$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/79c847ef-90a5-3e1f-97c8-9f7f72a8d2f0.roa File: 79c847ef-90a5-3e1f-97c8-9f7f72a8d2f0.roa (raw, json) Hash identifier: w5lyK4bG607hIuxNTAMO9dD/UNggE9L+0Ni8Gme2Uyw= Subject key identifier: D5:44:8D:72:D1:C8:3A:E7:C8:96:75:26:A2:9F:82:F1:CC:19:A1:73 Certificate issuer: /CN=52356d5e-3580-4025-a264-1c6d347bc052 Certificate serial: 010D0C9F4328584AFEE6CC7D7150DA33E797D700 Authority key identifier: 8E:46:CC:D2:A9:22:CB:CB:37:68:57:A0:15:16:37:DB:FE:2F:73:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/79c847ef-90a5-3e1f-97c8-9f7f72a8d2f0.roa Signing time: Wed 27 Aug 2025 13:00:41 +0000 ROA not before: Wed 27 Aug 2025 13:00:41 +0000 ROA not after: Tue 25 Nov 2025 14:00:41 +0000 asID: 18214 IP address blocks: 198.59.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/52356d5e-3580-4025-a264-1c6d347bc052.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/52356d5e-3580-4025-a264-1c6d347bc052.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fe:e6:cc:7d:71:50:da:33:e7:97:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52356d5e-3580-4025-a264-1c6d347bc052 Validity Not Before: Aug 27 13:00:41 2025 GMT Not After : Nov 25 14:00:41 2025 GMT Subject: CN=303f7763-7bee-4e15-ad96-bcf56536c7a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:90:58:97:6f:d4:ae:75:4a:c3:08:f6:cb:bc: 01:75:71:8a:f8:32:0b:bb:40:41:79:1c:99:b8:17: c8:07:cb:50:a5:bc:ec:c0:89:62:49:c8:03:c5:a2: 28:5e:a8:5c:e5:04:b9:44:07:9a:6e:58:94:d2:69: a8:4a:b8:24:14:0f:2e:ca:e1:f0:c7:6f:5a:2b:a3: 8d:fb:2e:f3:c0:a6:45:9b:f8:c2:63:ae:e6:70:b0: b4:61:f4:96:a5:f3:98:2c:0a:97:74:29:8e:06:f9: b0:c3:ee:9c:fe:43:9a:62:32:0c:dc:9d:fb:17:42: ce:db:c7:23:d5:95:91:89:cf:22:46:54:7f:53:db: c0:24:a0:fb:29:5b:67:ce:36:e5:35:4a:af:60:1f: 17:2b:4b:0b:85:54:67:c2:8e:de:dd:8d:be:42:0d: 22:01:b0:e1:cb:36:7f:a6:a1:90:85:b7:7c:3a:24: 01:08:ce:87:1c:b2:c2:12:f3:c1:90:21:b9:3d:83: 75:12:ea:52:f9:7b:b5:a6:61:4b:21:99:af:d8:3f: 2d:bd:b7:49:d7:4f:41:45:30:87:11:7c:30:98:4a: fb:f0:d6:d7:39:4a:09:d8:63:cc:4d:d9:45:be:4f: 5f:3c:52:86:3b:eb:e5:27:72:94:ac:4d:41:76:79: c3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:44:8D:72:D1:C8:3A:E7:C8:96:75:26:A2:9F:82:F1:CC:19:A1:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/79c847ef-90a5-3e1f-97c8-9f7f72a8d2f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052/52356d5e-3580-4025-a264-1c6d347bc052.crl X509v3 Authority Key Identifier: keyid:8E:46:CC:D2:A9:22:CB:CB:37:68:57:A0:15:16:37:DB:FE:2F:73:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/52356d5e-3580-4025-a264-1c6d347bc052.cer sbgp-ipAddrBlock: critical IPv4: 198.59.