$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/1e379538-37c3-343a-b36e-f67d0d7f2f4c.roa File: 1e379538-37c3-343a-b36e-f67d0d7f2f4c.roa (raw, json) Hash identifier: 132mhHPT20qk4AKzbfOQ5KVd0+ZdKEI2UQxrOOSUBow= Subject key identifier: B8:07:39:C2:69:5E:33:3B:AC:08:08:1D:BA:32:8C:44:81:E0:0E:2B Certificate issuer: /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Certificate serial: 010D0C9F4328584B047BFC68D3528D9C1B05A040 Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/1e379538-37c3-343a-b36e-f67d0d7f2f4c.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 13807 IP address blocks: 24.51.52.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7b:fc:68:d3:52:8d:9c:1b:05:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=5a0884d2-62a3-405f-8313-57f596e8fe9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:06:34:23:ec:34:e8:44:10:e0:4b:93:c4:62: ba:1c:93:a8:5e:9d:8d:7f:c4:6c:91:48:03:9d:00: c7:dd:b9:f6:cb:74:23:1f:ff:62:45:e4:be:53:36: 27:d4:a5:f6:ce:d3:2a:d8:57:18:04:af:a1:37:4a: 62:b1:71:c0:2c:99:0d:69:e6:5d:7c:ed:c0:a9:1c: 84:51:e6:fa:dd:4e:02:85:6b:31:18:22:48:60:5d: 44:b1:82:6e:d3:59:36:b9:33:57:8f:96:44:e8:bd: ab:4a:00:34:ab:60:80:2f:43:a5:b1:c7:63:cb:d5: 7f:a7:31:40:64:c6:d3:ac:73:f2:26:be:d7:bf:63: d9:e2:c4:2b:93:7d:09:a2:72:d5:ff:7d:ae:1c:59: 61:c6:f3:87:8e:b8:79:df:b0:cb:95:58:24:e6:55: ba:54:27:d0:ac:46:98:72:25:41:0e:62:b7:e3:cb: 0a:f1:9d:ad:39:6e:ef:fe:0e:4b:f5:f2:b0:c9:c4: 6e:8c:b7:7f:e6:ad:f4:56:49:65:bb:1b:76:a1:67: 20:eb:01:02:5d:d1:5a:6f:a0:6d:58:52:4d:aa:be: 8d:03:22:87:69:04:3c:13:8c:9d:33:2e:a5:f4:82: 97:63:d9:73:7a:ce:60:0e:25:5d:9a:92:33:38:6b: d6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:07:39:C2:69:5E:33:3B:AC:08:08:1D:BA:32:8C:44:81:E0:0E:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/1e379538-37c3-343a-b36e-f67d0d7f2f4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl X509v3 Authority Key Identifier: keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer sbgp-ipAddrBlock: critical IPv4: 24.51.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:9c:39:d0:e3:f0:d2:db:58:75:65:9e:8e:8e:37:5c:47:75: be:d6:4c:36:08:f4:6d:c2:7f:33:a1:0d:ef:e7:2c:08:ce:1d: 98:17:7a:7b:28:89:e4:49:bb:1e:a0:22:43:ad:a5:48:e3:a8: 66:f8:89:57:b7:aa:b8:7d:ee:b9:e6:1e:b8:fc:a0:94:88:12: dd:98:30:b9:62:17:1c:46:e2:5d:f1:c9:a9:b6:91:71:e4:59: 0e:b3:29:0f:58:98:a4:7c:f5:35:2b:23:0b:e7:02:bc:1c:0e: 92:f4:91:2c:31:96:0a:9d:ce:05:17:e4:69:cc:86:48:c6:cc: d7:7b:f0:73:a0:76:d3:f7:56:67:2a:ce:64:0e:07:1c:8b:ff: 5d:8b:c5:bf:5e:43:3d:ed:2c:3b:80:1f:b7:33:c0:e0:5d:97: 4c:7a:e2:73:e9:ea:a3:17:08:ea:00:47:57:e1:c2:11:3e:1b: 55:1b:d5:20:72:4a:29:f4:2d:f2:7d:c3:68:6d:51:bd:d2:2b: ac:7b:74:b1:8c:f9:dc:25:6c:4b:80:b4:a3:9d:9a:5a:1a:8d: 8e:f9:52:8f:0b:4a:1b:1c:61:0f:68:59:b9:67:b7:b2:3e:1c: f7:e6:17:14:bd:33:03:c2:92:90:91:2f:e4:3a:22:31:df:83: 6f:6b:12:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEe/xo01KNnBsFoEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw NTM2MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk NWEwODg0ZDItNjJhMy00MDVmLTgzMTMtNTdmNTk2ZThmZTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgY0I+w06EQQ4EuTxGK6HJOoXp2Nf8RskUgD nQDH3bn2y3QjH/9iReS+UzYn1KX2ztMq2FcYBK+hN0pisXHALJkNaeZdfO3AqRyE Ueb63U4ChWsxGCJIYF1EsYJu01k2uTNXj5ZE6L2rSgA0q2CAL0Olscdjy9V/pzFA ZMbTrHPyJr7Xv2PZ4sQrk30JonLV/32uHFlhxvOHjrh537DLlVgk5lW6VCfQrEaY ciVBDmK348sK8Z2tOW7v/g5L9fKwycRujLd/5q30Vklluxt2oWcg6wECXdFab6Bt WFJNqr6NAyKHaQQ8E4ydMy6l9IKXY9lzes5gDiVdmpIzOGvWZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgHOcJpXjM7rAgIHboyjESB4A4rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvMWUzNzk1MzgtMzdjMy0z NDNhLWIzNmUtZjY3ZDBkN2YyZjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3 OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh ZWUwYzA1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGDM0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEicOdDj8NLbWHVlno6ON1xHdb7WTDYI9G3CfzOhDe/nLAjOHZgXenso ieRJux6gIkOtpUjjqGb4iVe3qrh97rnmHrj8oJSIEt2YMLliFxxG4l3xyam2kXHk WQ6zKQ9YmKR89TUrIwvnArwcDpL0kSwxlgqdzgUX5GnMhkjGzNd78HOgdtP3Vmcq zmQOBxyL/12Lxb9eQz3tLDuAH7czwOBdl0x64nPp6qMXCOoAR1fhwhE+G1Ub1SBy Sin0LfJ9w2htUb3SK6x7dLGM+dwlbEuAtKOdmloajY75Uo8LShscYQ9oWblnt7I+ HPfmFxS9MwPCkpCRL+Q6IjHfg29rEiU= -----END CERTIFICATE-----Generated at Thu Oct 16 13:46:23 2025 by rpki-client