$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f394d8bf-c6c7-3e6d-a234-5a1b0a258ee7.roa File: f394d8bf-c6c7-3e6d-a234-5a1b0a258ee7.roa (raw, json) Hash identifier: BVGVd7t38Myw8dOJCnu6ptj+7BnAqdrOXzpiB3B+/nQ= Subject key identifier: DD:CA:D0:23:5B:7E:11:E7:62:3A:5F:5B:DC:08:90:2E:FC:A3:83:4C Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434CA1802CD3BF495E42E200 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f394d8bf-c6c7-3e6d-a234-5a1b0a258ee7.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.52.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:a1:80:2c:d3:bf:49:5e:42:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=13a6fe05-04f1-43ea-842d-24f4271aeb63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:75:b5:c7:f4:f7:53:fd:04:0f:18:91:03:8d: 7f:4e:f7:63:f7:ce:cd:20:84:4c:8e:de:bf:13:f6: 73:3f:10:af:46:2a:c6:3b:f3:5e:9f:ec:f0:09:5b: 79:9d:c9:ed:41:57:ea:68:10:b0:a0:2b:f2:b6:b8: 93:97:89:9c:69:de:89:bc:bf:cc:00:16:2c:8d:2d: a9:b5:b9:18:fb:a3:30:10:5f:43:00:61:b3:1a:b0: 27:96:5f:a0:75:a0:e2:00:36:e9:98:77:00:32:d8: 63:8e:e0:f4:dd:11:86:42:a8:12:d2:87:4d:39:b1: cd:fd:98:a4:b2:67:a9:7b:ff:0c:c3:5d:15:09:94: 89:77:60:10:40:80:61:1f:13:e8:24:cb:9d:69:69: f6:1a:03:b7:2a:55:c5:f5:3d:b5:74:16:7f:21:ab: 44:95:99:ed:81:2b:f4:5c:34:9c:89:8b:13:c4:1c: 4b:1f:84:83:95:31:54:1b:73:e3:1e:df:13:74:2d: 3c:2a:9b:39:b5:3c:34:6c:7f:17:ce:9d:35:fd:18: 6b:c8:5f:ba:16:2a:1a:2f:63:ae:48:a8:95:e6:4b: d3:08:c3:ac:9b:03:bb:a1:69:66:26:42:b6:09:dd: cf:e9:d1:91:93:f5:d5:ac:b3:e4:04:74:bd:91:33: c4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:CA:D0:23:5B:7E:11:E7:62:3A:5F:5B:DC:08:90:2E:FC:A3:83:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f394d8bf-c6c7-3e6d-a234-5a1b0a258ee7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.52.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:1c:62:84:db:6b:d3:78:ff:b7:59:01:35:41:69:96:64:5c: 4c:f8:9d:73:2d:95:d0:d6:3c:34:66:e0:e4:c2:38:2c:59:9a: ed:f5:d6:a9:9a:76:84:30:5d:39:4b:2e:15:56:7a:b1:bd:09: 69:57:d5:f5:20:b9:f2:07:b5:24:fb:46:3d:a1:ac:30:e4:83: 4e:15:a2:c9:d6:f2:f6:38:cb:c1:d9:0a:75:a3:b4:c5:c0:27: 48:37:40:ec:97:72:f1:af:da:a2:2e:c5:79:66:11:c5:c7:c8: 1f:1c:ba:f8:71:00:f7:56:9f:3b:68:5d:67:c3:84:2e:f4:a4: 96:a8:99:ac:99:c6:ad:57:a9:ce:b6:70:02:2e:f8:01:44:53: 2f:2e:2f:f8:aa:da:3c:e2:e6:1a:d3:ee:5b:f1:0a:a8:c7:35: 98:ae:d5:d1:09:91:b6:18:f5:44:85:aa:98:12:8a:59:32:3f: d3:a6:34:ef:43:9d:d9:eb:7d:5d:20:53:6d:da:67:ab:c2:51: 04:ab:d7:4b:25:92:c0:fe:22:a2:1e:4f:dc:f9:c9:78:f9:dd: d9:dc:d7:ad:4a:16:2e:41:99:3a:70:0b:0a:0b:f2:24:2a:f8: 2e:a5:07:fe:e8:51:d4:42:a8:19:04:5a:31:25:ae:b0:5d:e4: 77:34:fb:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTKGALNO/SV5C4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MTNhNmZlMDUtMDRmMS00M2VhLTg0MmQtMjRmNDI3MWFlYjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHW1x/T3U/0EDxiRA41/Tvdj987NIIRMjt6/ E/ZzPxCvRirGO/Nen+zwCVt5ncntQVfqaBCwoCvytriTl4mcad6JvL/MABYsjS2p tbkY+6MwEF9DAGGzGrAnll+gdaDiADbpmHcAMthjjuD03RGGQqgS0odNObHN/Zik smepe/8Mw10VCZSJd2AQQIBhHxPoJMudaWn2GgO3KlXF9T21dBZ/IatElZntgSv0 XDSciYsTxBxLH4SDlTFUG3PjHt8TdC08Kps5tTw0bH8Xzp01/RhryF+6FioaL2Ou SKiV5kvTCMOsmwO7oWlmJkK2Cd3P6dGRk/XVrLPkBHS9kTPE3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3K0CNbfhHnYjpfW9wIkC78o4NMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZjM5NGQ4YmYtYzZjNy0z ZTZkLWEyMzQtNWExYjBhMjU4ZWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQcYoTba9N4/7dZATVBaZZkXEz4nXMtldDWPDRm4OTCOCxZmu311qma doQwXTlLLhVWerG9CWlX1fUgufIHtST7Rj2hrDDkg04VosnW8vY4y8HZCnWjtMXA J0g3QOyXcvGv2qIuxXlmEcXHyB8cuvhxAPdWnztoXWfDhC70pJaomayZxq1Xqc62 cAIu+AFEUy8uL/iq2jzi5hrT7lvxCqjHNZiu1dEJkbYY9USFqpgSilkyP9OmNO9D ndnrfV0gU23aZ6vCUQSr10slksD+IqIeT9z5yXj53dnc161KFi5BmTpwCwoL8iQq +C6lB/7oUdRCqBkEWjElrrBd5Hc0+9A= -----END CERTIFICATE-----Generated at Wed Oct 8 23:14:45 2025 by rpki-client