$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ef2511a8-64fd-3b20-9d27-9cf4a0275497.roa File: ef2511a8-64fd-3b20-9d27-9cf4a0275497.roa (raw, json) Hash identifier: VCcGR7DQoyFUW0raqabXefcBIwI3HS+SHVQtoydtIk4= Subject key identifier: F8:0F:79:5D:BD:72:22:36:6D:15:86:4C:9E:E5:72:BD:40:0E:80:03 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584B13D6ED08C998D2058E4DEE00 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ef2511a8-64fd-3b20-9d27-9cf4a0275497.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 54113 IP address blocks: 157.52.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:ed:08:c9:98:d2:05:8e:4d:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=f4cf9a55-cb6c-490a-a6ea-c456575aab2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:35:f1:1f:b1:5b:10:ca:3d:2e:3b:b4:6e:13: 08:0a:0c:bc:79:a4:79:13:71:7f:59:48:b8:d9:c6: f2:3d:81:66:2e:a3:1a:03:ce:bb:25:9b:4f:29:ce: 10:1a:bf:ba:52:9c:4a:79:4e:84:16:26:26:ad:6d: 43:1d:da:ba:6d:69:6d:aa:51:24:00:e2:79:8c:9d: c8:f1:84:eb:88:8a:e5:fb:12:69:87:a0:11:43:31: 75:c6:77:c5:e5:8a:9e:d5:f7:53:c2:7d:37:8b:8e: dd:44:e0:ac:30:51:c2:24:20:75:54:6b:f7:6c:06: 8d:22:f2:db:16:ff:35:6a:27:de:d8:20:34:1f:f4: 25:23:e1:be:a4:4a:9b:78:c7:5a:d5:ac:29:37:f9: 83:46:6e:3a:35:37:1e:42:8f:d7:89:99:78:e8:e7: 57:60:80:d3:ae:5b:72:76:86:da:33:fc:49:61:e7: b0:5e:fb:97:6e:c7:d3:18:3b:e8:97:4e:2c:a6:da: ba:cb:70:fd:a2:1e:cf:cc:a7:50:2d:f4:eb:11:a2: 5e:e8:53:bf:d5:cd:0f:b7:14:71:6e:63:85:de:8f: 45:8b:e0:55:15:de:e3:87:d7:a4:48:70:29:3f:48: c0:c9:b8:69:3b:cd:7e:83:8a:b6:af:e4:6e:5d:d0: b6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:0F:79:5D:BD:72:22:36:6D:15:86:4C:9E:E5:72:BD:40:0E:80:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ef2511a8-64fd-3b20-9d27-9cf4a0275497.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 157.52.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:e4:ad:f6:93:a9:75:8d:1e:60:79:ec:ac:b4:c2:2b:0f:8a: 02:f8:1d:e0:b0:57:15:41:fc:2d:15:6a:39:63:d4:f2:07:59: 66:af:7e:fa:84:83:a0:b5:a2:d2:0c:07:93:4e:1e:17:51:c4: a4:56:72:5b:96:ac:55:d3:3c:7b:45:40:df:db:06:de:ae:17: 61:bc:bd:a0:0d:e8:43:77:45:a0:8f:25:0b:3b:e8:ca:a8:90: 2d:46:ff:41:78:04:e6:bb:dc:74:af:ba:05:c5:75:e4:23:57: 63:99:55:6c:78:c8:5f:73:f4:69:90:3f:eb:81:8e:91:49:6f: a7:b8:f4:dd:47:f4:65:99:9c:2d:9c:e3:76:91:89:6f:e9:da: f6:43:7d:57:52:09:96:e3:67:04:68:a9:d5:07:3d:a7:ea:d6: 10:6f:e9:ea:3c:2e:0b:23:8c:27:1a:3d:93:23:4d:c5:eb:85: 92:b9:ac:83:e0:59:96:6b:9f:58:e0:ac:8d:6d:73:f0:07:eb: c8:9b:ce:04:6c:27:b7:74:93:66:8e:0f:a9:50:48:77:44:02: c6:45:ad:30:89:36:a0:07:1b:ed:c9:a9:18:a4:d5:bb:c4:b9: 3e:7c:be:04:1e:fe:2c:59:99:a9:d9:2c:82:f3:15:15:2f:57: 0b:00:0a:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1u0IyZjSBY5N7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk ZjRjZjlhNTUtY2I2Yy00OTBhLWE2ZWEtYzQ1NjU3NWFhYjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jXxH7FbEMo9Lju0bhMICgy8eaR5E3F/WUi4 2cbyPYFmLqMaA867JZtPKc4QGr+6UpxKeU6EFiYmrW1DHdq6bWltqlEkAOJ5jJ3I 8YTriIrl+xJph6ARQzF1xnfF5Yqe1fdTwn03i47dROCsMFHCJCB1VGv3bAaNIvLb Fv81aife2CA0H/QlI+G+pEqbeMda1awpN/mDRm46NTceQo/XiZl46OdXYIDTrlty dobaM/xJYeewXvuXbsfTGDvol04sptq6y3D9oh7PzKdQLfTrEaJe6FO/1c0PtxRx bmOF3o9Fi+BVFd7jh9ekSHApP0jAybhpO81+g4q2r+RuXdC2WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgPeV29ciI2bRWGTJ7lcr1ADoADMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZWYyNTExYTgtNjRmZC0z YjIwLTlkMjctOWNmNGEwMjc1NDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnTRUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7krfaTqXWNHmB57Ky0wisPigL4HeCwVxVB/C0Vajlj1PIHWWavfvqE g6C1otIMB5NOHhdRxKRWcluWrFXTPHtFQN/bBt6uF2G8vaAN6EN3RaCPJQs76Mqo kC1G/0F4BOa73HSvugXFdeQjV2OZVWx4yF9z9GmQP+uBjpFJb6e49N1H9GWZnC2c 43aRiW/p2vZDfVdSCZbjZwRoqdUHPafq1hBv6eo8LgsjjCcaPZMjTcXrhZK5rIPg WZZrn1jgrI1tc/AH68ibzgRsJ7d0k2aOD6lQSHdEAsZFrTCJNqAHG+3JqRik1bvE uT58vgQe/ixZmanZLILzFRUvVwsACsU= -----END CERTIFICATE-----Generated at Wed Nov 5 11:58:28 2025 by rpki-client