$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/52b4d618-7b43-3dfc-b1fe-de7a5135df64.roa File: 52b4d618-7b43-3dfc-b1fe-de7a5135df64.roa (raw, json) Hash identifier: Hbl1OcaYtpuCaA54zb4WV8vxNid6cFb6ze2uyXL6hpk= Subject key identifier: 58:E4:08:1F:58:28:33:92:3D:00:1B:C5:DB:E3:AC:CB:1A:90:E4:CC Certificate issuer: /CN=d301c790-c1f4-4fd7-a939-1a8d2669b5b7 Certificate serial: 010D0C9F4328584B785749B68AF47E1EC2E23040 Authority key identifier: 36:15:5C:31:E0:37:DC:51:97:C8:D9:8A:A4:EE:58:5A:78:16:C9:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/52b4d618-7b43-3dfc-b1fe-de7a5135df64.roa Signing time: Fri 10 Oct 2025 01:00:30 +0000 ROA not before: Fri 10 Oct 2025 01:00:30 +0000 ROA not after: Thu 08 Jan 2026 02:00:30 +0000 asID: 20115 IP address blocks: 170.205.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:57:49:b6:8a:f4:7e:1e:c2:e2:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d301c790-c1f4-4fd7-a939-1a8d2669b5b7 Validity Not Before: Oct 10 01:00:30 2025 GMT Not After : Jan 8 02:00:30 2026 GMT Subject: CN=9942fcc0-cc71-44a9-a95f-0c1a67b5f3a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9b:94:ec:2e:aa:e0:3f:cc:ff:f4:91:59:bf: 07:5b:1b:83:47:e1:4e:43:fc:b1:a0:3a:e1:02:99: ae:96:02:b8:54:74:87:89:18:91:86:67:32:85:f1: cf:35:98:e8:8c:dd:2c:b5:e6:64:0a:5b:89:ed:91: 38:f4:69:a9:73:b7:a3:28:9f:30:b2:11:31:b2:5b: 6d:e4:1f:59:47:bd:bb:a7:1a:ff:51:85:93:2f:e5: ef:3b:79:e7:ba:8b:ad:63:81:7b:a1:9d:23:28:00: a0:cf:e2:40:ba:29:83:e3:1e:b7:04:8f:71:06:34: 54:ef:a6:10:1f:0a:a9:28:b4:19:18:d8:42:93:e1: b5:29:e1:d0:ec:e8:cc:10:a4:74:09:8c:56:09:50: d3:29:0a:81:06:63:15:d6:9a:c0:7d:f1:5f:91:f2: 4c:d4:b3:78:45:7d:c7:35:03:e1:9e:0a:e2:a2:86: d7:ef:8f:25:5c:d4:1c:57:71:07:7f:67:e6:1d:c1: b9:eb:1d:18:c9:0c:95:e1:7b:b6:d9:c2:fe:5f:5d: d1:c4:da:e7:63:e9:2a:4a:30:2b:d6:50:4d:71:c0: 57:2c:4c:e1:7c:22:d6:81:75:e8:06:19:b7:04:b1: 3a:0f:5a:60:b6:a4:c2:c6:93:48:a6:08:c5:2f:b1: a8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E4:08:1F:58:28:33:92:3D:00:1B:C5:DB:E3:AC:CB:1A:90:E4:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/52b4d618-7b43-3dfc-b1fe-de7a5135df64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.crl X509v3 Authority Key Identifier: keyid:36:15:5C:31:E0:37:DC:51:97:C8:D9:8A:A4:EE:58:5A:78:16:C9:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer sbgp-ipAddrBlock: critical IPv4: 170.205.