$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6670bff5-6620-3e34-b318-bedb1d01093f.roa File: 6670bff5-6620-3e34-b318-bedb1d01093f.roa (raw, json) Hash identifier: QigEAABZ3ocJqMQf3V5CZBpYpatmMCxowO4lDvJqXig= Subject key identifier: BA:53:B5:02:36:E3:E9:23:C8:8E:1F:69:64:A6:6D:A8:AD:53:90:B1 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C9CB4441E991FA2E03C60 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6670bff5-6620-3e34-b318-bedb1d01093f.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.52.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:9c:b4:44:1e:99:1f:a2:e0:3c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=c0c63838-03d6-4701-b6a2-a8dcaaa65228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:60:dd:25:f2:ee:f0:e9:f6:e0:96:74:5b:f8: 1c:5a:9c:89:c2:0b:79:ce:f3:41:75:ba:79:48:c9: b7:e3:e2:e3:62:45:ee:36:b7:85:9b:8f:fc:19:ed: e6:96:65:b8:7d:cc:c0:57:71:e7:32:16:ef:da:e7: 12:4d:aa:19:8c:46:26:25:51:27:0e:0b:95:7f:c1: f0:01:92:34:d2:d2:5d:4a:f8:21:aa:92:e5:cd:8e: 2b:cf:b4:cf:14:db:02:66:c1:cb:7c:aa:81:6d:4b: 43:6f:ca:6f:67:49:4d:b3:f1:ff:62:9e:9f:e3:1f: 69:56:2c:a8:62:99:82:00:26:84:04:0d:58:75:fa: ad:ec:44:57:52:e3:ee:0d:63:48:1d:d5:d5:fd:58: d4:94:d3:70:41:55:61:cc:65:e3:5d:c3:f7:83:2b: a3:59:ef:0c:75:c2:29:ef:a7:66:31:14:25:02:1d: 1c:f4:04:ae:2e:2d:86:1a:26:00:52:9a:e2:3c:cc: 1c:3c:30:4f:47:75:c0:64:58:bd:1a:ad:89:37:1f: 83:20:fb:39:66:56:25:8a:7d:38:66:e0:ec:85:c5: f2:85:0a:2a:b6:e4:1c:e1:96:f1:a9:78:e3:9c:9f: 27:25:3d:1f:d3:58:d2:ed:68:d2:c0:f8:f8:a7:ed: 31:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:53:B5:02:36:E3:E9:23:C8:8E:1F:69:64:A6:6D:A8:AD:53:90:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6670bff5-6620-3e34-b318-bedb1d01093f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.52.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:48:ca:b3:84:d0:af:92:73:ad:df:a8:3d:07:8e:d6:b9:f5: dc:c6:9a:bf:53:e8:4e:22:1a:09:c8:cf:78:c8:f9:40:d6:cc: aa:86:44:90:ad:8d:a0:99:8c:93:83:62:ff:82:61:4a:ab:2c: 2d:e0:15:94:ef:65:db:c9:82:08:96:a7:c3:c3:c5:c5:0f:18: 18:8f:a7:ab:d5:28:99:e8:a1:64:c5:2e:18:94:ea:06:19:ea: d2:fe:28:c7:f1:31:cb:e4:dd:40:09:c2:9b:d8:fe:f8:6e:41: 6d:77:a3:bb:a9:83:2d:0d:aa:0d:c4:9b:ff:23:dd:17:e9:1c: d1:37:6a:a0:fd:98:35:d8:9b:d7:8c:b3:99:02:5c:ba:2e:2f: 5e:0c:f7:70:77:a8:ff:5e:70:dc:30:52:71:89:c2:29:57:4f: 32:bb:30:a5:7f:72:c5:93:76:a1:75:c8:65:6f:99:07:b8:00: e8:77:5b:d5:1b:5b:2c:c6:6e:8b:6e:93:c3:33:63:e2:2f:90: 52:67:43:0d:2c:49:22:48:21:fd:0a:b6:ec:3d:6f:e9:3f:c9: c6:6c:6f:c2:d9:cf:7a:39:46:2d:28:98:c6:c1:a1:7c:fa:e4: d1:6e:ef:b0:a5:6d:1f:fd:7a:68:9e:27:d0:51:67:79:52:17: 62:d1:2e:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTJy0RB6ZH6LgPGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk YzBjNjM4MzgtMDNkNi00NzAxLWI2YTItYThkY2FhYTY1MjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmDdJfLu8On24JZ0W/gcWpyJwgt5zvNBdbp5 SMm34+LjYkXuNreFm4/8Ge3mlmW4fczAV3HnMhbv2ucSTaoZjEYmJVEnDguVf8Hw AZI00tJdSvghqpLlzY4rz7TPFNsCZsHLfKqBbUtDb8pvZ0lNs/H/Yp6f4x9pViyo YpmCACaEBA1Ydfqt7ERXUuPuDWNIHdXV/VjUlNNwQVVhzGXjXcP3gyujWe8MdcIp 76dmMRQlAh0c9ASuLi2GGiYAUpriPMwcPDBPR3XAZFi9Gq2JNx+DIPs5ZlYlin04 ZuDshcXyhQoqtuQc4ZbxqXjjnJ8nJT0f01jS7WjSwPj4p+0xUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpTtQI24+kjyI4faWSmbaitU5CxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNjY3MGJmZjUtNjYyMC0z ZTM0LWIzMTgtYmVkYjFkMDEwOTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpIyrOE0K+Sc63fqD0Hjta59dzGmr9T6E4iGgnIz3jI+UDWzKqGRJCt jaCZjJODYv+CYUqrLC3gFZTvZdvJggiWp8PDxcUPGBiPp6vVKJnooWTFLhiU6gYZ 6tL+KMfxMcvk3UAJwpvY/vhuQW13o7upgy0Nqg3Em/8j3RfpHNE3aqD9mDXYm9eM s5kCXLouL14M93B3qP9ecNwwUnGJwilXTzK7MKV/csWTdqF1yGVvmQe4AOh3W9Ub WyzGbotuk8MzY+IvkFJnQw0sSSJIIf0Ktuw9b+k/ycZsb8LZz3o5Ri0omMbBoXz6 5NFu77ClbR/9emieJ9BRZ3lSF2LRLso= -----END CERTIFICATE-----Generated at Wed Oct 8 21:17:02 2025 by rpki-client