$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/4e395ad4-2d90-3ea0-8528-5883f02119d1.roa File: 4e395ad4-2d90-3ea0-8528-5883f02119d1.roa (raw, json) Hash identifier: KBa4WoINIvC8/MH4SoFS8p3mpl0g+8HjTQ0lRqNJygQ= Subject key identifier: 10:5E:21:AA:7C:57:D5:F1:B5:76:12:86:3E:FF:17:A1:AB:01:6A:D1 Certificate issuer: /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Certificate serial: 010D0C9F4328584B13D6B42CDADC01915E003000 Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/4e395ad4-2d90-3ea0-8528-5883f02119d1.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 950 IP address blocks: 23.140.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:b4:2c:da:dc:01:91:5e:00:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=90960a89-c21a-454b-9b3b-005c0475f7eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:09:1c:65:6d:5d:18:92:09:c8:d1:fc:c9:62: 5b:0b:47:f7:e9:45:e5:1e:ac:db:19:c1:a2:ce:ee: 1c:13:b7:06:60:e7:43:86:62:a0:79:6f:ec:66:2f: c7:32:00:2d:e8:6f:3c:e5:7d:29:e0:6a:fa:4e:f2: a6:9f:16:eb:be:12:48:38:02:a3:6b:8a:ff:e6:54: 9c:31:34:ee:58:03:6a:05:4d:bb:91:b1:ad:7c:32: 08:b6:7a:34:5b:95:86:de:0d:00:82:3d:07:a0:4b: 11:97:7b:b3:c1:8b:d5:bd:a1:3a:00:c5:31:db:04: 4b:3e:c7:6f:c0:d2:3c:4e:f9:8e:aa:04:78:89:70: 4c:c7:3d:bd:b7:2d:38:ee:dd:60:2e:38:8f:76:1d: bc:a5:37:df:66:83:eb:50:36:f4:83:2b:2b:fe:ab: 43:ea:90:a5:a8:f4:81:be:fa:e0:f8:fe:d4:da:f2: 4d:18:bd:d7:f3:d9:fb:7e:22:60:62:9c:a7:9f:2b: 96:f2:c6:4b:94:02:95:47:7f:51:b7:68:22:9a:85: 65:24:e6:4a:d4:4b:62:15:73:c0:8c:51:00:8c:e8: d0:e8:f7:71:e3:42:46:2f:01:fd:3b:95:7c:8b:1f: 1a:29:b2:92:e5:35:8f:72:0e:bf:6a:4c:22:91:46: 74:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5E:21:AA:7C:57:D5:F1:B5:76:12:86:3E:FF:17:A1:AB:01:6A:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/4e395ad4-2d90-3ea0-8528-5883f02119d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl X509v3 Authority Key Identifier: keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer sbgp-ipAddrBlock: critical IPv4: 23.140.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:86:41:6c:1d:72:71:8e:5f:4a:7d:61:1e:d9:7d:30:57:09: 75:e4:f0:74:16:e4:40:60:15:9e:e0:b6:36:b6:6e:56:c2:c3: 16:18:66:f2:a0:af:7a:66:58:4c:ba:f2:0c:db:6d:ac:6e:e2: 46:1b:a4:be:b3:7c:39:33:a3:cb:ad:6b:1d:c6:1e:f9:53:10: 8b:8a:bd:4d:6f:e6:0a:13:e9:78:43:0a:95:73:f4:e6:0b:14: de:3c:80:c5:e7:61:78:ab:ec:9c:8c:36:25:d5:e6:95:b1:10: 28:5c:bd:bc:8f:d8:3b:bc:a7:7b:f0:6a:59:8e:d6:86:27:a2: 79:1a:8c:b8:f3:e8:2a:5f:da:eb:0c:a9:a6:f8:65:ee:cb:d1: 5c:1c:52:01:0f:40:f1:cc:c9:8e:79:c4:46:d1:61:6c:b8:77: 40:cb:9f:7c:43:2c:fe:c3:17:f1:0d:a8:9d:56:3b:67:3d:02: 71:ff:f2:57:30:55:25:31:f8:19:05:49:54:06:54:dd:05:73: 14:f5:ea:fb:99:be:4c:63:2c:1f:62:23:d8:89:f1:5c:44:0b: 57:06:6c:21:c9:f8:b3:4c:29:8b:40:bd:d8:95:4f:ae:c8:26: 31:54:79:63:73:e6:ad:be:26:b6:24:0f:b4:1e:8f:37:45:52: e0:3f:45:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1rQs2twBkV4AMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlN2I5NmQtMGFhNS00MDJhLWIyZmUtMzM3ZDdjMjA3 ZWVlMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk OTA5NjBhODktYzIxYS00NTRiLTliM2ItMDA1YzA0NzVmN2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwkcZW1dGJIJyNH8yWJbC0f36UXlHqzbGcGi zu4cE7cGYOdDhmKgeW/sZi/HMgAt6G885X0p4Gr6TvKmnxbrvhJIOAKja4r/5lSc MTTuWANqBU27kbGtfDIItno0W5WG3g0Agj0HoEsRl3uzwYvVvaE6AMUx2wRLPsdv wNI8TvmOqgR4iXBMxz29ty047t1gLjiPdh28pTffZoPrUDb0gysr/qtD6pClqPSB vvrg+P7U2vJNGL3X89n7fiJgYpynnyuW8sZLlAKVR39Rt2gimoVlJOZK1EtiFXPA jFEAjOjQ6Pdx40JGLwH9O5V8ix8aKbKS5TWPcg6/akwikUZ0TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBeIap8V9XxtXYShj7/F6GrAWrRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3 Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdkN2MyMDdlZWUvNGUzOTVhZDQtMmQ5MC0z ZWEwLTg1MjgtNTg4M2YwMjExOWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlN2I5NmQtMGFhNS00MDJhLWIy ZmUtMzM3ZDdjMjA3ZWVlLzUyZTdiOTZkLTBhYTUtNDAyYS1iMmZlLTMzN2Q3YzIw N2VlZS5jcmwwHwYDVR0jBBgwFoAUm2pshpw0IMSPY6IRpANBGtJdnzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdk N2MyMDdlZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4w4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2GQWwdcnGOX0p9YR7ZfTBXCXXk8HQW5EBgFZ7gtja2blbCwxYYZvKg r3pmWEy68gzbbaxu4kYbpL6zfDkzo8utax3GHvlTEIuKvU1v5goT6XhDCpVz9OYL FN48gMXnYXir7JyMNiXV5pWxEChcvbyP2Du8p3vwalmO1oYnonkajLjz6Cpf2usM qab4Ze7L0VwcUgEPQPHMyY55xEbRYWy4d0DLn3xDLP7DF/ENqJ1WO2c9AnH/8lcw VSUx+BkFSVQGVN0FcxT16vuZvkxjLB9iI9iJ8VxEC1cGbCHJ+LNMKYtAvdiVT67I JjFUeWNz5q2+JrYkD7QejzdFUuA/RTQ= -----END CERTIFICATE-----Generated at Sun Nov 2 22:54:53 2025 by rpki-client