$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/b8284293-bc14-36f3-a3bd-f5e172f91d0f.roa File: b8284293-bc14-36f3-a3bd-f5e172f91d0f.roa (raw, json) Hash identifier: c8xFa7KSBiJS2k9SyyOjJI88cRMtK8zzskWcfLWlsMk= Subject key identifier: 3A:1B:A4:AF:84:6A:B2:9A:C5:37:94:35:42:18:01:87:67:48:A5:E6 Certificate issuer: /CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Certificate serial: 010D0C9F4328584B2E5C4A013D1D35806C298840 Authority key identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/b8284293-bc14-36f3-a3bd-f5e172f91d0f.roa Signing time: Sat 13 Sep 2025 13:00:41 +0000 ROA not before: Sat 13 Sep 2025 13:00:41 +0000 ROA not after: Fri 12 Dec 2025 14:00:41 +0000 asID: 35860 IP address blocks: 63.133.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2e:5c:4a:01:3d:1d:35:80:6c:29:88:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Validity Not Before: Sep 13 13:00:41 2025 GMT Not After : Dec 12 14:00:41 2025 GMT Subject: CN=0ef825de-fcb9-4396-8acf-ca4534c098d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:88:66:e0:d5:41:f7:f6:d7:12:9b:dd:dd:b2: 23:c7:1f:70:91:31:e8:f9:9e:65:e2:16:b4:97:7d: 84:7f:2c:04:27:c0:64:a1:50:10:c0:84:a1:72:d5: 73:ad:46:4e:47:09:22:9b:62:1b:c5:4a:bd:c3:6d: 46:a9:e1:c7:77:c8:31:09:6d:55:b0:fc:16:18:32: 67:92:4a:64:56:61:7d:44:6b:88:48:69:44:3c:41: ab:db:bc:96:55:c3:3c:5c:0f:11:51:ca:d6:70:a3: f9:05:d8:9a:60:a8:b2:5d:76:28:47:41:36:ae:13: 8e:1c:58:ad:cc:9b:bf:70:89:b4:47:f8:46:f2:ea: b7:f8:63:5d:12:1c:e7:1a:5f:69:9f:cd:ad:6a:5c: e4:43:3b:2b:26:3e:df:bc:e7:5c:96:44:f8:74:82: ae:b4:46:e6:e1:71:2e:66:ce:5e:08:a2:61:01:df: 60:32:5e:7e:2f:c1:75:32:21:c4:81:e5:8a:2f:72: cc:59:5e:92:b7:a4:ef:d6:2a:67:20:4b:4d:a6:36: 7e:13:95:cb:ac:b0:aa:30:26:16:5b:3a:c8:dc:e1: d8:7c:22:08:e6:e7:08:fc:75:e4:ed:39:24:a8:a4: 62:1f:d8:b7:59:38:c9:eb:50:49:40:c7:6b:c6:f7: 58:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:1B:A4:AF:84:6A:B2:9A:C5:37:94:35:42:18:01:87:67:48:A5:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/b8284293-bc14-36f3-a3bd-f5e172f91d0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl X509v3 Authority Key Identifier: keyid:1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer sbgp-ipAddrBlock: critical IPv4: 63.133.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:a0:3f:a4:1f:20:96:c2:59:e4:cb:1d:2a:72:ec:0c:3a:ce: c5:dc:68:c2:f8:9c:46:0d:ef:1d:9c:2c:83:d3:85:4c:bd:25: 28:d7:46:7b:06:12:ec:04:9a:a4:83:df:79:3f:02:03:2b:d0: 20:30:7b:c3:18:6e:8f:40:5e:2c:52:3c:bb:ca:78:e2:b4:3e: eb:ef:4b:62:40:46:9f:87:ea:65:40:b1:6f:d3:3a:01:33:a2: 28:21:d1:8f:9e:63:71:bf:5f:53:0d:c5:7d:89:03:4a:8b:da: 15:15:b9:78:14:f5:45:a8:10:67:fd:fd:e4:c8:ba:7f:79:e3: 41:06:d7:da:d5:05:08:c7:15:25:f2:06:ec:12:72:24:4b:dd: 1a:24:4e:68:b6:28:12:2f:08:a2:0e:96:ab:8c:cf:df:08:47: 0f:8f:93:20:28:ea:05:ac:20:85:cb:4c:eb:28:de:7e:cd:2a: 4f:9a:3c:3e:23:5e:57:85:a2:8e:8f:19:85:79:95:c6:0c:8e: 06:1d:40:b3:38:80:fa:e8:dc:46:1f:d7:1f:4d:31:d6:09:a2: 3e:03:92:f3:53:4d:4d:a2:cf:5e:7a:ae:82:75:14:0e:ba:6b: 6f:03:84:2c:e3:d4:29:a8:a0:e2:c6:b4:c2:40:51:5d:f5:b3: cd:61:ce:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsuXEoBPR01gGwpiEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJhMjBlNWEtM2E1ZC00NDE3LTkyZDctMjUwZTEzNGM2 ZDA5MB4XDTI1MDkxMzEzMDA0MVoXDTI1MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk MGVmODI1ZGUtZmNiOS00Mzk2LThhY2YtY2E0NTM0YzA5OGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ihm4NVB9/bXEpvd3bIjxx9wkTHo+Z5l4ha0 l32EfywEJ8BkoVAQwIShctVzrUZORwkim2IbxUq9w21GqeHHd8gxCW1VsPwWGDJn kkpkVmF9RGuISGlEPEGr27yWVcM8XA8RUcrWcKP5BdiaYKiyXXYoR0E2rhOOHFit zJu/cIm0R/hG8uq3+GNdEhznGl9pn82talzkQzsrJj7fvOdclkT4dIKutEbm4XEu Zs5eCKJhAd9gMl5+L8F1MiHEgeWKL3LMWV6St6Tv1ipnIEtNpjZ+E5XLrLCqMCYW WzrI3OHYfCII5ucI/HXk7TkkqKRiH9i3WTjJ61BJQMdrxvdYkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDobpK+EarKaxTeUNUIYAYdnSKXmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MmEy MGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBlMTM0YzZkMDkvYjgyODQyOTMtYmMxNC0z NmYzLWEzYmQtZjVlMTcyZjkxZDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTJhMjBlNWEtM2E1ZC00NDE3LTky ZDctMjUwZTEzNGM2ZDA5LzUyYTIwZTVhLTNhNWQtNDQxNy05MmQ3LTI1MGUxMzRj NmQwOS5jcmwwHwYDVR0jBBgwFoAUHKRUaJfM7ezGhp3wNNTX+pcwYnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MmEyMGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBl MTM0YzZkMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP4XRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAegP6QfIJbCWeTLHSpy7Aw6zsXcaML4nEYN7x2cLIPThUy9JSjXRnsG EuwEmqSD33k/AgMr0CAwe8MYbo9AXixSPLvKeOK0PuvvS2JARp+H6mVAsW/TOgEz oigh0Y+eY3G/X1MNxX2JA0qL2hUVuXgU9UWoEGf9/eTIun9540EG19rVBQjHFSXy BuwSciRL3RokTmi2KBIvCKIOlquMz98IRw+PkyAo6gWsIIXLTOso3n7NKk+aPD4j XleFoo6PGYV5lcYMjgYdQLM4gPro3EYf1x9NMdYJoj4DkvNTTU2iz156roJ1FA66 a28DhCzj1CmooOLGtMJAUV31s81hzvY= -----END CERTIFICATE-----Generated at Sat Oct 11 04:26:42 2025 by rpki-client