$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/4ca0fb0e-603a-3c70-926c-431077a6023b.roa File: 4ca0fb0e-603a-3c70-926c-431077a6023b.roa (raw, json) Hash identifier: V/eX+v/ngD7g+q7470v7KQ0TXDnOvDqXL/LufRsXvMg= Subject key identifier: EF:AE:BE:A4:56:70:D5:89:B9:32:C3:03:71:EE:CC:49:DD:5B:0B:B2 Certificate issuer: /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Certificate serial: 010D0C9F4328584AF0F1350B1740056FDEBF4000 Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/4ca0fb0e-603a-3c70-926c-431077a6023b.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 13780 IP address blocks: 23.128.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:35:0b:17:40:05:6f:de:bf:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=57ecb756-5ff9-4db2-a5ee-91ce5bc3eed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:07:9f:71:af:0d:62:d3:ea:cf:0d:5a:79:4c: 9c:ec:9a:f9:b1:3b:27:9d:2e:ae:1f:02:76:ea:b8: 4f:2f:90:24:93:60:75:d5:4d:6d:f8:ca:82:25:2a: 45:ce:d4:65:75:9f:f6:0c:6f:2e:c8:04:7e:04:3e: 41:91:dc:8f:bc:eb:05:df:9f:2e:e3:74:08:84:5f: d8:77:8e:aa:4c:f3:95:9a:fa:d2:af:52:dd:2c:fa: 24:a2:93:f8:66:c3:f1:4f:9c:94:9d:4c:89:f0:70: 3e:d9:de:45:c4:d8:4d:ae:c4:79:90:7e:f9:e1:c7: bc:8a:3c:95:4e:0f:b6:d0:1d:41:cf:b5:be:48:7e: 33:96:2f:8a:3a:45:6d:1a:10:66:e4:aa:29:79:f2: e6:bd:72:4b:c0:90:6f:c9:bc:15:c0:a8:18:f7:75: 13:e9:ac:dc:cb:b1:5d:59:a0:5c:0f:3a:d6:bc:5f: cf:c9:f0:5d:df:47:e8:1c:86:df:47:d2:52:46:92: 3c:5f:c5:93:ac:5c:c6:17:88:a2:36:36:8a:c2:c2: 2e:44:83:1b:ee:af:28:57:8e:4e:5e:d4:7c:b5:a9: f9:d2:fc:8f:a9:2d:11:0c:4f:75:22:46:3f:36:04: fb:af:3c:bd:71:2d:c2:82:6b:43:ba:f7:c3:f0:25: 79:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:AE:BE:A4:56:70:D5:89:B9:32:C3:03:71:EE:CC:49:DD:5B:0B:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/4ca0fb0e-603a-3c70-926c-431077a6023b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl X509v3 Authority Key Identifier: keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer sbgp-ipAddrBlock: critical IPv4: 23.128.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:d4:cd:3a:8c:12:2e:6f:a3:ff:59:5c:b4:34:85:1b:12:b5: c8:16:ea:02:85:7d:e9:a5:24:70:ef:d3:6a:31:52:a9:46:fc: d4:f9:ea:f6:21:d1:63:c9:ce:88:c8:75:d3:a7:13:d1:7a:2f: 0c:4a:08:74:49:99:d6:62:d7:50:1e:71:28:e7:46:3b:92:85: 7d:70:47:a7:ba:79:1c:2a:17:e7:31:2f:37:55:39:be:91:e8: 35:ab:36:85:8b:ad:97:53:39:d9:5f:91:04:20:79:fa:1e:93: e2:40:6b:29:a6:dd:08:e8:1e:e6:4a:4d:78:9a:87:5d:e7:4f: 1d:a5:5a:d4:71:a6:62:f8:c7:70:ad:40:97:38:59:8d:4c:b8: c1:76:e3:54:0f:d4:2d:17:2a:4f:bd:79:cb:5d:ab:ca:da:16: 10:a6:83:88:88:97:f2:7d:bb:cd:61:5b:7f:16:d3:a6:d2:b1: cd:26:fc:44:d3:1c:7c:f4:2f:6b:e6:7d:fa:c2:ed:b2:90:e7: 06:92:1c:3b:66:1b:14:30:b7:34:fe:7a:73:5b:ad:52:97:0c: f2:91:a0:89:8c:d8:47:c9:f2:64:85:e8:3c:3d:08:cb:c8:f1: d6:e4:58:63:5e:c7:99:e5:d2:5e:69:bd:53:e6:77:b7:64:40: 89:6e:4a:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8TULF0AFb96/QAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlN2I5NmQtMGFhNS00MDJhLWIyZmUtMzM3ZDdjMjA3 ZWVlMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk NTdlY2I3NTYtNWZmOS00ZGIyLWE1ZWUtOTFjZTViYzNlZWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwefca8NYtPqzw1aeUyc7Jr5sTsnnS6uHwJ2 6rhPL5Akk2B11U1t+MqCJSpFztRldZ/2DG8uyAR+BD5BkdyPvOsF358u43QIhF/Y d46qTPOVmvrSr1LdLPokopP4ZsPxT5yUnUyJ8HA+2d5FxNhNrsR5kH754ce8ijyV Tg+20B1Bz7W+SH4zli+KOkVtGhBm5KopefLmvXJLwJBvybwVwKgY93UT6azcy7Fd WaBcDzrWvF/PyfBd30foHIbfR9JSRpI8X8WTrFzGF4iiNjaKwsIuRIMb7q8oV45O XtR8tan50vyPqS0RDE91IkY/NgT7rzy9cS3CgmtDuvfD8CV5mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+uvqRWcNWJuTLDA3HuzEndWwuyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3 Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdkN2MyMDdlZWUvNGNhMGZiMGUtNjAzYS0z YzcwLTkyNmMtNDMxMDc3YTYwMjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlN2I5NmQtMGFhNS00MDJhLWIy ZmUtMzM3ZDdjMjA3ZWVlLzUyZTdiOTZkLTBhYTUtNDAyYS1iMmZlLTMzN2Q3YzIw N2VlZS5jcmwwHwYDVR0jBBgwFoAUm2pshpw0IMSPY6IRpANBGtJdnzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdk N2MyMDdlZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4BYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrUzTqMEi5vo/9ZXLQ0hRsStcgW6gKFfemlJHDv02oxUqlG/NT56vYh 0WPJzojIddOnE9F6LwxKCHRJmdZi11AecSjnRjuShX1wR6e6eRwqF+cxLzdVOb6R 6DWrNoWLrZdTOdlfkQQgefoek+JAaymm3QjoHuZKTXiah13nTx2lWtRxpmL4x3Ct QJc4WY1MuMF241QP1C0XKk+9ectdq8raFhCmg4iIl/J9u81hW38W06bSsc0m/ETT HHz0L2vmffrC7bKQ5waSHDtmGxQwtzT+enNbrVKXDPKRoImM2EfJ8mSF6Dw9CMvI 8dbkWGNex5nl0l5pvVPmd7dkQIluSr4= -----END CERTIFICATE-----Generated at Sun Nov 2 22:52:05 2025 by rpki-client