$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f0b78fce-a780-3f3e-a75f-086eabd8200e.roa File: f0b78fce-a780-3f3e-a75f-086eabd8200e.roa (raw, json) Hash identifier: pcBDlDt3FJYscRUtXv8R2YMsH1ACmlfi56kBi7uOtME= Subject key identifier: DC:0F:60:4C:DE:EB:AB:33:2F:09:1C:C8:8D:EE:01:FB:9B:44:57:AC Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C63C9B0B69304AF1925C0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f0b78fce-a780-3f3e-a75f-086eabd8200e.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.52.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:63:c9:b0:b6:93:04:af:19:25:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=0c5a72b6-0e59-4fb6-a578-9f8a4237e882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1c:91:8f:02:a5:a3:fa:b3:41:a8:65:f4:61: 25:3c:8b:4d:59:13:94:81:09:0a:91:a7:e1:dd:ff: 75:69:d2:ee:b1:7b:ef:0c:3a:00:8d:7b:ba:e9:3e: ea:9e:1c:b6:d1:ed:13:c7:76:73:1d:31:b8:84:fc: 05:d9:62:3f:9c:6b:d1:0e:9c:b4:d1:95:4b:5c:34: f2:38:7d:d1:42:55:cb:44:02:82:5e:74:72:cd:52: 41:f6:41:ea:3a:f6:fb:dd:d8:51:b0:96:83:20:ef: 9d:ab:76:b6:42:3a:c2:2e:9d:17:cb:8c:9b:8a:c0: cf:31:83:c8:cf:07:22:06:d1:44:d0:e3:8b:52:8a: 7f:84:1e:65:2e:25:73:3c:c2:1c:41:54:6d:bf:1c: 1c:52:55:0a:0c:f2:60:5d:04:b6:47:41:5c:c3:de: 47:cc:82:20:e5:2d:8e:fd:51:89:dd:08:4c:d9:6d: 22:cd:d6:db:62:24:b0:13:29:f8:2b:88:9c:5a:7b: 01:19:67:68:0b:a0:36:ea:57:d8:6f:96:6e:cb:6b: b4:df:f4:52:56:17:37:8b:04:de:cd:59:62:bf:7f: 3f:5b:4d:c1:fc:c8:be:16:ca:fa:e8:1f:0e:e6:1e: 99:c4:8a:7a:e7:26:27:9d:65:56:d7:83:86:b2:f0: 9c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:0F:60:4C:DE:EB:AB:33:2F:09:1C:C8:8D:EE:01:FB:9B:44:57:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f0b78fce-a780-3f3e-a75f-086eabd8200e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.52.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:58:c7:b1:c9:bc:a0:d1:29:2e:6e:66:6c:1a:3c:23:ab:1d: 2b:22:e5:3c:9f:2b:52:6d:4c:a5:70:9c:96:c0:1f:61:e4:95: c6:8e:e7:c7:55:bb:95:fd:5f:a1:67:65:d0:7d:2c:66:bc:f9: 18:d0:7c:4e:e3:8d:b0:ef:a6:ec:98:44:b3:d3:d9:8e:cc:7d: 38:29:bb:70:e2:e2:83:0f:ac:d9:28:15:08:bc:f5:71:51:3f: 5e:09:6b:8f:86:a5:94:04:15:1c:64:47:23:fe:f6:20:b7:bf: e3:76:b2:9d:3b:6e:26:78:ca:c3:86:e7:4b:96:5d:7e:69:56: c2:aa:e6:73:79:aa:b8:e6:fd:94:8b:ca:2b:bb:91:3c:90:2b: 15:62:21:9c:02:15:fa:6c:f2:75:9e:27:81:30:b6:16:5b:ec: 6b:e8:00:54:74:0c:f8:94:95:b7:32:85:8c:37:c3:4a:e1:df: 02:11:66:5b:78:ca:77:e7:15:43:61:ba:4e:95:5f:2d:3b:7a: cc:18:d3:03:e4:45:6e:4e:61:af:05:d8:08:fb:bc:88:46:02: 18:47:1b:e0:ba:e5:b2:0d:73:69:f3:99:29:9a:c5:1d:95:20: 45:4c:87:5f:46:38:f7:45:f2:9e:bc:0e:ed:c6:a7:8b:93:16: a4:87:a0:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTGPJsLaTBK8ZJcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MGM1YTcyYjYtMGU1OS00ZmI2LWE1NzgtOWY4YTQyMzdlODgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxyRjwKlo/qzQahl9GElPItNWROUgQkKkafh 3f91adLusXvvDDoAjXu66T7qnhy20e0Tx3ZzHTG4hPwF2WI/nGvRDpy00ZVLXDTy OH3RQlXLRAKCXnRyzVJB9kHqOvb73dhRsJaDIO+dq3a2QjrCLp0Xy4ybisDPMYPI zwciBtFE0OOLUop/hB5lLiVzPMIcQVRtvxwcUlUKDPJgXQS2R0Fcw95HzIIg5S2O /VGJ3QhM2W0izdbbYiSwEyn4K4icWnsBGWdoC6A26lfYb5Zuy2u03/RSVhc3iwTe zVliv38/W03B/Mi+Fsr66B8O5h6ZxIp65yYnnWVW14OGsvCcfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwPYEze66szLwkcyI3uAfubRFesMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZjBiNzhmY2UtYTc4MC0z ZjNlLWE3NWYtMDg2ZWFiZDgyMDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDRwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNYx7HJvKDRKS5uZmwaPCOrHSsi5TyfK1JtTKVwnJbAH2HklcaO58dV u5X9X6FnZdB9LGa8+RjQfE7jjbDvpuyYRLPT2Y7MfTgpu3Di4oMPrNkoFQi89XFR P14Ja4+GpZQEFRxkRyP+9iC3v+N2sp07biZ4ysOG50uWXX5pVsKq5nN5qrjm/ZSL yiu7kTyQKxViIZwCFfps8nWeJ4EwthZb7GvoAFR0DPiUlbcyhYw3w0rh3wIRZlt4 ynfnFUNhuk6VXy07eswY0wPkRW5OYa8F2Aj7vIhGAhhHG+C65bINc2nzmSmaxR2V IEVMh19GOPdF8p68Du3Gp4uTFqSHoEU= -----END CERTIFICATE-----Generated at Wed Oct 8 21:14:53 2025 by rpki-client