$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/5135d0bf-2fc2-3d54-8231-70f4574ebf28.roa File: 5135d0bf-2fc2-3d54-8231-70f4574ebf28.roa (raw, json) Hash identifier: M1x4/z+GXywFRwSdfUQ2LElL17DyqoOTFDp/U2Ub16k= Subject key identifier: BB:E8:AE:65:26:0D:22:92:5C:AC:7A:47:7A:A8:9C:23:1C:0C:BF:A8 Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F4328584AADF1149741A0CC48BE9B26D0 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/5135d0bf-2fc2-3d54-8231-70f4574ebf28.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 13325 IP address blocks: 167.240.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:14:97:41:a0:cc:48:be:9b:26:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=f98a0982-3f87-45fd-a74c-6f1268d65cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4c:7d:10:73:f4:16:0d:e5:ce:50:eb:61:e3: 7b:05:dc:f3:c8:62:77:a9:ae:d7:a7:46:24:9a:31: 26:20:82:c2:af:ed:9c:e6:f9:1a:c0:cc:af:3f:6a: c3:e8:b9:d0:98:50:89:62:2f:2e:70:20:ec:d5:ea: 14:00:c2:3c:45:26:fd:58:71:da:24:94:94:1d:9d: 1e:93:b8:d9:6f:04:b1:36:d7:33:98:27:bd:e1:8b: dd:ca:a0:b4:7c:c1:22:ca:32:ff:d3:5e:78:c6:01: 3a:91:49:d9:be:ed:89:b1:2b:45:3f:fb:a7:a1:a5: d4:cf:cd:3c:d7:f4:a6:94:a9:1e:91:d5:8e:34:49: 3c:cc:c7:63:0e:b7:75:74:d0:57:ba:47:1d:44:50: 6a:92:ae:7c:e1:ff:59:95:aa:5c:3a:34:92:2a:f8: d3:c7:cf:2b:0c:8d:46:83:81:55:48:35:47:19:52: ac:1b:2a:88:d5:70:72:17:ab:a4:6f:7f:42:1e:69: 62:a0:5c:b2:9f:69:39:6a:00:c8:b6:36:37:89:db: eb:a6:bf:8a:cb:64:bf:7d:b9:7e:b0:45:82:93:05: bc:9e:ec:ad:e7:18:0b:90:99:3d:2d:b0:3f:74:e7: 5e:ee:20:26:23:04:39:01:bd:38:a7:cc:12:8f:22: b0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E8:AE:65:26:0D:22:92:5C:AC:7A:47:7A:A8:9C:23:1C:0C:BF:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/5135d0bf-2fc2-3d54-8231-70f4574ebf28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 167.240.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:57:dc:d6:23:9d:af:aa:a7:c3:77:96:ab:6a:fe:e4:30:56: 14:be:4a:b5:c9:90:c5:89:11:b4:3c:0f:c2:41:79:59:1b:8c: 49:ba:34:7a:af:45:af:22:f5:2e:21:78:9d:f2:a4:d9:79:67: 05:9f:b0:ef:45:c9:ab:5f:b6:71:f8:45:cc:37:29:90:61:ec: 99:5f:e0:0d:0e:13:5d:38:94:c6:67:80:de:4e:c6:05:33:ae: 59:2e:62:f1:2e:b5:df:7f:94:ca:be:d1:c5:de:c4:f1:74:bf: 43:c7:b3:e0:d4:41:77:1d:dd:20:70:28:ef:10:bc:ad:44:70: 2d:7e:8d:6b:e4:32:36:45:f9:d6:fb:5a:17:85:d3:79:b0:13: 12:63:31:4e:21:02:92:f7:25:0f:30:cb:85:ed:f2:1d:ec:2f: 07:c9:ff:e7:87:4d:c3:0c:fe:ba:25:d3:41:81:c7:1f:20:f1: fe:c5:0f:5b:df:b2:89:ea:9c:8b:60:70:74:d2:32:8b:6d:07: dc:ce:ca:ca:54:c2:23:ae:35:a3:ab:45:b0:45:09:f6:58:50: c8:d3:c1:04:6f:ef:4b:31:69:85:82:ed:a0:8f:d6:9d:ef:fc: 07:f5:71:bc:1e:74:9c:60:8a:3e:5c:ff:28:84:3d:c4:71:5c: 64:d6:cb:34 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqt8RSXQaDMSL6bJtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk Zjk4YTA5ODItM2Y4Ny00NWZkLWE3NGMtNmYxMjY4ZDY1Y2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEx9EHP0Fg3lzlDrYeN7BdzzyGJ3qa7Xp0Yk mjEmIILCr+2c5vkawMyvP2rD6LnQmFCJYi8ucCDs1eoUAMI8RSb9WHHaJJSUHZ0e k7jZbwSxNtczmCe94YvdyqC0fMEiyjL/0154xgE6kUnZvu2JsStFP/unoaXUz808 1/SmlKkekdWONEk8zMdjDrd1dNBXukcdRFBqkq584f9ZlapcOjSSKvjTx88rDI1G g4FVSDVHGVKsGyqI1XByF6ukb39CHmlioFyyn2k5agDItjY3idvrpr+Ky2S/fbl+ sEWCkwW8nuyt5xgLkJk9LbA/dOde7iAmIwQ5Ab04p8wSjyKwjwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLvormUmDSKSXKx6R3qonCMcDL+oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvNTEzNWQwYmYtMmZjMi0z ZDU0LTgyMzEtNzBmNDU3NGViZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAp/AwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAAFfc1iOdr6qnw3eWq2r+5DBWFL5KtcmQxYkRtDwPwkF5WRuMSbo0eq9F ryL1LiF4nfKk2XlnBZ+w70XJq1+2cfhFzDcpkGHsmV/gDQ4TXTiUxmeA3k7GBTOu WS5i8S6133+Uyr7Rxd7E8XS/Q8ez4NRBdx3dIHAo7xC8rURwLX6Na+QyNkX51vta F4XTebATEmMxTiECkvclDzDLhe3yHewvB8n/54dNwwz+uiXTQYHHHyDx/sUPW9+y ieqci2BwdNIyi20H3M7KylTCI641o6tFsEUJ9lhQyNPBBG/vSzFphYLtoI/Wne/8 B/VxvB50nGCKPlz/KIQ9xHFcZNbLNA== -----END CERTIFICATE-----Generated at Sat Aug 9 20:51:16 2025 by rpki-client