$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/c617dd1e-5cb7-35cd-a1b3-1f289b92805a.roa File: c617dd1e-5cb7-35cd-a1b3-1f289b92805a.roa (raw, json) Hash identifier: 3YM8QSyTFunVffe6Z+rLdsd8eCXiDCT1ZxXUV8LEpRs= Subject key identifier: F4:B9:B7:29:0A:9A:D4:6B:2F:F6:53:95:BE:91:46:FC:08:CA:E6:87 Certificate issuer: /CN=1a90933e-2005-4c33-ae3f-744b7b70ed7c Certificate serial: 010D0C9F4328584B8EACD200AD0BB85900E7F820 Authority key identifier: D4:74:AB:93:77:F0:FA:3C:14:E8:78:A8:8C:F7:C0:43:24:37:68:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/c617dd1e-5cb7-35cd-a1b3-1f289b92805a.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 13727 IP address blocks: 52.129.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:d2:00:ad:0b:b8:59:00:e7:f8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a90933e-2005-4c33-ae3f-744b7b70ed7c Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=17cb5023-0cbf-4ec7-abc3-97435b2e1d77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d7:b8:23:9a:e4:74:e9:f2:41:5c:1c:ac:28: 2d:6b:72:bb:97:ff:55:e2:60:72:c4:d3:bd:55:5e: b1:53:fd:21:93:67:8d:8e:e5:30:d6:c2:6a:95:38: a4:e0:b0:9a:f0:3f:33:bd:84:de:0a:db:49:e4:ba: 16:5e:f7:2d:fd:63:1f:bf:44:8c:b2:26:ae:82:90: 88:ef:4d:69:60:33:85:f0:83:50:90:23:ba:8d:08: fd:ee:5a:d9:cc:60:dc:52:16:f5:c6:af:54:58:1f: 80:8c:5c:b3:93:ea:ea:4b:ef:7e:83:c9:2b:be:54: 5a:bd:6c:40:c4:a3:2e:7a:91:1b:bb:0a:c0:d4:5a: 0f:69:73:cc:54:3a:c8:c3:1e:ac:b9:9a:16:77:c1: c8:e3:98:1b:39:fd:4e:52:46:85:85:3e:62:64:39: 9a:aa:7b:b4:18:ae:b6:76:75:c8:74:d3:04:37:23: c5:26:ab:e2:2a:9f:ea:04:30:05:5d:94:3e:54:99: 3c:f8:b6:5b:72:7f:79:01:36:c0:c6:b7:58:bd:ed: 67:d2:d1:99:2a:80:6e:51:4d:e1:09:90:b8:32:f3: 38:a7:b1:48:98:ad:16:63:12:dc:42:b4:33:9f:08: b4:63:45:8b:13:41:36:c0:20:c3:ca:7e:53:36:a8: 19:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B9:B7:29:0A:9A:D4:6B:2F:F6:53:95:BE:91:46:FC:08:CA:E6:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/c617dd1e-5cb7-35cd-a1b3-1f289b92805a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.crl X509v3 Authority Key Identifier: keyid:D4:74:AB:93:77:F0:FA:3C:14:E8:78:A8:8C:F7:C0:43:24:37:68:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer sbgp-ipAddrBlock: critical IPv4: 52.129.