$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/bce28b38-a4c8-3cd9-acbf-f4778253cfc2.roa File: bce28b38-a4c8-3cd9-acbf-f4778253cfc2.roa (raw, json) Hash identifier: 8XJTnkbdnHIVDW5jY3lQ6/AwjmjauNLGjshFBShKid4= Subject key identifier: EF:D1:36:B0:47:5A:CA:B5:BD:2D:F8:36:35:89:98:E7:1A:A0:0A:71 Certificate issuer: /CN=54db6675-c607-4f3e-820c-24f5519df094 Certificate serial: 010D0C9F4328584A79204F5AF35EC9C0B5E545C0 Authority key identifier: 39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/bce28b38-a4c8-3cd9-acbf-f4778253cfc2.roa Signing time: Thu 10 Jul 2025 14:58:40 +0000 ROA not before: Thu 10 Jul 2025 14:58:40 +0000 ROA not after: Wed 08 Oct 2025 14:58:40 +0000 asID: 22773 IP address blocks: 52.128.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:79:20:4f:5a:f3:5e:c9:c0:b5:e5:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54db6675-c607-4f3e-820c-24f5519df094 Validity Not Before: Jul 10 14:58:40 2025 GMT Not After : Oct 8 14:58:40 2025 GMT Subject: CN=223de07d-a753-4e72-b4aa-f91a6594ee50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8c:5f:02:bf:cc:a7:66:e4:a5:b1:28:7a:7d: 4d:98:e5:1f:3b:2f:5c:de:a7:14:a5:12:d9:a1:e1: 4c:bf:4d:19:aa:0a:57:11:29:04:e6:58:27:8d:b9: b2:b7:2f:d6:a1:25:f1:dc:2b:df:7a:1e:b1:d4:c5: ca:0a:2a:4d:a3:60:6e:ec:0c:b9:da:a6:e2:b7:72: 81:c3:ff:f0:72:86:c6:5a:e9:f4:6e:ba:7e:a4:80: 7c:3d:ea:41:bc:64:94:06:7e:12:7a:d8:f6:51:08: 41:a0:e5:e8:1c:6e:9b:7f:93:b3:49:7f:5c:b2:0c: 1d:9d:88:23:68:09:74:d2:0b:6b:4b:8a:38:43:b4: 19:6d:c8:08:e9:41:4d:54:4c:b3:88:4e:19:57:1a: 89:b3:29:ba:ae:0b:95:ad:58:3b:d0:99:36:e0:0e: 9c:7d:13:fc:63:d4:ea:c0:20:3b:bf:75:8d:ca:29: d9:92:ac:46:7d:a6:4c:1b:de:99:2c:57:8f:27:26: 11:d4:2c:d7:93:0e:54:58:92:a3:dc:1f:0f:8f:58: 07:a7:ac:ed:8e:cc:93:4f:82:b4:29:19:7f:d2:82: e1:04:eb:98:81:62:2d:26:46:c1:e3:cd:2f:31:85: 5a:21:5e:97:0b:f2:84:b1:c5:a2:e4:f6:cd:0c:95: 2d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D1:36:B0:47:5A:CA:B5:BD:2D:F8:36:35:89:98:E7:1A:A0:0A:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/bce28b38-a4c8-3cd9-acbf-f4778253cfc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.crl X509v3 Authority Key Identifier: keyid:39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer sbgp-ipAddrBlock: critical IPv4: 52.128.