$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/00f8bc34-2fd6-3328-924d-129cb50d9319.roa File: 00f8bc34-2fd6-3328-924d-129cb50d9319.roa (raw, json) Hash identifier: SqVGXrBoVik9U5toyhSXFMzAuNEZXDTRnQlqBvLWMeQ= Subject key identifier: 64:00:D3:84:A5:A2:4F:E6:28:D8:77:ED:61:E6:FD:FE:10:98:F7:B3 Certificate issuer: /CN=43290c87-c43c-46a1-8633-9c4624dc1aaf Certificate serial: 010D0C9F4328584B41E71458A470EB1370520D80 Authority key identifier: 6E:FC:BD:06:6F:97:7B:E8:82:11:C6:20:8E:C3:E7:3A:41:12:D7:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/00f8bc34-2fd6-3328-924d-129cb50d9319.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 396982 IP address blocks: 52.129.72.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/43290c87-c43c-46a1-8633-9c4624dc1aaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/43290c87-c43c-46a1-8633-9c4624dc1aaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:14:58:a4:70:eb:13:70:52:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43290c87-c43c-46a1-8633-9c4624dc1aaf Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=676f52d1-26df-407f-a63e-41aa6966e587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0d:47:fa:de:b3:9b:d1:c6:18:e4:a3:bf:a5: 09:46:e8:76:41:4c:b6:26:2d:54:d5:ca:6c:08:38: e2:bd:7f:93:9f:df:f1:81:ae:34:cf:47:68:ef:e7: 38:52:42:a1:d5:cc:6a:2f:da:4e:74:46:05:38:7c: f5:38:50:81:9e:57:fd:be:ff:c7:8a:75:95:47:89: 83:df:ba:2e:a8:48:85:c7:4b:6c:e1:14:76:24:46: 57:fb:94:16:1d:65:3d:74:3e:01:3d:f3:34:bc:87: f1:76:da:49:3d:a6:0c:d0:9b:3d:e0:c0:85:9e:44: 5f:06:1f:32:2d:bf:08:04:1b:84:be:de:63:13:b5: 97:38:fe:aa:48:24:b6:b4:cc:6d:dc:ba:16:c8:f1: 28:d5:b0:63:06:6f:36:55:b3:b3:5e:05:34:64:64: fc:6c:5f:c6:c3:3b:30:1d:5e:9a:61:5d:55:43:17: be:db:07:6d:9a:51:08:fe:45:4e:f7:c4:f5:59:18: f9:30:08:8a:7e:68:bb:77:9d:8f:6d:39:e9:28:d2: dc:5b:50:18:fa:41:6c:fa:08:49:85:db:09:54:56: 37:22:90:df:57:3b:d1:d5:0c:2e:61:f9:18:89:f9: cb:cc:51:2e:c1:19:84:e2:d8:f1:fb:68:9c:35:eb: 1c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:00:D3:84:A5:A2:4F:E6:28:D8:77:ED:61:E6:FD:FE:10:98:F7:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/00f8bc34-2fd6-3328-924d-129cb50d9319.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf/43290c87-c43c-46a1-8633-9c4624dc1aaf.crl X509v3 Authority Key Identifier: keyid:6E:FC:BD:06:6F:97:7B:E8:82:11:C6:20:8E:C3:E7:3A:41:12:D7:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43290c87-c43c-46a1-8633-9c4624dc1aaf.cer sbgp-ipAddrBlock: critical IPv4: 52.129.