$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/9d51f95a-0c33-3aa3-b6ee-db0ff8491904.roa File: 9d51f95a-0c33-3aa3-b6ee-db0ff8491904.roa (raw, json) Hash identifier: /xbtRg+U4A5VOdiEge8mppUMd3onf+3VmfCZxP1BD84= Subject key identifier: CF:84:38:62:56:23:03:F5:1A:08:55:20:96:FB:30:B6:23:B0:53:14 Certificate issuer: /CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956 Certificate serial: 010D0C9F4328584B276177FD82C565115B490F00 Authority key identifier: 51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/9d51f95a-0c33-3aa3-b6ee-db0ff8491904.roa Signing time: Thu 11 Sep 2025 01:00:33 +0000 ROA not before: Thu 11 Sep 2025 01:00:33 +0000 ROA not after: Wed 10 Dec 2025 02:00:33 +0000 asID: 46154 IP address blocks: 157.52.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:61:77:fd:82:c5:65:11:5b:49:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956 Validity Not Before: Sep 11 01:00:33 2025 GMT Not After : Dec 10 02:00:33 2025 GMT Subject: CN=7f6c67ed-5887-45a9-99d9-8c018e12de3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c8:ec:cf:1e:3d:85:26:17:d0:63:b7:53:dd: a2:b6:8a:5b:4f:50:51:d4:02:0e:18:2d:e8:4b:a9: 87:ce:d8:f9:89:d3:93:0c:7c:f2:5e:f8:de:f2:ad: e4:db:ac:f1:b5:87:3c:2b:8b:ee:70:70:76:f1:41: 9e:5b:ce:93:13:34:64:05:c8:5d:ea:61:70:9f:52: c2:d9:56:2d:44:d0:08:21:17:e8:b3:d3:89:57:dc: 94:24:ae:49:a6:46:13:a3:2c:eb:18:fe:c2:4a:41: 67:4f:1d:3b:11:88:78:ca:21:03:cb:98:11:66:65: c0:3f:93:37:60:bd:f0:ee:52:a8:ad:18:62:13:0b: a4:2b:ae:de:2e:6b:2f:91:a2:b8:d4:36:d3:ce:d3: af:3f:a5:06:c5:5b:f4:d0:d9:8b:22:33:cd:6d:09: 2f:13:91:27:ef:a1:c6:4b:b3:1e:75:39:c3:1a:77: 31:0a:a9:db:85:8e:c2:8b:40:26:73:e4:b3:52:6e: e3:6a:b5:99:ae:b6:a6:92:8f:04:33:32:10:c6:09: fc:99:38:48:a4:27:e1:60:22:0f:73:ad:a5:98:2c: 0c:67:76:22:86:30:f9:42:95:98:d0:04:43:7b:88: e2:06:47:b1:3a:c9:b7:99:d5:97:57:19:40:d6:f4: 33:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:84:38:62:56:23:03:F5:1A:08:55:20:96:FB:30:B6:23:B0:53:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/9d51f95a-0c33-3aa3-b6ee-db0ff8491904.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl X509v3 Authority Key Identifier: keyid:51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer sbgp-ipAddrBlock: critical IPv4: 157.52.