$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/52b1de85-0442-360b-b96d-bfcab54c4eac.roa File: 52b1de85-0442-360b-b96d-bfcab54c4eac.roa (raw, json) Hash identifier: c+fizRJOqI0TL0io+fg40cVJ2R8utu52SaYZMq86r8E= Subject key identifier: 24:91:9C:D0:C6:0E:13:78:EA:E2:0D:92:E5:03:30:3D:47:EB:B7:57 Certificate issuer: /CN=2b52814e-343c-46a0-bf89-2e9064856503 Certificate serial: 010D0C9F4328584AC2E0D8B36745E4AB738DA840 Authority key identifier: E9:D4:70:BA:21:90:EE:D7:2F:D9:DF:95:C7:26:7F:3A:F6:2F:28:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/52b1de85-0442-360b-b96d-bfcab54c4eac.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 393410 IP address blocks: 192.30.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/2b52814e-343c-46a0-bf89-2e9064856503.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/2b52814e-343c-46a0-bf89-2e9064856503.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:d8:b3:67:45:e4:ab:73:8d:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b52814e-343c-46a0-bf89-2e9064856503 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=992b1aed-d862-448d-a864-75b3618d2085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:80:41:a3:62:93:bb:50:48:9f:ae:b6:4f:b5: 13:e4:85:a4:71:b5:fc:d8:e6:40:0a:93:7a:01:4b: 7c:16:64:30:6e:0f:a8:8f:4d:af:9e:c2:ff:c1:d6: 40:25:d1:fe:68:73:a9:ad:74:31:bf:5a:4e:ab:a9: 2a:07:ae:e6:22:64:75:ef:6b:c7:77:36:a4:b8:cb: d1:06:a9:dd:65:38:25:f4:c3:62:1a:f1:b0:bd:a6: 36:5b:18:8b:c3:a3:55:01:12:15:15:52:f1:83:41: 2d:ad:bd:f3:e4:9d:55:a0:2f:0e:19:29:18:b3:a6: 63:67:04:56:1d:b7:c5:1d:a2:ae:09:18:2b:34:0b: 95:55:e1:13:fa:cf:32:9e:7f:88:ec:15:86:0c:5c: 1c:20:c0:17:d7:18:9b:13:38:49:2b:e2:a8:84:2e: 7c:e9:4a:76:1f:1b:ab:30:03:8f:04:6d:5b:46:2f: 12:ce:a8:da:bd:83:17:06:e1:ae:33:de:44:e4:49: fb:09:96:f2:86:c6:34:16:55:8e:55:b4:43:db:fd: 1e:b5:87:58:e2:af:1d:a5:33:29:c5:df:98:08:f4: 1f:d1:80:13:6b:c0:65:1c:1d:11:ac:2d:01:3d:dc: c5:cc:f7:86:f2:46:c7:95:09:48:a4:14:e9:a9:25: e2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:91:9C:D0:C6:0E:13:78:EA:E2:0D:92:E5:03:30:3D:47:EB:B7:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/52b1de85-0442-360b-b96d-bfcab54c4eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503/2b52814e-343c-46a0-bf89-2e9064856503.crl X509v3 Authority Key Identifier: keyid:E9:D4:70:BA:21:90:EE:D7:2F:D9:DF:95:C7:26:7F:3A:F6:2F:28:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2b52814e-343c-46a0-bf89-2e9064856503.cer sbgp-ipAddrBlock: critical IPv4: 192.30.