$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/3c529cbb-9f8d-34c8-9371-e628e7734516.roa File: 3c529cbb-9f8d-34c8-9371-e628e7734516.roa (raw, json) Hash identifier: l/ccWZNVnQDOWfqkp2C2dDsas0IOt24M1sDuxQOA6+w= Subject key identifier: 81:5C:E2:16:C7:E1:11:41:B2:1F:F8:66:0D:8E:D2:34:F7:5B:80:29 Certificate issuer: /CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Certificate serial: 010D0C9F4328584B1AD17878DD000ED337813DC0 Authority key identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/3c529cbb-9f8d-34c8-9371-e628e7734516.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 35860 IP address blocks: 63.133.208.0/22 maxlen: 22 74.119.52.0/22 maxlen: 22 74.119.52.0/24 maxlen: 24 74.119.53.0/24 maxlen: 24 192.149.254.0/23 maxlen: 23 192.149.254.0/24 maxlen: 24 192.149.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:78:78:dd:00:0e:d3:37:81:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=b6ff5f99-08b0-4cf6-a9e3-1aac37f79260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:35:5a:9c:02:a9:6a:55:98:98:1c:ad:04:7b: 18:b0:eb:c3:ba:97:61:11:60:6b:6c:c5:b1:58:0c: 7d:b2:97:68:1f:d3:bb:94:16:84:59:75:c3:90:91: 38:28:14:e3:b2:2c:9d:9a:aa:20:ae:7e:f1:b4:4d: 20:72:70:48:c0:11:82:bd:34:cd:f5:48:e1:cf:1e: 12:df:2b:33:97:87:fa:aa:4f:ed:09:9d:20:e0:97: 38:95:da:45:b9:28:f4:e8:39:a0:e1:f3:78:3b:64: ba:87:ae:62:be:8d:d6:37:bc:42:03:f3:d5:99:c1: bd:fb:35:34:79:89:a1:80:44:60:d8:eb:aa:67:17: 7d:09:ce:fa:ea:8a:ff:5c:6a:92:1a:b8:10:68:9e: 67:73:d5:24:ae:40:cb:25:51:72:73:24:d1:e8:70: 08:b3:81:a6:5e:19:7b:b8:d7:6b:53:23:02:66:b5: 5d:d9:c4:80:fc:ae:6a:5c:c4:3d:57:ce:fa:59:01: 96:64:29:d9:fa:ee:8f:a7:8e:4c:33:d6:d5:a4:29: 8e:07:ef:f0:d6:c2:d5:ce:30:b4:ef:75:12:9b:52: 76:a2:54:bf:dc:f2:88:a8:4a:74:e6:50:f6:92:26: ac:c7:8f:ba:ee:2a:67:43:9f:0a:c2:22:a2:ec:f2: 13:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:5C:E2:16:C7:E1:11:41:B2:1F:F8:66:0D:8E:D2:34:F7:5B:80:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/3c529cbb-9f8d-34c8-9371-e628e7734516.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl X509v3 Authority Key Identifier: keyid:1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer sbgp-ipAddrBlock: critical IPv4: 63.133.208.0/22 74.119.52.0/22 192.149.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:eb:20:03:82:70:76:e3:71:05:ab:87:9e:54:66:35:88:1b: 42:d2:a8:b3:bb:51:9d:c2:7a:60:00:ed:a5:d8:1b:73:2c:44: 4c:03:7e:71:c1:2d:6f:71:8a:2d:7c:2b:63:b4:cf:07:9a:c3: e5:75:2b:68:7a:f3:09:a4:70:f1:66:3f:52:03:49:92:07:53: c4:b4:db:a8:cb:e9:a3:63:f6:0c:ae:ea:94:e9:85:6e:fc:34: 71:55:50:4c:8d:48:4c:0d:44:c1:73:14:30:b2:87:ed:bd:4b: 28:0e:ae:23:bd:e2:d0:aa:c7:70:e6:b7:cb:c7:85:cd:8e:a6: c2:d6:c8:3f:51:76:39:00:ee:51:de:0e:f4:18:89:c4:09:52: e7:f9:4d:79:d0:fd:11:8a:65:82:34:e4:f1:08:28:e0:2e:7c: 37:b5:95:0d:3e:97:42:07:de:59:37:a1:6a:86:8d:36:5f:cd: c7:94:84:4d:b2:14:b5:6d:5e:9b:55:10:2c:75:03:91:58:b4: 93:fc:03:9a:72:be:90:f9:24:4e:fa:fc:68:61:d7:1a:33:55: b1:89:63:5a:51:8b:62:aa:f5:96:ba:78:03:59:cb:1d:58:b1: bc:30:2e:ab:af:42:3a:88:d9:64:8e:2d:ce:17:b6:ee:6f:d7: 6a:ca:6e:3a -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEsa0Xh43QAO0zeBPcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJhMjBlNWEtM2E1ZC00NDE3LTkyZDctMjUwZTEzNGM2 ZDA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk YjZmZjVmOTktMDhiMC00Y2Y2LWE5ZTMtMWFhYzM3Zjc5MjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTVanAKpalWYmBytBHsYsOvDupdhEWBrbMWx WAx9spdoH9O7lBaEWXXDkJE4KBTjsiydmqogrn7xtE0gcnBIwBGCvTTN9Ujhzx4S 3yszl4f6qk/tCZ0g4Jc4ldpFuSj06Dmg4fN4O2S6h65ivo3WN7xCA/PVmcG9+zU0 eYmhgERg2OuqZxd9Cc766or/XGqSGrgQaJ5nc9UkrkDLJVFycyTR6HAIs4GmXhl7 uNdrUyMCZrVd2cSA/K5qXMQ9V876WQGWZCnZ+u6Pp45MM9bVpCmOB+/w1sLVzjC0 73USm1J2olS/3PKIqEp05lD2kiasx4+67ipnQ58KwiKi7PIT4wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFIFc4hbH4RFBsh/4Zg2O0jT3W4ApMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MmEy MGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBlMTM0YzZkMDkvM2M1MjljYmItOWY4ZC0z NGM4LTkzNzEtZTYyOGU3NzM0NTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTJhMjBlNWEtM2E1ZC00NDE3LTky ZDctMjUwZTEzNGM2ZDA5LzUyYTIwZTVhLTNhNWQtNDQxNy05MmQ3LTI1MGUxMzRj NmQwOS5jcmwwHwYDVR0jBBgwFoAUHKRUaJfM7ezGhp3wNNTX+pcwYnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MmEyMGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBl MTM0YzZkMDkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCP4XQAwQC Snc0AwQBwJX+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAFPrIAOCcHbjcQWrh55UZjWIG0LSqLO7UZ3CemAA 7aXYG3MsREwDfnHBLW9xii18K2O0zweaw+V1K2h68wmkcPFmP1IDSZIHU8S026jL 6aNj9gyu6pTphW78NHFVUEyNSEwNRMFzFDCyh+29SygOriO94tCqx3Dmt8vHhc2O psLWyD9RdjkA7lHeDvQYicQJUuf5TXnQ/RGKZYI05PEIKOAufDe1lQ0+l0IH3lk3 oWqGjTZfzceUhE2yFLVtXptVECx1A5FYtJP8A5pyvpD5JE76/Ghh1xozVbGJY1pR i2Kq9Za6eANZyx1YsbwwLquvQjqI2WSOLc4Xtu5v12rKbjo= -----END CERTIFICATE-----Generated at Sat Oct 11 04:28:13 2025 by rpki-client