$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/52b1de85-0442-360b-b96d-bfcab54c4eac.roa File: 52b1de85-0442-360b-b96d-bfcab54c4eac.roa (raw, json) Hash identifier: pdh14s5fURvVENfU4kunRJzGauzEUkNBmRuQkwJNbZI= Subject key identifier: AF:8B:30:17:4F:C3:F0:DF:5E:7B:36:A9:DA:D8:D6:34:5B:D3:CC:0B Certificate issuer: /CN=2b52814e-343c-46a0-bf89-2e9064856503 Certificate serial: 010D0C9F4328584BA39CF741B4F1E8C8C3E2A140 Authority key identifier: E9:D4:70:BA:21:90:EE:D7:2F:D9:DF:95:C7:26:7F:3A:F6:2F:28:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/52b1de85-0442-360b-b96d-bfcab54c4eac.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 393410 IP address blocks: 192.30.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/2b52814e-343c-46a0-bf89-2e9064856503.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/2b52814e-343c-46a0-bf89-2e9064856503.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9c:f7:41:b4:f1:e8:c8:c3:e2:a1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b52814e-343c-46a0-bf89-2e9064856503 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=979fb5b7-980d-46a2-b0d9-2b74bdd048a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d4:b1:66:3d:34:7b:86:8d:d0:6e:5d:03:a6: e4:65:50:3c:c8:9b:b4:fe:5b:09:d9:78:4b:93:b4: 27:6a:83:19:e7:a3:c4:3c:bf:00:e1:88:f2:21:f0: fa:bc:3b:c1:16:bc:76:f5:d6:77:f9:4c:a8:ec:81: 3f:95:8d:83:f3:0f:5f:dc:cc:30:7d:16:e3:f9:d4: 74:ca:62:86:75:f4:71:29:14:ab:af:cd:a8:30:64: 7b:e9:71:f4:26:1c:49:6b:6f:a2:40:f2:ab:38:0b: 18:95:1b:e8:85:c4:50:bb:c0:56:ec:a1:49:9d:df: ce:38:d1:ba:88:e1:38:10:60:5e:fc:0a:d2:fc:d6: 45:b8:63:87:d4:86:08:13:23:38:ba:e0:85:d7:ee: 24:3f:77:af:af:b2:0f:49:e3:d5:c5:80:4f:39:cf: f6:a4:15:7f:12:4f:a4:c8:a6:15:8d:dc:98:b2:1a: da:4b:05:11:63:27:d1:e8:7b:63:6d:06:89:4e:1b: 6f:ce:5c:06:aa:60:ff:52:a3:84:d2:24:13:d8:a9: 45:53:57:01:bf:cb:52:60:1f:cc:f6:50:cb:9e:05: f0:c5:ac:8f:50:d6:e8:d3:ec:3c:98:e3:bb:01:4c: 41:7a:40:0e:ae:0c:e4:2d:d5:89:f6:70:57:64:f7: e4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:8B:30:17:4F:C3:F0:DF:5E:7B:36:A9:DA:D8:D6:34:5B:D3:CC:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/52b1de85-0442-360b-b96d-bfcab54c4eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/2b52814e-343c-46a0-bf89-2e9064856503.crl X509v3 Authority Key Identifier: keyid:E9:D4:70:BA:21:90:EE:D7:2F:D9:DF:95:C7:26:7F:3A:F6:2F:28:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503.cer sbgp-ipAddrBlock: critical IPv4: 192.30.