$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/fc54ca24-1892-3666-9175-3d07e4e310b4.roa File: fc54ca24-1892-3666-9175-3d07e4e310b4.roa (raw, json) Hash identifier: DMs/WDAR2W600Pb1+8pjVZv4iyv6G3Lb8gwoFOHvMJg= Subject key identifier: 5F:1C:B4:61:E9:7F:10:9C:6F:C1:8D:CF:E7:D0:4C:92:47:11:17:AE Certificate issuer: /CN=5a81d94a-3591-433e-8f6e-da4b9078552b Certificate serial: 010D0C9F4328584AEF8BC88701B1E36F032BB980 Authority key identifier: 55:AB:70:12:4D:D4:0F:5D:1E:96:31:F5:55:2E:6E:F0:48:22:A1:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/fc54ca24-1892-3666-9175-3d07e4e310b4.roa Signing time: Fri 22 Aug 2025 01:00:33 +0000 ROA not before: Fri 22 Aug 2025 01:00:33 +0000 ROA not after: Thu 20 Nov 2025 02:00:33 +0000 asID: 53356 IP address blocks: 162.252.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/5a81d94a-3591-433e-8f6e-da4b9078552b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/5a81d94a-3591-433e-8f6e-da4b9078552b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:8b:c8:87:01:b1:e3:6f:03:2b:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a81d94a-3591-433e-8f6e-da4b9078552b Validity Not Before: Aug 22 01:00:33 2025 GMT Not After : Nov 20 02:00:33 2025 GMT Subject: CN=5c779866-0d5d-47f2-aa8d-cbd47bf93a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f5:a7:92:d7:cd:6f:f5:36:af:16:19:8a:94: 90:94:cd:fd:35:70:ba:4a:a0:89:6d:72:a1:3d:81: 70:18:5f:a9:8b:fd:35:81:0f:09:b0:36:98:09:05: 55:d6:35:0d:b7:bb:f7:9c:af:9a:42:c4:4c:e9:b7: 56:4a:50:db:80:1b:f9:e0:20:51:0d:eb:12:a3:07: d9:79:a1:6b:30:56:b2:c7:ad:55:96:a7:99:9b:4e: 0a:a1:41:78:51:66:d0:b8:07:74:11:2d:8a:80:8d: f5:0c:32:b2:a2:99:38:30:98:d2:06:e7:07:b9:d7: 7c:ef:d7:d7:b3:a8:71:c6:58:06:23:15:bf:82:d2: ae:14:76:33:1b:f7:a2:69:73:67:f8:92:8a:2c:28: d9:f5:6e:5f:35:49:dd:17:e8:69:42:5c:e4:5c:69: 01:80:2c:c7:9b:5f:ed:14:79:e6:9d:0d:0e:2d:a8: ab:11:35:48:1b:63:52:d3:e6:39:9f:19:cf:07:e5: 8f:27:76:7f:d6:41:8c:33:b2:2c:df:f6:54:26:61: 19:d0:5a:d5:11:b8:48:6f:64:59:17:e3:e4:bb:1f: 05:72:12:9a:77:a2:e7:65:9a:a4:53:64:74:9a:f3: b2:9f:3c:df:e8:e8:41:4b:9a:81:36:9f:d0:5b:ef: 82:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1C:B4:61:E9:7F:10:9C:6F:C1:8D:CF:E7:D0:4C:92:47:11:17:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/fc54ca24-1892-3666-9175-3d07e4e310b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b/5a81d94a-3591-433e-8f6e-da4b9078552b.crl X509v3 Authority Key Identifier: keyid:55:AB:70:12:4D:D4:0F:5D:1E:96:31:F5:55:2E:6E:F0:48:22:A1:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a81d94a-3591-433e-8f6e-da4b9078552b.cer sbgp-ipAddrBlock: critical IPv4: 162.252.