$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/bf9a8e17-8a8f-389a-80b4-8abf82a85eec.roa File: bf9a8e17-8a8f-389a-80b4-8abf82a85eec.roa (raw, json) Hash identifier: j54xa0fhBWBRwMBhQ9HGUwL0VWBzA13FaZD5cCNyUnU= Subject key identifier: 07:C1:54:4A:8A:D5:27:87:26:66:0C:D2:6F:5B:57:15:34:03:0D:17 Certificate issuer: /CN=9f75e8d7-e45f-4767-8939-a2c5394c1e7c Certificate serial: 010D0C9F4328584A9E9619CDC8447E69C606D080 Authority key identifier: C8:7F:33:58:08:83:C2:E0:C2:0A:69:84:92:0A:25:FA:2C:BF:3E:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/bf9a8e17-8a8f-389a-80b4-8abf82a85eec.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 54334 IP address blocks: 52.119.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:19:cd:c8:44:7e:69:c6:06:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f75e8d7-e45f-4767-8939-a2c5394c1e7c Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=28b336ab-6146-4b30-86e6-7aaa95fc0545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ab:c2:81:8d:10:89:ec:f8:47:07:34:28:5a: 51:ab:af:10:d2:04:88:70:73:58:6e:ab:62:45:ce: 3d:27:e5:63:3a:86:72:5d:0c:b8:63:73:c8:ee:af: 1d:99:af:df:e3:d2:46:57:43:9e:6e:43:cc:90:48: 8b:ae:21:fd:dc:d6:8c:02:2c:af:cb:79:9d:dc:23: b0:52:68:26:6e:04:da:ce:da:7b:a8:56:29:48:1b: 35:3c:bb:e6:d3:8f:c0:9f:87:21:29:d2:28:34:ca: d7:94:39:f1:31:17:5b:88:2a:18:26:a6:fb:5a:fa: 55:5f:35:65:5f:cd:fd:ae:97:4a:cc:bf:a3:25:96: 5e:8e:aa:0e:ca:46:b1:59:6b:47:9f:db:dc:33:22: 8c:8b:e3:22:39:04:bf:19:06:5b:fd:97:67:a7:56: 8a:11:1a:24:20:96:ff:9d:8a:e9:87:d9:61:f9:01: 84:5f:76:9f:c2:de:b9:4e:09:c1:24:b8:f8:3c:65: ea:f4:c1:de:b6:18:1e:af:5b:45:66:f9:5b:c4:87: 35:0d:fe:50:62:e2:3b:32:fb:ed:09:64:a6:2c:97: 92:2a:05:1d:69:75:57:a0:5e:68:48:04:c5:3b:0b: d9:b4:d2:38:bb:55:60:e5:67:24:00:ca:93:1b:6f: 9a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C1:54:4A:8A:D5:27:87:26:66:0C:D2:6F:5B:57:15:34:03:0D:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/bf9a8e17-8a8f-389a-80b4-8abf82a85eec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.crl X509v3 Authority Key Identifier: keyid:C8:7F:33:58:08:83:C2:E0:C2:0A:69:84:92:0A:25:FA:2C:BF:3E:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9f75e8d7-e45f-4767-8939-a2c5394c1e7c.cer sbgp-ipAddrBlock: critical IPv4: 52.119.