$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/2909a4b0-7a6d-3396-8089-b33d2eda11ea.roa File: 2909a4b0-7a6d-3396-8089-b33d2eda11ea.roa (raw, json) Hash identifier: 3cFoW0QRbe6CemDp7XnuGQ8Jj9MjQW2C+eMCzDcDlwM= Subject key identifier: 90:BF:45:AF:DE:B3:4C:1D:F6:23:AB:3E:36:4C:97:06:D0:77:BC:BB Certificate issuer: /CN=5fc522ea-3703-4aaa-9fa0-d8f99a720536 Certificate serial: 010D0C9F4328584AF95140B1E27AEF7828488000 Authority key identifier: AC:18:9F:D1:96:01:0B:F4:19:CD:D5:73:7C:6E:FD:C9:D1:A8:95:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/2909a4b0-7a6d-3396-8089-b33d2eda11ea.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 11998 IP address blocks: 162.252.134.0/24 maxlen: 24 162.252.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/5fc522ea-3703-4aaa-9fa0-d8f99a720536.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/5fc522ea-3703-4aaa-9fa0-d8f99a720536.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:40:b1:e2:7a:ef:78:28:48:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fc522ea-3703-4aaa-9fa0-d8f99a720536 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=cd47b288-0b97-4c48-93b9-471ba0e6fbb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:87:d5:a5:39:94:47:7d:1c:33:c6:28:57:07: 8d:f2:e7:e4:99:a5:a8:b6:9c:59:fd:8b:90:72:25: bb:c9:89:ed:d9:e9:5f:a7:11:b3:50:8d:2b:fe:a4: 50:8d:b6:fe:e7:ad:ce:83:a5:85:60:7d:58:d2:95: f0:d0:7b:e6:4d:b4:f9:93:9f:c2:db:3b:4c:0a:0d: 6c:04:0b:81:9c:06:ed:6e:ca:30:80:bb:45:c6:d1: ea:6b:b0:ed:fa:87:31:d6:d8:3f:73:91:46:38:be: ed:c9:64:46:ae:d0:2c:52:c2:98:65:90:f8:f7:e2: 9f:a3:27:7a:c8:03:10:2e:51:95:f3:ba:c0:a1:ef: 06:6e:8e:40:09:33:fa:79:ce:1d:a0:dc:e2:2a:64: 38:8e:31:ea:51:e6:ca:94:4c:87:6c:4e:54:12:4e: 8d:ab:a5:17:1b:20:42:c0:72:9f:ea:e2:0a:9e:8c: b2:4e:26:7a:8b:b1:2e:22:1e:25:31:7e:eb:82:fa: 02:ae:9d:5e:8d:42:b7:86:24:5c:7f:a1:3a:65:b7: c9:3a:a6:44:92:01:c7:ba:e0:9b:d5:13:91:8a:e2: 01:bc:a8:de:fa:a1:28:81:bd:4a:54:6c:93:c5:3d: f2:01:5b:77:73:03:b3:f4:0b:9b:ae:ef:fd:25:4e: 50:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:BF:45:AF:DE:B3:4C:1D:F6:23:AB:3E:36:4C:97:06:D0:77:BC:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/2909a4b0-7a6d-3396-8089-b33d2eda11ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/5fc522ea-3703-4aaa-9fa0-d8f99a720536.crl X509v3 Authority Key Identifier: keyid:AC:18:9F:D1:96:01:0B:F4:19:CD:D5:73:7C:6E:FD:C9:D1:A8:95:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer sbgp-ipAddrBlock: critical IPv4: 162.252.