$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2/a3262b96-5624-3bd4-8b93-522967b4a947.roa File: a3262b96-5624-3bd4-8b93-522967b4a947.roa (raw, json) Hash identifier: NF+FDLkbx/EIgUJM56hEImK6u2xFtrKhv/5PfpX5YRY= Subject key identifier: A7:F1:9E:39:C2:E2:D5:E3:6C:F3:A7:F9:DA:63:0B:64:63:F0:A6:90 Certificate issuer: /CN=52e61a17-7b88-4574-9ed5-dc56420f7ed2 Certificate serial: 010D0C9F4328584B1AD192CC4A1A0D382FFE6100 Authority key identifier: 58:B1:F7:35:D6:61:15:EE:55:37:68:BD:BF:61:8D:AF:9F:36:81:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2/a3262b96-5624-3bd4-8b93-522967b4a947.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 3477 IP address blocks: 198.51.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2/52e61a17-7b88-4574-9ed5-dc56420f7ed2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2/52e61a17-7b88-4574-9ed5-dc56420f7ed2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:92:cc:4a:1a:0d:38:2f:fe:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52e61a17-7b88-4574-9ed5-dc56420f7ed2 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=7674a787-9461-4aa8-9153-9257eb3af785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:05:37:c4:20:ee:a1:6c:b6:8b:7f:f7:db:d6: 66:4c:58:a1:a2:4a:7f:d4:87:ec:0d:2b:09:ca:c8: bc:a9:95:93:0d:f4:5f:d5:91:ed:7d:4c:1d:12:b2: 03:ae:7a:f9:41:4d:c4:5e:c0:c9:89:2a:3c:58:50: c3:41:27:a7:b1:2b:03:48:17:77:6a:76:bf:7a:0c: 9d:9e:bb:71:84:80:62:14:2c:8a:b2:29:e0:02:c8: 75:ba:99:f3:e5:cd:0e:32:86:8b:67:bf:44:3e:36: ee:51:5a:90:cc:08:25:c0:75:a3:c4:7a:bf:38:be: b3:b9:55:a7:79:0f:c9:16:fd:25:35:43:5c:73:b8: ea:d6:c3:c5:64:24:59:8d:f2:de:d6:59:e0:a1:e4: 0d:f8:02:3e:fc:58:89:b1:72:24:4b:5f:02:6b:2b: 25:4f:ab:0e:1a:00:ff:19:8f:cc:02:a0:d2:d6:d5: df:49:13:12:cf:dd:a9:1c:87:8c:57:e5:4c:d7:76: 23:20:72:de:c9:4d:22:85:74:a3:85:04:06:15:bd: a0:ac:70:b2:3a:97:45:d4:ff:85:45:aa:0c:bb:68: 3d:01:d1:1e:44:6c:20:81:1c:14:64:f1:ec:dd:c1: 19:60:36:b6:93:40:0a:75:d2:5b:93:cf:cc:7f:29: b9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F1:9E:39:C2:E2:D5:E3:6C:F3:A7:F9:DA:63:0B:64:63:F0:A6:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2/a3262b96-5624-3bd4-8b93-522967b4a947.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2/52e61a17-7b88-4574-9ed5-dc56420f7ed2.crl X509v3 Authority Key Identifier: keyid:58:B1:F7:35:D6:61:15:EE:55:37:68:BD:BF:61:8D:AF:9F:36:81:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/52e61a17-7b88-4574-9ed5-dc56420f7ed2.cer sbgp-ipAddrBlock: critical IPv4: 198.51.