$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a/99e823eb-bf6c-38e7-9bfe-c3b21a8c3b70.roa File: 99e823eb-bf6c-38e7-9bfe-c3b21a8c3b70.roa (raw, json) Hash identifier: YQuk/nLfD4LZvdPfuTFeegxoeYS3ickEJ1QPFmbarh4= Subject key identifier: D4:4B:BB:3C:DB:17:0F:1C:F5:A3:AA:A3:C9:19:77:5E:3B:2F:91:72 Certificate issuer: /CN=4c077b20-9311-4e07-96bf-a5c414450c8a Certificate serial: 010D0C9F4328584B9E07CC574AC4E3604FC6FD00 Authority key identifier: 15:2A:AA:09:98:F4:80:7A:1F:8E:91:6E:6A:D6:8A:1E:0D:D1:3F:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a/99e823eb-bf6c-38e7-9bfe-c3b21a8c3b70.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 852 IP address blocks: 142.52.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a/4c077b20-9311-4e07-96bf-a5c414450c8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a/4c077b20-9311-4e07-96bf-a5c414450c8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:cc:57:4a:c4:e3:60:4f:c6:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c077b20-9311-4e07-96bf-a5c414450c8a Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=f604dd10-b03f-42cf-afa9-ed2c3b0652f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f7:77:35:50:3e:0d:55:7e:80:e4:42:b5:41: a8:85:e8:1c:84:92:a4:fa:9a:ac:ce:27:25:09:ed: b6:7d:0f:83:37:27:8b:f8:a0:97:d6:9c:05:84:0b: 8e:b8:2c:7b:ec:5f:2b:2b:78:07:6a:44:ca:0d:04: b2:fb:5e:2a:b0:e8:82:fb:a3:35:36:01:5d:d5:90: bd:94:ca:1a:94:67:be:fa:ee:59:61:e1:dc:12:bd: 41:19:56:17:1a:70:c4:ab:10:8d:b4:54:52:61:37: f1:33:58:9c:44:e9:90:09:d3:8d:d5:d8:12:a0:b5: 73:67:d0:ed:14:1d:9e:92:7c:c2:3a:c5:08:a9:a5: 3b:00:47:56:95:5b:3b:58:8d:97:86:39:78:b1:c9: 63:0b:8f:9b:75:ac:d4:49:58:3a:82:1f:54:99:2b: 31:6a:aa:d3:2e:4f:9b:95:e3:ba:2e:57:1e:e7:63: d7:4d:7e:9c:83:1c:95:d0:8f:e6:38:67:31:fa:28: 0f:44:f0:ed:7b:b0:ed:ec:64:bf:03:2a:a7:af:cf: ff:d6:e1:79:e9:ad:16:07:f5:21:16:6e:c7:e3:8e: 62:57:e0:10:36:1e:71:18:c0:fd:d3:c6:ab:e1:5f: 22:41:b4:09:71:e1:3b:13:73:fd:3b:2c:e5:71:93: a7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:4B:BB:3C:DB:17:0F:1C:F5:A3:AA:A3:C9:19:77:5E:3B:2F:91:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a/99e823eb-bf6c-38e7-9bfe-c3b21a8c3b70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a/4c077b20-9311-4e07-96bf-a5c414450c8a.crl X509v3 Authority Key Identifier: keyid:15:2A:AA:09:98:F4:80:7A:1F:8E:91:6E:6A:D6:8A:1E:0D:D1:3F:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4c077b20-9311-4e07-96bf-a5c414450c8a.cer sbgp-ipAddrBlock: critical IPv4: 142.52.