$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/3040e5d9-23a5-3c07-9854-5f1c3b10c81f.roa File: 3040e5d9-23a5-3c07-9854-5f1c3b10c81f.roa (raw, json) Hash identifier: VIagteY8UhopskLS8HuMXFsvIBYry9dQ/JAoWMCgAsw= Subject key identifier: 46:31:02:D9:64:9F:1A:21:9F:4A:C3:30:05:92:B0:2D:F9:E2:1A:AE Certificate issuer: /CN=1a90933e-2005-4c33-ae3f-744b7b70ed7c Certificate serial: 010D0C9F4328584B41E715F393E6ED49EC726380 Authority key identifier: D4:74:AB:93:77:F0:FA:3C:14:E8:78:A8:8C:F7:C0:43:24:37:68:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/3040e5d9-23a5-3c07-9854-5f1c3b10c81f.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 394667 IP address blocks: 52.129.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:15:f3:93:e6:ed:49:ec:72:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a90933e-2005-4c33-ae3f-744b7b70ed7c Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=85120ac5-62fd-4f59-ad06-b3202c1a4cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:82:55:ba:c2:b6:45:64:f6:cc:cf:76:0b:b5: 18:1c:92:dc:48:b3:46:50:4b:bf:b2:62:f8:42:9b: e2:d5:69:5a:a5:a6:62:d6:d5:75:ac:17:d7:09:93: 88:c3:3a:ed:53:a5:f1:60:eb:d4:18:ef:eb:c1:18: 6f:98:01:dd:e7:38:dd:b9:b4:83:ce:74:52:d4:dd: c8:ec:74:eb:34:2c:1e:f6:dd:90:75:45:b2:87:41: 1f:91:27:bb:4d:cf:40:f9:e8:b5:c3:12:b2:4e:2a: c6:a1:7d:a1:b6:3a:fc:3a:b4:b0:c4:b2:33:f4:43: cc:2f:c2:38:1f:8b:89:06:f9:64:46:31:61:8d:91: 76:d9:64:27:ef:f5:e4:79:c3:15:d7:4d:c0:60:c9: e3:a1:40:f2:3f:0f:56:3c:5b:9a:03:93:26:28:36: 8f:3d:f6:0a:47:25:5d:b2:ce:41:93:ef:c1:36:2d: 89:f6:1a:d7:30:38:fe:1f:f8:56:f1:b0:4c:70:d4: 53:a7:c4:44:fd:65:cd:16:67:c9:8c:1e:b1:0a:15: 25:1f:bb:cf:3d:67:7f:88:40:6c:76:33:3e:20:fd: a7:e7:98:b9:43:74:5a:e8:66:b4:65:d3:a3:08:1c: 7a:9a:d5:43:fa:04:eb:0a:af:82:b3:6e:9b:2d:03: 5c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:31:02:D9:64:9F:1A:21:9F:4A:C3:30:05:92:B0:2D:F9:E2:1A:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/3040e5d9-23a5-3c07-9854-5f1c3b10c81f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.crl X509v3 Authority Key Identifier: keyid:D4:74:AB:93:77:F0:FA:3C:14:E8:78:A8:8C:F7:C0:43:24:37:68:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer sbgp-ipAddrBlock: critical IPv4: 52.129.