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:77:8e:aa:3c:da:79:c2:b2:94:28:c8:91:94:ee:2a:fa:f0: fb:98:72:11:89:ad:b8:6d:fb:d0:e2:a4:bc:2c:14:3a:93:93: 7b:22:b8:17:4e:7b:6b:7a:b4:2e:ec:f6:e9:17:1c:02:1c:ea: e5:24:fb:2a:9f:28:c4:05:e6:50:d3:32:b9:87:50:38:8b:69: 09:2d:ed:84:2f:05:35:c3:f8:ca:06:12:fd:2f:bc:a9:80:9f: 68:15:be:e1:e8:57:7a:14:01:b3:18:b6:41:ec:92:6b:df:47: 25:01:a9:99:a9:86:0f:2e:70:67:15:01:4f:fd:c1:1a:22:97: af:18:2b:43:a4:6a:66:fe:b6:33:1c:db:91:b1:f8:fd:ed:ba: 62:f1:cd:5c:e4:7f:07:86:c9:64:5c:33:e7:07:66:5a:aa:35: 5b:2c:28:a2:98:e8:89:1e:cc:db:17:60:a2:aa:8d:4d:4e:c6: 0e:91:2c:56:f8:5a:42:32:f2:19:4c:24:83:df:c1:84:53:c8: 5d:98:35:ce:8a:3c:ff:58:dc:4a:ac:bd:cd:43:8d:63:ef:26: e2:17:60:50:0c:ab:fc:1c:e4:7b:84:e6:05:63:a0:e7:f9:62: 0b:d6:77:44:56:74:23:69:a4:9b:b3:9d:2e:0e:b4:00:4e:a7: e8:49:2b:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0ZLMShoNOC/+YQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlNjFhMTctN2I4OC00NTc0LTllZDUtZGM1NjQyMGY3 ZWQyMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk NzY3NGE3ODctOTQ2MS00YWE4LTkxNTMtOTI1N2ViM2FmNzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAU3xCDuoWy2i3/329ZmTFihokp/1IfsDSsJ ysi8qZWTDfRf1ZHtfUwdErIDrnr5QU3EXsDJiSo8WFDDQSensSsDSBd3ana/egyd nrtxhIBiFCyKsingAsh1upnz5c0OMoaLZ79EPjbuUVqQzAglwHWjxHq/OL6zuVWn eQ/JFv0lNUNcc7jq1sPFZCRZjfLe1lngoeQN+AI+/FiJsXIkS18CayslT6sOGgD/ GY/MAqDS1tXfSRMSz92pHIeMV+VM13YjIHLeyU0ihXSjhQQGFb2grHCyOpdF1P+F RaoMu2g9AdEeRGwggRwUZPHs3cEZYDa2k0AKddJbk8/Mfym5ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfxnjnC4tXjbPOn+dpjC2Rj8KaQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81MmU2 MWExNy03Yjg4LTQ1NzQtOWVkNS1kYzU2NDIwZjdlZDIvYTMyNjJiOTYtNTYyNC0z YmQ0LThiOTMtNTIyOTY3YjRhOTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTJlNjFhMTctN2I4OC00NTc0LTll ZDUtZGM1NjQyMGY3ZWQyLzUyZTYxYTE3LTdiODgtNDU3NC05ZWQ1LWRjNTY0MjBm N2VkMi5jcmwwHwYDVR0jBBgwFoAUWLH3NdZhFe5VN2i9v2GNr582gVEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS81MmU2MWExNy03Yjg4LTQ1NzQtOWVkNS1kYzU2 NDIwZjdlZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjMLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEl3jqo82nnCspQoyJGU7ir68PuYchGJrbht+9DipLwsFDqTk3siuBdO e2t6tC7s9ukXHAIc6uUk+yqfKMQF5lDTMrmHUDiLaQkt7YQvBTXD+MoGEv0vvKmA n2gVvuHoV3oUAbMYtkHskmvfRyUBqZmphg8ucGcVAU/9wRoil68YK0Okamb+tjMc 25Gx+P3tumLxzVzkfweGyWRcM+cHZlqqNVssKKKY6IkezNsXYKKqjU1Oxg6RLFb4 WkIy8hlMJIPfwYRTyF2YNc6KPP9Y3Eqsvc1DjWPvJuIXYFAMq/wc5HuE5gVjoOf5 YgvWd0RWdCNppJuznS4OtABOp+hJKxs= -----END CERTIFICATE-----Generated at Fri Oct 10 22:27:49 2025 by rpki-client