$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/3c529cbb-9f8d-34c8-9371-e628e7734516.roa File: 3c529cbb-9f8d-34c8-9371-e628e7734516.roa (raw, json) Hash identifier: uCc3uq0rAE7AcH3/6QbvRO6ErCHTGxo4K0vSf9Q16zI= Subject key identifier: 7F:F1:E9:61:EF:F2:3E:4B:23:C6:08:6D:BC:1F:0D:D8:FC:D3:E1:14 Certificate issuer: /CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Certificate serial: 010D0C9F4328584A3A15797646AE025273575580 Authority key identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/3c529cbb-9f8d-34c8-9371-e628e7734516.roa Signing time: Wed 18 Jun 2025 01:00:50 +0000 ROA not before: Wed 18 Jun 2025 01:00:50 +0000 ROA not after: Tue 16 Sep 2025 01:00:50 +0000 asID: 35860 IP address blocks: 63.133.208.0/22 maxlen: 22 74.119.52.0/22 maxlen: 22 74.119.52.0/24 maxlen: 24 74.119.53.0/24 maxlen: 24 192.149.254.0/23 maxlen: 23 192.149.254.0/24 maxlen: 24 192.149.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3a:15:79:76:46:ae:02:52:73:57:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Validity Not Before: Jun 18 01:00:50 2025 GMT Not After : Sep 16 01:00:50 2025 GMT Subject: CN=b7896139-6afb-4028-86a5-aecfc21125d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:33:cd:7e:eb:9a:05:1f:bb:1c:aa:c0:bb:49: ff:29:04:d2:37:74:f2:6f:80:84:b5:8f:6a:ad:fa: 3d:09:f0:f3:b2:f7:e8:c7:d7:9a:c2:4d:4b:1e:cc: 45:92:3e:f6:54:15:63:f1:d8:48:ec:a7:ff:b8:00: bc:61:c4:45:7a:61:79:a6:30:57:0e:85:49:7c:3b: c1:48:05:9a:0e:0f:2e:05:cd:f4:db:94:9b:76:a0: af:4b:b2:28:6d:dc:c3:fb:9b:93:5c:f3:54:b5:1f: a8:14:17:c0:41:85:c3:9d:5f:a1:e9:f0:f6:b4:37: 18:29:26:52:56:d4:1c:f4:b5:8b:27:07:56:86:0a: 18:f3:e7:f3:86:d5:ae:bc:c4:60:32:2e:4c:00:24: b5:d3:a4:56:95:25:e7:16:d6:e3:e0:64:17:34:73: c1:72:8a:1d:a8:2f:60:65:9a:bb:76:70:4e:09:21: 7d:ac:1d:22:f3:2c:89:83:03:3d:15:88:bf:2e:b3: 1a:23:6c:93:97:02:3a:aa:74:b1:bb:74:21:e2:8e: 9f:83:6c:3f:f7:75:f4:5a:96:c5:a3:96:c8:1a:43: 89:15:a1:d0:ca:cd:68:22:08:a4:9a:98:fd:93:98: 63:2c:7b:03:0b:f5:52:01:ba:a8:43:a8:44:92:8b: e5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F1:E9:61:EF:F2:3E:4B:23:C6:08:6D:BC:1F:0D:D8:FC:D3:E1:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/3c529cbb-9f8d-34c8-9371-e628e7734516.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl X509v3 Authority Key Identifier: keyid:1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer sbgp-ipAddrBlock: critical IPv4: 63.133.208.0/22 74.119.52.0/22 192.149.