$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/90aa2e88-705e-3842-98bf-65d3957482ff.roa File: 90aa2e88-705e-3842-98bf-65d3957482ff.roa (raw, json) Hash identifier: tsUrrUadGD1z6sVYTaPUAPKy14S/xDznHU/Dp2oTrLo= Subject key identifier: 90:32:DB:1D:2C:F3:BF:EC:10:39:89:84:E8:4C:7B:76:D7:DE:D8:AD Certificate issuer: /CN=1a90933e-2005-4c33-ae3f-744b7b70ed7c Certificate serial: 010D0C9F4328584B41E715D7E88D28146CC84780 Authority key identifier: D4:74:AB:93:77:F0:FA:3C:14:E8:78:A8:8C:F7:C0:43:24:37:68:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/90aa2e88-705e-3842-98bf-65d3957482ff.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 14618 IP address blocks: 52.129.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:15:d7:e8:8d:28:14:6c:c8:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a90933e-2005-4c33-ae3f-744b7b70ed7c Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=abcf2836-a44e-4e40-a340-c3c8727d4298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2c:b4:a8:62:eb:c2:8a:b2:e2:e1:17:8d:da: bb:25:c8:a0:1a:e1:5c:2f:e5:b9:91:e8:7d:43:6e: 33:41:9a:5c:bc:a3:08:c3:cd:35:11:77:55:85:cb: 7f:68:4f:88:17:51:04:2c:de:23:1d:fa:6e:3b:b8: 39:46:d1:1f:41:7b:7c:60:66:7e:61:7a:61:61:b0: 68:ce:f4:a2:78:c7:59:4e:97:99:d5:f2:03:d0:3a: 4b:80:38:93:d1:5d:70:df:bc:88:3e:95:25:12:da: 12:b8:d4:12:5a:4b:41:6c:d9:39:8f:b0:b2:60:43: 54:34:f7:c3:d3:f9:2a:bb:23:11:ca:24:f5:ec:31: b9:d1:40:6e:e2:45:ff:ef:d7:37:89:81:b2:78:de: 6a:a3:2c:5d:52:8a:1d:f4:98:27:a0:8a:aa:6b:bb: 9a:c1:68:82:1c:47:9b:c4:f0:2e:15:aa:a6:fb:72: fd:54:b6:ba:e4:7e:b3:e1:05:99:e7:48:bc:c3:ae: c1:4e:c2:51:d7:42:73:d1:27:64:2e:eb:5a:6a:1d: e6:64:25:02:1e:63:34:11:73:e4:f9:b3:21:4d:88: 1b:a1:63:5c:aa:4e:01:62:a4:2a:26:27:0f:4f:b7: ce:bc:ea:6b:b5:b6:7e:e2:ea:c7:7e:39:1b:97:bb: 5a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:32:DB:1D:2C:F3:BF:EC:10:39:89:84:E8:4C:7B:76:D7:DE:D8:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/90aa2e88-705e-3842-98bf-65d3957482ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.crl X509v3 Authority Key Identifier: keyid:D4:74:AB:93:77:F0:FA:3C:14:E8:78:A8:8C:F7:C0:43:24:37:68:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer sbgp-ipAddrBlock: critical IPv4: 52.129.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:75:b4:85:42:f3:8f:43:93:19:ec:f0:63:84:23:4b:eb:71: 31:48:0a:b2:cc:77:8b:d0:77:42:ee:25:38:f2:e2:bc:8d:53: 0b:23:ce:aa:7f:52:91:e0:42:13:fb:be:47:3a:3e:de:11:4e: 55:c0:15:86:3e:2c:9f:0a:98:46:0c:15:3d:f3:b1:b2:f2:6e: 40:d3:5d:7c:be:5d:ab:55:c1:14:d7:8e:6b:58:83:80:4c:64: 7e:54:d6:25:58:03:17:8a:07:3c:01:e6:e6:49:48:90:d3:14: 33:8c:ad:78:44:e9:41:95:a7:77:81:3b:1e:6c:69:55:a8:58: ed:85:73:13:7f:99:64:aa:1f:2b:82:73:23:8f:88:bb:e4:43: ef:b7:74:06:66:24:25:dc:21:79:2f:2c:73:4d:10:59:d9:51: 2f:d7:a9:d6:a5:d5:b1:c5:9b:f4:f0:bc:32:88:40:e7:8e:78: 53:1f:72:8f:7b:da:92:65:bb:b1:b4:50:a7:8f:a7:3a:4e:b2: 88:4d:00:7d:b7:a2:01:4f:47:d4:81:e1:44:b4:1c:b2:66:c2: ee:3a:6c:a7:9d:d5:4e:ad:53:05:14:22:31:b6:e1:08:78:a9: 70:94:14:dc:77:70:60:56:1b:50:fc:7e:da:c4:b9:8e:47:1e: ba:da:f6:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5xXX6I0oFGzIR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE5MDkzM2UtMjAwNS00YzMzLWFlM2YtNzQ0YjdiNzBl ZDdjMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk YWJjZjI4MzYtYTQ0ZS00ZTQwLWEzNDAtYzNjODcyN2Q0Mjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCy0qGLrwoqy4uEXjdq7JcigGuFcL+W5keh9 Q24zQZpcvKMIw801EXdVhct/aE+IF1EELN4jHfpuO7g5RtEfQXt8YGZ+YXphYbBo zvSieMdZTpeZ1fID0DpLgDiT0V1w37yIPpUlEtoSuNQSWktBbNk5j7CyYENUNPfD 0/kquyMRyiT17DG50UBu4kX/79c3iYGyeN5qoyxdUood9JgnoIqqa7uawWiCHEeb xPAuFaqm+3L9VLa65H6z4QWZ50i8w67BTsJR10Jz0SdkLutaah3mZCUCHmM0EXPk +bMhTYgboWNcqk4BYqQqJicPT7fOvOprtbZ+4urHfjkbl7ta6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAy2x0s87/sEDmJhOhMe3bX3titMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTkw OTMzZS0yMDA1LTRjMzMtYWUzZi03NDRiN2I3MGVkN2MvOTBhYTJlODgtNzA1ZS0z ODQyLTk4YmYtNjVkMzk1NzQ4MmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE5MDkzM2UtMjAwNS00YzMzLWFl M2YtNzQ0YjdiNzBlZDdjLzFhOTA5MzNlLTIwMDUtNGMzMy1hZTNmLTc0NGI3Yjcw ZWQ3Yy5jcmwwHwYDVR0jBBgwFoAU1HSrk3fw+jwU6HiojPfAQyQ3aOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTkwOTMzZS0yMDA1LTRjMzMtYWUzZi03NDRi N2I3MGVkN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIEjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZ1tIVC849Dkxns8GOEI0vrcTFICrLMd4vQd0LuJTjy4ryNUwsjzqp/ UpHgQhP7vkc6Pt4RTlXAFYY+LJ8KmEYMFT3zsbLybkDTXXy+XatVwRTXjmtYg4BM ZH5U1iVYAxeKBzwB5uZJSJDTFDOMrXhE6UGVp3eBOx5saVWoWO2FcxN/mWSqHyuC cyOPiLvkQ++3dAZmJCXcIXkvLHNNEFnZUS/Xqdal1bHFm/TwvDKIQOeOeFMfco97 2pJlu7G0UKePpzpOsohNAH23ogFPR9SB4US0HLJmwu46bKed1U6tUwUUIjG24Qh4 qXCUFNx3cGBWG1D8ftrEuY5HHrra9vM= -----END CERTIFICATE-----Generated at Wed Nov 5 05:45:43 2025 by rpki-client