVD0o0cALC/gxIGLmE= Subject key identifier: 58:B8:E4:78:5E:37:B9:A4:97:15:24:08:60:84:48:34:71:80:F4:3D Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584B68FC9A1C59D3D195B15DB280 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f2bf5543-269c-3fbb-bb59-b3484366fb78.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 398420 IP address blocks: 208.89.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:9a:1c:59:d3:d1:95:b1:5d:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=83b796c0-46c6-4207-baca-75dddb434112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:cd:14:0f:b4:85:b2:12:3c:8f:e9:89:ca:63: 76:43:87:d3:ec:60:d9:c7:0d:b5:73:bd:2b:22:23: 5a:43:1c:81:af:3b:91:2f:7a:9b:f5:27:57:62:96: e2:29:f1:e9:fd:cb:a3:1e:77:e9:cb:a3:81:30:e2: d6:54:9e:6f:3b:ee:9d:02:28:3c:a8:d9:ca:82:23: 27:aa:ef:71:e7:bc:38:cc:e4:f5:9f:f9:74:3f:57: 42:f0:07:95:72:25:f8:b4:7a:0b:6b:39:8f:1d:4f: a4:a3:74:40:11:2b:2a:8a:13:90:87:04:f5:d5:ca: 57:63:61:39:a4:2e:37:a9:78:e7:cb:fb:60:b7:da: ba:47:1e:6d:fe:3a:5a:ca:72:b5:08:af:c9:1b:dd: d3:30:b2:70:9c:80:7a:63:3c:66:c2:9c:c5:7c:e5: 1b:09:9b:c6:22:1d:39:ff:0f:6f:5f:37:7e:73:ca: b8:f1:67:98:75:38:1e:03:48:ac:af:de:53:63:49: 10:37:77:f6:43:0e:69:33:43:3f:d2:87:c9:a2:03: 58:0a:9e:fa:22:26:7a:e2:90:38:bf:27:9e:ea:e0: 45:ac:94:fd:a4:0d:ce:02:26:9a:3c:57:b9:95:88: 83:91:81:96:a3:71:e4:63:80:41:86:f0:56:92:14: f6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B8:E4:78:5E:37:B9:A4:97:15:24:08:60:84:48:34:71:80:F4:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f2bf5543-269c-3fbb-bb59-b3484366fb78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 208.89.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:ea:0b:cc:5c:49:7e:b1:2d:b9:80:7f:8d:1c:55:22:75:02: 89:53:8c:c6:18:de:6f:28:cb:df:d3:df:8d:05:f7:8b:e1:f5: 2f:df:c3:ab:af:45:eb:79:15:55:f4:9d:45:1b:e0:03:22:b1: 48:19:d2:ed:69:94:f3:57:51:11:71:4c:53:40:44:a5:a5:51: 2d:a9:a3:1b:46:20:3e:ef:48:19:39:c6:33:8e:df:57:4a:52: 5a:08:f6:c8:62:92:c2:17:ba:9e:0d:f6:29:08:ca:e3:11:0f: d5:d8:7f:13:9d:22:de:84:32:50:a1:2e:3a:c0:1c:74:33:6b: 8b:8c:d2:3a:0f:50:8f:bd:34:5e:28:8a:37:a4:04:27:f9:aa: 71:0d:ea:72:59:6e:a8:e8:9c:47:1d:f1:1b:d9:c1:38:f3:de: b9:ae:a0:99:16:1c:08:e9:4a:fa:8b:cd:68:cf:5c:82:9c:74: 98:25:7c:7e:c6:c0:52:16:e1:b7:3c:4a:c7:45:0a:0a:0c:95: 85:c9:ec:05:79:26:3f:73:dd:6c:10:46:dd:71:74:cf:6c:49: 18:c4:aa:d2:a8:8b:20:7f:d3:b5:b4:c7:b9:d4:9d:7a:9e:e7: 6a:6d:90:f6:e0:d3:e8:2c:71:f2:19:4c:41:ee:10:0c:b3:0d: fc:25:ab:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/JocWdPRlbFdsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk ODNiNzk2YzAtNDZjNi00MjA3LWJhY2EtNzVkZGRiNDM0MTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAks0UD7SFshI8j+mJymN2Q4fT7GDZxw21c70r IiNaQxyBrzuRL3qb9SdXYpbiKfHp/cujHnfpy6OBMOLWVJ5vO+6dAig8qNnKgiMn qu9x57w4zOT1n/l0P1dC8AeVciX4tHoLazmPHU+ko3RAESsqihOQhwT11cpXY2E5 pC43qXjny/tgt9q6Rx5t/jpaynK1CK/JG93TMLJwnIB6YzxmwpzFfOUbCZvGIh05 /w9vXzd+c8q48WeYdTgeA0isr95TY0kQN3f2Qw5pM0M/0ofJogNYCp76IiZ64pA4 vyee6uBFrJT9pA3OAiaaPFe5lYiDkYGWo3HkY4BBhvBWkhT2SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFi45HheN7mklxUkCGCESDRxgPQ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvZjJiZjU1NDMtMjY5Yy0z ZmJiLWJiNTktYjM0ODQzNjZmYjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Fk0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbqC8xcSX6xLbmAf40cVSJ1AolTjMYY3m8oy9/T340F94vh9S/fw6uv Ret5FVX0nUUb4AMisUgZ0u1plPNXURFxTFNARKWlUS2poxtGID7vSBk5xjOO31dK UloI9shiksIXup4N9ikIyuMRD9XYfxOdIt6EMlChLjrAHHQza4uM0joPUI+9NF4o ijekBCf5qnEN6nJZbqjonEcd8RvZwTjz3rmuoJkWHAjpSvqLzWjPXIKcdJglfH7G wFIW4bc8SsdFCgoMlYXJ7AV5Jj9z3WwQRt1xdM9sSRjEqtKoiyB/07W0x7nUnXqe 52ptkPbg0+gscfIZTEHuEAyzDfwlq5Y= -----END CERTIFICATE-----Generated at Wed Nov 5 13:04:21 2025 by rpki-client