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:49:70:93:40:01:19:d8:5a:a5:4e:7e:68:8e:be:6c:82:0c: 0f:c6:c0:2a:4b:4d:cb:d9:6b:42:d4:7d:23:c8:9c:e6:1d:eb: fc:90:b4:f6:c1:45:96:a1:d3:08:be:d3:74:90:03:68:0e:66: d0:dd:e5:d4:77:99:f3:18:4a:c7:f3:27:e2:f0:30:1b:5f:7c: f6:d4:d4:4b:76:46:c5:22:25:a2:da:38:91:05:f6:3d:d6:12: 5b:c5:6a:8e:d3:af:43:3b:78:0a:8d:73:12:58:2a:f3:9e:f4: e4:43:44:c3:ac:15:30:4d:86:53:7b:8a:69:0b:86:43:5a:a1: 8d:9d:3a:ea:aa:6d:8e:5e:35:2b:63:59:56:6b:65:31:7e:2e: 1d:23:97:16:e8:f7:ff:14:f8:e2:e9:87:85:c8:fa:22:8b:cb: df:a0:e0:c2:57:a7:6c:2a:10:8c:a7:e4:f4:13:2e:f7:af:88: 66:91:39:ea:f1:25:0f:64:70:ef:06:35:6a:b1:7b:2c:47:59: 27:ea:ef:ec:f7:07:8e:0e:17:08:2a:cb:70:84:f8:f8:02:84: 3f:92:7e:13:a4:88:27:fe:b0:db:5e:f8:01:ed:3b:7c:4f:bb: 0c:11:2a:93:5e:e7:c6:d9:bc:0d:db:b7:0c:be:8a:87:6c:dd: 3c:05:f3:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvi8iHAbHjbwMruYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE4MWQ5NGEtMzU5MS00MzNlLThmNmUtZGE0YjkwNzg1 NTJiMB4XDTI1MDgyMjAxMDAzM1oXDTI1MTEyMDAyMDAzM1owLzEtMCsGA1UEAxMk NWM3Nzk4NjYtMGQ1ZC00N2YyLWFhOGQtY2JkNDdiZjkzYTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfWnktfNb/U2rxYZipSQlM39NXC6SqCJbXKh PYFwGF+pi/01gQ8JsDaYCQVV1jUNt7v3nK+aQsRM6bdWSlDbgBv54CBRDesSowfZ eaFrMFayx61VlqeZm04KoUF4UWbQuAd0ES2KgI31DDKyopk4MJjSBucHudd879fX s6hxxlgGIxW/gtKuFHYzG/eiaXNn+JKKLCjZ9W5fNUndF+hpQlzkXGkBgCzHm1/t FHnmnQ0OLairETVIG2NS0+Y5nxnPB+WPJ3Z/1kGMM7Is3/ZUJmEZ0FrVEbhIb2RZ F+Pkux8FchKad6LnZZqkU2R0mvOynzzf6OhBS5qBNp/QW++CAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8ctGHpfxCcb8GNz+fQTJJHEReuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81YTgx ZDk0YS0zNTkxLTQzM2UtOGY2ZS1kYTRiOTA3ODU1MmIvZmM1NGNhMjQtMTg5Mi0z NjY2LTkxNzUtM2QwN2U0ZTMxMGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWE4MWQ5NGEtMzU5MS00MzNlLThm NmUtZGE0YjkwNzg1NTJiLzVhODFkOTRhLTM1OTEtNDMzZS04ZjZlLWRhNGI5MDc4 NTUyYi5jcmwwHwYDVR0jBBgwFoAUVatwEk3UD10eljH1VS5u8EgioakwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81YTgxZDk0YS0zNTkxLTQzM2UtOGY2ZS1kYTRi OTA3ODU1MmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovw0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhJcJNAARnYWqVOfmiOvmyCDA/GwCpLTcvZa0LUfSPInOYd6/yQtPbB RZah0wi+03SQA2gOZtDd5dR3mfMYSsfzJ+LwMBtffPbU1Et2RsUiJaLaOJEF9j3W ElvFao7Tr0M7eAqNcxJYKvOe9ORDRMOsFTBNhlN7imkLhkNaoY2dOuqqbY5eNStj WVZrZTF+Lh0jlxbo9/8U+OLph4XI+iKLy9+g4MJXp2wqEIyn5PQTLveviGaROerx JQ9kcO8GNWqxeyxHWSfq7+z3B44OFwgqy3CE+PgChD+SfhOkiCf+sNte+AHtO3xP uwwRKpNe58bZvA3btwy+iods3TwF8x0= -----END CERTIFICATE-----Generated at Sat Aug 23 20:15:15 2025 by rpki-client