$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/d7af2784-e0b4-3602-b904-7421484b5dad.roa File: d7af2784-e0b4-3602-b904-7421484b5dad.roa (raw, json) Hash identifier: 2SdKFYTdc9jw4MjWQm87ul4LMRajtgu9jWfncxdRsgI= Subject key identifier: A5:25:F2:A3:24:A3:D2:8C:6C:54:B0:BA:5A:A1:3E:98:D1:BF:7C:B4 Certificate issuer: /CN=1a90933e-2005-4c33-ae3f-744b7b70ed7c Certificate serial: 010D0C9F4328584B8EACD274AEED61C99E94F400 Authority key identifier: D4:74:AB:93:77:F0:FA:3C:14:E8:78:A8:8C:F7:C0:43:24:37:68:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/d7af2784-e0b4-3602-b904-7421484b5dad.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 394667 IP address blocks: 52.129.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:d2:74:ae:ed:61:c9:9e:94:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a90933e-2005-4c33-ae3f-744b7b70ed7c Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=955f3351-71e8-4de3-a4cc-bc8aa69a4023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:09:18:7c:2c:ec:09:9c:1e:51:29:65:e1:c4: f3:21:50:29:c2:b2:c9:fb:b7:2a:d8:94:b4:c3:cd: 53:94:34:f6:df:e8:6a:f2:92:6b:7e:44:8f:6f:de: 6d:5d:7d:8c:d7:26:c6:62:71:21:c6:21:8e:64:05: a6:00:ca:ac:ab:ec:9b:69:fc:dd:47:46:a8:4c:cf: 43:1a:90:59:95:30:18:de:fe:c2:5a:76:cc:b1:78: a2:4e:26:a6:e6:20:f2:aa:8d:4a:1c:4e:66:78:24: 93:76:47:b6:a2:5d:6b:39:f7:48:bb:56:85:6d:9b: 7a:b8:bd:e5:7e:1f:63:de:46:b0:95:73:89:e4:04: 6f:08:68:85:99:8d:d1:15:fd:41:4c:04:92:d4:16: e2:a9:d9:0c:dc:41:a1:00:fe:38:3b:e6:1c:14:83: 2b:d0:c2:bc:bf:99:be:48:5d:29:6e:cf:a3:2d:22: 71:c2:6e:b7:ce:6f:e5:93:7c:d2:4d:f6:e3:a6:8f: bc:fb:d8:c9:18:bb:e3:43:45:ba:b0:f6:48:41:ec: 63:21:69:59:0c:f3:c8:cc:4f:4e:8c:6e:64:aa:bf: 90:0c:eb:c8:10:69:a7:54:0f:0d:9d:3e:bb:50:df: b3:d8:32:c4:25:7f:55:f8:8b:49:47:7e:a5:f0:1d: b5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:25:F2:A3:24:A3:D2:8C:6C:54:B0:BA:5A:A1:3E:98:D1:BF:7C:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/d7af2784-e0b4-3602-b904-7421484b5dad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c/1a90933e-2005-4c33-ae3f-744b7b70ed7c.crl X509v3 Authority Key Identifier: keyid:D4:74:AB:93:77:F0:FA:3C:14:E8:78:A8:8C:F7:C0:43:24:37:68:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a90933e-2005-4c33-ae3f-744b7b70ed7c.cer sbgp-ipAddrBlock: critical IPv4: 52.129.