$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/2541f1b1-088d-30fb-a498-b60976d5c04d.roa File: 2541f1b1-088d-30fb-a498-b60976d5c04d.roa (raw, json) Hash identifier: 6b/EKKyGPT8SBJCC7y3xpXlCCBRRciQUtBa3mA8pcoY= Subject key identifier: A4:0E:CB:39:85:41:FA:7E:10:CB:66:72:83:C4:52:DD:DA:5A:37:A8 Certificate issuer: /CN=1fb001d4-3a2b-436f-a572-51822a315945 Certificate serial: 010D0C9F4328584B99D7895015FF04B697BD1C80 Authority key identifier: 74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/2541f1b1-088d-30fb-a498-b60976d5c04d.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 395363 IP address blocks: 52.119.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:89:50:15:ff:04:b6:97:bd:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fb001d4-3a2b-436f-a572-51822a315945 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=7825418a-2621-432d-a25a-cb5cf9824ae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:31:65:bb:b1:75:4e:ea:18:f3:85:a5:75:0d: 54:a3:88:2b:c9:4a:14:27:6a:2a:67:6f:16:55:d8: de:74:d8:24:6a:fb:4c:2f:9c:4d:60:da:a3:bf:6d: 16:9d:ae:27:5b:20:31:d6:ff:f9:d9:e6:c7:1f:0a: 99:48:70:5c:27:14:5b:e7:20:9a:24:13:95:28:d6: 9e:b3:02:ef:18:41:ea:5e:dd:15:40:17:9d:11:47: 9b:06:30:a8:44:89:64:b0:c9:95:bc:55:80:14:fa: e9:4f:d4:61:c3:2a:a6:96:f5:e2:22:13:25:78:56: be:f2:34:d9:3a:47:eb:49:2f:97:32:ee:eb:67:ca: c5:c6:73:8c:20:52:bf:b9:99:2f:f1:9b:1e:81:e6: db:7d:6d:b3:18:ae:89:1d:4b:8f:fc:16:30:71:02: 5e:bc:b3:fd:9e:fe:09:2b:a3:0b:7a:f8:56:04:6f: 55:8c:1a:ae:3d:62:dd:6b:7d:92:2b:99:06:55:55: dd:54:1c:3a:01:00:65:62:14:3d:78:33:8b:a1:ba: f3:4c:77:32:1d:b2:4a:42:87:e8:b6:8e:02:6d:60: af:dc:4b:29:38:13:5e:3c:6f:30:f7:4b:ad:e5:23: e6:b9:2c:85:ad:d6:6c:60:09:b4:75:a7:35:94:19: 1a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:0E:CB:39:85:41:FA:7E:10:CB:66:72:83:C4:52:DD:DA:5A:37:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/2541f1b1-088d-30fb-a498-b60976d5c04d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl X509v3 Authority Key Identifier: keyid:74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer sbgp-ipAddrBlock: critical IPv4: 52.119.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:36:03:49:f6:7c:0f:e7:ba:db:cd:74:8b:94:8d:b6:f5:7e: 62:45:eb:40:c1:74:26:ed:9b:09:f6:c7:ef:53:a3:ed:c7:92: 6d:68:27:0e:fa:0b:28:ad:94:70:ce:f1:61:2e:0a:18:12:22: a7:30:0f:98:a5:39:46:6b:99:fd:b8:62:05:52:a0:bc:78:c8: 41:b7:d2:cb:12:ed:db:9e:bb:b4:63:f5:39:5b:ec:dd:8d:a2: 11:32:4f:13:b5:49:b3:48:17:37:e0:61:1f:df:a1:b5:1b:b4: a0:66:0a:45:29:e1:44:09:94:98:de:73:8f:68:82:7f:04:11: a7:2c:30:9e:ae:3b:8f:b7:b6:80:2e:05:b5:14:95:ea:ee:27: 56:67:e6:2e:ce:ab:fb:25:9c:97:68:0c:ff:bf:e2:2d:31:37: ae:00:6a:e9:31:4c:e9:54:4e:df:22:b3:ac:67:9d:b1:9b:f9: 43:e7:ac:d8:89:f6:a9:b1:ca:91:42:51:7e:24:3e:09:45:ea: fc:c4:28:eb:34:39:6e:f6:21:72:a8:ac:30:3e:76:42:39:33: 00:f3:e3:51:11:b4:e3:71:59:ef:1b:cd:7d:d2:4d:21:ba:d6: fd:b0:72:07:30:19:80:20:e9:8c:24:58:99:ca:ab:b1:89:8e: 71:37:0d:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ14lQFf8Etpe9HIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZiMDAxZDQtM2EyYi00MzZmLWE1NzItNTE4MjJhMzE1 OTQ1MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NzgyNTQxOGEtMjYyMS00MzJkLWEyNWEtY2I1Y2Y5ODI0YWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jFlu7F1TuoY84WldQ1Uo4gryUoUJ2oqZ28W VdjedNgkavtML5xNYNqjv20Wna4nWyAx1v/52ebHHwqZSHBcJxRb5yCaJBOVKNae swLvGEHqXt0VQBedEUebBjCoRIlksMmVvFWAFPrpT9RhwyqmlvXiIhMleFa+8jTZ OkfrSS+XMu7rZ8rFxnOMIFK/uZkv8ZsegebbfW2zGK6JHUuP/BYwcQJevLP9nv4J K6MLevhWBG9VjBquPWLda32SK5kGVVXdVBw6AQBlYhQ9eDOLobrzTHcyHbJKQofo to4CbWCv3EspOBNePG8w90ut5SPmuSyFrdZsYAm0dac1lBkaBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQOyzmFQfp+EMtmcoPEUt3aWjeoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZmIw MDFkNC0zYTJiLTQzNmYtYTU3Mi01MTgyMmEzMTU5NDUvMjU0MWYxYjEtMDg4ZC0z MGZiLWE0OTgtYjYwOTc2ZDVjMDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWZiMDAxZDQtM2EyYi00MzZmLWE1 NzItNTE4MjJhMzE1OTQ1LzFmYjAwMWQ0LTNhMmItNDM2Zi1hNTcyLTUxODIyYTMx NTk0NS5jcmwwHwYDVR0jBBgwFoAUdKd9Tqw3iqgM0MIrTF1vWza8INEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZmIwMDFkNC0zYTJiLTQzNmYtYTU3Mi01MTgy MmEzMTU5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHcoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJI2A0n2fA/nutvNdIuUjbb1fmJF60DBdCbtmwn2x+9To+3Hkm1oJw76 CyitlHDO8WEuChgSIqcwD5ilOUZrmf24YgVSoLx4yEG30ssS7dueu7Rj9Tlb7N2N ohEyTxO1SbNIFzfgYR/fobUbtKBmCkUp4UQJlJjec49ogn8EEacsMJ6uO4+3toAu BbUUleruJ1Zn5i7Oq/slnJdoDP+/4i0xN64AaukxTOlUTt8is6xnnbGb+UPnrNiJ 9qmxypFCUX4kPglF6vzEKOs0OW72IXKorDA+dkI5MwDz41ERtONxWe8bzX3STSG6 1v2wcgcwGYAg6YwkWJnKq7GJjnE3DYY= -----END CERTIFICATE-----Generated at Wed Nov 5 00:11:34 2025 by rpki-client