$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/81852c88-05b1-32fa-99b7-21e0cf251156.roa File: 81852c88-05b1-32fa-99b7-21e0cf251156.roa (raw, json) Hash identifier: EdZnlMskchu1N7RutkuWO2qeStw2q8vxSfmnaSZtrBM= Subject key identifier: 54:71:19:40:BB:DA:6B:C4:E6:5A:70:00:0B:92:47:92:DE:1F:4A:22 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6FF7463A22A66133A7407400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/81852c88-05b1-32fa-99b7-21e0cf251156.roa Signing time: Tue 07 Oct 2025 01:00:29 +0000 ROA not before: Tue 07 Oct 2025 01:00:29 +0000 ROA not after: Mon 05 Jan 2026 02:00:29 +0000 asID: 30036 IP address blocks: 170.52.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:f7:46:3a:22:a6:61:33:a7:40:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 7 01:00:29 2025 GMT Not After : Jan 5 02:00:29 2026 GMT Subject: CN=88436929-c7a9-48b0-be70-f39c10e64bb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:66:d2:e6:2a:44:8f:86:2a:45:c0:65:6f:15: 8a:fd:20:00:1c:d5:10:0c:b1:03:db:87:5e:dc:81: 43:80:3c:e2:5a:87:83:a5:9f:99:ef:4a:aa:80:b8: d6:81:08:43:a4:96:f9:cb:7c:61:4c:04:33:24:45: ed:ce:b2:e4:a9:e8:a2:9c:bd:3b:82:da:92:b5:cb: 99:2d:af:80:d1:2f:86:f3:c6:80:af:af:18:30:45: b0:d6:c7:5b:8b:e0:91:61:e4:c6:29:d4:28:14:aa: f6:25:10:04:1a:c2:76:50:83:ab:d2:74:fa:03:0a: 25:59:5e:6f:69:5f:88:2a:36:03:71:be:1f:dc:4d: 26:2b:26:da:41:d0:3b:db:61:7a:67:df:21:e1:8f: 40:ea:ca:d0:51:d3:21:46:f3:b0:e5:45:da:a9:39: 92:33:c0:0d:9c:0e:95:7b:21:36:a8:23:f5:41:be: 0e:06:11:96:99:35:2f:f2:99:82:e9:9b:c7:c1:af: fb:4a:88:d2:58:41:74:9d:4d:65:06:ef:43:6c:65: e4:f5:a3:e7:6b:4c:e5:6f:de:26:e0:bc:d6:79:15: 8e:c2:ca:76:42:6f:c5:aa:c8:49:7e:72:6e:0c:e3: b7:26:6c:5e:4a:d6:fe:6e:f9:d8:08:25:59:85:fe: 23:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:71:19:40:BB:DA:6B:C4:E6:5A:70:00:0B:92:47:92:DE:1F:4A:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/81852c88-05b1-32fa-99b7-21e0cf251156.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 170.52.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:3b:d2:14:12:11:bb:97:8d:be:11:52:9d:f8:3d:cd:24:7c: e7:4d:51:ce:47:99:0d:75:26:ec:1a:c8:7c:49:d9:c0:31:fa: 2a:21:e0:ad:bd:cd:de:89:55:78:02:ac:e1:3d:00:65:cf:4c: 2d:01:18:17:08:b5:b2:a6:c6:42:b4:68:9e:fc:55:19:1d:3f: 4e:a4:64:ea:2d:27:0b:19:69:da:f6:70:30:1b:2a:2d:da:77: 8a:b8:23:c9:89:cd:3f:b1:dc:07:66:9c:27:f5:94:30:2e:ac: 88:8e:60:a4:76:66:25:1b:ae:1f:73:71:f5:7c:bb:9a:61:0b: 1d:10:f1:d7:7e:c6:84:e6:09:22:ee:06:ec:86:b7:40:16:26: 9e:80:36:71:c6:a8:89:40:fa:4f:16:b8:56:4b:94:4b:4b:af: 5c:28:a7:15:e9:73:23:25:ec:19:42:0b:d3:b0:33:45:62:2f: d3:23:89:bd:38:ce:32:2e:ad:4d:f4:cd:c7:1c:4b:4f:fa:79: f8:22:4e:92:79:c8:8b:00:61:20:97:79:3a:f2:9c:18:e0:ce: 57:5b:c8:6f:2c:06:b1:5b:f5:01:f4:c5:6f:b6:ca:da:53:37: 71:da:b1:d4:47:cd:c6:cf:4b:a7:0b:7a:59:a0:61:00:ac:41: e3:73:b7:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtv90Y6IqZhM6dAdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNzAxMDAyOVoXDTI2MDEwNTAyMDAyOVowLzEtMCsGA1UEAxMk ODg0MzY5MjktYzdhOS00OGIwLWJlNzAtZjM5YzEwZTY0YmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmbS5ipEj4YqRcBlbxWK/SAAHNUQDLED24de 3IFDgDziWoeDpZ+Z70qqgLjWgQhDpJb5y3xhTAQzJEXtzrLkqeiinL07gtqStcuZ La+A0S+G88aAr68YMEWw1sdbi+CRYeTGKdQoFKr2JRAEGsJ2UIOr0nT6AwolWV5v aV+IKjYDcb4f3E0mKybaQdA722F6Z98h4Y9A6srQUdMhRvOw5UXaqTmSM8ANnA6V eyE2qCP1Qb4OBhGWmTUv8pmC6ZvHwa/7SojSWEF0nU1lBu9DbGXk9aPna0zlb94m 4LzWeRWOwsp2Qm/FqshJfnJuDOO3JmxeStb+bvnYCCVZhf4jTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRxGUC72mvE5lpwAAuSR5LeH0oiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODE4NTJjODgtMDViMS0z MmZhLTk5YjctMjFlMGNmMjUxMTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqjQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB070hQSEbuXjb4RUp34Pc0kfOdNUc5HmQ11JuwayHxJ2cAx+ioh4K29 zd6JVXgCrOE9AGXPTC0BGBcItbKmxkK0aJ78VRkdP06kZOotJwsZadr2cDAbKi3a d4q4I8mJzT+x3AdmnCf1lDAurIiOYKR2ZiUbrh9zcfV8u5phCx0Q8dd+xoTmCSLu BuyGt0AWJp6ANnHGqIlA+k8WuFZLlEtLr1wopxXpcyMl7BlCC9OwM0ViL9Mjib04 zjIurU30zcccS0/6efgiTpJ5yIsAYSCXeTrynBjgzldbyG8sBrFb9QH0xW+2ytpT N3HasdRHzcbPS6cLelmgYQCsQeNzt8g= -----END CERTIFICATE-----Generated at Sat Oct 11 02:56:12 2025 by rpki-client