$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/1d1fd279-394b-33ab-a67e-8eaa8ec4aff1.roa File: 1d1fd279-394b-33ab-a67e-8eaa8ec4aff1.roa (raw, json) Hash identifier: krgFwqeSMVAEwZAnwN03PLGgrsQ492Rs9yzw652yABA= Subject key identifier: 91:13:E5:56:1C:51:82:05:18:89:BE:F7:97:A6:D5:61:14:77:41:4A Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F4328584AADF11EE49A4CC6E3DB801800 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/1d1fd279-394b-33ab-a67e-8eaa8ec4aff1.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 13325 IP address blocks: 198.151.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:1e:e4:9a:4c:c6:e3:db:80:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=5d040fd8-119d-4615-9131-68c31715cde2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e6:63:14:c6:7b:b6:82:ec:74:1c:26:16:f1: da:d6:1e:4d:4b:f9:ee:44:cd:62:fb:a8:aa:a2:be: b3:35:ed:68:bd:27:a1:e9:8f:be:4b:78:44:a0:48: ed:68:03:6d:6c:24:41:fd:2a:88:fe:ab:dc:61:6d: d6:cf:6d:bd:60:21:09:bf:c2:7b:d8:8d:f6:4f:06: 32:18:2f:53:6b:87:ce:bd:77:6f:02:e9:41:28:47: 5e:21:53:99:36:2a:cf:ba:1b:1c:18:71:80:d4:5a: 0a:b2:80:86:4c:a5:ec:83:73:cb:6c:e4:74:7c:c8: 4f:50:c0:41:8f:04:94:bd:cf:77:52:f4:98:d1:f9: db:d5:7f:82:8c:a4:67:d6:e2:36:e7:2b:05:c0:7e: 5a:3a:52:4c:84:88:05:8b:d4:4c:f2:79:9b:d6:7b: 78:86:ca:b9:ee:38:ec:e4:1f:19:e3:17:28:b7:4f: 47:e4:9d:22:2c:96:f4:a3:d7:1c:39:da:5c:20:4f: 76:54:b5:a9:d4:4f:33:59:f3:3f:cd:d7:80:67:1b: 0f:ff:2c:0f:52:c0:fa:0d:39:06:a7:7c:9a:7b:86: ce:3a:b6:2f:7e:78:ae:06:e9:df:91:06:ed:da:bc: b5:cc:3b:46:83:1a:b1:7d:68:0a:5a:15:c3:69:31: 21:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:13:E5:56:1C:51:82:05:18:89:BE:F7:97:A6:D5:61:14:77:41:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/1d1fd279-394b-33ab-a67e-8eaa8ec4aff1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 198.151.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:b4:6a:93:d4:f0:d1:2e:a2:d7:d1:a8:b9:ff:b6:73:1b:01: 8f:ae:69:7a:cc:76:83:06:94:d1:16:d3:4b:a1:1b:6a:d1:8c: 7b:00:ca:77:19:74:b5:61:59:89:d9:b7:5b:d2:b7:6d:0a:d1: 19:19:8d:12:fb:c6:32:1f:ef:d7:29:0f:a9:a7:97:3e:b3:6d: 60:25:91:5b:c3:62:4f:a2:1d:e1:5c:17:56:97:7d:06:08:aa: 63:17:fb:53:59:a4:53:78:3b:40:94:29:b0:40:f6:92:4b:bf: 5f:dd:da:84:14:0e:6d:fe:53:4c:60:d2:7a:66:27:48:e2:93: fd:e0:ad:2b:c9:de:d6:eb:46:24:f3:e8:46:49:4b:0a:9e:09: 35:4e:8e:e3:8a:a6:fc:89:b7:34:0e:27:62:0f:b4:e1:6e:16: f5:4e:20:02:16:0b:f9:96:43:25:1b:78:c8:82:c2:c5:85:c6: c1:16:4d:85:15:cb:4c:4e:af:8b:28:dc:aa:27:dc:88:43:85: f3:8f:a5:af:14:6a:95:3c:c0:e6:65:57:76:bf:69:76:40:e8: b5:fe:52:08:fc:20:db:94:26:95:27:f3:5f:75:31:0c:9e:96: ff:9f:24:7a:e3:79:38:b5:90:34:52:6b:b1:0f:9d:42:aa:0f: 7c:ac:e9:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8R7kmkzG49uAGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk NWQwNDBmZDgtMTE5ZC00NjE1LTkxMzEtNjhjMzE3MTVjZGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquZjFMZ7toLsdBwmFvHa1h5NS/nuRM1i+6iq or6zNe1ovSeh6Y++S3hEoEjtaANtbCRB/SqI/qvcYW3Wz229YCEJv8J72I32TwYy GC9Ta4fOvXdvAulBKEdeIVOZNirPuhscGHGA1FoKsoCGTKXsg3PLbOR0fMhPUMBB jwSUvc93UvSY0fnb1X+CjKRn1uI25ysFwH5aOlJMhIgFi9RM8nmb1nt4hsq57jjs 5B8Z4xcot09H5J0iLJb0o9ccOdpcIE92VLWp1E8zWfM/zdeAZxsP/ywPUsD6DTkG p3yae4bOOrYvfniuBunfkQbt2ry1zDtGgxqxfWgKWhXDaTEhnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJET5VYcUYIFGIm+95em1WEUd0FKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvMWQxZmQyNzktMzk0Yi0z M2FiLWE2N2UtOGVhYThlYzRhZmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpeiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGe0apPU8NEuotfRqLn/tnMbAY+uaXrMdoMGlNEW00uhG2rRjHsAyncZ dLVhWYnZt1vSt20K0RkZjRL7xjIf79cpD6mnlz6zbWAlkVvDYk+iHeFcF1aXfQYI qmMX+1NZpFN4O0CUKbBA9pJLv1/d2oQUDm3+U0xg0npmJ0jik/3grSvJ3tbrRiTz 6EZJSwqeCTVOjuOKpvyJtzQOJ2IPtOFuFvVOIAIWC/mWQyUbeMiCwsWFxsEWTYUV y0xOr4so3Kon3IhDhfOPpa8UapU8wOZlV3a/aXZA6LX+Ugj8INuUJpUn8191MQye lv+fJHrjeTi1kDRSa7EPnUKqD3ys6eA= -----END CERTIFICATE-----Generated at Sat Aug 9 22:41:20 2025 by rpki-client