$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/fc54ca24-1892-3666-9175-3d07e4e310b4.roa File: fc54ca24-1892-3666-9175-3d07e4e310b4.roa (raw, json) Hash identifier: HkEEBhEsK4KiJQ8hPTtGR36gejXwjS+s7dkGzYpa3Fg= Subject key identifier: 93:4C:D6:44:34:E4:93:C0:F3:01:48:D5:A8:49:9D:AC:12:36:FC:A9 Certificate issuer: /CN=5a81d94a-3591-433e-8f6e-da4b9078552b Certificate serial: 010D0C9F4328584A0EF278996B28D41F95BFA980 Authority key identifier: 55:AB:70:12:4D:D4:0F:5D:1E:96:31:F5:55:2E:6E:F0:48:22:A1:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/fc54ca24-1892-3666-9175-3d07e4e310b4.roa Signing time: Mon 02 Jun 2025 14:10:38 +0000 ROA not before: Mon 02 Jun 2025 14:10:38 +0000 ROA not after: Sun 31 Aug 2025 14:10:38 +0000 asID: 53356 IP address blocks: 162.252.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/5a81d94a-3591-433e-8f6e-da4b9078552b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/5a81d94a-3591-433e-8f6e-da4b9078552b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0e:f2:78:99:6b:28:d4:1f:95:bf:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a81d94a-3591-433e-8f6e-da4b9078552b Validity Not Before: Jun 2 14:10:38 2025 GMT Not After : Aug 31 14:10:38 2025 GMT Subject: CN=66bf23d3-7098-4832-9cdc-a27f7cf1335b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a4:0d:10:f1:35:b6:d2:4a:78:1f:61:f8:cd: 54:ee:97:2c:4c:85:b2:ed:d5:15:bb:6e:ba:64:2f: b3:5d:87:a5:c1:64:1d:f1:76:30:c8:79:51:be:fe: 6c:88:37:02:05:4b:8b:6c:1a:31:2c:09:3f:9e:47: 2f:9a:8e:6d:fb:c5:f6:e6:cb:72:62:c0:7c:bd:90: 23:8e:51:d3:59:55:59:8e:0e:81:31:4e:eb:22:fb: 9b:97:56:bd:b2:9f:0f:56:04:54:63:d9:7b:fd:36: 28:e2:12:20:61:6b:e1:2a:52:c3:cc:fd:26:e8:84: 7d:9a:aa:43:ce:cc:fe:cd:16:82:d5:38:72:c9:ab: f3:29:41:70:4d:97:5a:fa:dd:6b:03:de:44:31:53: 97:d0:6c:1b:eb:8c:4c:07:a1:04:d2:3f:e1:d7:18: ac:1c:c9:bd:e8:17:a8:c9:6b:94:20:bc:57:b6:21: fd:1b:99:f1:be:8a:a2:dc:5e:9e:45:20:2a:b9:53: a5:41:f2:1c:9a:fe:51:f9:85:e7:dc:8c:3f:6c:0f: 0f:19:a6:c0:ec:67:18:e3:97:2c:21:4c:e8:3a:f5: 9d:b1:7f:d8:a2:99:4d:6e:bd:71:e9:fa:a8:9a:bb: 29:74:f1:50:5b:e2:09:64:5e:fb:78:25:11:84:66: 39:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:4C:D6:44:34:E4:93:C0:F3:01:48:D5:A8:49:9D:AC:12:36:FC:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/fc54ca24-1892-3666-9175-3d07e4e310b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/5a81d94a-3591-433e-8f6e-da4b9078552b.crl X509v3 Authority Key Identifier: keyid:55:AB:70:12:4D:D4:0F:5D:1E:96:31:F5:55:2E:6E:F0:48:22:A1:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b.cer sbgp-ipAddrBlock: critical IPv4: 162.252.