$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/949b9c71-af76-3dca-bf92-77173f62a9a6.roa File: 949b9c71-af76-3dca-bf92-77173f62a9a6.roa (raw, json) Hash identifier: apXB3QlWpCq/mYP5D4xiu+uA7vcotl8tv69qpnixa3o= Subject key identifier: 75:C8:70:91:16:FD:A9:17:62:C3:B8:01:76:4F:DF:5B:8D:05:28:8D Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584AFC1BF81BA9CD80E5D5F5D820 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/949b9c71-af76-3dca-bf92-77173f62a9a6.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 26967 IP address blocks: 52.144.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:f8:1b:a9:cd:80:e5:d5:f5:d8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=2e1da5ea-c9b2-4c27-a432-0e68690e4259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:78:58:33:d8:f9:73:2f:0d:82:1b:1a:4a:b5: 50:e2:d9:f5:60:09:d1:50:15:35:83:37:3d:06:3f: 56:ac:1e:74:98:2b:18:6d:69:ae:03:82:3b:2b:37: ce:62:74:3c:27:f5:5c:7a:4f:d4:ec:53:3a:8f:7e: 2e:3f:a4:62:f0:a3:dc:6e:c6:71:c2:ec:a0:32:67: d8:56:89:10:c8:6f:f6:49:a8:55:c2:59:f8:e3:54: 7f:4f:22:5f:93:1f:0b:69:a7:fa:47:62:44:04:d0: de:f7:b6:f8:2e:dd:a6:68:67:f8:49:7f:35:96:20: ae:00:25:68:03:32:7b:97:36:db:d3:91:40:d3:d9: 4e:bc:3f:ac:a4:3c:16:19:38:81:ec:d8:6d:62:9d: 66:00:0a:d7:c1:19:35:f4:53:e2:e2:bf:c5:38:81: 91:77:a0:e3:14:c2:d3:39:d9:cf:ba:d7:99:66:3c: 95:8a:cf:a6:42:0c:01:2d:1a:e5:e8:12:bb:8e:41: 7c:c0:9a:9b:24:26:37:78:b9:11:82:a7:1a:7e:41: 35:1d:3d:2b:1e:b5:45:dd:03:5e:11:73:05:29:f1: 74:73:ae:22:11:47:ec:25:50:81:d0:c4:b2:fa:df: c0:8e:e1:ba:dc:9c:63:8d:4d:84:35:ac:63:f2:eb: 2a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C8:70:91:16:FD:A9:17:62:C3:B8:01:76:4F:DF:5B:8D:05:28:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/949b9c71-af76-3dca-bf92-77173f62a9a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 52.144.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:73:29:de:72:1b:b8:b4:74:20:9a:45:97:e4:81:0f:80:cf: d4:dc:88:64:ff:13:89:2c:60:40:29:03:31:03:5b:2e:90:a8: fb:f1:5c:18:94:35:9f:16:62:ac:b4:db:ba:f6:1f:0d:30:50: bf:9e:c3:d0:ec:5e:23:ea:e5:93:06:a5:82:c1:2e:f9:62:1b: 2d:84:7e:53:1e:86:12:4a:23:09:4d:c2:48:cd:c8:58:f1:2e: 15:eb:cd:44:c1:41:da:b5:34:c2:31:95:f4:6e:49:18:ec:5b: b2:49:76:4a:1c:59:a7:99:60:05:41:f5:8f:cf:e8:41:9b:75: ea:ac:9d:dc:c8:fb:d2:fd:7f:37:3e:3e:71:84:b9:45:c7:cd: 5d:17:69:4e:79:7f:9f:b5:d8:f1:32:74:fa:5b:f2:ee:5e:e3: ee:c1:26:59:8e:d3:ec:9e:39:81:79:bd:fb:6e:12:cc:ec:04: 16:66:6b:73:77:f1:0f:fc:01:aa:fb:22:d0:e1:d8:ce:2b:db: c0:b3:47:31:d5:ae:2d:c5:af:35:fb:f6:1c:99:e2:87:fc:7a: 97:14:d2:01:d8:1d:5d:3a:b8:2f:7a:71:04:1f:4a:79:43:a1: b7:03:a5:19:cf:d6:ff:da:c2:00:b9:a1:c2:d9:7c:27:ac:1c: 36:5f:07:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G/gbqc2A5dX12CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk MmUxZGE1ZWEtYzliMi00YzI3LWE0MzItMGU2ODY5MGU0MjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3hYM9j5cy8NghsaSrVQ4tn1YAnRUBU1gzc9 Bj9WrB50mCsYbWmuA4I7KzfOYnQ8J/Vcek/U7FM6j34uP6Ri8KPcbsZxwuygMmfY VokQyG/2SahVwln441R/TyJfkx8Laaf6R2JEBNDe97b4Lt2maGf4SX81liCuACVo AzJ7lzbb05FA09lOvD+spDwWGTiB7NhtYp1mAArXwRk19FPi4r/FOIGRd6DjFMLT OdnPuteZZjyVis+mQgwBLRrl6BK7jkF8wJqbJCY3eLkRgqcafkE1HT0rHrVF3QNe EXMFKfF0c64iEUfsJVCB0MSy+t/AjuG63JxjjU2ENaxj8usqbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXIcJEW/akXYsO4AXZP31uNBSiNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvOTQ5YjljNzEtYWY3Ni0z ZGNhLWJmOTItNzcxNzNmNjJhOWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBNJB8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdzKd5yG7i0dCCaRZfkgQ+Az9TciGT/E4ksYEApAzEDWy6QqPvxXBiU NZ8WYqy027r2Hw0wUL+ew9DsXiPq5ZMGpYLBLvliGy2EflMehhJKIwlNwkjNyFjx LhXrzUTBQdq1NMIxlfRuSRjsW7JJdkocWaeZYAVB9Y/P6EGbdeqsndzI+9L9fzc+ PnGEuUXHzV0XaU55f5+12PEydPpb8u5e4+7BJlmO0+yeOYF5vftuEszsBBZma3N3 8Q/8Aar7ItDh2M4r28CzRzHVri3FrzX79hyZ4of8epcU0gHYHV06uC96cQQfSnlD obcDpRnP1v/awgC5ocLZfCesHDZfB0s= -----END CERTIFICATE-----Generated at Mon Oct 20 07:52:33 2025 by rpki-client