$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1c3859cd-a379-3805-b0c7-cf92685a3438.roa File: 1c3859cd-a379-3805-b0c7-cf92685a3438.roa (raw, json) Hash identifier: 8WTKXZr2hxYG6OnxrzndavOmx17vWD8TdqSgg+m4I0Q= Subject key identifier: 8F:18:9E:40:5E:B4:18:B1:D6:AF:13:F4:8D:B8:09:A1:94:1E:A2:6C Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434CA12F5A334A113D5AFE00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1c3859cd-a379-3805-b0c7-cf92685a3438.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.52.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:a1:2f:5a:33:4a:11:3d:5a:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=6f1f9961-c8b8-4bff-a51f-c65e45be2019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2a:30:eb:02:3c:df:c5:6a:05:7d:9a:d2:dc: e4:ef:76:1a:9d:07:8e:16:db:48:2e:9c:2a:2d:54: a0:ad:28:4b:9a:7f:44:ca:50:f3:f4:17:98:d8:cf: 24:e1:8d:89:ad:53:33:7e:94:53:1d:57:bd:4b:1b: 2f:d5:2f:d0:5f:a4:bd:9d:46:a2:cc:f4:40:5e:92: cc:77:b0:ad:2c:a4:4c:af:d5:38:d4:41:e3:8a:97: 83:85:6c:53:4e:cb:8b:e5:81:2d:78:8d:83:10:12: b3:91:31:2d:91:8e:f0:09:11:0c:bd:8d:31:2c:81: 6e:39:4e:87:5f:2f:ff:54:45:b1:5d:1b:c8:80:5c: f2:30:0b:d1:46:83:4b:a0:85:34:da:45:6f:4e:07: 29:75:a6:87:07:17:94:ff:7c:44:26:c7:50:7b:35: ce:be:47:dd:b2:c7:ac:bd:c4:af:50:5f:ac:b8:81: c3:54:01:c6:f7:57:b8:4f:6b:66:51:0b:f8:dc:ae: d4:5b:e8:37:2d:cb:98:15:62:a1:b7:0c:cb:1e:69: 33:11:c6:eb:b7:ea:dc:13:41:6f:bb:db:b1:b7:38: 74:4e:f7:ef:ca:88:d7:9f:59:ac:e7:c0:a6:66:1e: a5:4e:85:57:71:ea:b3:70:e4:fb:fc:e9:47:57:f1: 9a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:18:9E:40:5E:B4:18:B1:D6:AF:13:F4:8D:B8:09:A1:94:1E:A2:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1c3859cd-a379-3805-b0c7-cf92685a3438.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.52.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:bb:ad:bf:57:e3:b0:90:11:66:e7:51:f6:08:79:4f:6b:c2: 1f:83:d0:4a:6b:9b:91:99:72:f5:59:87:0e:86:95:a0:da:50: 9b:4e:97:db:5c:8b:23:d4:89:d8:38:d3:a3:f7:67:42:4b:a9: 52:6e:dd:f8:77:9f:a2:c7:a5:fd:10:62:52:75:ba:f9:af:ac: 45:54:0b:54:9c:4e:76:a4:16:8b:c6:c9:12:14:68:e3:7d:97: 52:5c:ac:fa:da:d1:18:fe:d2:13:c9:73:c6:e9:ff:c4:f9:7c: 3c:23:01:2b:09:82:ba:05:86:94:0d:cb:0d:80:fd:0f:3c:20: 97:3f:e2:c4:69:51:8b:bb:aa:cd:2c:2e:2b:9e:fe:c1:8c:ae: fb:13:57:b3:c0:51:b1:0e:43:cd:80:f7:8a:23:01:ed:58:ac: 29:53:af:7a:47:fc:86:b0:19:cf:b1:55:ed:bd:27:a8:91:c8: 0e:c7:18:19:27:d4:a8:af:2f:ff:e1:5a:6e:94:56:2f:71:cf: 07:49:43:27:ca:3c:1e:80:25:84:37:47:39:66:5c:6b:ee:04: 21:a1:52:e5:89:50:7d:a1:01:33:2a:de:6f:28:6a:57:21:99: 98:10:85:9b:4b:5a:a9:c8:55:f6:6a:0f:75:c2:21:1e:be:34: 10:5d:0c:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTKEvWjNKET1a/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk NmYxZjk5NjEtYzhiOC00YmZmLWE1MWYtYzY1ZTQ1YmUyMDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Cow6wI838VqBX2a0tzk73YanQeOFttILpwq LVSgrShLmn9EylDz9BeY2M8k4Y2JrVMzfpRTHVe9Sxsv1S/QX6S9nUaizPRAXpLM d7CtLKRMr9U41EHjipeDhWxTTsuL5YEteI2DEBKzkTEtkY7wCREMvY0xLIFuOU6H Xy//VEWxXRvIgFzyMAvRRoNLoIU02kVvTgcpdaaHBxeU/3xEJsdQezXOvkfdsses vcSvUF+suIHDVAHG91e4T2tmUQv43K7UW+g3LcuYFWKhtwzLHmkzEcbrt+rcE0Fv u9uxtzh0TvfvyojXn1ms58CmZh6lToVXceqzcOT7/OlHV/GaaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8YnkBetBix1q8T9I24CaGUHqJsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMWMzODU5Y2QtYTM3OS0z ODA1LWIwYzctY2Y5MjY4NWEzNDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAW7rb9X47CQEWbnUfYIeU9rwh+D0Eprm5GZcvVZhw6GlaDaUJtOl9tc iyPUidg406P3Z0JLqVJu3fh3n6LHpf0QYlJ1uvmvrEVUC1ScTnakFovGyRIUaON9 l1JcrPra0Rj+0hPJc8bp/8T5fDwjASsJgroFhpQNyw2A/Q88IJc/4sRpUYu7qs0s Liue/sGMrvsTV7PAUbEOQ82A94ojAe1YrClTr3pH/IawGc+xVe29J6iRyA7HGBkn 1KivL//hWm6UVi9xzwdJQyfKPB6AJYQ3RzlmXGvuBCGhUuWJUH2hATMq3m8oalch mZgQhZtLWqnIVfZqD3XCIR6+NBBdDLg= -----END CERTIFICATE-----Generated at Wed Oct 8 21:14:47 2025 by rpki-client