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:29:96:e0:18:57:81:22:ac:51:8b:4d:ca:84:47:94:16:3d: 60:2b:74:88:69:d1:78:d9:e4:a6:63:d7:61:be:39:65:2d:91: 92:d0:9e:1e:99:03:be:19:8c:a0:72:2b:d6:cd:17:f4:a4:e9: 8c:1a:08:dc:78:62:e7:94:b8:db:6c:a6:1b:33:f1:b6:0c:c3: b5:0a:af:f2:18:5d:e5:c6:f7:8d:38:36:70:e1:6b:41:e4:e5: 53:3f:8e:18:ce:63:66:d8:21:48:f5:e8:59:f3:41:0b:40:31: b2:55:de:b6:b6:bb:c6:db:18:93:98:c7:3d:84:f7:3b:8a:47: 24:6e:65:95:31:92:2d:ee:83:53:e7:11:c8:6a:03:87:dd:cd: df:d3:d0:54:41:0e:50:0c:aa:37:e0:e7:71:fc:5e:f0:06:7b: 9e:44:0c:a8:ea:f8:e9:43:52:cc:19:3b:80:38:bd:8b:82:7d: 14:4b:06:d8:c6:e6:be:0a:17:03:f7:d3:3e:a3:60:3b:d9:96: eb:26:07:99:02:03:e6:63:25:02:85:fe:5a:9d:b1:5c:c3:67: 85:16:b7:ee:93:01:c1:57:78:3f:77:42:ef:47:80:d3:0a:85: ee:bb:76:3a:fa:33:75:e0:52:d0:7d:c8:8d:ba:1a:d3:00:c9: 87:ca:1e:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelhnNyER+acYG0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWY3NWU4ZDctZTQ1Zi00NzY3LTg5MzktYTJjNTM5NGMx ZTdjMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk MjhiMzM2YWItNjE0Ni00YjMwLTg2ZTYtN2FhYTk1ZmMwNTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6vCgY0Qiez4Rwc0KFpRq68Q0gSIcHNYbqti Rc49J+VjOoZyXQy4Y3PI7q8dma/f49JGV0OebkPMkEiLriH93NaMAiyvy3md3COw UmgmbgTaztp7qFYpSBs1PLvm04/An4chKdIoNMrXlDnxMRdbiCoYJqb7WvpVXzVl X839rpdKzL+jJZZejqoOykaxWWtHn9vcMyKMi+MiOQS/GQZb/Zdnp1aKERokIJb/ nYrph9lh+QGEX3afwt65TgnBJLj4PGXq9MHethger1tFZvlbxIc1Df5QYuI7Mvvt CWSmLJeSKgUdaXVXoF5oSATFOwvZtNI4u1Vg5WckAMqTG2+aEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfBVEqK1SeHJmYM0m9bVxU0Aw0XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85Zjc1 ZThkNy1lNDVmLTQ3NjctODkzOS1hMmM1Mzk0YzFlN2MvYmY5YThlMTctOGE4Zi0z ODlhLTgwYjQtOGFiZjgyYTg1ZWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWY3NWU4ZDctZTQ1Zi00NzY3LTg5 MzktYTJjNTM5NGMxZTdjLzlmNzVlOGQ3LWU0NWYtNDc2Ny04OTM5LWEyYzUzOTRj MWU3Yy5jcmwwHwYDVR0jBBgwFoAUyH8zWAiDwuDCCmmEkgol+iy/Pu8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85Zjc1ZThkNy1lNDVmLTQ3NjctODkzOS1hMmM1 Mzk0YzFlN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHcBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgpluAYV4EirFGLTcqER5QWPWArdIhp0XjZ5KZj12G+OWUtkZLQnh6Z A74ZjKByK9bNF/Sk6YwaCNx4YueUuNtsphsz8bYMw7UKr/IYXeXG9404NnDha0Hk 5VM/jhjOY2bYIUj16FnzQQtAMbJV3ra2u8bbGJOYxz2E9zuKRyRuZZUxki3ug1Pn EchqA4fdzd/T0FRBDlAMqjfg53H8XvAGe55EDKjq+OlDUswZO4A4vYuCfRRLBtjG 5r4KFwP30z6jYDvZlusmB5kCA+ZjJQKF/lqdsVzDZ4UWt+6TAcFXeD93Qu9HgNMK he67djr6M3XgUtB9yI26GtMAyYfKHvQ= -----END CERTIFICATE-----Generated at Mon Aug 4 18:23:56 2025 by rpki-client