$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/7fe96268-b787-3529-9f78-3e3d0ced15ee.roa File: 7fe96268-b787-3529-9f78-3e3d0ced15ee.roa (raw, json) Hash identifier: MhIl2TzO6VLKQfBUffr6Ua0bvmetUbbZTWFAkW7ae8A= Subject key identifier: 49:F1:45:D8:A5:C9:EC:AB:6C:5D:E5:91:62:34:FF:56:70:CD:F5:EE Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F4328584AADF11F297346FB0EC29B4680 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/7fe96268-b787-3529-9f78-3e3d0ced15ee.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 13325 IP address blocks: 204.25.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:1f:29:73:46:fb:0e:c2:9b:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=31e58874-d951-4547-97c0-7c0d7d2c45b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a5:de:4a:d0:9c:48:b2:e5:a6:e7:27:f3:86: 5b:d7:73:3c:17:7b:ba:3d:75:02:76:3b:9e:e7:ed: 5f:4d:f3:c4:0e:bf:1f:ec:39:e5:28:84:0d:4b:ce: 54:63:c0:52:4f:26:82:c7:a4:ee:1d:7f:f1:9d:18: ee:31:8f:de:90:70:a7:87:c6:49:c3:d1:9b:c5:15: 62:28:f0:b9:91:16:c7:2d:f2:69:0c:72:76:7f:9a: 4e:7d:9e:dc:a2:fc:1f:03:13:0d:0a:0e:87:92:80: 1e:ab:dc:24:34:7b:a1:cb:58:24:5b:cc:f1:94:04: c5:6e:db:1a:b0:ea:e5:30:4b:4b:44:85:cf:96:64: 2a:c0:86:91:d6:91:35:27:91:a7:ad:15:df:7f:f1: 53:5a:36:58:9f:36:14:33:64:e4:65:54:2e:3e:1f: 60:97:14:b4:00:49:d1:67:80:33:c6:1a:1a:bf:68: 5a:5d:95:cd:3b:5e:76:67:64:34:20:aa:76:f9:05: 7f:4c:fb:4b:d4:a4:6b:23:ec:66:97:55:ea:95:4d: b5:d1:53:52:3e:ce:3c:b9:86:33:d2:f0:98:53:8a: 68:7f:1b:7c:6d:af:d8:92:bc:5f:a8:76:37:6e:59: 0d:68:e2:ec:b4:5f:1f:1e:01:6d:27:95:20:e6:49: 09:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F1:45:D8:A5:C9:EC:AB:6C:5D:E5:91:62:34:FF:56:70:CD:F5:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/7fe96268-b787-3529-9f78-3e3d0ced15ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 204.25.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:25:b6:5a:ef:9e:94:27:a9:cd:a1:57:d5:eb:bb:58:dd:96: d1:7c:a7:0c:f6:3a:e6:ea:99:a1:54:a7:af:1d:18:4c:b3:62: 88:0f:28:e1:2c:93:1e:03:7a:c8:54:bf:fa:02:5a:5d:ee:8c: 8d:3f:54:55:78:bb:9b:44:0e:70:55:19:38:cc:95:7d:f0:6b: 84:10:d2:08:ac:3e:fa:fd:19:5c:64:3e:79:86:73:c8:e8:a6: 3c:0f:d3:f5:46:a9:e7:8f:7d:f2:da:28:85:a5:76:b2:c4:9f: 69:2d:5c:1f:ba:c4:1e:d4:e2:84:d4:3b:6f:3a:8c:b0:cd:61: c6:96:40:c8:27:5c:c4:63:50:bc:45:85:1c:cc:4a:1e:73:03: 0f:03:6b:c7:16:1d:d1:18:be:88:1e:75:b1:80:97:ad:98:f6: 9b:88:ed:c3:07:fe:98:2b:4a:03:a0:d6:f7:a8:1e:eb:e7:44: c6:77:12:01:f2:12:12:b8:80:73:19:da:88:53:3b:56:72:73: 56:92:7d:d4:4b:c7:c0:82:26:7e:9b:66:c4:59:03:87:23:9b: 10:96:9d:a4:2d:26:c7:e6:64:1e:4a:9c:30:30:9b:cd:91:1b: 2f:49:37:65:93:bb:6d:2a:2d:e5:98:80:a3:fb:5f:db:7e:08: c4:7c:04:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8R8pc0b7DsKbRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk MzFlNTg4NzQtZDk1MS00NTQ3LTk3YzAtN2MwZDdkMmM0NWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6XeStCcSLLlpucn84Zb13M8F3u6PXUCdjue 5+1fTfPEDr8f7DnlKIQNS85UY8BSTyaCx6TuHX/xnRjuMY/ekHCnh8ZJw9GbxRVi KPC5kRbHLfJpDHJ2f5pOfZ7covwfAxMNCg6HkoAeq9wkNHuhy1gkW8zxlATFbtsa sOrlMEtLRIXPlmQqwIaR1pE1J5GnrRXff/FTWjZYnzYUM2TkZVQuPh9glxS0AEnR Z4Azxhoav2haXZXNO152Z2Q0IKp2+QV/TPtL1KRrI+xml1XqlU210VNSPs48uYYz 0vCYU4pofxt8ba/YkrxfqHY3blkNaOLstF8fHgFtJ5Ug5kkJswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnxRdilyeyrbF3lkWI0/1ZwzfXuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvN2ZlOTYyNjgtYjc4Ny0z NTI5LTlmNzgtM2UzZDBjZWQxNWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGzBmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMltlrvnpQnqc2hV9Xru1jdltF8pwz2OubqmaFUp68dGEyzYogPKOEs kx4DeshUv/oCWl3ujI0/VFV4u5tEDnBVGTjMlX3wa4QQ0gisPvr9GVxkPnmGc8jo pjwP0/VGqeePffLaKIWldrLEn2ktXB+6xB7U4oTUO286jLDNYcaWQMgnXMRjULxF hRzMSh5zAw8Da8cWHdEYvogedbGAl62Y9puI7cMH/pgrSgOg1veoHuvnRMZ3EgHy EhK4gHMZ2ohTO1Zyc1aSfdRLx8CCJn6bZsRZA4cjmxCWnaQtJsfmZB5KnDAwm82R Gy9JN2WTu20qLeWYgKP7X9t+CMR8BCs= -----END CERTIFICATE-----Generated at Sat Aug 9 20:46:47 2025 by rpki-client