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:6e:e5:d0:8b:60:72:e9:e9:1c:cd:79:ba:b3:e7:85:b2:f4: ff:a9:59:c2:97:ba:48:6b:b5:1d:a9:4b:db:9f:3e:b0:70:f6: 5a:6c:be:42:2a:77:b5:31:ad:ab:00:3c:85:51:c2:6a:ca:dc: e8:dd:1a:a8:da:aa:4a:65:4d:d8:68:89:99:9c:cd:4c:f7:88: d7:3d:4c:23:08:2f:d9:aa:c4:d2:0c:da:8c:89:a4:51:00:c7: 64:a3:4b:83:5c:f2:0a:01:02:8b:6a:9c:c6:a5:9f:b6:94:d7: 2b:69:15:e1:8c:c4:d1:7f:b4:77:95:2b:19:e2:88:b9:b8:7e: 83:15:ca:34:b7:a4:d2:ca:f9:00:6f:f1:32:49:58:f8:45:c5: c3:2a:29:50:f8:e9:36:e4:25:18:01:a4:49:09:7d:f8:84:b4: 35:82:35:3d:9f:a3:9b:64:80:5f:81:43:30:2e:8a:ea:66:c0: 49:29:09:bc:a0:f2:b2:fa:91:bc:7d:80:24:c6:93:63:71:1b: 7e:ef:a2:5a:8e:7f:d6:96:b6:53:a8:a4:1c:38:fd:ba:b2:b7: cd:6b:6a:1f:bd:6d:72:16:db:6c:be:88:24:bf:64:a6:4b:aa: 65:65:42:d9:36:48:db:03:c9:67:b9:f2:68:de:69:39:38:a9: 49:16:41:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr+5sx9cVDaM+eX1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIzNTZkNWUtMzU4MC00MDI1LWEyNjQtMWM2ZDM0N2Jj MDUyMB4XDTI1MDgyNzEzMDA0MVoXDTI1MTEyNTE0MDA0MVowLzEtMCsGA1UEAxMk MzAzZjc3NjMtN2JlZS00ZTE1LWFkOTYtYmNmNTY1MzZjN2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJBYl2/UrnVKwwj2y7wBdXGK+DILu0BBeRyZ uBfIB8tQpbzswIliScgDxaIoXqhc5QS5RAeabliU0mmoSrgkFA8uyuHwx29aK6ON +y7zwKZFm/jCY67mcLC0YfSWpfOYLAqXdCmOBvmww+6c/kOaYjIM3J37F0LO28cj 1ZWRic8iRlR/U9vAJKD7KVtnzjblNUqvYB8XK0sLhVRnwo7e3Y2+Qg0iAbDhyzZ/ pqGQhbd8OiQBCM6HHLLCEvPBkCG5PYN1EupS+Xu1pmFLIZmv2D8tvbdJ109BRTCH EXwwmEr78NbXOUoJ2GPMTdlFvk9fPFKGO+vlJ3KUrE1BdnnDZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVEjXLRyDrnyJZ1JqKfgvHMGaFzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81MjM1 NmQ1ZS0zNTgwLTQwMjUtYTI2NC0xYzZkMzQ3YmMwNTIvNzljODQ3ZWYtOTBhNS0z ZTFmLTk3YzgtOWY3ZjcyYThkMmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNTIzNTZkNWUtMzU4MC00MDI1LWEy NjQtMWM2ZDM0N2JjMDUyLzUyMzU2ZDVlLTM1ODAtNDAyNS1hMjY0LTFjNmQzNDdi YzA1Mi5jcmwwHwYDVR0jBBgwFoAUjkbM0qkiy8s3aFegFRY32/4vc1kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81MjM1NmQ1ZS0zNTgwLTQwMjUtYTI2NC0xYzZk MzQ3YmMwNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxjucMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdu5dCLYHLp6RzNebqz54Wy9P+pWcKXukhrtR2pS9ufPrBw9lpsvkIq d7UxrasAPIVRwmrK3OjdGqjaqkplTdhoiZmczUz3iNc9TCMIL9mqxNIM2oyJpFEA x2SjS4Nc8goBAotqnMaln7aU1ytpFeGMxNF/tHeVKxniiLm4foMVyjS3pNLK+QBv 8TJJWPhFxcMqKVD46TbkJRgBpEkJffiEtDWCNT2fo5tkgF+BQzAuiupmwEkpCbyg 8rL6kbx9gCTGk2NxG37volqOf9aWtlOopBw4/bqyt81rah+9bXIW22y+iCS/ZKZL qmVlQtk2SNsDyWe58mjeaTk4qUkWQW0= -----END CERTIFICATE-----Generated at Mon Oct 20 07:37:03 2025 by rpki-client