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:a0:1d:46:42:e8:46:87:bb:9f:9c:7a:30:31:d0:af:71:bc: 9b:bd:2e:18:aa:94:cc:a8:8d:52:4a:33:b3:10:75:c4:1b:f9: b6:3c:ed:dd:c0:42:e0:b9:0a:cd:41:10:67:ba:54:95:a9:92: 6c:c3:dc:52:e4:7e:86:59:10:49:02:fa:a9:3a:a1:75:56:c6: 71:44:23:ce:5c:e0:2a:12:c8:98:65:71:8c:c0:c6:77:82:a2: c6:8b:1c:61:68:95:f5:97:ce:03:5a:9f:a0:28:5c:40:71:aa: 58:85:6b:38:7d:1a:24:0c:53:07:c3:c0:66:98:44:bd:5a:dd: 36:cd:14:4f:ef:14:c0:dd:15:b3:f7:8f:a4:ef:9e:a7:54:d6: 58:90:f1:0d:5d:98:30:0d:39:3d:21:7d:81:3d:94:73:cf:ec: 1d:76:36:4b:89:3b:9f:b8:69:02:9d:07:72:3f:41:11:73:42: dd:53:ad:32:82:92:ac:ce:89:19:18:6b:94:5f:85:23:8a:9e: 70:94:4c:26:06:ed:6e:97:3f:a1:f8:27:27:14:8b:1f:21:49: 07:e2:96:96:97:c5:9a:a3:54:3f:0b:5d:6a:4f:b9:f3:4e:e0: 9c:46:31:c3:d6:b5:fa:c6:f1:9b:c3:ea:96:60:bb:7b:9a:bc: dc:61:32:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrNIArQu4WQDn+CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE5MDkzM2UtMjAwNS00YzMzLWFlM2YtNzQ0YjdiNzBl ZDdjMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MTdjYjUwMjMtMGNiZi00ZWM3LWFiYzMtOTc0MzViMmUxZDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9e4I5rkdOnyQVwcrCgta3K7l/9V4mByxNO9 VV6xU/0hk2eNjuUw1sJqlTik4LCa8D8zvYTeCttJ5LoWXvct/WMfv0SMsiaugpCI 701pYDOF8INQkCO6jQj97lrZzGDcUhb1xq9UWB+AjFyzk+rqS+9+g8krvlRavWxA xKMuepEbuwrA1FoPaXPMVDrIwx6suZoWd8HI45gbOf1OUkaFhT5iZDmaqnu0GK62 dnXIdNMENyPFJqviKp/qBDAFXZQ+VJk8+LZbcn95ATbAxrdYve1n0tGZKoBuUU3h CZC4MvM4p7FImK0WYxLcQrQznwi0Y0WLE0E2wCDDyn5TNqgZCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPS5tykKmtRrL/ZTlb6RRvwIyuaHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTkw OTMzZS0yMDA1LTRjMzMtYWUzZi03NDRiN2I3MGVkN2MvYzYxN2RkMWUtNWNiNy0z NWNkLWExYjMtMWYyODliOTI4MDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE5MDkzM2UtMjAwNS00YzMzLWFl M2YtNzQ0YjdiNzBlZDdjLzFhOTA5MzNlLTIwMDUtNGMzMy1hZTNmLTc0NGI3Yjcw ZWQ3Yy5jcmwwHwYDVR0jBBgwFoAU1HSrk3fw+jwU6HiojPfAQyQ3aOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTkwOTMzZS0yMDA1LTRjMzMtYWUzZi03NDRi N2I3MGVkN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIEiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKgHUZC6EaHu5+cejAx0K9xvJu9LhiqlMyojVJKM7MQdcQb+bY87d3A QuC5Cs1BEGe6VJWpkmzD3FLkfoZZEEkC+qk6oXVWxnFEI85c4CoSyJhlcYzAxneC osaLHGFolfWXzgNan6AoXEBxqliFazh9GiQMUwfDwGaYRL1a3TbNFE/vFMDdFbP3 j6TvnqdU1liQ8Q1dmDANOT0hfYE9lHPP7B12NkuJO5+4aQKdB3I/QRFzQt1TrTKC kqzOiRkYa5RfhSOKnnCUTCYG7W6XP6H4JycUix8hSQfilpaXxZqjVD8LXWpPufNO 4JxGMcPWtfrG8ZvD6pZgu3uavNxhMtY= -----END CERTIFICATE-----Generated at Tue Oct 21 01:59:10 2025 by rpki-client