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:53:46:e9:af:af:7b:1a:c2:6e:af:2c:c0:e9:7d:4c:fd:6d: c7:f4:76:20:f3:72:ee:0d:3b:15:4e:80:31:29:6a:05:0b:89: ec:85:eb:24:89:a1:2d:26:ef:10:24:d2:af:4f:27:89:a6:b0: de:d8:20:67:b7:b1:0b:01:d8:8b:b4:0d:6b:d7:36:af:f2:ad: 5e:96:eb:cf:fd:1c:39:9a:31:c2:2e:d7:ab:4d:50:dc:37:ae: a7:0f:24:e4:ae:6d:3f:87:e1:b0:2d:e4:78:74:55:b2:7b:a0: 61:70:13:69:fc:06:76:0d:59:6f:2d:48:37:9d:19:8e:43:fa: 2e:b8:36:66:f0:57:6f:7f:7c:a7:b9:4f:ce:0c:1a:1f:aa:e3: 29:1d:56:d9:d9:46:be:c4:e5:3f:fd:99:a6:8b:3a:36:01:bb: e2:f3:36:3f:99:6e:f2:a7:45:47:7d:d3:29:3e:3e:0a:2e:ff: 09:d9:30:e0:1d:02:2e:fc:c2:f7:fe:ea:b2:b1:19:ef:36:e3: 37:5c:e5:81:91:26:fa:3b:27:0f:5b:59:93:47:f0:0e:09:34: 24:b7:5b:9e:e9:f7:10:c0:47:de:c4:ba:87:f3:3d:a4:ae:46: f6:5f:bb:e0:77:ca:c6:33:46:7c:0f:d0:93:28:00:07:f3:45: 3a:e9:ed:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4NizZ0Xkq3ONqEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI1MjgxNGUtMzQzYy00NmEwLWJmODktMmU5MDY0ODU2 NTAzMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk OTkyYjFhZWQtZDg2Mi00NDhkLWE4NjQtNzViMzYxOGQyMDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24BBo2KTu1BIn662T7UT5IWkcbX82OZACpN6 AUt8FmQwbg+oj02vnsL/wdZAJdH+aHOprXQxv1pOq6kqB67mImR172vHdzakuMvR BqndZTgl9MNiGvGwvaY2WxiLw6NVARIVFVLxg0Etrb3z5J1VoC8OGSkYs6ZjZwRW HbfFHaKuCRgrNAuVVeET+s8ynn+I7BWGDFwcIMAX1xibEzhJK+KohC586Up2Hxur MAOPBG1bRi8SzqjavYMXBuGuM95E5En7CZbyhsY0FlWOVbRD2/0etYdY4q8dpTMp xd+YCPQf0YATa8BlHB0RrC0BPdzFzPeG8kbHlQlIpBTpqSXiPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSRnNDGDhN46uINkuUDMD1H67dXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYjUy ODE0ZS0zNDNjLTQ2YTAtYmY4OS0yZTkwNjQ4NTY1MDMvNTJiMWRlODUtMDQ0Mi0z NjBiLWI5NmQtYmZjYWI1NGM0ZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmI1MjgxNGUtMzQzYy00NmEwLWJm ODktMmU5MDY0ODU2NTAzLzJiNTI4MTRlLTM0M2MtNDZhMC1iZjg5LTJlOTA2NDg1 NjUwMy5jcmwwHwYDVR0jBBgwFoAU6dRwuiGQ7tcv2d+VxyZ/OvYvKE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYjUyODE0ZS0zNDNjLTQ2YTAtYmY4OS0yZTkw NjQ4NTY1MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB58MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZTRumvr3sawm6vLMDpfUz9bcf0diDzcu4NOxVOgDEpagULieyF6ySJ oS0m7xAk0q9PJ4mmsN7YIGe3sQsB2Iu0DWvXNq/yrV6W68/9HDmaMcIu16tNUNw3 rqcPJOSubT+H4bAt5Hh0VbJ7oGFwE2n8BnYNWW8tSDedGY5D+i64NmbwV29/fKe5 T84MGh+q4ykdVtnZRr7E5T/9maaLOjYBu+LzNj+ZbvKnRUd90yk+Pgou/wnZMOAd Ai78wvf+6rKxGe824zdc5YGRJvo7Jw9bWZNH8A4JNCS3W57p9xDAR97EuofzPaSu RvZfu+B3ysYzRnwP0JMoAAfzRTrp7dQ= -----END CERTIFICATE-----Generated at Wed Aug 6 05:23:23 2025 by rpki-client