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:2f:ee:08:2d:81:a4:32:57:4b:07:2c:c2:9e:96:b2:03:34: 52:47:a8:1f:96:a7:50:0a:d8:81:47:bf:7c:1d:3b:fb:d6:10: cd:b7:d3:42:f3:47:1e:c7:e9:ee:3b:78:c8:38:1c:0d:97:c2: 8f:b8:31:a7:e1:3f:38:2a:ba:be:eb:54:39:0e:7f:5c:49:9e: 27:43:b4:3b:0f:18:df:d2:e7:e0:ef:d2:92:79:10:07:f5:9f: 10:bb:c8:38:0d:bb:02:f0:13:c9:cf:ee:8e:cd:2b:4c:f5:ab: 8c:9b:a7:41:34:d4:72:4b:66:a3:f0:9e:1f:a6:c3:73:37:f2: 5c:96:5c:db:ef:c4:77:45:ca:f9:f9:17:90:cf:06:8c:47:84: 35:1a:44:c8:5b:65:0a:ad:6f:da:51:71:70:12:65:12:2b:70: eb:1f:84:e2:2f:8b:bf:f5:2f:25:aa:80:b5:68:b3:18:4f:1f: 4f:6b:a7:ff:6b:d8:41:6b:61:fb:b6:d2:27:0d:9e:8e:ef:40: 1a:c0:f8:f4:fc:24:e0:a5:3e:20:5e:2f:05:69:c7:1f:e5:2d: a7:82:d0:cb:94:71:5c:b7:d0:8c:12:61:22:d9:14:16:33:61: d2:ce:0f:69:84:c0:12:fe:97:1a:70:36:67:c3:3a:27:72:64: af:1b:4f:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5xRYpHDrE3BSDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMyOTBjODctYzQzYy00NmExLTg2MzMtOWM0NjI0ZGMx YWFmMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk Njc2ZjUyZDEtMjZkZi00MDdmLWE2M2UtNDFhYTY5NjZlNTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhA1H+t6zm9HGGOSjv6UJRuh2QUy2Ji1U1cps CDjivX+Tn9/xga40z0do7+c4UkKh1cxqL9pOdEYFOHz1OFCBnlf9vv/HinWVR4mD 37ouqEiFx0ts4RR2JEZX+5QWHWU9dD4BPfM0vIfxdtpJPaYM0Js94MCFnkRfBh8y Lb8IBBuEvt5jE7WXOP6qSCS2tMxt3LoWyPEo1bBjBm82VbOzXgU0ZGT8bF/Gwzsw HV6aYV1VQxe+2wdtmlEI/kVO98T1WRj5MAiKfmi7d52PbTnpKNLcW1AY+kFs+ghJ hdsJVFY3IpDfVzvR1QwuYfkYifnLzFEuwRmE4tjx+2icNescFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQA04Slok/mKNh37WHm/f4QmPezMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80MzI5 MGM4Ny1jNDNjLTQ2YTEtODYzMy05YzQ2MjRkYzFhYWYvMDBmOGJjMzQtMmZkNi0z MzI4LTkyNGQtMTI5Y2I1MGQ5MzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDMyOTBjODctYzQzYy00NmExLTg2 MzMtOWM0NjI0ZGMxYWFmLzQzMjkwYzg3LWM0M2MtNDZhMS04NjMzLTljNDYyNGRj MWFhZi5jcmwwHwYDVR0jBBgwFoAUbvy9Bm+Xe+iCEcYgjsPnOkES13gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80MzI5MGM4Ny1jNDNjLTQ2YTEtODYzMy05YzQ2 MjRkYzFhYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBNIFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4v7ggtgaQyV0sHLMKelrIDNFJHqB+Wp1AK2IFHv3wdO/vWEM2300Lz Rx7H6e47eMg4HA2Xwo+4MafhPzgqur7rVDkOf1xJnidDtDsPGN/S5+Dv0pJ5EAf1 nxC7yDgNuwLwE8nP7o7NK0z1q4ybp0E01HJLZqPwnh+mw3M38lyWXNvvxHdFyvn5 F5DPBoxHhDUaRMhbZQqtb9pRcXASZRIrcOsfhOIvi7/1LyWqgLVosxhPH09rp/9r 2EFrYfu20icNno7vQBrA+PT8JOClPiBeLwVpxx/lLaeC0MuUcVy30IwSYSLZFBYz YdLOD2mEwBL+lxpwNmfDOidyZK8bT7E= -----END CERTIFICATE-----Generated at Sat Oct 11 04:28:13 2025 by rpki-client