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:0d:43:18:16:7f:69:1c:c1:44:ce:6e:20:ac:7b:7d:3d:05: b0:24:36:1a:1b:9d:1c:01:ba:79:8c:e3:92:52:60:04:dc:33: f6:e3:5a:a6:85:8c:01:c6:01:c4:ed:6e:4c:f0:89:77:fe:d1: 32:15:de:d8:dd:f5:a1:35:3c:65:cc:65:86:35:53:09:7b:bf: 95:4d:53:b5:88:86:7a:35:3a:ea:f5:ab:86:83:9e:29:a0:fc: 57:76:b6:49:c9:bc:4e:f3:41:6d:c6:94:1e:07:64:0f:96:b9: d0:5e:d8:24:81:60:f9:d5:2c:c5:86:70:9c:c0:8a:36:16:c8: fa:60:ed:64:d7:1a:65:80:8e:25:cb:95:29:b1:ab:ea:cc:10: 5e:c6:7a:e0:28:b0:0d:c8:54:46:56:81:a3:7b:e2:fd:78:53: 5c:6c:28:a2:73:10:e7:e7:10:eb:16:05:34:22:ea:11:e1:9f: 99:db:f9:5f:9a:a1:80:f0:55:f9:af:4b:a1:e2:bd:f9:3b:5d: 25:29:e5:b1:77:b6:30:f7:95:cc:f3:6e:4b:76:7e:c5:aa:24: ec:f0:50:af:c0:bd:44:21:d7:ed:19:9b:32:3f:b6:1c:bc:c8: da:ca:54:41:f8:6a:4f:4b:6d:de:a9:23:c4:63:e7:1f:5b:ed: 3a:2c:b9:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrNJ0ru1hyZ6U9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE5MDkzM2UtMjAwNS00YzMzLWFlM2YtNzQ0YjdiNzBl ZDdjMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk OTU1ZjMzNTEtNzFlOC00ZGUzLWE0Y2MtYmM4YWE2OWE0MDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgkYfCzsCZweUSll4cTzIVApwrLJ+7cq2JS0 w81TlDT23+hq8pJrfkSPb95tXX2M1ybGYnEhxiGOZAWmAMqsq+ybafzdR0aoTM9D GpBZlTAY3v7CWnbMsXiiTiam5iDyqo1KHE5meCSTdke2ol1rOfdIu1aFbZt6uL3l fh9j3kawlXOJ5ARvCGiFmY3RFf1BTASS1BbiqdkM3EGhAP44O+YcFIMr0MK8v5m+ SF0pbs+jLSJxwm63zm/lk3zSTfbjpo+8+9jJGLvjQ0W6sPZIQexjIWlZDPPIzE9O jG5kqr+QDOvIEGmnVA8NnT67UN+z2DLEJX9V+ItJR36l8B21eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUl8qMko9KMbFSwulqhPpjRv3y0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTkw OTMzZS0yMDA1LTRjMzMtYWUzZi03NDRiN2I3MGVkN2MvZDdhZjI3ODQtZTBiNC0z NjAyLWI5MDQtNzQyMTQ4NGI1ZGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE5MDkzM2UtMjAwNS00YzMzLWFl M2YtNzQ0YjdiNzBlZDdjLzFhOTA5MzNlLTIwMDUtNGMzMy1hZTNmLTc0NGI3Yjcw ZWQ3Yy5jcmwwHwYDVR0jBBgwFoAU1HSrk3fw+jwU6HiojPfAQyQ3aOkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTkwOTMzZS0yMDA1LTRjMzMtYWUzZi03NDRi N2I3MGVkN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQANIEiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcNQxgWf2kcwUTObiCse309BbAkNhobnRwBunmM45JSYATcM/bjWqaF jAHGAcTtbkzwiXf+0TIV3tjd9aE1PGXMZYY1Uwl7v5VNU7WIhno1Our1q4aDnimg /Fd2tknJvE7zQW3GlB4HZA+WudBe2CSBYPnVLMWGcJzAijYWyPpg7WTXGmWAjiXL lSmxq+rMEF7GeuAosA3IVEZWgaN74v14U1xsKKJzEOfnEOsWBTQi6hHhn5nb+V+a oYDwVfmvS6Hivfk7XSUp5bF3tjD3lczzbkt2fsWqJOzwUK/AvUQh1+0ZmzI/thy8 yNrKVEH4ak9Lbd6pI8Rj5x9b7TosucM= -----END CERTIFICATE-----Generated at Mon Oct 20 11:20:43 2025 by rpki-client