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:b9:db:25:39:af:d9:89:31:05:43:62:ff:b2:ef:37:aa:2c: 8a:0b:fe:2a:49:7d:83:81:1e:24:c6:7f:d2:9c:8c:ae:1c:ab: 5b:85:eb:6d:78:65:8a:4e:f2:50:7f:8b:ea:f2:77:d8:6d:9d: a5:64:03:85:10:37:3c:7f:35:c5:93:6c:8e:51:0e:12:fa:68: 4a:00:b6:60:e1:11:ed:63:77:f8:03:24:6e:d0:a5:32:0d:29: 2b:1c:b7:a9:2e:d4:5b:de:2f:6b:32:f8:67:92:0c:8c:74:db: ac:8a:8f:eb:c4:6f:44:e6:89:72:63:2b:12:20:c7:3b:6e:5c: cf:a5:8b:6c:c1:33:cb:57:c7:98:57:fc:2f:86:91:09:18:f2: ba:0e:f9:7a:03:eb:dc:de:ce:47:89:91:ac:58:dd:44:7f:ab: b5:b0:0b:cb:b7:e8:d1:44:ff:d7:a1:43:e0:7d:34:7f:1a:c7: e9:12:af:10:c3:a5:5e:e8:21:1e:a9:95:b8:3c:f5:0f:8a:3b: a0:68:a2:3d:4d:19:99:23:13:8e:15:4a:49:ff:32:8a:fe:bc: d1:39:5a:f4:44:3c:88:be:19:f3:ef:fb:ec:e1:8a:8c:4f:77: 2e:ab:6c:76:02:51:37:34:1f:de:5a:28:2c:25:80:83:25:d4: ac:45:0e:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UUCx4nrveChIgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWZjNTIyZWEtMzcwMy00YWFhLTlmYTAtZDhmOTlhNzIw NTM2MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk Y2Q0N2IyODgtMGI5Ny00YzQ4LTkzYjktNDcxYmEwZTZmYmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4fVpTmUR30cM8YoVweN8ufkmaWotpxZ/YuQ ciW7yYnt2elfpxGzUI0r/qRQjbb+563Og6WFYH1Y0pXw0HvmTbT5k5/C2ztMCg1s BAuBnAbtbsowgLtFxtHqa7Dt+ocx1tg/c5FGOL7tyWRGrtAsUsKYZZD49+Kfoyd6 yAMQLlGV87rAoe8Gbo5ACTP6ec4doNziKmQ4jjHqUebKlEyHbE5UEk6Nq6UXGyBC wHKf6uIKnoyyTiZ6i7EuIh4lMX7rgvoCrp1ejUK3hiRcf6E6ZbfJOqZEkgHHuuCb 1RORiuIBvKje+qEogb1KVGyTxT3yAVt3cwOz9Aubru/9JU5QEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJC/Ra/es0wd9iOrPjZMlwbQd7y7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81ZmM1 MjJlYS0zNzAzLTRhYWEtOWZhMC1kOGY5OWE3MjA1MzYvMjkwOWE0YjAtN2E2ZC0z Mzk2LTgwODktYjMzZDJlZGExMWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWZjNTIyZWEtMzcwMy00YWFhLTlm YTAtZDhmOTlhNzIwNTM2LzVmYzUyMmVhLTM3MDMtNGFhYS05ZmEwLWQ4Zjk5YTcy MDUzNi5jcmwwHwYDVR0jBBgwFoAUrBif0ZYBC/QZzdVzfG79ydGolaAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81ZmM1MjJlYS0zNzAzLTRhYWEtOWZhMC1kOGY5 OWE3MjA1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBovyGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABi52yU5r9mJMQVDYv+y7zeqLIoL/ipJfYOBHiTGf9KcjK4cq1uF6214 ZYpO8lB/i+ryd9htnaVkA4UQNzx/NcWTbI5RDhL6aEoAtmDhEe1jd/gDJG7QpTIN KSsct6ku1FveL2sy+GeSDIx026yKj+vEb0TmiXJjKxIgxztuXM+li2zBM8tXx5hX /C+GkQkY8roO+XoD69zezkeJkaxY3UR/q7WwC8u36NFE/9ehQ+B9NH8ax+kSrxDD pV7oIR6plbg89Q+KO6Booj1NGZkjE44VSkn/Mor+vNE5WvREPIi+GfPv++zhioxP dy6rbHYCUTc0H95aKCwlgIMl1KxFDh0= -----END CERTIFICATE-----Generated at Sat Oct 11 01:37:12 2025 by rpki-client