$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/9d8e11fc-7cfe-32bd-9701-8dd2528fa8b3.roa File: 9d8e11fc-7cfe-32bd-9701-8dd2528fa8b3.roa (raw, json) Hash identifier: sFZiSkeoesBPEsOgYDlYvT961W07CkHD2pN2YUdnCd4= Subject key identifier: 54:80:A0:F4:59:E8:DF:EC:C6:13:A2:1E:C6:BA:3D:92:F7:BB:F1:C0 Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584B2496D257EF4C7C6F131CF680 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/9d8e11fc-7cfe-32bd-9701-8dd2528fa8b3.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 26967 IP address blocks: 52.144.124.0/24 maxlen: 24 52.144.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:d2:57:ef:4c:7c:6f:13:1c:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=2d2c4aca-7ffc-4496-a923-04369cbaf2f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:16:ac:45:fe:fd:d2:42:bb:cb:07:3c:08:31: 32:fd:1f:7e:4c:8f:d0:fb:be:7d:57:21:a7:e5:db: 90:24:0e:cf:14:59:b8:c5:e5:1f:74:5f:6a:cf:47: 05:07:1f:eb:50:21:ad:87:df:62:e5:69:5c:29:80: f3:a1:9d:04:9e:89:a2:30:ee:ef:47:44:fa:19:87: 0f:0a:44:fd:52:83:ab:8b:13:e2:a7:88:1c:e5:8f: 9d:d4:3f:b6:68:25:68:25:ef:c8:c1:88:10:ea:e2: 79:c5:c4:91:96:83:e3:be:84:ae:3f:60:5a:c2:f8: 08:70:26:55:ec:f2:53:ba:fd:02:bd:e3:01:d7:77: b6:7f:68:9d:52:5e:a0:a6:a8:89:b9:32:c3:e6:79: 6d:bb:49:73:bb:5e:2c:9b:e3:bf:e5:37:04:ba:fe: 30:f4:bb:3d:b6:08:cc:a1:c9:da:da:f3:b8:c8:d2: c8:27:32:18:09:0c:ce:4e:f5:db:7d:8e:42:ef:24: fa:5b:95:62:6c:22:68:15:1e:52:09:99:b3:f7:b9: 1b:a7:52:4f:66:ab:bd:cd:5f:db:fe:38:f1:50:ed: d1:45:2f:ec:cf:fb:24:fa:db:ee:9d:08:0b:cb:4a: 9b:e6:75:11:92:8b:e2:67:d7:19:8d:2b:6c:5e:22: a3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:80:A0:F4:59:E8:DF:EC:C6:13:A2:1E:C6:BA:3D:92:F7:BB:F1:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/9d8e11fc-7cfe-32bd-9701-8dd2528fa8b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 52.144.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:3c:3e:89:2d:41:89:3b:01:7d:8f:f2:43:ae:9a:92:f4:e0: 80:59:45:97:f9:72:8d:19:0f:87:b2:24:a8:fb:29:f4:72:2e: 3e:ff:cc:51:aa:eb:4b:a2:1c:a6:d0:18:e7:14:62:9c:4e:c8: 1d:ba:0d:8b:6a:ec:a4:f8:3f:fd:57:14:af:93:1b:8c:42:ca: 8a:19:7e:f2:eb:d3:cc:f5:61:09:bf:f3:1e:0b:c9:13:d8:8f: fc:0b:99:3a:58:5f:28:16:74:d6:5e:67:2d:02:c1:a2:4c:6c: a8:70:e4:0c:2c:7d:c6:ed:7b:2a:9c:48:38:db:eb:40:b1:2e: be:aa:1a:be:11:e4:c4:eb:89:ff:40:ab:a9:62:16:6e:83:5c: d1:97:a0:ee:70:5d:84:1e:0b:d5:55:6b:de:4b:50:61:ee:59: 88:08:d3:d4:22:48:8d:30:49:a0:c5:04:42:02:59:8b:e2:82: 05:2f:47:83:f5:94:cc:fe:cf:22:1b:35:cc:0c:eb:74:b6:15: 51:82:3a:03:2f:56:0f:ff:b5:95:c9:da:24:fe:ee:00:66:5f: a5:41:6e:06:a5:f3:1e:55:db:be:22:86:a2:c9:90:86:32:ae: 7a:88:f0:24:45:ef:2a:a3:6d:57:07:dc:32:ba:f9:f5:92:09: 2f:9a:74:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskltJX70x8bxMc9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk MmQyYzRhY2EtN2ZmYy00NDk2LWE5MjMtMDQzNjljYmFmMmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhasRf790kK7ywc8CDEy/R9+TI/Q+759VyGn 5duQJA7PFFm4xeUfdF9qz0cFBx/rUCGth99i5WlcKYDzoZ0EnomiMO7vR0T6GYcP CkT9UoOrixPip4gc5Y+d1D+2aCVoJe/IwYgQ6uJ5xcSRloPjvoSuP2BawvgIcCZV 7PJTuv0CveMB13e2f2idUl6gpqiJuTLD5nltu0lzu14sm+O/5TcEuv4w9Ls9tgjM ocna2vO4yNLIJzIYCQzOTvXbfY5C7yT6W5VibCJoFR5SCZmz97kbp1JPZqu9zV/b /jjxUO3RRS/sz/sk+tvunQgLy0qb5nURkoviZ9cZjStsXiKj8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSAoPRZ6N/sxhOiHsa6PZL3u/HAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvOWQ4ZTExZmMtN2NmZS0z MmJkLTk3MDEtOGRkMjUyOGZhOGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBNJB8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHc8PoktQYk7AX2P8kOumpL04IBZRZf5co0ZD4eyJKj7KfRyLj7/zFGq 60uiHKbQGOcUYpxOyB26DYtq7KT4P/1XFK+TG4xCyooZfvLr08z1YQm/8x4LyRPY j/wLmTpYXygWdNZeZy0CwaJMbKhw5AwsfcbteyqcSDjb60CxLr6qGr4R5MTrif9A q6liFm6DXNGXoO5wXYQeC9VVa95LUGHuWYgI09QiSI0wSaDFBEICWYviggUvR4P1 lMz+zyIbNcwM63S2FVGCOgMvVg//tZXJ2iT+7gBmX6VBbgal8x5V274ihqLJkIYy rnqI8CRF7yqjbVcH3DK6+fWSCS+adHA= -----END CERTIFICATE-----Generated at Mon Oct 20 08:12:15 2025 by rpki-client