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:24:dc:b4:2e:61:3f:03:00:46:4e:b8:d0:0b:46:db:b8:a5: 67:49:6e:17:d3:f4:9f:3a:28:67:a6:11:de:73:43:49:00:76: 2a:e5:6b:4a:26:30:64:ad:5d:69:ff:13:f5:64:16:2b:8d:4b: 49:8f:dd:8c:5b:78:70:94:11:3e:75:d0:9d:78:ef:24:6e:d7: 5a:e9:fe:22:d1:cc:92:06:58:de:9b:f9:f5:bf:d8:26:b4:eb: b7:7b:df:19:ef:65:dd:96:bf:99:4a:e7:89:10:e0:93:93:11: c0:ea:1a:ea:e3:57:95:6f:95:ae:3c:62:76:66:f8:fb:1a:fb: 8b:d5:32:7b:ae:81:77:77:9d:54:ee:3b:a4:07:e0:ed:2d:8f: be:fd:e3:83:67:ae:88:5f:97:83:e0:e6:dd:74:ca:77:6f:e7: 59:2b:fc:bb:0a:70:b6:2b:67:4e:15:9b:c5:ce:7c:f1:f5:52: a4:2d:4b:51:76:f2:a5:ac:0e:19:af:e8:a7:ca:f0:96:f8:4f: 53:45:a0:ad:6f:14:42:4a:2c:d7:34:8d:49:bb:7e:6e:da:62: 05:62:5f:61:67:b6:e2:2f:7c:b0:30:19:7a:f3:87:66:af:da: 98:42:bd:d0:04:7e:49:da:fa:8f:2d:f3:87:57:5d:91:c0:07: 17:e3:b3:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5xXzk+btSexyY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE5MDkzM2UtMjAwNS00YzMzLWFlM2YtNzQ0YjdiNzBl ZDdjMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk ODUxMjBhYzUtNjJmZC00ZjU5LWFkMDYtYjMyMDJjMWE0Y2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYJVusK2RWT2zM92C7UYHJLcSLNGUEu/smL4 Qpvi1WlapaZi1tV1rBfXCZOIwzrtU6XxYOvUGO/rwRhvmAHd5zjdubSDznRS1N3I 7HTrNCwe9t2QdUWyh0EfkSe7Tc9A+ei1wxKyTirGoX2htjr8OrSwxLIz9EPML8I4 H4uJBvlkRjFhjZF22WQn7/XkecMV103AYMnjoUDyPw9WPFuaA5MmKDaPPfYKRyVd ss5Bk+/BNi2J9hrXMDj+H/hW8bBMcNRTp8RE/WXNFmfJjB6xChUlH7vPPWd/iEBs djM+IP2n55i5Q3Ra6Ga0ZdOjCBx6mtVD+gTrCq+Cs26bLQNcuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYxAtlknxohn0rDMAWSsC354hquMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTkw OTMzZS0yMDA1LTRjMzMtYWUzZi03NDRiN2I3MGVkN2MvMzA0MGU1ZDktMjNhNS0z YzA3LTk4NTQtNWYxYzNiMTBjODFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE5MDkzM2UtMjAwNS00YzMzLWFl M2YtNzQ0YjdiNzBlZDdjLzFhOTA5MzNlLTIwMDUtNGMzMy1hZTNmLTc0NGI3Yjcw ZWQ3Yy5jcmwwHwYDVR0jBBgwFoAU1HSrk3fw+jwU6HiojPfAQyQ3aOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTkwOTMzZS0yMDA1LTRjMzMtYWUzZi03NDRi N2I3MGVkN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIEjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4k3LQuYT8DAEZOuNALRtu4pWdJbhfT9J86KGemEd5zQ0kAdirla0om MGStXWn/E/VkFiuNS0mP3YxbeHCUET510J147yRu11rp/iLRzJIGWN6b+fW/2Ca0 67d73xnvZd2Wv5lK54kQ4JOTEcDqGurjV5Vvla48YnZm+Psa+4vVMnuugXd3nVTu O6QH4O0tj77944Nnrohfl4Pg5t10yndv51kr/LsKcLYrZ04Vm8XOfPH1UqQtS1F2 8qWsDhmv6KfK8Jb4T1NFoK1vFEJKLNc0jUm7fm7aYgViX2FntuIvfLAwGXrzh2av 2phCvdAEfkna+o8t84dXXZHABxfjs9M= -----END CERTIFICATE-----Generated at Sat Oct 11 15:02:40 2025 by rpki-client