$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa File: 4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa (raw, json) Hash identifier: 4A9FywUU9UGI//x/4Zz2yVsU/SnV4Vsb4DaL/mgaA6s= Subject key identifier: 17:52:CD:0C:DB:02:8D:1D:15:2D:D0:FD:45:E9:9D:83:2E:D9:89:CC Certificate issuer: /CN=8d60336b-4b3c-49eb-bfd7-d9803f7bad6b Certificate serial: 010D0C9F4328584AC2E102A0729C7A462F6BCE00 Authority key identifier: 86:BE:7E:29:E1:7E:56:79:69:EF:A8:7B:77:3C:B8:8B:18:D3:29:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 394875 IP address blocks: 52.144.25.0/24 maxlen: 24 2620:f9:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:02:a0:72:9c:7a:46:2f:6b:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d60336b-4b3c-49eb-bfd7-d9803f7bad6b Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=cbafae96-c63f-4f93-9399-687f1a748878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:32:16:ad:7b:2a:72:d3:55:21:14:92:2f:66: 09:16:c3:d3:3e:ff:07:e8:27:94:21:e4:30:65:63: e1:79:e3:d6:2a:52:4b:8e:0c:a7:c0:73:3f:24:18: b5:31:e9:21:cd:08:d9:64:a4:64:25:e6:86:24:f4: ea:4b:d2:92:6d:be:59:41:62:b6:21:11:d0:e7:69: 3b:8a:9c:a2:ed:e5:09:b7:ee:ac:42:be:f8:0f:18: f4:a2:a2:9c:ed:67:71:90:b6:4c:d6:95:c7:80:42: 7b:61:7a:92:d9:dc:da:43:a8:2e:b7:d5:96:c5:b9: 7d:d3:22:40:08:f7:38:50:3b:ca:70:b5:58:26:4b: 4d:0c:d0:0f:01:62:8a:c5:e2:10:b1:74:26:8f:60: 46:a1:79:20:ec:76:09:84:83:af:45:84:08:c7:9c: f2:cf:73:6d:b1:bc:fb:81:db:b3:2f:d2:70:6a:32: ca:8a:a0:79:30:7e:7a:83:8a:0c:03:74:14:f5:43: b9:4a:46:4a:ce:8a:53:51:13:13:d3:bb:1f:92:ab: dc:78:82:3c:3a:dc:26:01:d7:79:32:de:a4:33:ac: 4e:1b:73:79:e0:4e:3b:3d:cb:02:1e:ba:ce:67:b0: 9f:f1:03:a5:16:d7:e1:c8:1b:5b:85:1d:5b:b0:8f: 88:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:52:CD:0C:DB:02:8D:1D:15:2D:D0:FD:45:E9:9D:83:2E:D9:89:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/4ced6386-4da1-3e4b-a927-db44a9ad28e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.crl X509v3 Authority Key Identifier: keyid:86:BE:7E:29:E1:7E:56:79:69:EF:A8:7B:77:3C:B8:8B:18:D3:29:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d60336b-4b3c-49eb-bfd7-d9803f7bad6b.cer sbgp-ipAddrBlock: critical IPv4: 52.144.25.0/24 IPv6: 2620:f9:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:c4:d7:5f:2c:5c:80:58:b2:2f:1a:2d:65:6a:f3:e8:1d:e3: 61:be:1c:14:67:0d:ce:b2:42:d1:b6:37:f1:43:b9:38:0b:2e: 46:28:f3:2a:34:05:c6:b8:0f:bc:5b:8e:ba:15:d9:9a:bf:6a: 