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:c7:9f:c2:7c:35:73:2f:d5:29:ab:45:98:17:24:13:21:78: da:54:b0:bb:e5:9b:e4:7f:bf:5d:93:5b:88:c2:91:68:64:b0: 9f:c9:a2:6d:b0:57:b1:23:25:2d:d9:ec:65:9c:66:84:fd:f0: 95:e1:6d:44:0a:06:96:9f:55:9a:01:09:e5:2a:c7:7d:ac:66: d4:4d:f5:0d:50:57:90:67:64:df:4b:d0:b6:2d:23:a2:aa:12: 19:44:93:f3:60:d0:c7:49:b3:1f:9e:c8:04:ef:95:01:28:a1: 5b:93:58:1a:3e:c0:c9:15:2c:4f:44:23:2a:5f:e5:27:6a:98: bd:65:4c:96:da:9a:ad:24:92:3f:e9:3f:c2:0b:14:9f:57:c2: ec:4d:25:d0:14:a7:83:30:c6:76:5b:7b:28:9c:16:6c:45:97: 85:c4:7e:1d:1c:5c:27:7c:be:d5:ba:54:15:ce:ff:6e:0f:f0: f8:df:58:89:0d:a7:e4:98:6d:78:b3:75:a7:64:18:e2:0d:33: 44:aa:ef:80:2c:e0:d1:00:dd:ea:b3:95:d3:cb:de:c5:25:e5: 38:08:8a:e3:63:cf:9a:8d:04:98:3a:c9:e5:d0:61:54:e8:f3: 7d:8b:6c:ca:7a:cc:7b:28:fb:ea:35:9e:59:02:44:23:5d:5d: c0:b5:b4:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsnYXf9gsVlEVtJDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDExYTBkMWItNzlhNC00ZDE0LTljZDAtMDc0M2YyOWJm OTU2MB4XDTI1MDkxMTAxMDAzM1oXDTI1MTIxMDAyMDAzM1owLzEtMCsGA1UEAxMk N2Y2YzY3ZWQtNTg4Ny00NWE5LTk5ZDktOGMwMThlMTJkZTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8jszx49hSYX0GO3U92itopbT1BR1AIOGC3o S6mHztj5idOTDHzyXvje8q3k26zxtYc8K4vucHB28UGeW86TEzRkBchd6mFwn1LC 2VYtRNAIIRfos9OJV9yUJK5JpkYToyzrGP7CSkFnTx07EYh4yiEDy5gRZmXAP5M3 YL3w7lKorRhiEwukK67eLmsvkaK41DbTztOvP6UGxVv00NmLIjPNbQkvE5En76HG S7MedTnDGncxCqnbhY7Ci0Amc+SzUm7jarWZrramko8EMzIQxgn8mThIpCfhYCIP c62lmCwMZ3YihjD5QpWY0ARDe4jiBkexOsm3mdWXVxlA1vQzEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+EOGJWIwP1GghVIJb7MLYjsFMUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wMTFh MGQxYi03OWE0LTRkMTQtOWNkMC0wNzQzZjI5YmY5NTYvOWQ1MWY5NWEtMGMzMy0z YWEzLWI2ZWUtZGIwZmY4NDkxOTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDExYTBkMWItNzlhNC00ZDE0LTlj ZDAtMDc0M2YyOWJmOTU2LzAxMWEwZDFiLTc5YTQtNGQxNC05Y2QwLTA3NDNmMjli Zjk1Ni5jcmwwHwYDVR0jBBgwFoAUUQq891lS4iYG1wETEyKMWAPnvxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wMTFhMGQxYi03OWE0LTRkMTQtOWNkMC0wNzQz ZjI5YmY5NTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnTQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXHn8J8NXMv1SmrRZgXJBMheNpUsLvlm+R/v12TW4jCkWhksJ/Jom2w V7EjJS3Z7GWcZoT98JXhbUQKBpafVZoBCeUqx32sZtRN9Q1QV5BnZN9L0LYtI6Kq EhlEk/Ng0MdJsx+eyATvlQEooVuTWBo+wMkVLE9EIypf5SdqmL1lTJbamq0kkj/p P8ILFJ9XwuxNJdAUp4MwxnZbeyicFmxFl4XEfh0cXCd8vtW6VBXO/24P8PjfWIkN p+SYbXizdadkGOINM0Sq74As4NEA3eqzldPL3sUl5TgIiuNjz5qNBJg6yeXQYVTo 832LbMp6zHso++o1nlkCRCNdXcC1tB8= -----END CERTIFICATE-----Generated at Fri Oct 17 23:14:48 2025 by rpki-client