$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f3360526-fee0-3fc1-ab88-b46eab60006a.roa File: f3360526-fee0-3fc1-ab88-b46eab60006a.roa (raw, json) Hash identifier: y0syP+iKc42veq7ZgT5ku1LrKYqLOv2NHOqwIhjYosc= Subject key identifier: 4A:1D:75:4E:57:4C:C8:8E:05:52:D2:E2:BD:A3:0B:F8:AC:64:44:5E Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584BA7CCEC140D2739EA42403080 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f3360526-fee0-3fc1-ab88-b46eab60006a.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 393291 IP address blocks: 208.52.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:ec:14:0d:27:39:ea:42:40:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=83490cd2-b1ea-4848-90a9-07e959d63f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:18:cd:10:5a:9c:cb:1b:42:be:3f:ec:e2:46: c2:55:34:d8:0f:31:aa:4f:af:07:50:63:a8:9b:bc: c6:03:8a:b6:c0:09:6b:cd:b5:de:26:2f:b1:3b:47: a2:0c:bf:0d:de:f8:22:d6:73:22:b9:f2:e6:fa:bb: 50:fe:79:3c:c9:5a:c5:17:bb:bf:8d:7d:dd:ad:90: 8c:da:b2:97:dc:b4:bf:fa:a4:2b:46:65:d7:c0:35: df:50:04:c9:9c:89:92:3c:a5:84:c9:51:74:cc:e0: fc:13:bf:ec:41:97:4c:a7:6f:b5:29:23:15:ef:76: d2:5b:99:f0:a9:a7:99:65:2c:77:9f:82:d1:60:49: c7:2d:6d:28:30:13:12:63:30:31:61:9c:b0:7a:fb: e9:e1:d5:ec:d4:84:1d:fb:25:e8:a4:9e:66:3b:6a: a5:ab:2b:f5:a1:8a:7a:4e:fd:79:dd:4d:65:e4:ca: 6a:24:56:67:c8:8f:35:5c:b8:60:45:8d:ec:ac:a7: ee:9d:08:32:d7:00:1a:16:53:00:4b:c0:4a:70:4b: 3c:ca:9a:d6:55:39:6c:52:14:e6:94:c7:bc:f8:ba: 1f:66:11:52:ad:3c:e7:85:ef:d1:d1:43:a3:cb:da: 15:cb:ba:ce:e1:74:58:cf:6c:75:8b:15:b3:c2:28: f5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1D:75:4E:57:4C:C8:8E:05:52:D2:E2:BD:A3:0B:F8:AC:64:44:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f3360526-fee0-3fc1-ab88-b46eab60006a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 208.52.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:e0:04:5f:dc:a4:15:80:01:5a:74:4d:ba:72:dc:a2:3f:40: cc:cd:fd:3a:71:d0:be:7a:b6:46:2e:ac:77:bf:c8:e2:c0:c7: 43:52:34:de:b3:5b:20:87:cb:06:54:d3:d6:91:6f:46:90:ac: f4:86:27:b7:0a:b3:a3:1f:f9:9a:79:71:ae:8f:b7:35:9f:04: 98:ea:93:27:9b:1f:da:6c:69:7d:b1:a4:4d:4b:06:6d:f1:d8: 6f:95:2c:1c:cd:91:d0:b2:93:02:4d:5c:aa:33:bc:79:e7:f3: 40:e1:84:27:1d:6f:17:8b:15:a6:bb:06:4f:9a:7b:27:af:7e: 0e:e1:63:a6:47:b2:6d:b0:bc:6e:2c:81:c5:8c:c1:93:c2:5f: 58:b5:ee:61:6a:ff:1f:53:0c:58:4f:a9:dc:c0:9b:8b:c7:cd: 8b:f8:99:85:44:3c:64:03:81:df:4c:9a:e0:11:75:bd:5e:fc: 66:70:d7:e2:dd:9d:09:eb:c4:52:85:86:f0:58:18:7e:fd:dd: 54:10:e1:a8:ea:24:d9:ab:18:3c:68:3f:4d:0f:16:e3:47:f7: 89:c3:dc:d0:a1:b1:be:4a:f2:b5:32:24:db:20:a6:9f:7c:d3: 1a:8b:e9:68:45:d3:13:91:8f:90:90:c6:45:34:65:17:53:5b: f4:35:a3:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzOwUDSc56kJAMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk ODM0OTBjZDItYjFlYS00ODQ4LTkwYTktMDdlOTU5ZDYzZjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxjNEFqcyxtCvj/s4kbCVTTYDzGqT68HUGOo m7zGA4q2wAlrzbXeJi+xO0eiDL8N3vgi1nMiufLm+rtQ/nk8yVrFF7u/jX3drZCM 2rKX3LS/+qQrRmXXwDXfUATJnImSPKWEyVF0zOD8E7/sQZdMp2+1KSMV73bSW5nw qaeZZSx3n4LRYEnHLW0oMBMSYzAxYZywevvp4dXs1IQd+yXopJ5mO2qlqyv1oYp6 Tv153U1l5MpqJFZnyI81XLhgRY3srKfunQgy1wAaFlMAS8BKcEs8yprWVTlsUhTm lMe8+LofZhFSrTznhe/R0UOjy9oVy7rO4XRYz2x1ixWzwij1JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEoddU5XTMiOBVLS4r2jC/isZEReMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZjMzNjA1MjYtZmVlMC0z ZmMxLWFiODgtYjQ2ZWFiNjAwMDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DRSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3gBF/cpBWAAVp0Tbpy3KI/QMzN/Tpx0L56tkYurHe/yOLAx0NSNN6z WyCHywZU09aRb0aQrPSGJ7cKs6Mf+Zp5ca6PtzWfBJjqkyebH9psaX2xpE1LBm3x 2G+VLBzNkdCykwJNXKozvHnn80DhhCcdbxeLFaa7Bk+aeyevfg7hY6ZHsm2wvG4s gcWMwZPCX1i17mFq/x9TDFhPqdzAm4vHzYv4mYVEPGQDgd9MmuARdb1e/GZw1+Ld nQnrxFKFhvBYGH793VQQ4ajqJNmrGDxoP00PFuNH94nD3NChsb5K8rUyJNsgpp98 0xqL6WhF0xORj5CQxkU0ZRdTW/Q1o1Q= -----END CERTIFICATE-----Generated at Tue Nov 4 23:41:53 2025 by rpki-client