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:d6:e8:32:34:02:d9:b3:6e:0d:f6:79:9c:3b:2a:05:13:20: 2b:32:ab:ae:d3:09:7a:8d:90:29:a3:17:73:72:51:4e:f4:a2: 92:0f:a1:85:09:98:9e:90:fd:b9:3d:94:b5:28:70:53:b9:ec: 2e:4b:60:70:45:a4:20:6a:a1:0b:fb:a6:6f:fd:b2:a5:70:61: 0c:ba:fc:e7:a5:e3:9d:2b:cc:cc:80:eb:f4:ba:c2:cc:9e:45: af:a7:b0:41:35:8a:24:b3:6a:07:52:85:ca:78:39:bb:83:42: 3e:3b:b3:44:d7:35:59:6f:c6:a8:60:4a:87:57:88:13:65:9c: f3:1c:9e:42:ea:c5:d2:93:a2:e5:70:23:2e:49:b7:3b:00:56: 05:53:a5:be:b1:59:26:10:bc:f1:ad:23:08:d2:26:f6:06:b0: 49:35:05:62:24:2e:2f:f6:7c:22:80:46:55:31:75:11:af:5c: 59:c9:fb:8b:ed:12:05:b6:3e:8b:88:86:b5:02:9c:1a:2a:72: 37:1a:9a:8c:1b:97:dc:60:47:d0:c8:35:8c:3d:ad:bb:66:b1: 02:d4:78:d2:9a:01:a2:8e:f5:38:8e:d2:12:e7:c7:22:a5:6b: 84:7f:8a:0c:ff:9d:d0:af:c2:90:35:d2:73:9d:c8:05:b2:a9: 61:9e:af:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt4V0m2ivR+HsLiMEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDMwMWM3OTAtYzFmNC00ZmQ3LWE5MzktMWE4ZDI2Njli NWI3MB4XDTI1MTAxMDAxMDAzMFoXDTI2MDEwODAyMDAzMFowLzEtMCsGA1UEAxMk OTk0MmZjYzAtY2M3MS00NGE5LWE5NWYtMGMxYTY3YjVmM2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZuU7C6q4D/M//SRWb8HWxuDR+FOQ/yxoDrh ApmulgK4VHSHiRiRhmcyhfHPNZjojN0steZkCluJ7ZE49Gmpc7ejKJ8wshExsltt 5B9ZR727pxr/UYWTL+XvO3nnuoutY4F7oZ0jKACgz+JAuimD4x63BI9xBjRU76YQ HwqpKLQZGNhCk+G1KeHQ7OjMEKR0CYxWCVDTKQqBBmMV1prAffFfkfJM1LN4RX3H NQPhngrioobX748lXNQcV3EHf2fmHcG56x0YyQyV4Xu22cL+X13RxNrnY+kqSjAr 1lBNccBXLEzhfCLWgXXoBhm3BLE6D1pgtqTCxpNIpgjFL7GokwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjkCB9YKDOSPQAbxdvjrMsakOTMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMzAx Yzc5MC1jMWY0LTRmZDctYTkzOS0xYThkMjY2OWI1YjcvNTJiNGQ2MTgtN2I0My0z ZGZjLWIxZmUtZGU3YTUxMzVkZjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDMwMWM3OTAtYzFmNC00ZmQ3LWE5 MzktMWE4ZDI2NjliNWI3L2QzMDFjNzkwLWMxZjQtNGZkNy1hOTM5LTFhOGQyNjY5 YjViNy5jcmwwHwYDVR0jBBgwFoAUNhVcMeA33FGXyNmKpO5YWngWySwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMzAxYzc5MC1jMWY0LTRmZDctYTkzOS0xYThk MjY2OWI1YjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqs0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDW6DI0Atmzbg32eZw7KgUTICsyq67TCXqNkCmjF3NyUU70opIPoYUJ mJ6Q/bk9lLUocFO57C5LYHBFpCBqoQv7pm/9sqVwYQy6/Oel450rzMyA6/S6wsye Ra+nsEE1iiSzagdShcp4ObuDQj47s0TXNVlvxqhgSodXiBNlnPMcnkLqxdKTouVw Iy5JtzsAVgVTpb6xWSYQvPGtIwjSJvYGsEk1BWIkLi/2fCKARlUxdRGvXFnJ+4vt EgW2PouIhrUCnBoqcjcamowbl9xgR9DINYw9rbtmsQLUeNKaAaKO9TiO0hLnxyKl a4R/igz/ndCvwpA10nOdyAWyqWGer6k= -----END CERTIFICATE-----Generated at Mon Oct 20 09:47:31 2025 by rpki-client