$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/52f53adc-637c-4f98-858f-551878f8a6bb/8b597857-9340-38a9-ab20-acd34a5b3e9b.roa File: 8b597857-9340-38a9-ab20-acd34a5b3e9b.roa (raw, json) Hash identifier: 9gEUj7Iy5vQ+C6ej+UaMJK4IAlup4aWNdujqjqiLEv4= Subject key identifier: 7E:09:5E:34:96:B7:C1:2D:3B:75:1D:2D:63:31:14:DB:07:53:57:A7 Certificate issuer: /CN=52f53adc-637c-4f98-858f-551878f8a6bb Certificate serial: 010D0C9F4328584A49705E617BA51A0CE8D55B80 Authority key identifier: 45:48:18:4F:40:F8:19:A4:17:C0:63:00:6A:9C:F6:B7:8F:4B:6D:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/52f53adc-637c-4f98-858f-551878f8a6bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/52f53adc-637c-4f98-858f-551878f8a6bb/8b597857-9340-38a9-ab20-acd34a5b3e9b.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 36103 IP address blocks: 64.72.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/52f53adc-637c-4f98-858f-551878f8a6bb/52f53adc-637c-4f98-858f-551878f8a6bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/52f53adc-637c-4f98-858f-551878f8a6bb/52f53adc-637c-4f98-858f-551878f8a6bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/52f53adc-637c-4f98-858f-551878f8a6bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:5e:61:7b:a5:1a:0c:e8:d5:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52f53adc-637c-4f98-858f-551878f8a6bb Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=6abb70c9-0d41-49ea-87d0-cc27ab15262a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d4:cf:1e:b4:4a:2a:7e:4a:94:2c:f3:8b:84: ec:25:09:cd:ba:d5:0d:7f:45:69:97:48:5d:88:bf: 7d:d9:70:8d:c0:75:7d:11:61:95:be:36:00:5f:07: d6:ea:3a:c2:7a:80:59:0c:f3:44:f3:58:5d:c5:bd: 29:d6:da:c5:9d:ed:10:98:9a:4f:60:88:9b:91:be: b5:d1:12:a7:d6:a7:9c:2f:90:8a:8e:bd:20:4a:5b: 93:3e:8d:d9:fd:17:15:33:6d:0d:45:e8:70:d1:39: 58:d7:74:ea:5c:fb:e1:af:fb:e0:ed:cf:b7:59:83: 4e:47:96:57:75:b9:74:b8:5a:32:5a:f3:e7:94:1c: 4e:15:06:76:15:da:aa:4f:9b:03:e8:a6:34:d8:fc: bd:58:31:f4:5d:17:79:bc:09:76:7c:b1:b5:ef:21: 0b:da:db:bc:f1:19:c1:57:e2:94:80:6d:9a:ef:b6: dd:a7:93:bd:ab:4f:a9:9e:f3:6c:d9:a6:92:1f:a9: c8:2f:b0:61:8d:44:98:22:8d:fd:02:b6:d1:8b:4e: 2a:d6:98:c9:5a:05:99:10:8f:7a:41:80:6d:b2:53: 1a:89:07:e6:d6:e5:b5:b9:b7:49:8b:33:c0:dc:2e: a1:a5:14:fc:85:96:b5:b3:95:7a:31:49:8b:a0:9b: 0e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:09:5E:34:96:B7:C1:2D:3B:75:1D:2D:63:31:14:DB:07:53:57:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/52f53adc-637c-4f98-858f-551878f8a6bb/8b597857-9340-38a9-ab20-acd34a5b3e9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/52f53adc-637c-4f98-858f-551878f8a6bb/52f53adc-637c-4f98-858f-551878f8a6bb.crl X509v3 Authority Key Identifier: keyid:45:48:18:4F:40:F8:19:A4:17:C0:63:00:6A:9C:F6:B7:8F:4B:6D:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/52f53adc-637c-4f98-858f-551878f8a6bb.cer sbgp-ipAddrBlock: critical IPv4: 64.72.