$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/59e71e1a-ae50-3564-849a-54acf114c131.roa File: 59e71e1a-ae50-3564-849a-54acf114c131.roa (raw, json) Hash identifier: 62ONQVf+FbNnUglh9c+IRezqz4yiXB4U1E5x9tFbaGw= Subject key identifier: 5B:BB:CE:68:01:FE:70:BE:15:D6:CE:BD:EA:09:DD:D4:C6:C6:75:B3 Certificate issuer: /CN=f52d9dd2-a206-4694-a550-d6639e33e9f6 Certificate serial: 010D0C9F4328584B0B76D89599460051F28CF880 Authority key identifier: BD:E7:F5:54:80:A6:3B:0B:FE:B6:E6:EF:1E:0F:B3:18:E1:77:DF:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/59e71e1a-ae50-3564-849a-54acf114c131.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 40714 IP address blocks: 164.152.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/f52d9dd2-a206-4694-a550-d6639e33e9f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/f52d9dd2-a206-4694-a550-d6639e33e9f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:d8:95:99:46:00:51:f2:8c:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f52d9dd2-a206-4694-a550-d6639e33e9f6 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=df4fc4e8-31ba-4576-8080-86d36b580aed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ad:4e:1f:bf:e1:ce:14:1c:86:ee:1b:cf:85: af:c5:9b:69:32:0a:d3:e4:a6:8d:97:d4:23:bc:ef: 2a:c1:50:0e:6e:0b:1b:26:97:4f:bd:ff:91:69:91: d0:a9:a0:b9:e5:8f:a6:78:38:6e:16:9e:d6:ea:01: 7b:98:1f:b2:32:1d:80:1a:8a:c9:59:18:d7:b9:7a: 95:96:a9:21:78:4a:2e:2f:b8:c1:27:06:bb:57:3e: 38:70:83:eb:d9:17:10:69:1d:57:2e:cc:a5:6d:3e: c5:99:30:13:05:fb:f2:b4:c2:12:05:8b:af:1d:17: 29:3f:3f:f7:61:03:f1:f9:c8:0f:15:ee:59:d9:53: b4:e1:9c:16:c1:ec:9b:2d:11:c9:09:b2:48:9f:32: 63:85:2c:38:a6:10:9b:ef:62:f3:4c:93:84:6d:f5: 79:db:1a:05:2d:59:ce:0b:85:53:a1:b4:4f:cd:ba: 75:8c:34:b7:c0:27:69:b3:73:0b:45:d1:fb:a5:32: 0e:09:28:42:a1:1d:98:53:ce:b7:62:48:f0:c5:f4: 73:4d:7a:32:5c:06:7e:c4:36:ea:b6:8e:dd:a7:96: 76:2c:05:e1:ec:f8:b1:13:03:e5:83:5d:93:b2:c9: c1:74:31:6b:4b:b9:cf:fb:ce:5f:b0:c9:c5:59:72: b8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BB:CE:68:01:FE:70:BE:15:D6:CE:BD:EA:09:DD:D4:C6:C6:75:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/59e71e1a-ae50-3564-849a-54acf114c131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/f52d9dd2-a206-4694-a550-d6639e33e9f6.crl X509v3 Authority Key Identifier: keyid:BD:E7:F5:54:80:A6:3B:0B:FE:B6:E6:EF:1E:0F:B3:18:E1:77:DF:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6.cer sbgp-ipAddrBlock: critical IPv4: 164.152.