$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/34e401f8-32c5-3231-9ba4-e330e23d0bfb.roa File: 34e401f8-32c5-3231-9ba4-e330e23d0bfb.roa (raw, json) Hash identifier: icPlmzhRyXOkm/SYo8RkUe5J5Dek/w9SgwJ3Fm9tRS0= Subject key identifier: 51:4B:D9:C6:72:1C:BA:6E:BD:BC:FD:E6:AB:A5:44:B2:A0:9F:7D:D5 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584BBE406184A8877B7D21C767C0 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/34e401f8-32c5-3231-9ba4-e330e23d0bfb.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 31898 IP address blocks: 152.69.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:61:84:a8:87:7b:7d:21:c7:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=599ccc19-0ae6-4310-bbbd-f9433c255d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7c:81:90:e7:e8:cb:2b:3e:a0:dd:d2:06:3b: 51:0f:7e:c1:f2:72:0c:ed:0a:03:f0:6a:12:d8:63: 00:8b:0f:25:1b:69:bd:a1:d5:46:f3:3d:40:15:0e: 3f:6d:17:d9:4e:bf:ed:dc:06:ab:1f:90:bc:cf:2e: e6:9f:a7:d9:d9:ed:8a:fe:d8:94:52:1c:32:2e:ff: c9:4d:d7:1a:4a:4e:33:1a:db:77:0c:87:62:d4:7c: f0:a7:2a:e9:56:42:7d:cb:7e:e1:f3:59:9b:fe:92: aa:2f:05:f6:45:1c:07:66:39:14:71:80:63:c6:16: e1:d7:af:d4:be:f9:da:ad:6f:a3:9b:59:93:4e:ad: 1a:c7:dd:f7:1e:58:7e:98:9b:f3:18:34:73:95:7c: 09:fe:af:96:62:c4:30:98:4d:ac:76:1f:96:f0:b2: 93:d5:89:cc:40:91:e5:3a:93:1e:a8:93:e5:9d:fe: cc:94:fa:d3:db:7f:72:21:c6:aa:d0:8c:b1:bb:b5: 13:c1:97:fa:62:d6:09:de:d7:97:ae:1c:c3:c5:3c: bd:ca:61:7c:8f:57:45:9c:7d:f6:12:14:09:b1:9d: 18:c5:45:f5:75:14:59:7a:55:8a:a2:65:77:9f:7d: 7f:55:f3:89:54:e5:04:19:82:37:f0:32:d3:fe:27: ad:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:4B:D9:C6:72:1C:BA:6E:BD:BC:FD:E6:AB:A5:44:B2:A0:9F:7D:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/34e401f8-32c5-3231-9ba4-e330e23d0bfb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 152.69.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:7c:7a:c4:ae:78:b7:4c:b0:17:a2:17:68:c7:e1:60:e8:5f: 52:66:35:77:cd:7d:d0:72:a8:9d:4f:e5:b0:d8:11:69:ea:cc: 94:5a:97:3f:4e:12:05:a7:1e:6d:88:71:a6:fa:51:3d:b3:79: b8:ad:8c:01:8d:52:80:16:55:76:c1:1f:a5:11:07:b5:d2:b7: 88:a7:77:8c:08:c1:50:c0:5e:da:7b:8b:0e:3b:4e:29:85:3d: f4:32:62:63:74:eb:f7:b3:cb:bc:f2:07:ad:b6:34:4c:b8:98: ca:85:dc:8f:09:cd:27:da:c2:23:87:7a:81:9a:5b:44:14:7f: b9:ec:a6:12:02:b6:d0:f9:6f:5a:07:ba:8f:1b:cd:d1:e9:85: c3:f9:27:3d:cb:50:ad:bb:cb:ee:d0:9f:b2:85:07:e7:7f:7d: 8b:f7:49:08:e3:66:83:89:eb:51:80:f8:c2:72:ed:98:64:da: f5:38:8a:13:9e:30:70:d9:59:dc:43:a0:70:18:3f:9a:50:1e: 51:a9:10:30:52:2c:22:7a:3b:be:68:97:cb:05:31:15:1b:98: 64:2e:14:24:50:39:d4:c4:25:b3:5c:df:ee:ff:a1:89:0d:c3: 5f:71:91:43:b2:6e:2e:d9:77:14:4a:2b:3c:28:4c:59:58:3f: e3:99:d6:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QGGEqId7fSHHZ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NTk5Y2NjMTktMGFlNi00MzEwLWJiYmQtZjk0MzNjMjU1ZDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHyBkOfoyys+oN3SBjtRD37B8nIM7QoD8GoS 2GMAiw8lG2m9odVG8z1AFQ4/bRfZTr/t3AarH5C8zy7mn6fZ2e2K/tiUUhwyLv/J TdcaSk4zGtt3DIdi1HzwpyrpVkJ9y37h81mb/pKqLwX2RRwHZjkUcYBjxhbh16/U vvnarW+jm1mTTq0ax933Hlh+mJvzGDRzlXwJ/q+WYsQwmE2sdh+W8LKT1YnMQJHl OpMeqJPlnf7MlPrT239yIcaq0Iyxu7UTwZf6YtYJ3teXrhzDxTy9ymF8j1dFnH32 EhQJsZ0YxUX1dRRZelWKomV3n31/VfOJVOUEGYI38DLT/iet0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFL2cZyHLpuvbz95qulRLKgn33VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMzRlNDAxZjgtMzJjNS0z MjMxLTliYTQtZTMzMGUyM2QwYmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmEXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHV8esSueLdMsBeiF2jH4WDoX1JmNXfNfdByqJ1P5bDYEWnqzJRalz9O EgWnHm2Icab6UT2zebitjAGNUoAWVXbBH6URB7XSt4ind4wIwVDAXtp7iw47TimF PfQyYmN06/ezy7zyB622NEy4mMqF3I8JzSfawiOHeoGaW0QUf7nsphICttD5b1oH uo8bzdHphcP5Jz3LUK27y+7Qn7KFB+d/fYv3SQjjZoOJ61GA+MJy7Zhk2vU4ihOe MHDZWdxDoHAYP5pQHlGpEDBSLCJ6O75ol8sFMRUbmGQuFCRQOdTEJbNc3+7/oYkN w19xkUOybi7ZdxRKKzwoTFlYP+OZ1n0= -----END CERTIFICATE-----Generated at Thu Nov 6 07:27:21 2025 by rpki-client