$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/ff65af41-ecd3-3895-bccd-6f1b55448a5a.roa File: ff65af41-ecd3-3895-bccd-6f1b55448a5a.roa (raw, json) Hash identifier: UkBGSm6gTEWeeeJlmGMJnaeHmLHW8qonTv2deTj2HI0= Subject key identifier: 5E:25:70:A2:9F:74:E5:4F:2D:BE:34:36:11:62:07:E7:A6:3A:0A:C5 Certificate issuer: /CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Certificate serial: 010D0C9F4328584A4AD597FCF43C9474A38B4F80 Authority key identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/ff65af41-ecd3-3895-bccd-6f1b55448a5a.roa Signing time: Tue 24 Jun 2025 01:00:50 +0000 ROA not before: Tue 24 Jun 2025 01:00:50 +0000 ROA not after: Mon 22 Sep 2025 01:00:50 +0000 asID: 35860 IP address blocks: 63.133.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4a:d5:97:fc:f4:3c:94:74:a3:8b:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Validity Not Before: Jun 24 01:00:50 2025 GMT Not After : Sep 22 01:00:50 2025 GMT Subject: CN=20d41359-2693-4e88-bbdf-be9da1dc3bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:12:a3:9c:34:1f:e3:c4:54:79:1a:b8:c6:42: 24:01:ef:96:38:e0:a6:3f:8d:12:cc:b7:d4:2f:b4: 8c:cc:ef:f0:50:4b:be:c9:8c:22:df:02:5d:bc:9b: 80:ed:8f:0d:c8:0b:70:8e:d0:a3:0b:6b:56:bf:e4: 44:72:82:f7:f5:4d:76:f7:8a:ca:1b:d0:5e:72:c5: 82:b0:78:85:b0:d5:0e:8e:51:1c:44:d8:9d:bc:86: b8:30:6a:c6:7d:88:b1:f2:29:cc:9e:0a:fd:57:ab: f5:2f:b2:9b:c4:f0:9e:e0:b6:60:35:62:38:98:94: ab:37:a7:52:4a:8a:cd:f0:d7:b6:e3:49:90:0b:3f: b5:55:3a:73:7f:9d:30:1e:f5:7c:23:97:ec:ea:0b: 76:e8:85:8a:cf:11:87:9a:84:aa:8e:df:0d:33:37: ac:38:ab:25:2e:67:af:1c:c3:fd:93:e1:a8:ba:12: 88:08:20:e5:70:89:d4:7c:13:3b:92:cc:d1:91:32: b6:05:f9:da:29:cd:0f:73:55:d5:59:e1:fb:9d:b4: ac:58:25:36:e6:1e:06:30:41:c8:20:fc:11:31:b3: 14:63:3b:ca:5d:ce:9b:18:bd:c5:a7:f4:a0:74:85: 7f:c5:17:e0:fb:a2:bd:6e:fd:75:e1:1e:f0:67:5b: 4a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:25:70:A2:9F:74:E5:4F:2D:BE:34:36:11:62:07:E7:A6:3A:0A:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/ff65af41-ecd3-3895-bccd-6f1b55448a5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl X509v3 Authority Key Identifier: keyid:1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer sbgp-ipAddrBlock: critical IPv4: 63.133.