$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491/4b56dc87-70d9-397b-bf76-7c918176aa3b.roa File: 4b56dc87-70d9-397b-bf76-7c918176aa3b.roa (raw, json) Hash identifier: jjTYPBGVYQS4OD8DHTnIibFtCqdYp5ekP0p7U8od8x4= Subject key identifier: BF:38:A8:F2:4E:2D:EB:E6:B0:3A:AE:CF:CD:19:53:09:21:FA:38:97 Certificate issuer: /CN=c8607cef-f8a0-4a7c-8845-db8d32964491 Certificate serial: 010D0C9F4328584B004BED99DDB8563FA8E94D00 Authority key identifier: 44:08:C4:D0:D5:E1:2F:18:8A:42:37:69:60:1E:84:4F:69:F7:4D:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491/4b56dc87-70d9-397b-bf76-7c918176aa3b.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 398335 IP address blocks: 52.129.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491/c8607cef-f8a0-4a7c-8845-db8d32964491.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491/c8607cef-f8a0-4a7c-8845-db8d32964491.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:ed:99:dd:b8:56:3f:a8:e9:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8607cef-f8a0-4a7c-8845-db8d32964491 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=1099e6f0-c7ae-4a41-bc77-a82c2fef4e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:51:93:a1:64:65:54:ed:d0:23:e6:a5:91:57: cd:a9:49:3d:74:fb:68:af:44:28:d3:d9:d9:1f:c2: c5:f8:59:c1:f8:9b:1e:c4:94:7d:94:68:2f:d3:31: 5e:cd:34:c7:33:2a:dc:b9:66:e0:d0:04:19:ad:d0: 92:0c:7a:33:81:81:0e:32:b4:ef:99:70:34:fe:88: 18:b0:1a:d4:c5:95:9e:77:dc:5e:6b:0e:40:c5:c1: f3:e1:ca:d0:24:47:94:66:7d:66:67:db:fb:e2:8f: 0c:67:5a:b3:0b:ce:01:05:fc:1e:39:a7:69:9a:dc: 6a:d8:41:eb:ee:df:39:60:a1:dd:e6:d6:bf:d5:cc: 76:16:19:64:c6:f7:42:9a:73:13:aa:ba:06:ce:9c: 96:a7:b9:61:f7:71:c2:59:40:86:b7:7c:cb:17:f1: ec:7f:5b:6f:4e:a4:d9:98:e3:f0:4c:84:09:91:b6: 94:5d:df:3b:20:00:b9:2c:49:3d:26:96:6c:ae:fd: 80:d1:e0:51:b1:4f:54:3e:3f:73:a1:60:d0:e4:0a: 1a:16:f4:f6:75:67:1f:82:1b:5d:c2:b9:e4:e9:d3: e6:7b:b3:44:88:e9:75:76:2a:62:ed:58:d9:d4:21: 96:9b:05:8f:e7:d5:06:35:ca:61:62:21:55:23:12: 34:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:38:A8:F2:4E:2D:EB:E6:B0:3A:AE:CF:CD:19:53:09:21:FA:38:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491/4b56dc87-70d9-397b-bf76-7c918176aa3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491/c8607cef-f8a0-4a7c-8845-db8d32964491.crl X509v3 Authority Key Identifier: keyid:44:08:C4:D0:D5:E1:2F:18:8A:42:37:69:60:1E:84:4F:69:F7:4D:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8607cef-f8a0-4a7c-8845-db8d32964491.cer sbgp-ipAddrBlock: critical IPv4: 52.129.