$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/eed8f0ea-901c-3e4e-98a7-d2752977cda7.roa File: eed8f0ea-901c-3e4e-98a7-d2752977cda7.roa (raw, json) Hash identifier: /Ofj6kMdPslsqW7MUXnriIeR/kinU3sa0tq/LruYzHs= Subject key identifier: 8E:58:9F:DF:11:79:CA:A7:C3:1E:C3:42:39:0B:D2:D9:EC:3A:8F:E5 Certificate issuer: /CN=1fb001d4-3a2b-436f-a572-51822a315945 Certificate serial: 010D0C9F4328584BA932622EC785C87EBFEBAA80 Authority key identifier: 74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/eed8f0ea-901c-3e4e-98a7-d2752977cda7.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 52.119.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:62:2e:c7:85:c8:7e:bf:eb:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fb001d4-3a2b-436f-a572-51822a315945 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=0a40afb4-3b2b-4fc6-b616-6ad9082a1c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6c:da:40:c7:6a:6c:31:01:b4:25:ae:1c:dc: ba:df:cf:85:86:c8:43:8a:1d:02:2c:de:e4:cc:70: af:e0:93:35:3b:39:eb:7a:ff:8e:e6:7c:7a:0f:aa: 6e:ea:3a:fb:43:6b:98:c4:c8:5f:8c:fe:8b:66:0e: 25:bd:58:b1:64:54:67:99:d3:1a:cb:a8:f3:72:fd: 90:16:c2:22:78:d0:1f:aa:f0:06:b9:0e:8c:71:5d: f3:f3:70:6f:7d:62:60:1e:19:de:65:8a:8a:eb:3a: ae:77:21:c3:d5:c4:e5:0b:16:f3:f5:8c:df:0d:7e: ca:3a:bd:cb:ab:06:a7:5e:9b:ff:49:ee:5b:70:c8: aa:f5:c2:11:62:49:01:ca:66:ab:74:34:61:41:cb: 92:2b:62:7b:db:51:94:5c:a2:7f:38:45:39:0f:0f: 7e:4e:ea:8a:3c:e4:97:a9:a6:37:08:0f:81:d7:0b: 58:5b:44:05:22:9f:a5:10:13:58:fa:fc:a4:23:8b: 3b:67:3a:1a:d0:f9:d0:57:cd:ca:a5:56:05:df:58: 14:3e:da:b8:9d:10:70:cd:ba:7e:25:9a:9c:ea:17: 6e:b8:c0:b2:ca:db:75:53:4b:9f:d3:d0:01:43:7d: 84:20:60:14:5d:ca:6e:2b:d6:e8:02:0d:15:1c:7e: 55:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:58:9F:DF:11:79:CA:A7:C3:1E:C3:42:39:0B:D2:D9:EC:3A:8F:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/eed8f0ea-901c-3e4e-98a7-d2752977cda7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl X509v3 Authority Key Identifier: keyid:74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer sbgp-ipAddrBlock: critical IPv4: 52.119.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:fe:ec:a0:59:06:52:59:61:49:f5:05:33:e8:51:e1:bf:da: 04:6f:b0:9b:20:1f:f7:b2:f4:ad:1f:61:a1:cb:1f:51:9a:3d: 73:b9:dc:d9:40:4a:d2:50:b0:17:2c:0d:6f:20:26:4c:ef:d9: 3f:d1:01:80:15:c5:d7:5f:1b:18:35:9b:5c:21:0f:ee:49:85: a4:37:11:d8:d3:4c:87:fa:7c:be:a4:90:66:c9:63:5a:d2:42: 47:4a:1a:63:3e:74:07:ea:d9:ba:a4:b6:3f:ae:12:43:54:2e: 98:21:81:e8:6e:57:c9:8d:3e:85:8f:6d:24:ca:49:1e:1b:12: 53:b5:cd:2d:50:f5:66:b4:61:65:b9:ed:0b:ac:77:78:df:d8: cc:59:82:70:f8:73:b8:19:f6:21:6c:ab:c9:96:b5:6e:ab:0d: 3c:06:a3:70:68:c4:59:61:41:ca:28:2d:94:98:2f:fa:0b:c3: 04:7f:ef:ca:cf:a4:15:0d:38:58:93:83:11:0c:11:26:14:47: 01:d6:2a:b9:b1:93:b4:74:e1:36:c8:a1:e9:7e:db:7d:35:74: 94:88:97:c2:33:1c:fd:1a:ba:38:2f:6a:dd:34:30:4e:78:a8: e1:8c:c0:09:fc:fa:21:fb:79:94:b4:90:c1:75:4b:f4:ec:71: af:b5:da:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMmIux4XIfr/rqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZiMDAxZDQtM2EyYi00MzZmLWE1NzItNTE4MjJhMzE1 OTQ1MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk MGE0MGFmYjQtM2IyYi00ZmM2LWI2MTYtNmFkOTA4MmExYzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2zaQMdqbDEBtCWuHNy638+FhshDih0CLN7k zHCv4JM1Oznrev+O5nx6D6pu6jr7Q2uYxMhfjP6LZg4lvVixZFRnmdMay6jzcv2Q FsIieNAfqvAGuQ6McV3z83BvfWJgHhneZYqK6zqudyHD1cTlCxbz9YzfDX7KOr3L qwanXpv/Se5bcMiq9cIRYkkBymardDRhQcuSK2J721GUXKJ/OEU5Dw9+TuqKPOSX qaY3CA+B1wtYW0QFIp+lEBNY+vykI4s7Zzoa0PnQV83KpVYF31gUPtq4nRBwzbp+ JZqc6hduuMCyytt1U0uf09ABQ32EIGAUXcpuK9boAg0VHH5VGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5Yn98Recqnwx7DQjkL0tnsOo/lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZmIw MDFkNC0zYTJiLTQzNmYtYTU3Mi01MTgyMmEzMTU5NDUvZWVkOGYwZWEtOTAxYy0z ZTRlLTk4YTctZDI3NTI5NzdjZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWZiMDAxZDQtM2EyYi00MzZmLWE1 NzItNTE4MjJhMzE1OTQ1LzFmYjAwMWQ0LTNhMmItNDM2Zi1hNTcyLTUxODIyYTMx NTk0NS5jcmwwHwYDVR0jBBgwFoAUdKd9Tqw3iqgM0MIrTF1vWza8INEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZmIwMDFkNC0zYTJiLTQzNmYtYTU3Mi01MTgy MmEzMTU5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANHcpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIz+7KBZBlJZYUn1BTPoUeG/2gRvsJsgH/ey9K0fYaHLH1GaPXO53NlA StJQsBcsDW8gJkzv2T/RAYAVxddfGxg1m1whD+5JhaQ3EdjTTIf6fL6kkGbJY1rS QkdKGmM+dAfq2bqktj+uEkNULpghgehuV8mNPoWPbSTKSR4bElO1zS1Q9Wa0YWW5 7Qusd3jf2MxZgnD4c7gZ9iFsq8mWtW6rDTwGo3BoxFlhQcooLZSYL/oLwwR/78rP pBUNOFiTgxEMESYURwHWKrmxk7R04TbIoel+2301dJSIl8IzHP0aujgvat00ME54 qOGMwAn8+iH7eZS0kMF1S/Tsca+12os= -----END CERTIFICATE-----Generated at Wed Nov 5 08:48:25 2025 by rpki-client