$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/0f8ae786-dc97-39ef-a9ff-9b818aad1f99.roa File: 0f8ae786-dc97-39ef-a9ff-9b818aad1f99.roa (raw, json) Hash identifier: yjqQPzGKFsemPZ/A0NnmipzY+8sRlKPECmpRHGp2z6g= Subject key identifier: 60:88:17:75:5A:BC:12:DD:F9:9B:48:F9:BC:D6:6D:5C:FB:37:5E:18 Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b Certificate serial: 010D0C9F4328584B970CD2C7CEDC99C17D3BEF80 Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/0f8ae786-dc97-39ef-a9ff-9b818aad1f99.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 52.129.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:d2:c7:ce:dc:99:c1:7d:3b:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=df121412-6e49-43fa-8448-87bad1fc97cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f4:84:9d:1b:aa:a6:a1:f8:de:33:03:5c:86: 32:19:c0:a6:38:38:2e:53:45:1f:b4:b8:40:62:61: 67:b0:b7:be:fc:3f:cc:f0:3a:e3:dd:13:e8:d5:4d: 46:33:b1:32:af:30:9d:0f:e9:d9:ba:52:04:f3:92: 07:52:1f:57:cb:fa:f5:5b:c6:30:03:fc:29:d0:f1: 17:88:45:4e:e7:b9:ed:d4:2a:ed:c1:f6:b5:1d:88: 11:81:6d:95:37:ff:1c:8e:08:37:2a:ae:62:77:a9: 39:f5:0b:99:53:54:47:8b:01:90:99:76:74:00:47: be:5a:5e:ca:1c:93:a2:67:3f:2b:75:ad:5f:36:c3: 80:6a:03:a0:03:84:69:e7:76:6c:82:3e:be:b0:be: 5d:9d:88:c0:52:87:82:60:56:b4:62:4a:d1:91:30: 5c:4b:cc:1c:0c:4a:85:11:9a:94:c4:57:38:ee:1d: fe:46:b0:8a:87:19:ef:4e:f4:6b:1b:9c:6c:ab:32: 21:5d:19:5f:9c:40:22:91:78:8b:c6:8f:a9:2b:c5: 0e:7b:27:35:da:53:42:66:c0:29:01:6b:e8:41:b4: c5:8e:61:50:83:e3:94:17:6f:a3:36:70:f7:16:7f: 25:39:3e:6d:60:d8:85:04:aa:1f:b2:4b:e8:4d:24: 0c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:88:17:75:5A:BC:12:DD:F9:9B:48:F9:BC:D6:6D:5C:FB:37:5E:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/0f8ae786-dc97-39ef-a9ff-9b818aad1f99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl X509v3 Authority Key Identifier: keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer sbgp-ipAddrBlock: critical IPv4: 52.129.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:d5:20:60:4a:3f:33:69:a9:4a:47:eb:da:62:2d:9d:45:42: 5d:61:c3:d8:5c:ea:4f:7c:c7:14:fd:b9:07:10:ab:2f:89:ac: e8:54:da:ac:40:46:74:2d:cd:cb:04:68:8c:4c:e9:86:87:eb: b0:19:82:b8:b4:f9:56:5f:41:fc:7d:3d:32:b1:f6:59:80:2f: 14:21:74:2e:35:5a:66:66:29:a2:de:38:30:8c:61:39:cf:14: e3:40:2b:81:ce:d9:ef:39:36:11:c5:d1:0d:fb:93:36:04:21: 75:5b:e9:ba:cf:d5:0e:c1:a5:04:f5:59:82:81:f0:42:25:f8: 51:bc:4c:bc:d8:a1:09:48:ee:29:b9:f7:ed:f3:a4:59:d6:37: c9:56:fb:58:74:54:29:d4:94:c1:5d:4e:24:56:6c:e9:5f:33: 14:bc:9c:c7:e6:55:f7:6e:9c:7d:a3:86:da:f6:cc:a7:e7:99: d6:70:6b:ee:7c:21:3b:05:a6:f5:e8:96:c3:52:d6:0d:e4:75: 59:bb:3f:52:38:94:68:5b:9a:b8:19:ac:28:8d:17:2a:29:19: 8a:83:a0:f5:c0:c5:00:9d:45:43:d2:30:ad:e5:f5:53:72:1d: 73:72:c1:ec:60:86:ff:ec:d6:dd:0c:4e:e6:3e:22:fd:0b:51: 47:c9:67:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDNLHztyZwX0774AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRiYjVhZDMtZDgyMy00MDIzLWFhY2UtMzI5ODg1ZjUw YzRiMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ZGYxMjE0MTItNmU0OS00M2ZhLTg0NDgtODdiYWQxZmM5N2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPSEnRuqpqH43jMDXIYyGcCmODguU0UftLhA YmFnsLe+/D/M8Drj3RPo1U1GM7EyrzCdD+nZulIE85IHUh9Xy/r1W8YwA/wp0PEX iEVO57nt1Crtwfa1HYgRgW2VN/8cjgg3Kq5id6k59QuZU1RHiwGQmXZ0AEe+Wl7K HJOiZz8rda1fNsOAagOgA4Rp53Zsgj6+sL5dnYjAUoeCYFa0YkrRkTBcS8wcDEqF EZqUxFc47h3+RrCKhxnvTvRrG5xsqzIhXRlfnEAikXiLxo+pK8UOeyc12lNCZsAp AWvoQbTFjmFQg+OUF2+jNnD3Fn8lOT5tYNiFBKofskvoTSQM7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCIF3VavBLd+ZtI+bzWbVz7N14YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJi NWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4ODVmNTBjNGIvMGY4YWU3ODYtZGM5Ny0z OWVmLWE5ZmYtOWI4MThhYWQxZjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTRiYjVhZDMtZDgyMy00MDIzLWFh Y2UtMzI5ODg1ZjUwYzRiL2U0YmI1YWQzLWQ4MjMtNDAyMy1hYWNlLTMyOTg4NWY1 MGM0Yi5jcmwwHwYDVR0jBBgwFoAU3GmquWZXzLwGDI5PbtsBK4FCf7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJiNWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4 ODVmNTBjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIFnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXVIGBKPzNpqUpH69piLZ1FQl1hw9hc6k98xxT9uQcQqy+JrOhU2qxA RnQtzcsEaIxM6YaH67AZgri0+VZfQfx9PTKx9lmALxQhdC41WmZmKaLeODCMYTnP FONAK4HO2e85NhHF0Q37kzYEIXVb6brP1Q7BpQT1WYKB8EIl+FG8TLzYoQlI7im5 9+3zpFnWN8lW+1h0VCnUlMFdTiRWbOlfMxS8nMfmVfdunH2jhtr2zKfnmdZwa+58 ITsFpvXolsNS1g3kdVm7P1I4lGhbmrgZrCiNFyopGYqDoPXAxQCdRUPSMK3l9VNy HXNywexghv/s1t0MTuY+Iv0LUUfJZxA= -----END CERTIFICATE-----Generated at Wed Nov 5 05:44:36 2025 by rpki-client