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:4f:b5:6d:88:98:f6:4e:af:44:40:ef:51:c5:ca:d3:88:e2: 0e:a3:77:14:a6:11:21:d7:04:80:60:60:84:9f:52:c4:1a:01: 8e:6f:59:41:49:da:51:9f:82:5b:70:58:1d:ab:f5:39:1e:16: 3a:36:20:ff:8d:c0:db:4e:a7:65:0c:17:02:44:e0:59:4b:da: 87:d1:11:f0:d7:39:15:e9:29:eb:f1:73:d7:aa:fb:6a:8d:7c: c2:cb:93:c2:e6:17:ce:7e:e0:0d:6d:6a:36:2c:52:88:53:e6: 99:24:7e:ca:bd:a8:16:53:66:ce:84:af:3d:69:b1:5d:4d:26: 76:9f:a7:43:19:f6:3c:bd:b2:3c:6f:e2:84:0f:38:2b:d7:d5: 2b:04:fd:99:f6:94:57:4e:5e:73:50:1e:bd:5e:6b:7c:53:bf: 44:8b:cf:a4:6d:b6:7a:cc:d9:6f:0b:4d:27:9b:f9:5f:ad:6d: b9:fc:5f:e0:50:af:9f:80:f3:8a:6e:75:8e:40:f0:3a:21:a6: 1b:87:ed:01:a9:12:f1:3b:a3:d8:e7:1f:c1:fc:19:63:87:ba: 4b:41:a5:07:24:f5:0f:ca:4e:0f:26:d8:ac:b1:19:12:90:fb: fc:60:29:52:0c:98:d8:fa:41:ad:83:d5:a2:a6:4d:ca:31:d9: 36:42:93:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpK1Zf89DyUdKOLT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJhMjBlNWEtM2E1ZC00NDE3LTkyZDctMjUwZTEzNGM2 ZDA5MB4XDTI1MDYyNDAxMDA1MFoXDTI1MDkyMjAxMDA1MFowLzEtMCsGA1UEAxMk MjBkNDEzNTktMjY5My00ZTg4LWJiZGYtYmU5ZGExZGMzYmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxKjnDQf48RUeRq4xkIkAe+WOOCmP40SzLfU L7SMzO/wUEu+yYwi3wJdvJuA7Y8NyAtwjtCjC2tWv+REcoL39U1294rKG9BecsWC sHiFsNUOjlEcRNidvIa4MGrGfYix8inMngr9V6v1L7KbxPCe4LZgNWI4mJSrN6dS SorN8Ne240mQCz+1VTpzf50wHvV8I5fs6gt26IWKzxGHmoSqjt8NMzesOKslLmev HMP9k+GouhKICCDlcInUfBM7kszRkTK2BfnaKc0Pc1XVWeH7nbSsWCU25h4GMEHI IPwRMbMUYzvKXc6bGL3Fp/SgdIV/xRfg+6K9bv114R7wZ1tKZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF4lcKKfdOVPLb40NhFiB+emOgrFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MmEy MGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBlMTM0YzZkMDkvZmY2NWFmNDEtZWNkMy0z ODk1LWJjY2QtNmYxYjU1NDQ4YTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTJhMjBlNWEtM2E1ZC00NDE3LTky ZDctMjUwZTEzNGM2ZDA5LzUyYTIwZTVhLTNhNWQtNDQxNy05MmQ3LTI1MGUxMzRj NmQwOS5jcmwwHwYDVR0jBBgwFoAUHKRUaJfM7ezGhp3wNNTX+pcwYnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MmEyMGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBl MTM0YzZkMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP4XQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtPtW2ImPZOr0RA71HFytOI4g6jdxSmESHXBIBgYISfUsQaAY5vWUFJ 2lGfgltwWB2r9TkeFjo2IP+NwNtOp2UMFwJE4FlL2ofREfDXORXpKevxc9eq+2qN fMLLk8LmF85+4A1tajYsUohT5pkkfsq9qBZTZs6Erz1psV1NJnafp0MZ9jy9sjxv 4oQPOCvX1SsE/Zn2lFdOXnNQHr1ea3xTv0SLz6RttnrM2W8LTSeb+V+tbbn8X+BQ r5+A84pudY5A8DohphuH7QGpEvE7o9jnH8H8GWOHuktBpQck9Q/KTg8m2KyxGRKQ +/xgKVIMmNj6Qa2D1aKmTcox2TZCkww= -----END CERTIFICATE-----Generated at Thu Jul 10 05:07:50 2025 by rpki-client