$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/52bbdc2f-bbde-3036-8aca-e24454a54d90.roa File: 52bbdc2f-bbde-3036-8aca-e24454a54d90.roa (raw, json) Hash identifier: Fxf+SkhZP7XY744UnOIGEY2hxMda2mPamnarbGe7Qtc= Subject key identifier: BA:5E:F7:15:02:54:3F:B7:92:E6:20:88:E5:78:B9:CC:61:B5:48:94 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B6A61F139729C17A5A295EF80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/52bbdc2f-bbde-3036-8aca-e24454a54d90.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 2000 IP address blocks: 192.41.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:f1:39:72:9c:17:a5:a2:95:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=7a1e4c2e-ac67-4814-88d7-8d02b1543300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8c:f6:ff:cf:54:e8:16:13:82:39:6c:b1:fd: a0:4d:a2:6b:a8:97:75:a0:be:37:72:59:87:b1:05: f4:4b:4a:b6:fb:bc:a1:f1:b7:52:fc:8e:92:a9:6e: f0:1e:f5:e5:16:fe:0b:55:e6:2a:ce:2b:28:60:95: 3c:1a:dc:94:7e:a7:4c:9c:4d:61:d2:39:01:d0:6b: 2e:ce:22:7f:15:cf:17:f7:dd:28:6e:b0:41:9a:52: c8:f9:56:b2:45:15:57:ad:74:5f:1c:32:76:6f:3f: 19:83:e2:94:02:5a:88:01:a5:55:fe:48:26:15:82: 04:96:28:db:b2:f5:12:78:f7:fa:83:3c:d3:a5:ee: fe:5e:08:27:30:87:15:86:10:ea:65:56:9e:d8:19: a4:43:65:d3:44:d5:c6:27:ae:66:86:00:21:99:d7: ac:2c:a7:11:b4:98:4b:2e:aa:62:6e:e3:66:2c:a2: fe:1c:f9:1c:fa:7c:60:e0:b8:a4:2d:f1:36:2f:41: 0d:5c:91:d7:d6:4b:a4:35:d3:97:c8:50:3c:7c:73: cf:54:86:7d:c6:ba:7f:ab:c7:e4:c7:0c:2b:81:f9: 16:19:84:dc:c6:8c:05:b9:c1:72:48:86:7c:60:7f: 2d:87:c9:28:6e:16:b9:8d:5c:d8:1f:10:99:61:9f: b8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:5E:F7:15:02:54:3F:B7:92:E6:20:88:E5:78:B9:CC:61:B5:48:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/52bbdc2f-bbde-3036-8aca-e24454a54d90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 192.41.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:6c:ce:03:31:f7:c0:c7:a3:4d:56:40:4a:a7:6e:80:90:f0: 6e:0b:03:11:94:af:38:9d:6f:94:b7:70:d0:8b:17:cc:ea:d0: 77:c8:0a:f4:d9:cb:df:d1:57:cc:25:03:30:aa:27:6b:c9:8f: aa:e6:d1:7e:c7:bd:05:56:38:ec:56:cc:e8:85:3b:6d:96:71: 37:34:24:12:d4:95:61:05:27:98:f7:13:80:eb:16:34:cd:7c: 23:5e:e8:f5:0c:a0:39:9a:ef:96:88:a1:ae:8f:e8:e5:83:74: 29:2e:92:4b:39:bb:28:8d:95:d5:bd:dd:55:bc:ba:6d:d5:a7: e9:5e:36:ae:51:95:bf:6e:e3:b4:3e:ef:ac:bc:11:f6:92:b0: 15:ec:cc:77:f4:11:1c:7e:86:8a:f0:d9:0c:fb:04:21:d8:fd: 7d:70:8b:1a:9d:b2:12:99:10:09:ea:36:d7:60:66:eb:6e:b3: 2e:d1:6c:87:a4:39:3f:12:8a:bd:fb:5c:05:68:79:df:38:24: 1c:70:b1:f2:ba:9e:27:f9:fd:73:fb:c6:b7:99:24:f8:be:a5: 9c:b9:2d:de:ce:f6:91:3d:2d:35:69:d7:b4:a5:4b:46:93:81: e2:80:9b:5a:57:64:3a:8c:96:4a:b0:40:5a:c3:e4:33:af:9b: 8a:7c:36:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtqYfE5cpwXpaKV74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk N2ExZTRjMmUtYWM2Ny00ODE0LTg4ZDctOGQwMmIxNTQzMzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4z2/89U6BYTgjlssf2gTaJrqJd1oL43clmH sQX0S0q2+7yh8bdS/I6SqW7wHvXlFv4LVeYqzisoYJU8GtyUfqdMnE1h0jkB0Gsu ziJ/Fc8X990obrBBmlLI+VayRRVXrXRfHDJ2bz8Zg+KUAlqIAaVV/kgmFYIElijb svUSePf6gzzTpe7+XggnMIcVhhDqZVae2BmkQ2XTRNXGJ65mhgAhmdesLKcRtJhL LqpibuNmLKL+HPkc+nxg4LikLfE2L0ENXJHX1kukNdOXyFA8fHPPVIZ9xrp/q8fk xwwrgfkWGYTcxowFucFySIZ8YH8th8kobha5jVzYHxCZYZ+4RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpe9xUCVD+3kuYgiOV4ucxhtUiUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNTJiYmRjMmYtYmJkZS0z MDM2LThhY2EtZTI0NDU0YTU0ZDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCmrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlszgMx98DHo01WQEqnboCQ8G4LAxGUrzidb5S3cNCLF8zq0HfICvTZ y9/RV8wlAzCqJ2vJj6rm0X7HvQVWOOxWzOiFO22WcTc0JBLUlWEFJ5j3E4DrFjTN fCNe6PUMoDma75aIoa6P6OWDdCkukks5uyiNldW93VW8um3Vp+leNq5Rlb9u47Q+ 76y8EfaSsBXszHf0ERx+horw2Qz7BCHY/X1wixqdshKZEAnqNtdgZutusy7RbIek OT8Sir37XAVoed84JBxwsfK6nif5/XP7xreZJPi+pZy5Ld7O9pE9LTVp17SlS0aT geKAm1pXZDqMlkqwQFrD5DOvm4p8NgM= -----END CERTIFICATE-----Generated at Wed Nov 5 01:25:07 2025 by rpki-client