$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/52d6fb63-d10e-3772-be72-745c1da323dc.roa File: 52d6fb63-d10e-3772-be72-745c1da323dc.roa (raw, json) Hash identifier: GnhCndzsnAPqdTTrpI/S9VT/zGWE+9K/RBMGuIQRFuk= Subject key identifier: 0E:76:51:DF:65:6F:D9:DE:1D:04:09:0B:44:24:44:8F:79:6C:84:67 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584B8BE217C4D22A0D4148F8A400 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/52d6fb63-d10e-3772-be72-745c1da323dc.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 33477 IP address blocks: 104.152.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:17:c4:d2:2a:0d:41:48:f8:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=152ea335-aabf-472a-b3ac-8aa6354e9990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b7:f6:24:fb:55:3d:d3:9a:32:42:c8:5b:63: ab:31:5d:68:b4:a0:3f:29:b2:92:6f:ac:d8:d4:9e: 18:3e:10:20:67:b6:da:85:50:9e:ee:2c:bd:66:e2: f9:0e:fe:b2:8c:da:2a:7d:af:dc:33:8e:fe:56:23: ac:32:fe:a9:63:30:44:db:31:a8:5c:a7:1b:8c:c1: ff:33:f7:79:7c:f0:68:df:fb:7c:9a:39:fa:d9:52: 77:06:54:07:44:14:a6:fc:5b:b2:35:cb:6d:d1:35: 26:78:47:96:06:f0:13:16:25:fe:4c:2f:ee:bd:a5: 4e:45:2d:5f:34:ec:8f:e8:47:e4:ec:70:e1:e4:9f: 8a:e7:08:8e:e6:4d:fe:e2:ba:af:01:19:b3:57:e6: 5f:ea:cc:36:e1:ab:7b:0a:05:12:34:8c:43:62:ef: 4f:bb:0a:80:f8:59:3f:ba:ea:fb:9a:67:d4:10:48: 8f:1d:ed:18:2f:b4:94:a2:a1:96:61:4b:1a:f2:35: 8b:59:2b:a2:0c:01:7c:b1:28:76:ea:a2:46:36:b4: 0e:cc:4b:95:f9:85:51:da:9e:22:a3:7b:0d:31:19: 38:c5:bd:a7:b4:01:6e:40:8c:a5:5e:37:92:8e:7f: 52:d7:1e:f0:a5:df:bf:dc:1c:94:1c:59:78:13:5b: 2f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:76:51:DF:65:6F:D9:DE:1D:04:09:0B:44:24:44:8F:79:6C:84:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/52d6fb63-d10e-3772-be72-745c1da323dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 104.152.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:ca:bc:8c:cd:80:3f:ae:5d:66:48:e2:e9:ad:55:6b:ff:df: c9:c0:6b:2b:b8:23:1e:99:09:2d:44:be:2d:8f:11:ab:55:99: 1f:a8:92:43:f4:4e:f7:b7:8c:10:2f:d6:2f:e0:4b:b5:1d:fe: 1e:be:97:42:47:c4:49:fa:33:21:8e:9d:4c:6e:1e:59:df:94: 93:11:2a:2c:e4:d5:db:2c:d7:06:dc:0a:78:61:e6:95:12:96: cd:ec:b0:ed:a2:e4:ba:62:1e:64:89:56:48:0a:bc:03:4c:9d: 52:70:76:1f:b7:78:c5:54:e2:94:fd:af:b5:15:5b:13:45:d8: a7:43:a3:a7:6c:d2:f4:08:48:70:4e:82:5f:5b:72:22:b0:1c: 2c:e4:ac:ef:a1:87:5b:9f:60:99:3d:02:8e:f5:55:26:1a:d5: 54:8c:f3:0c:83:d1:83:68:b0:7e:db:2d:5a:c0:95:56:62:f0: e4:02:cf:86:56:31:58:55:94:76:ff:88:4d:d2:2f:e2:e3:ec: c7:a0:57:96:e0:11:d3:91:d8:86:1e:f0:ce:39:36:ee:49:23: a5:c0:05:51:d7:e8:a0:2a:6f:5f:85:de:da:18:15:65:18:1c: 32:1b:11:0f:16:1a:52:5f:93:00:cd:aa:d1:11:5b:2a:67:0c: 3e:7b:4e:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4hfE0ioNQUj4pAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk MTUyZWEzMzUtYWFiZi00NzJhLWIzYWMtOGFhNjM1NGU5OTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLf2JPtVPdOaMkLIW2OrMV1otKA/KbKSb6zY 1J4YPhAgZ7bahVCe7iy9ZuL5Dv6yjNoqfa/cM47+ViOsMv6pYzBE2zGoXKcbjMH/ M/d5fPBo3/t8mjn62VJ3BlQHRBSm/FuyNctt0TUmeEeWBvATFiX+TC/uvaVORS1f NOyP6Efk7HDh5J+K5wiO5k3+4rqvARmzV+Zf6sw24at7CgUSNIxDYu9PuwqA+Fk/ uur7mmfUEEiPHe0YL7SUoqGWYUsa8jWLWSuiDAF8sSh26qJGNrQOzEuV+YVR2p4i o3sNMRk4xb2ntAFuQIylXjeSjn9S1x7wpd+/3ByUHFl4E1sv1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA52Ud9lb9neHQQJC0QkRI95bIRnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvNTJkNmZiNjMtZDEwZS0z NzcyLWJlNzItNzQ1YzFkYTMyM2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJjHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnKvIzNgD+uXWZI4umtVWv/38nAayu4Ix6ZCS1Evi2PEatVmR+okkP0 Tve3jBAv1i/gS7Ud/h6+l0JHxEn6MyGOnUxuHlnflJMRKizk1dss1wbcCnhh5pUS ls3ssO2i5LpiHmSJVkgKvANMnVJwdh+3eMVU4pT9r7UVWxNF2KdDo6ds0vQISHBO gl9bciKwHCzkrO+hh1ufYJk9Ao71VSYa1VSM8wyD0YNosH7bLVrAlVZi8OQCz4ZW MVhVlHb/iE3SL+Lj7MegV5bgEdOR2IYe8M45Nu5JI6XABVHX6KAqb1+F3toYFWUY HDIbEQ8WGlJfkwDNqtERWypnDD57TsA= -----END CERTIFICATE-----Generated at Tue Oct 21 00:12:25 2025 by rpki-client