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:c7:89:99:f4:e8:65:af:bb:6e:67:de:2e:2c:6d:d7:3a:9c: c0:7d:fc:40:da:2a:3e:75:9a:13:cf:d5:33:51:09:4f:b8:8b: be:35:4f:19:47:5c:b1:33:99:a3:53:7b:3e:e0:12:ea:b6:90: 1a:b4:bd:9f:84:93:d3:00:8c:e2:39:5c:9e:29:c4:98:53:7a: 62:6a:50:6a:d4:95:34:d9:33:9d:26:91:8f:f1:33:eb:07:2e: d7:f1:c1:b2:19:b9:ae:01:71:02:12:f6:f2:2e:66:cd:5f:f6: c0:29:59:f3:d5:3d:ac:3a:e9:09:7a:b1:6a:cf:24:40:4c:6f: 2e:93:36:a8:ac:14:67:79:20:9a:23:56:4f:5b:3b:94:28:b4: 66:a9:bf:c5:eb:dd:11:20:10:da:1f:73:49:58:0e:6f:9e:7a: c1:60:a1:1d:cb:d8:b6:67:49:9b:ef:1b:eb:1b:da:8d:5e:a6: 12:b1:bb:f4:ea:c4:63:f9:7e:34:6e:49:80:35:36:6f:72:d9: e0:10:ef:5a:a3:d5:f8:46:be:16:4f:5b:69:de:fe:60:62:ff: 75:8d:bf:d0:d4:dc:52:14:13:6a:0b:8a:0d:0a:4c:40:37:41: 3e:33:12:2f:3f:1a:15:5a:d4:1a:b7:8c:db:69:f9:4e:18:b5: 2c:d6:43:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdtiVmUYAUfKM+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjUyZDlkZDItYTIwNi00Njk0LWE1NTAtZDY2MzllMzNl OWY2MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk ZGY0ZmM0ZTgtMzFiYS00NTc2LTgwODAtODZkMzZiNTgwYWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq61OH7/hzhQchu4bz4WvxZtpMgrT5KaNl9Qj vO8qwVAObgsbJpdPvf+RaZHQqaC55Y+meDhuFp7W6gF7mB+yMh2AGorJWRjXuXqV lqkheEouL7jBJwa7Vz44cIPr2RcQaR1XLsylbT7FmTATBfvytMISBYuvHRcpPz/3 YQPx+cgPFe5Z2VO04ZwWweybLRHJCbJInzJjhSw4phCb72LzTJOEbfV52xoFLVnO C4VTobRPzbp1jDS3wCdps3MLRdH7pTIOCShCoR2YU863YkjwxfRzTXoyXAZ+xDbq to7dp5Z2LAXh7PixEwPlg12TssnBdDFrS7nP+85fsMnFWXK4YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFu7zmgB/nC+FdbOveoJ3dTGxnWzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mNTJk OWRkMi1hMjA2LTQ2OTQtYTU1MC1kNjYzOWUzM2U5ZjYvNTllNzFlMWEtYWU1MC0z NTY0LTg0OWEtNTRhY2YxMTRjMTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZjUyZDlkZDItYTIwNi00Njk0LWE1 NTAtZDY2MzllMzNlOWY2L2Y1MmQ5ZGQyLWEyMDYtNDY5NC1hNTUwLWQ2NjM5ZTMz ZTlmNi5jcmwwHwYDVR0jBBgwFoAUvef1VICmOwv+tubvHg+zGOF337kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mNTJkOWRkMi1hMjA2LTQ2OTQtYTU1MC1kNjYz OWUzM2U5ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDpJhwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3HiZn06GWvu25n3i4sbdc6nMB9/EDaKj51mhPP1TNRCU+4i741TxlH XLEzmaNTez7gEuq2kBq0vZ+Ek9MAjOI5XJ4pxJhTemJqUGrUlTTZM50mkY/xM+sH LtfxwbIZua4BcQIS9vIuZs1f9sApWfPVPaw66Ql6sWrPJEBMby6TNqisFGd5IJoj Vk9bO5QotGapv8Xr3REgENofc0lYDm+eesFgoR3L2LZnSZvvG+sb2o1ephKxu/Tq xGP5fjRuSYA1Nm9y2eAQ71qj1fhGvhZPW2ne/mBi/3WNv9DU3FIUE2oLig0KTEA3 QT4zEi8/GhVa1Bq3jNtp+U4YtSzWQ1c= -----END CERTIFICATE-----Generated at Mon Oct 20 13:57:51 2025 by rpki-client