$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa File: d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa (raw, json) Hash identifier: QjcYtu9EqWsDprhw2K+FeLvgpdlnb9ELsgkWwMz5Ia4= Subject key identifier: D2:33:E8:0A:A6:E7:B8:55:C1:5A:2A:7C:2D:A9:75:16:40:37:D7:E0 Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F4328584AADF11EF33AE50305D9E1B100 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 13325 IP address blocks: 199.33.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:1e:f3:3a:e5:03:05:d9:e1:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=eb9e04a0-fa83-41ce-be61-c606b5a076d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8d:85:10:7d:66:3c:e9:8e:2d:f5:4b:55:b3: c6:07:e0:3a:76:cb:75:f4:76:f9:7e:79:44:22:00: 84:37:c9:71:12:c6:0c:64:4e:dd:eb:f9:d4:25:fc: d5:20:fd:d6:94:6c:0c:36:f9:80:1c:da:42:2b:68: 27:3c:ee:cd:b3:d2:ea:97:f7:c4:11:b6:66:d3:ec: 08:1b:d3:2c:0b:05:db:61:06:7d:5f:16:e6:3d:36: c3:13:1f:c3:47:37:5a:8f:6a:07:ed:71:ae:cf:f9: 5f:72:47:38:fb:c3:21:20:d3:7c:c6:51:86:84:d4: f4:95:49:8c:a3:07:27:a4:43:2f:1b:59:1a:ec:fe: e4:1c:48:70:7f:0d:59:ad:11:ea:3d:4e:ca:78:c5: 0d:2a:0d:46:43:08:72:2c:90:ef:3b:24:7c:a1:9f: 45:11:ef:81:a5:44:37:51:5b:8f:9e:38:f3:41:34: ac:a4:ae:c1:53:37:72:f0:50:ff:e0:06:49:d7:cc: 19:46:27:db:d5:ca:25:3c:5f:85:cf:b8:ce:e5:1e: 19:40:43:f7:9c:12:fc:1e:78:89:6f:33:ce:23:d4: f2:e6:75:d7:18:0a:eb:c5:4b:a9:c1:c4:84:d8:63: b1:3c:58:f5:b2:8f:fd:92:3b:13:90:ed:a7:bd:fe: 5f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:33:E8:0A:A6:E7:B8:55:C1:5A:2A:7C:2D:A9:75:16:40:37:D7:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 199.33.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:7c:c8:b7:7d:1a:ee:5b:0b:1c:27:c4:a3:a5:d5:ec:81:42: b5:cc:43:2d:ec:e0:27:85:82:19:18:49:b7:f6:5b:7c:ed:36: 17:6d:2b:29:ec:77:22:80:7d:10:45:78:c7:e7:01:ed:c4:3a: 10:5b:8a:6a:ec:4d:c1:2f:5a:ef:6a:f4:48:bb:e1:a4:41:f5: b0:47:5f:ce:62:7a:1d:f2:f5:25:3d:7b:eb:0e:8b:d8:c9:1a: 6a:8e:13:2d:69:39:88:6c:c2:22:7e:f3:60:ba:23:ea:31:e5: 07:03:67:9a:f3:79:d0:ab:c8:c8:fa:40:ae:89:f6:b1:09:68: 4b:d0:43:b9:ad:a2:bb:48:2a:9a:e7:4a:53:66:a9:a9:9e:06: a4:f1:ed:07:cd:0e:fc:47:f3:af:b2:80:e3:d8:8b:a2:37:93: 9c:33:34:eb:2b:47:a9:91:c2:b4:5d:a5:71:7a:a5:9a:75:be: d3:87:df:be:18:49:31:ca:b4:f5:1c:1d:c8:f5:85:40:59:fb: e3:d5:66:bd:dc:c4:de:77:e3:46:d9:e9:7d:85:0d:9d:ed:9a: 0b:bd:47:25:78:b6:e6:e4:9a:25:99:b5:48:91:8d:e4:c6:f7: 4d:23:1a:96:06:6c:f2:bc:a7:0e:ae:f0:61:76:10:08:e6:e0: 41:e9:c0:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8R7zOuUDBdnhsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk ZWI5ZTA0YTAtZmE4My00MWNlLWJlNjEtYzYwNmI1YTA3NmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkI2FEH1mPOmOLfVLVbPGB+A6dst19Hb5fnlE IgCEN8lxEsYMZE7d6/nUJfzVIP3WlGwMNvmAHNpCK2gnPO7Ns9Lql/fEEbZm0+wI G9MsCwXbYQZ9XxbmPTbDEx/DRzdaj2oH7XGuz/lfckc4+8MhINN8xlGGhNT0lUmM owcnpEMvG1ka7P7kHEhwfw1ZrRHqPU7KeMUNKg1GQwhyLJDvOyR8oZ9FEe+BpUQ3 UVuPnjjzQTSspK7BUzdy8FD/4AZJ18wZRifb1colPF+Fz7jO5R4ZQEP3nBL8HniJ bzPOI9Ty5nXXGArrxUupwcSE2GOxPFj1so/9kjsTkO2nvf5fBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIz6Aqm57hVwVoqfC2pdRZAN9fgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvZDRiOGZiZjgtOTFjNC0z M2YzLWEwZDEtZTRiMWU4MTVkZDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyHEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHR8yLd9Gu5bCxwnxKOl1eyBQrXMQy3s4CeFghkYSbf2W3ztNhdtKyns dyKAfRBFeMfnAe3EOhBbimrsTcEvWu9q9Ei74aRB9bBHX85ieh3y9SU9e+sOi9jJ GmqOEy1pOYhswiJ+82C6I+ox5QcDZ5rzedCryMj6QK6J9rEJaEvQQ7mtortIKprn SlNmqameBqTx7QfNDvxH86+ygOPYi6I3k5wzNOsrR6mRwrRdpXF6pZp1vtOH374Y STHKtPUcHcj1hUBZ++PVZr3cxN5340bZ6X2FDZ3tmgu9RyV4tubkmiWZtUiRjeTG 900jGpYGbPK8pw6u8GF2EAjm4EHpwMk= -----END CERTIFICATE-----Generated at Sat Aug 9 20:47:48 2025 by rpki-client