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:46:d6:02:39:be:db:6b:da:a4:1f:e1:ea:1f:d1:ed:d7:2b: f7:8e:0f:0b:86:9f:ad:4a:3a:c7:50:f8:1a:43:ab:8f:0b:cb: 54:c6:91:f0:34:55:25:06:bb:6d:59:65:61:10:fa:c7:78:98: 6f:dd:82:17:0d:51:26:e4:f6:ca:5b:ea:ac:61:0e:a4:99:7c: 19:13:45:3c:d7:36:3f:a9:a4:f4:2d:e2:2e:d9:7c:4b:e6:1e: 56:57:e9:78:cc:92:37:e3:78:29:62:fc:74:cd:3b:49:be:5e: 71:08:2b:26:4a:7d:c2:9a:41:40:a1:29:c4:c9:dd:f3:5b:c7: 36:e2:b3:fc:a3:4d:61:ef:8b:62:ae:d4:8d:e2:15:3a:b4:57: ae:d4:ba:fb:da:6e:4f:20:8e:b9:3b:63:cc:23:3e:b9:f5:85: 59:79:19:a7:7a:e3:b1:49:48:ed:0d:e1:5d:8f:29:f9:5d:9f: 73:02:73:1e:22:a1:62:35:f5:6e:8e:2b:ee:28:64:4b:e8:b0: bc:9c:4b:35:e6:1a:e9:aa:7d:13:da:c6:f9:58:0e:78:58:7d: 57:0b:01:d0:45:e1:c3:71:60:f8:3a:6c:aa:e3:2a:ca:ce:9e: 7f:21:46:3b:7c:eb:91:6f:97:00:a5:1b:7c:27:14:5a:f1:23: 71:42:47:ea -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEo6FXl2Rq4CUnNXVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJhMjBlNWEtM2E1ZC00NDE3LTkyZDctMjUwZTEzNGM2 ZDA5MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk Yjc4OTYxMzktNmFmYi00MDI4LTg2YTUtYWVjZmMyMTEyNWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDPNfuuaBR+7HKrAu0n/KQTSN3Tyb4CEtY9q rfo9CfDzsvfox9eawk1LHsxFkj72VBVj8dhI7Kf/uAC8YcRFemF5pjBXDoVJfDvB SAWaDg8uBc3025SbdqCvS7IobdzD+5uTXPNUtR+oFBfAQYXDnV+h6fD2tDcYKSZS VtQc9LWLJwdWhgoY8+fzhtWuvMRgMi5MACS106RWlSXnFtbj4GQXNHPBcoodqC9g ZZq7dnBOCSF9rB0i8yyJgwM9FYi/LrMaI2yTlwI6qnSxu3Qh4o6fg2w/93X0WpbF o5bIGkOJFaHQys1oIgikmpj9k5hjLHsDC/VSAbqoQ6hEkovl9wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFH/x6WHv8j5LI8YIbbwfDdj80+EUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MmEy MGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBlMTM0YzZkMDkvM2M1MjljYmItOWY4ZC0z NGM4LTkzNzEtZTYyOGU3NzM0NTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTJhMjBlNWEtM2E1ZC00NDE3LTky ZDctMjUwZTEzNGM2ZDA5LzUyYTIwZTVhLTNhNWQtNDQxNy05MmQ3LTI1MGUxMzRj NmQwOS5jcmwwHwYDVR0jBBgwFoAUHKRUaJfM7ezGhp3wNNTX+pcwYnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MmEyMGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBl MTM0YzZkMDkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCP4XQAwQC Snc0AwQBwJX+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAE1G1gI5vttr2qQf4eof0e3XK/eODwuGn61KOsdQ +BpDq48Ly1TGkfA0VSUGu21ZZWEQ+sd4mG/dghcNUSbk9spb6qxhDqSZfBkTRTzX Nj+ppPQt4i7ZfEvmHlZX6XjMkjfjeCli/HTNO0m+XnEIKyZKfcKaQUChKcTJ3fNb xzbis/yjTWHvi2Ku1I3iFTq0V67Uuvvabk8gjrk7Y8wjPrn1hVl5Gad647FJSO0N 4V2PKfldn3MCcx4ioWI19W6OK+4oZEvosLycSzXmGumqfRPaxvlYDnhYfVcLAdBF 4cNxYPg6bKrjKsrOnn8hRjt865FvlwClG3wnFFrxI3FCR+o= -----END CERTIFICATE-----Generated at Thu Jul 10 07:17:34 2025 by rpki-client