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:66:e0:0f:cd:40:b3:13:59:ab:9a:2e:a3:07:8a:5d:a4:c4: 28:dc:72:d8:53:19:f3:b6:22:8a:92:79:58:4c:d2:86:e1:a9: 57:ee:06:23:1f:0a:38:33:72:8e:94:18:cb:dd:17:9d:1b:00: 41:1b:b1:8b:74:c3:7b:84:ad:4f:0a:92:b4:13:33:37:cb:34: 07:d0:4f:36:48:fa:b9:ac:6c:7b:ee:ab:2d:3b:ed:75:92:e0: d5:d2:5d:79:d6:e3:8e:8f:a1:42:c2:d6:6d:e0:99:72:f3:b3: 2d:f7:fd:1c:b9:0b:27:18:bd:4b:a7:bf:7a:e9:3a:fd:61:85: 18:9f:8b:11:4a:ff:42:fc:06:e3:df:18:9a:2a:d3:84:f1:6e: 55:16:5a:0a:a2:0c:ec:bb:60:34:bd:72:91:63:34:d9:ca:28: 35:56:a3:40:af:f2:c1:16:ac:f4:5b:87:3d:75:fc:89:54:65: d8:03:89:4c:0a:27:d4:74:2d:86:5f:f9:7b:f6:c3:0f:5f:8c: d9:2a:37:9b:b4:9b:df:d9:85:b0:55:99:62:15:aa:6c:5b:8d: bd:6b:fe:22:19:88:1b:e2:29:b1:b2:9a:87:ba:a3:04:f6:3f: 71:49:69:d8:95:c0:79:c9:41:21:2a:28:98:b5:e7:53:28:85: f1:f5:25:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB8xXSsTjYE/G/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMwNzdiMjAtOTMxMS00ZTA3LTk2YmYtYTVjNDE0NDUw YzhhMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZjYwNGRkMTAtYjAzZi00MmNmLWFmYTktZWQyYzNiMDY1MmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPd3NVA+DVV+gORCtUGohegchJKk+pqszicl Ce22fQ+DNyeL+KCX1pwFhAuOuCx77F8rK3gHakTKDQSy+14qsOiC+6M1NgFd1ZC9 lMoalGe++u5ZYeHcEr1BGVYXGnDEqxCNtFRSYTfxM1icROmQCdON1dgSoLVzZ9Dt FB2eknzCOsUIqaU7AEdWlVs7WI2Xhjl4scljC4+bdazUSVg6gh9UmSsxaqrTLk+b leO6Llce52PXTX6cgxyV0I/mOGcx+igPRPDte7Dt7GS/Ayqnr8//1uF56a0WB/Uh Fm7H445iV+AQNh5xGMD908ar4V8iQbQJceE7E3P9OyzlcZOnFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRLuzzbFw8c9aOqo8kZd147L5FyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80YzA3 N2IyMC05MzExLTRlMDctOTZiZi1hNWM0MTQ0NTBjOGEvOTllODIzZWItYmY2Yy0z OGU3LTliZmUtYzNiMjFhOGMzYjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGMwNzdiMjAtOTMxMS00ZTA3LTk2 YmYtYTVjNDE0NDUwYzhhLzRjMDc3YjIwLTkzMTEtNGUwNy05NmJmLWE1YzQxNDQ1 MGM4YS5jcmwwHwYDVR0jBBgwFoAUFSqqCZj0gHofjpFuataKHg3RP6MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80YzA3N2IyMC05MzExLTRlMDctOTZiZi1hNWM0 MTQ0NTBjOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGjjRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVm4A/NQLMTWauaLqMHil2kxCjccthTGfO2IoqSeVhM0obhqVfuBiMf Cjgzco6UGMvdF50bAEEbsYt0w3uErU8KkrQTMzfLNAfQTzZI+rmsbHvuqy077XWS 4NXSXXnW446PoULC1m3gmXLzsy33/Ry5CycYvUunv3rpOv1hhRifixFK/0L8BuPf GJoq04TxblUWWgqiDOy7YDS9cpFjNNnKKDVWo0Cv8sEWrPRbhz11/IlUZdgDiUwK J9R0LYZf+Xv2ww9fjNkqN5u0m9/ZhbBVmWIVqmxbjb1r/iIZiBviKbGymoe6owT2 P3FJadiVwHnJQSEqKJi151MohfH1JcM= -----END CERTIFICATE-----Generated at Tue Oct 28 13:17:48 2025 by rpki-client