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:fc:18:7c:3c:22:6e:a2:03:d1:af:cb:49:c9:55:40:26:13: a1:64:f1:81:8f:03:51:ce:0a:49:f9:5e:83:a5:f0:04:ae:fe: cf:e2:b5:af:68:89:bf:02:b2:79:89:1b:0d:fa:26:90:6b:4a: 9c:a5:df:8d:13:6a:86:f9:58:f6:4e:c5:ee:70:e4:6d:01:6a: a9:b3:dd:76:f8:2c:cd:02:32:4e:83:73:1f:54:ee:bc:f2:a3: b3:3a:dd:10:76:39:f0:69:c2:10:fb:8b:60:3d:29:74:51:ad: 7a:d5:d5:99:c9:72:cd:a3:0e:6d:69:2d:05:32:57:f6:56:82: 7b:a1:11:bf:39:d7:79:26:9a:2b:40:ec:bd:94:ed:f1:92:8b: d3:fc:81:57:e0:a8:d6:67:7b:e4:74:ed:d5:54:fb:37:69:44: 6a:08:92:26:56:62:9c:aa:89:62:4e:72:70:77:c6:50:47:92: 14:07:0d:3c:13:c8:d9:0d:42:b2:6a:83:1d:05:4d:71:d0:7b: ad:c9:3b:ed:21:ef:ef:00:dc:e2:45:dd:4b:aa:90:ba:2e:29: 7c:13:4c:81:c1:db:72:71:fe:88:75:00:77:b3:85:f3:55:73: c8:23:b8:fd:7b:c0:a4:76:53:ad:0e:26:20:9e:3f:d7:02:de: 22:22:3d:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoO8niZayjUH5W/qYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE4MWQ5NGEtMzU5MS00MzNlLThmNmUtZGE0YjkwNzg1 NTJiMB4XDTI1MDYwMjE0MTAzOFoXDTI1MDgzMTE0MTAzOFowLzEtMCsGA1UEAxMk NjZiZjIzZDMtNzA5OC00ODMyLTljZGMtYTI3ZjdjZjEzMzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKQNEPE1ttJKeB9h+M1U7pcsTIWy7dUVu266 ZC+zXYelwWQd8XYwyHlRvv5siDcCBUuLbBoxLAk/nkcvmo5t+8X25styYsB8vZAj jlHTWVVZjg6BMU7rIvubl1a9sp8PVgRUY9l7/TYo4hIgYWvhKlLDzP0m6IR9mqpD zsz+zRaC1ThyyavzKUFwTZda+t1rA95EMVOX0Gwb64xMB6EE0j/h1xisHMm96Beo yWuUILxXtiH9G5nxvoqi3F6eRSAquVOlQfIcmv5R+YXn3Iw/bA8PGabA7GcY45cs IUzoOvWdsX/YoplNbr1x6fqomrspdPFQW+IJZF77eCURhGY5owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJNM1kQ05JPA8wFI1ahJnawSNvypMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81YTgx ZDk0YS0zNTkxLTQzM2UtOGY2ZS1kYTRiOTA3ODU1MmIvZmM1NGNhMjQtMTg5Mi0z NjY2LTkxNzUtM2QwN2U0ZTMxMGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWE4MWQ5NGEtMzU5MS00MzNlLThm NmUtZGE0YjkwNzg1NTJiLzVhODFkOTRhLTM1OTEtNDMzZS04ZjZlLWRhNGI5MDc4 NTUyYi5jcmwwHwYDVR0jBBgwFoAUVatwEk3UD10eljH1VS5u8EgioakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81YTgxZDk0YS0zNTkxLTQzM2UtOGY2ZS1kYTRi OTA3ODU1MmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovw0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHT8GHw8Im6iA9Gvy0nJVUAmE6Fk8YGPA1HOCkn5XoOl8ASu/s/ita9o ib8CsnmJGw36JpBrSpyl340Taob5WPZOxe5w5G0Baqmz3Xb4LM0CMk6Dcx9U7rzy o7M63RB2OfBpwhD7i2A9KXRRrXrV1ZnJcs2jDm1pLQUyV/ZWgnuhEb8513kmmitA 7L2U7fGSi9P8gVfgqNZne+R07dVU+zdpRGoIkiZWYpyqiWJOcnB3xlBHkhQHDTwT yNkNQrJqgx0FTXHQe63JO+0h7+8A3OJF3UuqkLouKXwTTIHB23Jx/oh1AHezhfNV c8gjuP17wKR2U60OJiCeP9cC3iIiPX8= -----END CERTIFICATE-----Generated at Fri Jun 6 16:53:53 2025 by rpki-client