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:d6:d5:eb:f8:3f:ab:6d:0f:a7:8e:d5:db:b3:29:20:4d:2f: fc:3f:cf:8e:bc:95:4e:b1:32:ad:63:77:c5:d9:d4:69:af:d6: 56:33:64:56:5a:2b:60:1b:50:da:4b:9a:7b:72:69:26:40:94: 9d:b4:2e:c0:03:d1:44:72:92:0e:bd:57:08:2c:11:dc:e1:3f: 50:08:43:1b:c2:37:f3:07:8a:47:a7:37:71:ea:91:cd:8c:b6: 36:75:be:83:5d:10:b0:84:df:f2:9a:a3:bf:f6:d6:5b:40:ab: 36:e9:3c:62:ed:07:53:32:77:8f:46:7e:cf:86:7d:ec:82:4d: 91:26:cf:ad:63:2b:25:fa:32:0b:8d:85:12:0d:da:9a:9b:ff: bd:e8:b1:10:aa:39:31:35:2d:c2:a5:16:c6:62:12:c3:03:12: ee:63:bd:99:7c:5f:18:f9:46:8a:2b:58:3d:b3:23:e0:be:fe: 84:c5:74:31:09:88:65:52:bb:c6:23:e3:f1:ee:b7:20:23:d8: cd:19:d9:b8:c2:e0:d1:34:30:ad:ab:fe:d1:aa:e2:16:74:0c: 5e:6c:0a:91:ce:18:95:86:ec:96:bf:ca:a1:f1:f7:13:09:c1: a4:4d:10:03:8d:eb:dc:2a:a5:8c:f1:2d:40:32:97:b0:00:a7: 94:0f:be:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp5IE9a817JwLXlRcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTRkYjY2NzUtYzYwNy00ZjNlLTgyMGMtMjRmNTUxOWRm MDk0MB4XDTI1MDcxMDE0NTg0MFoXDTI1MTAwODE0NTg0MFowLzEtMCsGA1UEAxMk MjIzZGUwN2QtYTc1My00ZTcyLWI0YWEtZjkxYTY1OTRlZTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYxfAr/Mp2bkpbEoen1NmOUfOy9c3qcUpRLZ oeFMv00ZqgpXESkE5lgnjbmyty/WoSXx3Cvfeh6x1MXKCipNo2Bu7Ay52qbit3KB w//wcobGWun0brp+pIB8PepBvGSUBn4Setj2UQhBoOXoHG6bf5OzSX9csgwdnYgj aAl00gtrS4o4Q7QZbcgI6UFNVEyziE4ZVxqJsym6rguVrVg70Jk24A6cfRP8Y9Tq wCA7v3WNyinZkqxGfaZMG96ZLFePJyYR1CzXkw5UWJKj3B8Pj1gHp6ztjsyTT4K0 KRl/0oLhBOuYgWItJkbB480vMYVaIV6XC/KEscWi5PbNDJUtyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/RNrBHWsq1vS34NjWJmOcaoApxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NGRi NjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1NTE5ZGYwOTQvYmNlMjhiMzgtYTRjOC0z Y2Q5LWFjYmYtZjQ3NzgyNTNjZmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTRkYjY2NzUtYzYwNy00ZjNlLTgy MGMtMjRmNTUxOWRmMDk0LzU0ZGI2Njc1LWM2MDctNGYzZS04MjBjLTI0ZjU1MTlk ZjA5NC5jcmwwHwYDVR0jBBgwFoAUOZWZp0dt7/dwoCiy2OGc8lL6rgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81NGRiNjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1 NTE5ZGYwOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFNICgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjW1ev4P6ttD6eO1duzKSBNL/w/z468lU6xMq1jd8XZ1Gmv1lYzZFZa K2AbUNpLmntyaSZAlJ20LsAD0URykg69VwgsEdzhP1AIQxvCN/MHikenN3Hqkc2M tjZ1voNdELCE3/Kao7/21ltAqzbpPGLtB1Myd49Gfs+GfeyCTZEmz61jKyX6MguN hRIN2pqb/73osRCqOTE1LcKlFsZiEsMDEu5jvZl8Xxj5RoorWD2zI+C+/oTFdDEJ iGVSu8Yj4/HutyAj2M0Z2bjC4NE0MK2r/tGq4hZ0DF5sCpHOGJWG7Ja/yqHx9xMJ waRNEAON69wqpYzxLUAyl7AAp5QPvgM= -----END CERTIFICATE-----Generated at Sun Jul 20 20:15:26 2025 by rpki-client