$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/3d97d649-dd61-39e8-94b1-2e5a345cf305.roa File: 3d97d649-dd61-39e8-94b1-2e5a345cf305.roa (raw, json) Hash identifier: z0PhWrsT82gLdxntrXYsZEpmB/mJTREfFg7diq2wvvg= Subject key identifier: 57:BC:62:40:FA:3D:2B:36:C6:B1:1D:19:ED:8A:DA:99:14:BA:C4:4E Certificate issuer: /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Certificate serial: 010D0C9F4328584AADF119B46F7E2C06E7E26DA0 Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/3d97d649-dd61-39e8-94b1-2e5a345cf305.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 11775 IP address blocks: 192.149.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:19:b4:6f:7e:2c:06:e7:e2:6d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=7e2bbe6f-bca9-48d3-8cf2-ad047763fbee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e3:ec:85:bf:56:cc:63:72:30:51:2c:da:c1: 40:8b:61:75:d1:27:17:79:8c:98:32:26:06:33:6d: 28:70:17:98:db:85:4a:7a:c8:fe:ca:d7:ce:54:df: ec:93:1a:21:2c:ac:5e:8f:02:6e:94:9c:db:9f:d2: b6:89:11:c5:b4:93:ec:eb:41:08:cd:37:b6:14:aa: ff:c3:ce:08:84:d3:70:d9:e0:c0:5c:ef:ae:0a:fe: 01:47:4a:36:2d:59:fc:02:02:d2:6d:37:94:b9:43: 5f:c3:3a:60:6e:4a:df:88:02:c9:cb:dc:cd:f8:d9: 7b:d3:e2:ca:25:e8:63:ab:7a:40:d4:50:82:f6:58: 3e:f2:57:30:95:c4:85:e2:b3:80:3b:fa:f3:70:51: 16:c7:65:92:d9:c6:0c:35:bb:65:8c:40:96:ec:f7: 8d:38:b0:47:1e:d0:52:a5:e5:03:16:1f:2b:4b:22: 0a:76:fb:7e:46:cc:21:e8:3f:7c:c3:81:cf:c9:36: 36:d1:01:c4:b0:92:cc:d7:f1:38:89:be:81:57:69: 1c:48:36:b7:89:3e:53:44:16:fb:26:80:87:49:9b: 76:f5:b5:b5:16:20:b0:5b:f5:f0:82:e2:68:9c:19: da:79:50:c6:59:21:05:eb:b4:7b:14:68:85:ed:48: f5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:BC:62:40:FA:3D:2B:36:C6:B1:1D:19:ED:8A:DA:99:14:BA:C4:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/3d97d649-dd61-39e8-94b1-2e5a345cf305.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl X509v3 Authority Key Identifier: keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer sbgp-ipAddrBlock: critical IPv4: 192.149.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:18:99:b2:fa:bf:d1:ef:db:c2:86:9e:8b:77:13:81:4c:1d: 81:85:ca:33:ca:0d:86:dd:7f:81:87:64:3b:45:2d:62:75:72: 25:48:57:1f:a1:5b:37:4e:d6:e2:48:58:e5:cc:82:2a:37:38: e4:a5:5f:b8:7b:5f:61:19:70:9e:f3:b3:e5:f3:19:1d:e0:8c: 41:b7:d5:56:15:97:a7:03:71:30:9b:6a:f5:06:e7:b3:7a:9e: 34:b9:28:60:fd:1c:80:6d:9c:18:71:44:b1:95:ea:01:e1:11: 32:28:08:34:c6:a4:42:3e:3b:fb:8c:3d:3c:88:73:2b:8d:ac: 35:bd:a0:8d:61:60:07:bf:1a:58:4f:5e:6d:70:0d:b1:ee:da: 50:72:f8:b2:49:ef:be:97:35:cb:e6:5a:b2:f0:4a:54:06:8d: c9:2d:d0:a3:b7:74:9f:0e:0c:51:99:1c:53:69:06:bd:a3:0e: c6:04:f2:27:8d:a7:8c:f4:8a:2c:37:43:15:e9:fe:32:39:9f: e6:15:59:6e:1b:ad:61:49:9d:67:bb:1f:90:e3:9f:70:1b:e4: e6:c5:c5:38:0b:e7:09:fb:1c:97:59:b9:1d:40:4e:aa:3f:ed: 37:68:5a:a7:b6:df:8f:cc:b0:e4:b0:23:17:95:d3:8e:f5:63: c8:59:a8:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8Rm0b34sBufibaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlN2I5NmQtMGFhNS00MDJhLWIyZmUtMzM3ZDdjMjA3 ZWVlMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk N2UyYmJlNmYtYmNhOS00OGQzLThjZjItYWQwNDc3NjNmYmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxePshb9WzGNyMFEs2sFAi2F10ScXeYyYMiYG M20ocBeY24VKesj+ytfOVN/skxohLKxejwJulJzbn9K2iRHFtJPs60EIzTe2FKr/ w84IhNNw2eDAXO+uCv4BR0o2LVn8AgLSbTeUuUNfwzpgbkrfiALJy9zN+Nl70+LK Jehjq3pA1FCC9lg+8lcwlcSF4rOAO/rzcFEWx2WS2cYMNbtljECW7PeNOLBHHtBS peUDFh8rSyIKdvt+Rswh6D98w4HPyTY20QHEsJLM1/E4ib6BV2kcSDa3iT5TRBb7 JoCHSZt29bW1FiCwW/XwguJonBnaeVDGWSEF67R7FGiF7Uj1QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFe8YkD6PSs2xrEdGe2K2pkUusROMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3 Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdkN2MyMDdlZWUvM2Q5N2Q2NDktZGQ2MS0z OWU4LTk0YjEtMmU1YTM0NWNmMzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlN2I5NmQtMGFhNS00MDJhLWIy ZmUtMzM3ZDdjMjA3ZWVlLzUyZTdiOTZkLTBhYTUtNDAyYS1iMmZlLTMzN2Q3YzIw N2VlZS5jcmwwHwYDVR0jBBgwFoAUm2pshpw0IMSPY6IRpANBGtJdnzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdk N2MyMDdlZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJUnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYYmbL6v9Hv28KGnot3E4FMHYGFyjPKDYbdf4GHZDtFLWJ1ciVIVx+h WzdO1uJIWOXMgio3OOSlX7h7X2EZcJ7zs+XzGR3gjEG31VYVl6cDcTCbavUG57N6 njS5KGD9HIBtnBhxRLGV6gHhETIoCDTGpEI+O/uMPTyIcyuNrDW9oI1hYAe/GlhP Xm1wDbHu2lBy+LJJ776XNcvmWrLwSlQGjckt0KO3dJ8ODFGZHFNpBr2jDsYE8ieN p4z0iiw3QxXp/jI5n+YVWW4brWFJnWe7H5Djn3Ab5ObFxTgL5wn7HJdZuR1ATqo/ 7TdoWqe234/MsOSwIxeV0471Y8hZqA8= -----END CERTIFICATE-----Generated at Wed Aug 6 16:25:44 2025 by rpki-client