$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa File: d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa (raw, json) Hash identifier: 4di7Zq56JUtBsaO5f4st97LgIKLTiZzY5rgUXOZv2rg= Subject key identifier: 4E:C8:65:22:C1:C5:BB:EA:36:A2:72:5C:31:51:0E:F6:85:48:CD:2F Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F4328584B8EACEA06D158489D02BB1C00 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 13325 IP address blocks: 199.33.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:ea:06:d1:58:48:9d:02:bb:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=221f6ef3-5a72-4213-8080-97686cf21e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b8:7c:b3:00:fa:e3:28:38:10:9c:22:25:76: 53:8e:51:e9:17:3c:cb:83:9a:e1:ec:d3:c8:fa:91: 5d:6c:dc:59:bf:f3:13:45:14:a8:62:e7:2b:a7:e6: c0:45:9c:74:86:c8:85:54:88:4a:c2:06:b1:12:f5: db:15:b8:49:2b:cf:ea:23:8e:53:85:06:81:5e:64: 6e:65:f2:d5:0e:0a:79:4d:b0:9d:d1:e4:f2:c4:10: 32:20:37:25:02:25:94:3c:98:b6:7b:bb:92:7d:7b: de:f4:60:cf:d3:d4:3b:b1:e9:92:67:2b:7e:01:68: a0:83:1d:95:a3:ef:b7:6f:cb:7e:cf:30:df:ff:c2: 64:60:2d:79:94:bb:06:d8:51:ba:38:01:f4:d9:10: 4b:ba:33:1d:1b:5a:2b:02:6e:e1:c0:cc:40:43:91: ca:a8:f7:b4:e9:7f:8a:05:2d:e8:11:59:4b:bd:59: a7:e2:7c:75:1f:3c:1f:14:0d:f0:06:0f:b8:bb:1f: d9:9a:ef:e1:1f:61:e3:ea:86:98:27:59:48:ea:7a: f4:92:07:d8:2e:4d:72:7e:94:d4:3d:81:5d:8b:25: f5:8b:51:7a:ea:0c:ac:dc:8e:9b:d4:9d:89:31:25: 9a:95:52:02:d0:12:50:ba:8d:70:58:b5:eb:78:69: a7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C8:65:22:C1:C5:BB:EA:36:A2:72:5C:31:51:0E:F6:85:48:CD:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/d4b8fbf8-91c4-33f3-a0d1-e4b1e815dd7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 199.33.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:25:e2:a8:08:48:44:e7:03:74:1c:74:03:b4:17:17:c4:ce: 90:c0:4a:20:d0:ce:71:17:5e:94:65:d7:9a:6b:1c:89:a4:cd: 6d:4d:80:99:b4:58:ad:d4:15:32:f9:bc:60:de:b4:e2:38:ce: c0:fd:9b:f2:8b:f4:01:51:e2:13:1e:84:ad:43:1d:e7:de:1d: 52:6d:52:f5:5d:ee:d5:40:b9:5f:48:99:a5:a0:e1:80:a3:d9: 86:13:50:41:15:31:f3:bf:c0:3b:cc:48:7f:e8:0c:99:c1:b1: a4:dc:9a:4e:5c:b1:58:55:7e:12:19:e2:9a:39:3a:b5:e8:24: 5c:78:9d:24:cd:4b:b7:ff:7b:ff:9a:e5:61:38:5f:9a:fd:e1: ad:6d:88:4a:c3:e9:45:b8:98:86:af:77:64:4c:89:44:01:2c: ad:4d:ea:ca:23:1c:0a:6d:d1:61:b7:a5:42:c4:1a:97:4a:f9: ea:fd:51:42:cf:8e:f3:27:87:fe:45:fc:94:f8:b3:61:b4:c3: 3b:fd:35:f9:8a:2c:2b:ba:78:a4:72:9c:09:77:88:79:f9:12: a8:be:31:1c:8d:9f:31:16:88:ac:2f:7b:43:dc:8a:62:20:8c: ff:b9:c2:80:ea:a5:7d:22:68:8c:e5:07:75:71:df:29:ec:07: f3:b8:38:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrOoG0VhInQK7HAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MjIxZjZlZjMtNWE3Mi00MjEzLTgwODAtOTc2ODZjZjIxZTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrh8swD64yg4EJwiJXZTjlHpFzzLg5rh7NPI +pFdbNxZv/MTRRSoYucrp+bARZx0hsiFVIhKwgaxEvXbFbhJK8/qI45ThQaBXmRu ZfLVDgp5TbCd0eTyxBAyIDclAiWUPJi2e7uSfXve9GDP09Q7semSZyt+AWiggx2V o++3b8t+zzDf/8JkYC15lLsG2FG6OAH02RBLujMdG1orAm7hwMxAQ5HKqPe06X+K BS3oEVlLvVmn4nx1HzwfFA3wBg+4ux/Zmu/hH2Hj6oaYJ1lI6nr0kgfYLk1yfpTU PYFdiyX1i1F66gys3I6b1J2JMSWalVIC0BJQuo1wWLXreGmn1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7IZSLBxbvqNqJyXDFRDvaFSM0vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvZDRiOGZiZjgtOTFjNC0z M2YzLWEwZDEtZTRiMWU4MTVkZDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyHEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQl4qgISETnA3QcdAO0FxfEzpDASiDQznEXXpRl15prHImkzW1NgJm0 WK3UFTL5vGDetOI4zsD9m/KL9AFR4hMehK1DHefeHVJtUvVd7tVAuV9ImaWg4YCj 2YYTUEEVMfO/wDvMSH/oDJnBsaTcmk5csVhVfhIZ4po5OrXoJFx4nSTNS7f/e/+a 5WE4X5r94a1tiErD6UW4mIavd2RMiUQBLK1N6sojHApt0WG3pULEGpdK+er9UULP jvMnh/5F/JT4s2G0wzv9NfmKLCu6eKRynAl3iHn5Eqi+MRyNnzEWiKwve0PcimIg jP+5woDqpX0iaIzlB3Vx3ynsB/O4ONw= -----END CERTIFICATE-----Generated at Wed Oct 22 00:51:38 2025 by rpki-client