$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9de09370-0ac5-3177-bed9-24bddb949aa3.roa File: 9de09370-0ac5-3177-bed9-24bddb949aa3.roa (raw, json) Hash identifier: +qzAnwor0GzRa9aYbJ9Pu1lDOsm2wRd4rcRcnozjgeo= Subject key identifier: CA:B9:0B:D7:61:28:9E:75:9A:CE:AC:A6:A5:B7:D5:C4:A3:3C:A2:98 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C471DAADDA5F2052B4400 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9de09370-0ac5-3177-bed9-24bddb949aa3.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.52.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:47:1d:aa:dd:a5:f2:05:2b:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=fb1cd0cd-b5bb-4cc7-bfdd-af9667c21d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5e:55:64:80:80:5d:f4:5a:ac:1b:1a:db:b8: 91:ef:a9:3c:2e:6c:cd:b3:47:a4:e4:0b:74:d2:ca: 4c:34:6c:0c:77:cf:71:8b:f5:d8:e9:ff:b4:09:9d: 92:90:60:90:16:fc:75:fb:1d:53:90:0f:9d:6e:ea: eb:4d:26:2a:e3:1e:24:99:7b:53:20:5f:a3:2b:62: 5e:1c:e7:5a:47:e6:47:29:2c:bf:2f:d1:72:70:88: 1d:cf:f7:6c:8f:1e:0a:2d:af:48:f5:25:86:e7:2f: 9d:39:46:97:00:2a:63:7a:91:db:d2:37:4f:3a:fd: 6b:07:a2:b7:36:d6:ca:11:c4:50:2a:0b:98:19:72: 6e:be:22:27:d0:54:1b:19:9a:3e:6b:ea:37:c6:a8: 08:64:09:7f:f1:2a:4d:50:16:13:cf:cd:f8:ff:82: 92:28:12:57:90:60:d2:a5:3b:14:63:fd:0d:43:15: 2b:ab:3a:3c:c1:59:0c:86:64:76:93:6f:c9:ba:c7: 4b:11:e9:93:aa:30:49:44:b2:e1:59:30:db:3b:5d: 2d:72:a9:20:89:d3:52:04:8d:90:de:23:aa:e0:b2: 71:05:92:83:bb:a9:6f:d1:65:b2:a1:24:9f:08:62: b9:9c:2a:fc:1c:a6:9d:e1:25:a0:19:47:ad:5c:2d: 4e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B9:0B:D7:61:28:9E:75:9A:CE:AC:A6:A5:B7:D5:C4:A3:3C:A2:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9de09370-0ac5-3177-bed9-24bddb949aa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.52.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:a1:33:0a:ef:15:43:4a:14:6e:de:01:c6:2c:a7:4d:0b:12: bb:bd:15:d5:43:79:0f:0b:e6:18:5a:60:16:71:06:e5:a4:8b: 98:9f:e2:8a:78:04:1a:cf:df:41:0a:a1:68:5a:dd:10:b8:80: fb:3d:14:0e:34:69:d6:c5:a8:43:ce:7a:82:12:5e:b0:ee:e2: b0:a4:27:5f:1b:d1:79:0a:d2:28:ee:64:47:d0:26:bd:11:38: 09:57:6b:cc:c2:d2:7d:d0:cc:d3:b1:81:75:34:1d:44:54:62: af:1e:7b:30:f5:ce:84:42:36:74:bd:dc:55:72:49:2f:ce:af: 10:55:b7:36:d5:36:39:b1:bb:1e:f7:ef:9a:5c:54:c6:8d:86: 4c:cc:9f:27:f7:8d:a2:e2:ed:da:27:8c:f4:1e:61:0e:6c:7b: 65:6e:bb:aa:b9:ae:79:78:fa:09:42:b8:6d:bd:96:4e:21:4a: b3:a7:c3:59:87:ef:51:3f:b4:92:c1:f2:a5:55:29:01:eb:a3: 24:2b:ea:6e:26:ad:9e:26:46:28:ee:e6:74:31:bc:a0:fe:99: 44:1e:94:1d:7f:a5:88:f3:d4:b4:b0:a7:dc:a4:0f:30:5a:c9: ed:f4:d7:f0:4f:4d:c4:da:41:b5:db:ef:40:2c:9d:1d:04:0a: b6:bb:21:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTEcdqt2l8gUrRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk ZmIxY2QwY2QtYjViYi00Y2M3LWJmZGQtYWY5NjY3YzIxZDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhV5VZICAXfRarBsa27iR76k8LmzNs0ek5At0 0spMNGwMd89xi/XY6f+0CZ2SkGCQFvx1+x1TkA+dburrTSYq4x4kmXtTIF+jK2Je HOdaR+ZHKSy/L9FycIgdz/dsjx4KLa9I9SWG5y+dOUaXACpjepHb0jdPOv1rB6K3 NtbKEcRQKguYGXJuviIn0FQbGZo+a+o3xqgIZAl/8SpNUBYTz834/4KSKBJXkGDS pTsUY/0NQxUrqzo8wVkMhmR2k2/JusdLEemTqjBJRLLhWTDbO10tcqkgidNSBI2Q 3iOq4LJxBZKDu6lv0WWyoSSfCGK5nCr8HKad4SWgGUetXC1O8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMq5C9dhKJ51ms6spqW31cSjPKKYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvOWRlMDkzNzAtMGFjNS0z MTc3LWJlZDktMjRiZGRiOTQ5YWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACChMwrvFUNKFG7eAcYsp00LEru9FdVDeQ8L5hhaYBZxBuWki5if4op4 BBrP30EKoWha3RC4gPs9FA40adbFqEPOeoISXrDu4rCkJ18b0XkK0ijuZEfQJr0R OAlXa8zC0n3QzNOxgXU0HURUYq8eezD1zoRCNnS93FVySS/OrxBVtzbVNjmxux73 75pcVMaNhkzMnyf3jaLi7donjPQeYQ5se2Vuu6q5rnl4+glCuG29lk4hSrOnw1mH 71E/tJLB8qVVKQHroyQr6m4mrZ4mRiju5nQxvKD+mUQelB1/pYjz1LSwp9ykDzBa ye301/BPTcTaQbXb70AsnR0ECra7IXw= -----END CERTIFICATE-----Generated at Wed Oct 8 21:17:02 2025 by rpki-client