02:9b:84:17:84:58:e0:01:6d:43:2b:99:72:6a:f1:5c:b5:25: 7e:15:4b:48:24:89:46:0f:3d:93:cf:d8:e1:20:9a:05:c9:b2: 2e:f3:16:c8:55:4e:95:ae:b0:6b:06:2a:24:60:0a:fd:1f:68: f3:15:c1:6c:5e:ba:66:56:99:5b:37:c8:87:44:06:0c:0c:62: 19:fb:f3:7f:ef:b5:0d:70:ae:c4:53:04:70:b8:4e:34:56:08: db:5e:94:f1:fc:1c:f1:5e:29:20:5a:90:fd:0e:2a:b9:ac:a6: 26:48:47:c4:18:41:31:3e:37:d4:a1:f5:0e:42:33:43:8f:49: 78:de:53:46:95:1e:33:d0:02:8e:eb:44:1c:b0:dc:f4:f2:ca: 34:ce:af:15:03:2f:5f:21:ab:bd:95:b5:aa:aa:18:ee:b2:70: 9f:5d:c3:4b:e8:86:34:1d:a6:7f:bf:4c:29:bc:07:d4:6a:30: a4:57:98:0f:92:50:d9:46:92:88:35:f5:4e:67:9e:1b:a5:dc: c0:fc:94:19 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWErC4QKgcpx6Ri9rzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ2MDMzNmItNGIzYy00OWViLWJmZDctZDk4MDNmN2Jh ZDZiMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk Y2JhZmFlOTYtYzYzZi00ZjkzLTkzOTktNjg3ZjFhNzQ4ODc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DIWrXsqctNVIRSSL2YJFsPTPv8H6CeUIeQw ZWPheePWKlJLjgynwHM/JBi1MekhzQjZZKRkJeaGJPTqS9KSbb5ZQWK2IRHQ52k7 ipyi7eUJt+6sQr74Dxj0oqKc7WdxkLZM1pXHgEJ7YXqS2dzaQ6gut9WWxbl90yJA CPc4UDvKcLVYJktNDNAPAWKKxeIQsXQmj2BGoXkg7HYJhIOvRYQIx5zyz3Ntsbz7 gduzL9JwajLKiqB5MH56g4oMA3QU9UO5SkZKzopTURMT07sfkqvceII8OtwmAdd5 Mt6kM6xOG3N54E47PcsCHrrOZ7Cf8QOlFtfhyBtbhR1bsI+IoQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFBdSzQzbAo0dFS3Q/UXpnYMu2YnMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZDYw MzM2Yi00YjNjLTQ5ZWItYmZkNy1kOTgwM2Y3YmFkNmIvNGNlZDYzODYtNGRhMS0z ZTRiLWE5MjctZGI0NGE5YWQyOGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGQ2MDMzNmItNGIzYy00OWViLWJm ZDctZDk4MDNmN2JhZDZiLzhkNjAzMzZiLTRiM2MtNDllYi1iZmQ3LWQ5ODAzZjdi YWQ2Yi5jcmwwHwYDVR0jBBgwFoAUhr5+KeF+Vnlp76h7dzy4ixjTKaAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZDYwMzM2Yi00YjNjLTQ5ZWItYmZkNy1kOTgw M2Y3YmFkNmIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQANJAZMA8E AgACMAkDBwAmIAD5QAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAaMTXXyxcgFiyLxotZWrz6B3jYb4cFGcN zrJC0bY38UO5OAsuRijzKjQFxrgPvFuOuhXZmr9qApuEF4RY4AFtQyuZcmrxXLUl fhVLSCSJRg89k8/Y4SCaBcmyLvMWyFVOla6wawYqJGAK/R9o8xXBbF66ZlaZWzfI h0QGDAxiGfvzf++1DXCuxFMEcLhONFYI216U8fwc8V4pIFqQ/Q4quaymJkhHxBhB MT431KH1DkIzQ49JeN5TRpUeM9ACjutEHLDc9PLKNM6vFQMvXyGrvZW1qqoY7rJw n13DS+iGNB2mf79MKbwH1GowpFeYD5JQ2UaSiDX1TmeeG6XcwPyUGQ== -----END CERTIFICATE-----Generated at Sat Aug 9 20:48:38 2025 by rpki-client