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:37:a8:00:a1:64:9b:b8:e0:2b:b3:36:16:d3:ae:35:cd:32: f8:f8:31:04:03:1a:6c:68:a3:a9:af:40:d2:d4:7b:b6:1f:3e: 5d:a9:33:2a:d5:74:ba:c8:a2:4e:80:aa:fb:58:ca:ce:19:fc: b2:ba:9d:11:c4:d3:5a:a3:75:47:1e:5d:3b:0d:8a:1f:b1:09: d9:5b:af:98:74:3d:56:5a:65:bf:08:2b:ca:aa:0e:b7:32:9f: 05:d5:8c:e9:58:14:d8:ae:0f:f6:a9:4e:d5:66:66:05:be:fb: 5e:bc:b3:4b:13:54:71:6e:e8:cd:c5:7b:15:85:5a:73:3a:fb: a6:b2:9a:9a:12:cc:d6:85:f2:aa:12:4b:42:f0:5e:9f:56:cb: 53:a1:e3:fe:a1:92:29:64:2d:7f:60:6a:9b:15:37:03:84:2e: a3:06:8d:d9:cc:05:c3:be:fb:5f:82:b6:98:68:60:d9:92:1f: 5c:96:2c:9d:74:d1:9f:43:86:41:fe:eb:4e:5f:bc:3e:3f:fe: 2f:e5:14:1f:b3:f1:61:18:eb:d4:66:91:11:2d:3a:4e:da:4d: 6f:2e:ec:eb:13:cc:db:29:e6:d0:8d:76:00:dd:49:50:2c:7c: 50:5b:b4:9d:c5:63:db:ce:ad:5e:fc:67:93:2e:db:92:3d:33: f6:9d:6b:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnPdBtPHoyMPioUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI1MjgxNGUtMzQzYy00NmEwLWJmODktMmU5MDY0ODU2 NTAzMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OTc5ZmI1YjctOTgwZC00NmEyLWIwZDktMmI3NGJkZDA0OGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtSxZj00e4aN0G5dA6bkZVA8yJu0/lsJ2XhL k7QnaoMZ56PEPL8A4YjyIfD6vDvBFrx29dZ3+Uyo7IE/lY2D8w9f3MwwfRbj+dR0 ymKGdfRxKRSrr82oMGR76XH0JhxJa2+iQPKrOAsYlRvohcRQu8BW7KFJnd/OONG6 iOE4EGBe/ArS/NZFuGOH1IYIEyM4uuCF1+4kP3evr7IPSePVxYBPOc/2pBV/Ek+k yKYVjdyYshraSwURYyfR6HtjbQaJThtvzlwGqmD/UqOE0iQT2KlFU1cBv8tSYB/M 9lDLngXwxayPUNbo0+w8mOO7AUxBekAOrgzkLdWJ9nBXZPfkVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+LMBdPw/DfXns2qdrY1jRb08wLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYjUy ODE0ZS0zNDNjLTQ2YTAtYmY4OS0yZTkwNjQ4NTY1MDMvNTJiMWRlODUtMDQ0Mi0z NjBiLWI5NmQtYmZjYWI1NGM0ZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmI1MjgxNGUtMzQzYy00NmEwLWJm ODktMmU5MDY0ODU2NTAzLzJiNTI4MTRlLTM0M2MtNDZhMC1iZjg5LTJlOTA2NDg1 NjUwMy5jcmwwHwYDVR0jBBgwFoAU6dRwuiGQ7tcv2d+VxyZ/OvYvKE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYjUyODE0ZS0zNDNjLTQ2YTAtYmY4OS0yZTkw NjQ4NTY1MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB58MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHs3qAChZJu44CuzNhbTrjXNMvj4MQQDGmxoo6mvQNLUe7YfPl2pMyrV dLrIok6AqvtYys4Z/LK6nRHE01qjdUceXTsNih+xCdlbr5h0PVZaZb8IK8qqDrcy nwXVjOlYFNiuD/apTtVmZgW++168s0sTVHFu6M3FexWFWnM6+6aympoSzNaF8qoS S0LwXp9Wy1Oh4/6hkilkLX9gapsVNwOELqMGjdnMBcO++1+CtphoYNmSH1yWLJ10 0Z9DhkH+605fvD4//i/lFB+z8WEY69RmkREtOk7aTW8u7OsTzNsp5tCNdgDdSVAs fFBbtJ3FY9vOrV78Z5Mu25I9M/adayk= -----END CERTIFICATE-----Generated at Tue Nov 4 23:29:14 2025 by rpki-client