$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/7fe96268-b787-3529-9f78-3e3d0ced15ee.roa File: 7fe96268-b787-3529-9f78-3e3d0ced15ee.roa (raw, json) Hash identifier: ekOMnyqHiOHm5HD5lE4G8RXXxNI0xHrVpBXLk9oXgEE= Subject key identifier: 37:4F:FA:1F:31:73:2D:2D:91:72:1F:F8:10:D5:F8:C9:A9:67:07:7C Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F4328584B8EACEA4755A57420BA76E900 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/7fe96268-b787-3529-9f78-3e3d0ced15ee.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 13325 IP address blocks: 204.25.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:ea:47:55:a5:74:20:ba:76:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=ba7887b2-0cd3-4ed8-a75f-2a909f2327f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d3:18:1d:42:c6:ed:12:2b:76:bc:d0:1c:be: 24:a2:b8:37:f1:3a:ec:8f:a2:6c:ee:7d:e2:08:a5: da:14:94:9b:99:4a:d1:9f:b5:35:d1:76:b9:b6:57: e9:30:3e:da:1f:20:10:8b:fe:7f:4e:64:eb:e7:62: 60:ba:d6:c4:5b:4d:f1:cf:bc:10:87:30:61:7b:fa: 26:6a:c0:41:09:54:ef:cf:ae:a6:2f:87:e6:f7:fa: bc:fd:20:83:9e:93:ec:0f:e3:ad:c6:ca:06:35:a1: a0:15:90:4e:09:3c:18:58:a2:fe:07:bc:b0:b5:69: c5:84:25:b2:8f:24:d7:0c:41:95:c8:b0:36:a3:0b: 36:dd:2f:69:85:d8:26:a5:4c:16:f1:ea:e7:77:77: 6b:09:09:88:43:d3:67:8c:a6:38:9d:d4:35:62:0b: 30:75:2e:40:72:4c:43:6f:95:b5:40:4c:f0:fd:6e: e3:21:d4:ea:cb:31:f7:fd:54:d1:31:47:c7:36:60: 2f:31:18:af:79:b6:85:00:32:65:f0:93:06:2f:6f: 33:f3:82:0d:6c:5c:9d:2e:fa:51:51:15:5a:b4:00: e2:74:9e:e6:2e:f3:76:99:f2:40:7c:38:a0:bc:55: de:86:96:95:0f:84:a0:0d:0b:2c:2f:93:de:4d:94: 96:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:4F:FA:1F:31:73:2D:2D:91:72:1F:F8:10:D5:F8:C9:A9:67:07:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/7fe96268-b787-3529-9f78-3e3d0ced15ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 204.25.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:04:47:2b:76:15:f6:d6:9c:23:47:b0:0e:c3:8b:22:05:f8: b0:bb:5d:37:7e:8e:4f:b2:34:dd:6c:9a:03:ba:7e:fb:e9:b1: c6:7e:04:35:07:34:f7:8a:f3:18:d7:30:c5:10:e8:b9:e6:a1: 0f:37:6f:2b:65:f6:17:e4:dd:c5:16:07:3d:11:6d:e9:ee:b7: a2:86:93:a3:28:9e:cd:45:c2:a6:f1:cc:de:0a:f2:11:ff:31: da:4a:b1:94:b5:ac:b7:0c:78:74:c1:d1:e6:5e:f3:f6:c7:a8: d6:25:1d:fd:2f:90:07:c5:22:c6:8a:93:40:74:5b:4d:ce:21: 18:a8:e6:6a:df:52:9a:07:59:5a:b0:60:8f:9b:39:05:25:5a: c4:09:87:75:8c:56:29:7d:16:d0:b8:d5:6b:41:c3:9d:bf:50: cd:51:6b:df:a8:99:9e:14:40:c6:a7:2b:ee:9a:cb:3c:5d:9f: b0:ff:b7:55:52:4d:71:96:9e:43:b4:07:0c:8d:9b:30:8e:20: 48:f2:e0:ba:8a:b7:0b:a3:3f:d6:e2:c6:15:e3:86:e3:de:66: 3d:80:9c:c6:db:d2:22:a2:d4:5f:6c:71:8d:86:3a:f1:6a:ec: 6c:8e:5d:65:7a:f5:e6:7c:5e:57:4a:24:ca:35:01:1e:0d:ac: 09:73:48:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrOpHVaV0ILp26QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk YmE3ODg3YjItMGNkMy00ZWQ4LWE3NWYtMmE5MDlmMjMyN2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNMYHULG7RIrdrzQHL4korg38Trsj6Js7n3i CKXaFJSbmUrRn7U10Xa5tlfpMD7aHyAQi/5/TmTr52JgutbEW03xz7wQhzBhe/om asBBCVTvz66mL4fm9/q8/SCDnpPsD+OtxsoGNaGgFZBOCTwYWKL+B7ywtWnFhCWy jyTXDEGVyLA2ows23S9phdgmpUwW8ernd3drCQmIQ9NnjKY4ndQ1YgswdS5AckxD b5W1QEzw/W7jIdTqyzH3/VTRMUfHNmAvMRivebaFADJl8JMGL28z84INbFydLvpR URVatADidJ7mLvN2mfJAfDigvFXehpaVD4SgDQssL5PeTZSWjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdP+h8xcy0tkXIf+BDV+MmpZwd8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvN2ZlOTYyNjgtYjc4Ny0z NTI5LTlmNzgtM2UzZDBjZWQxNWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGzBmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkERyt2FfbWnCNHsA7DiyIF+LC7XTd+jk+yNN1smgO6fvvpscZ+BDUH NPeK8xjXMMUQ6LnmoQ83bytl9hfk3cUWBz0Rbenut6KGk6Mons1FwqbxzN4K8hH/ MdpKsZS1rLcMeHTB0eZe8/bHqNYlHf0vkAfFIsaKk0B0W03OIRio5mrfUpoHWVqw YI+bOQUlWsQJh3WMVil9FtC41WtBw52/UM1Ra9+omZ4UQManK+6ayzxdn7D/t1VS TXGWnkO0BwyNmzCOIEjy4LqKtwujP9bixhXjhuPeZj2AnMbb0iKi1F9scY2GOvFq 7GyOXWV69eZ8XldKJMo1AR4NrAlzSLo= -----END CERTIFICATE-----Generated at Fri Oct 24 15:51:54 2025 by rpki-client