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:07:85:a6:de:05:48:f9:be:1f:33:75:b1:9e:06:22:ce:68: fb:e5:a2:49:dd:8a:09:1b:40:a6:55:38:3f:6d:a8:b4:f7:d8: 47:82:61:b3:38:69:4a:07:96:4e:39:55:46:d0:dd:64:ab:84: 8e:fa:be:98:c1:08:28:1f:43:14:24:ea:4c:7c:5b:e7:84:d9: a1:12:1f:ad:8e:90:db:53:48:28:bf:b4:dc:df:d8:9a:52:29: 39:3f:fa:cc:58:3d:ec:26:f3:ef:da:1e:f8:47:13:ca:99:88: c3:43:9b:71:b4:da:8c:b2:0d:ee:a5:2f:76:96:d9:64:a9:f0: 5e:7e:ed:b6:e6:19:e8:83:60:1d:ce:d6:a4:10:27:ea:77:43: e4:7f:bd:a1:25:e8:fa:3d:ac:e6:4e:55:6c:d2:f7:21:b3:ed: b5:52:4f:ce:d0:12:9d:83:48:4c:c9:20:02:6c:1a:ec:1b:20: 6b:8c:16:4b:d7:d0:d8:b3:c3:1a:1f:d7:85:9a:e8:9b:b8:56: c4:20:f0:38:6a:f7:b7:7c:22:d8:d5:4f:c8:1c:93:53:92:38: de:ce:0e:6b:1e:a4:b3:7c:14:c7:6d:ca:8c:9f:51:b5:65:3e: ba:1e:03:bc:86:3d:b8:2b:7b:73:2a:75:d1:09:6a:da:3a:72: a0:55:a0:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS+2Z3bhWP6jpTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg2MDdjZWYtZjhhMC00YTdjLTg4NDUtZGI4ZDMyOTY0 NDkxMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk MTA5OWU2ZjAtYzdhZS00YTQxLWJjNzctYTgyYzJmZWY0ZTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFGToWRlVO3QI+alkVfNqUk9dPtor0Qo09nZ H8LF+FnB+JsexJR9lGgv0zFezTTHMyrcuWbg0AQZrdCSDHozgYEOMrTvmXA0/ogY sBrUxZWed9xeaw5AxcHz4crQJEeUZn1mZ9v74o8MZ1qzC84BBfweOadpmtxq2EHr 7t85YKHd5ta/1cx2FhlkxvdCmnMTqroGzpyWp7lh93HCWUCGt3zLF/Hsf1tvTqTZ mOPwTIQJkbaUXd87IAC5LEk9JpZsrv2A0eBRsU9UPj9zoWDQ5AoaFvT2dWcfghtd wrnk6dPme7NEiOl1dipi7VjZ1CGWmwWP59UGNcphYiFVIxI0bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL84qPJOLevmsDquz80ZUwkh+jiXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jODYw N2NlZi1mOGEwLTRhN2MtODg0NS1kYjhkMzI5NjQ0OTEvNGI1NmRjODctNzBkOS0z OTdiLWJmNzYtN2M5MTgxNzZhYTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzg2MDdjZWYtZjhhMC00YTdjLTg4 NDUtZGI4ZDMyOTY0NDkxL2M4NjA3Y2VmLWY4YTAtNGE3Yy04ODQ1LWRiOGQzMjk2 NDQ5MS5jcmwwHwYDVR0jBBgwFoAURAjE0NXhLxiKQjdpYB6ET2n3TTQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jODYwN2NlZi1mOGEwLTRhN2MtODg0NS1kYjhk MzI5NjQ0OTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBNIEuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIHhabeBUj5vh8zdbGeBiLOaPvlokndigkbQKZVOD9tqLT32EeCYbM4 aUoHlk45VUbQ3WSrhI76vpjBCCgfQxQk6kx8W+eE2aESH62OkNtTSCi/tNzf2JpS KTk/+sxYPewm8+/aHvhHE8qZiMNDm3G02oyyDe6lL3aW2WSp8F5+7bbmGeiDYB3O 1qQQJ+p3Q+R/vaEl6Po9rOZOVWzS9yGz7bVST87QEp2DSEzJIAJsGuwbIGuMFkvX 0Nizwxof14Wa6Ju4VsQg8Dhq97d8ItjVT8gck1OSON7ODmsepLN8FMdtyoyfUbVl ProeA7yGPbgre3MqddEJato6cqBVoBo= -----END CERTIFICATE-----Generated at Wed Sep 17 20:34:36 2025 by rpki-client