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:f5:80:0b:e6:00:de:44:f2:93:c5:62:6d:2c:84:62:d7:2c: c7:04:bf:ed:f3:d9:cf:09:1c:0c:9b:cd:f8:dc:f0:3f:89:aa: 75:bd:41:54:a5:da:6b:77:cd:41:26:78:85:d9:bc:dc:81:93: d9:3e:b9:91:cc:90:d0:49:07:67:22:a0:c0:c0:92:dc:c2:63: 46:3b:ea:ff:fa:69:a1:4a:10:ce:c2:15:f2:c5:a3:e9:5a:02: 26:b2:34:cb:5b:a0:ab:ac:95:ac:99:ba:95:c7:9f:2f:ae:f6: 8d:52:6f:e8:15:b1:46:cc:c5:16:48:8d:43:8a:7a:e0:3a:44: 59:00:87:eb:e5:91:5a:b8:29:e1:1c:3f:4d:d6:39:72:41:ad: b8:2a:48:e0:e2:dd:48:f0:b6:75:e8:b1:91:53:90:43:9f:30: 9c:b7:c2:94:58:08:7a:da:30:95:14:6e:c2:08:15:ef:6d:f9: 5a:2f:ec:79:a6:f1:99:55:0b:f2:57:24:d0:53:ee:e0:dc:84: 66:fa:0f:fa:19:b3:a6:d5:12:4a:cf:c7:ca:9f:3b:3d:41:cd: 76:4d:cb:e6:41:96:9e:35:03:4c:c4:77:62:86:42:c1:db:45: 71:d9:fc:e7:be:6b:fa:65:fe:42:19:23:67:49:92:64:42:fe: 59:43:b6:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcF5he6UaDOjVW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJmNTNhZGMtNjM3Yy00Zjk4LTg1OGYtNTUxODc4Zjhh NmJiMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk NmFiYjcwYzktMGQ0MS00OWVhLTg3ZDAtY2MyN2FiMTUyNjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttTPHrRKKn5KlCzzi4TsJQnNutUNf0Vpl0hd iL992XCNwHV9EWGVvjYAXwfW6jrCeoBZDPNE81hdxb0p1trFne0QmJpPYIibkb61 0RKn1qecL5CKjr0gSluTPo3Z/RcVM20NRehw0TlY13TqXPvhr/vg7c+3WYNOR5ZX dbl0uFoyWvPnlBxOFQZ2FdqqT5sD6KY02Py9WDH0XRd5vAl2fLG17yEL2tu88RnB V+KUgG2a77bdp5O9q0+pnvNs2aaSH6nIL7BhjUSYIo39ArbRi04q1pjJWgWZEI96 QYBtslMaiQfm1uW1ubdJizPA3C6hpRT8hZa1s5V6MUmLoJsOawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4JXjSWt8EtO3UdLWMxFNsHU1enMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81MmY1 M2FkYy02MzdjLTRmOTgtODU4Zi01NTE4NzhmOGE2YmIvOGI1OTc4NTctOTM0MC0z OGE5LWFiMjAtYWNkMzRhNWIzZTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTJmNTNhZGMtNjM3Yy00Zjk4LTg1 OGYtNTUxODc4ZjhhNmJiLzUyZjUzYWRjLTYzN2MtNGY5OC04NThmLTU1MTg3OGY4 YTZiYi5jcmwwHwYDVR0jBBgwFoAURUgYT0D4GaQXwGMAapz2t49LbZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81MmY1M2FkYy02MzdjLTRmOTgtODU4Zi01NTE4 NzhmOGE2YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQEjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABH1gAvmAN5E8pPFYm0shGLXLMcEv+3z2c8JHAybzfjc8D+JqnW9QVSl 2mt3zUEmeIXZvNyBk9k+uZHMkNBJB2cioMDAktzCY0Y76v/6aaFKEM7CFfLFo+la AiayNMtboKuslayZupXHny+u9o1Sb+gVsUbMxRZIjUOKeuA6RFkAh+vlkVq4KeEc P03WOXJBrbgqSODi3UjwtnXosZFTkEOfMJy3wpRYCHraMJUUbsIIFe9t+Vov7Hmm 8ZlVC/JXJNBT7uDchGb6D/oZs6bVEkrPx8qfOz1BzXZNy+ZBlp41A0zEd2KGQsHb RXHZ/Oe+a/pl/kIZI2dJkmRC/llDtlE= -----END CERTIFICATE-----Generated at Mon Jun 30 02:29:33 2025 by rpki-client