$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ff8a5292-9f03-3043-b5f9-5a988e4eab8c.roa File: ff8a5292-9f03-3043-b5f9-5a988e4eab8c.roa (raw, json) Hash identifier: wxWpoA6LvCXvc+Kp9bh2xBjmBlho0URfF8uvPyzfMrU= Subject key identifier: 60:DB:48:2D:18:9C:B3:11:D3:54:16:EC:6B:48:F1:39:39:53:04:48 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C53432A8839ECA3CFBD00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ff8a5292-9f03-3043-b5f9-5a988e4eab8c.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.52.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:53:43:2a:88:39:ec:a3:cf:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=77a7507b-63c6-42a7-8bb3-e49da3f49920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c9:dd:29:28:03:a8:51:71:77:ff:0b:d3:81: 82:13:40:e4:d9:8a:ba:30:46:90:04:7b:db:94:6b: 8c:98:2f:30:19:32:bb:6a:e9:b4:b4:f9:31:b1:8d: 1f:6e:0a:13:7f:00:93:b6:f1:dc:7e:60:86:e6:8d: 20:9d:b4:fa:ee:6c:d7:1a:cb:06:84:82:a3:cf:a0: 80:37:98:ac:2b:4d:68:d6:6d:9a:31:da:74:b7:5c: 8c:ac:97:6d:95:27:38:6b:df:d6:a8:09:c8:e1:d0: 83:df:bf:33:9f:b6:a8:b0:57:48:d8:fb:62:89:8c: c0:00:a8:27:1d:33:32:21:97:0b:16:c6:22:34:98: 4d:b6:e9:30:32:17:80:5e:fa:96:09:18:67:8e:af: 08:8c:e3:86:0e:76:4d:c3:db:9a:0b:9f:d7:b6:18: fd:a6:36:fa:e2:cf:f3:c2:67:37:37:3f:15:54:cb: e8:4a:45:5f:2c:37:26:34:54:2b:2b:96:76:e9:7a: eb:7e:b1:5a:05:76:c5:1d:3c:20:b9:75:6c:6c:5d: 32:af:d2:78:96:4b:06:9f:1a:3d:82:fb:8e:27:62: 36:13:fd:d7:f0:95:59:62:45:ea:e1:f6:5a:b0:24: ae:d0:d3:78:f5:e1:e3:e6:cd:c3:b2:f8:0e:54:65: 69:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:DB:48:2D:18:9C:B3:11:D3:54:16:EC:6B:48:F1:39:39:53:04:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ff8a5292-9f03-3043-b5f9-5a988e4eab8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.52.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:81:fa:fc:91:ca:0b:42:1a:fe:5f:a5:3b:53:1a:c9:a0:51: 79:6a:9b:57:ab:32:c2:3d:4c:84:50:3c:76:ff:ca:a0:d9:d3: 6f:f0:d3:d3:8d:4f:47:ef:9d:d5:cc:67:a1:b7:34:c5:eb:e8: 45:e5:cc:36:0a:a2:6d:d3:59:9f:cd:70:35:28:88:b3:83:a6: aa:65:5b:de:5d:6d:e5:79:3c:8f:6b:d7:b8:76:a3:5f:d8:21: 06:11:71:46:51:af:dd:10:0d:1a:08:30:8c:16:c9:78:ac:2c: a6:e2:50:7d:e6:d3:8b:c1:24:c3:f0:a9:91:54:0d:2e:c1:89: 0a:36:38:c0:1e:11:04:d8:ce:c4:3c:5a:20:0b:5c:cc:5c:bd: 3f:5b:fe:ef:66:af:b3:4d:99:72:30:7f:c6:1a:dd:2d:45:2f: 4c:53:d8:63:59:d0:60:7f:9b:c4:19:5e:77:20:10:35:6e:94: 90:7e:f8:af:f8:99:5a:fb:ee:52:80:fb:9b:51:d7:64:5c:f0: fa:cf:77:0c:5f:62:76:fa:13:57:56:93:8d:13:0c:c7:24:f7: 47:5f:cf:94:40:58:c3:aa:86:1e:65:9f:91:69:56:8f:b1:34: 15:7d:a0:a6:88:ef:97:71:56:86:a0:12:b1:2d:e6:47:9e:9a: 9e:e0:ca:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTFNDKog57KPPvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk NzdhNzUwN2ItNjNjNi00MmE3LThiYjMtZTQ5ZGEzZjQ5OTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8ndKSgDqFFxd/8L04GCE0Dk2Yq6MEaQBHvb lGuMmC8wGTK7aum0tPkxsY0fbgoTfwCTtvHcfmCG5o0gnbT67mzXGssGhIKjz6CA N5isK01o1m2aMdp0t1yMrJdtlSc4a9/WqAnI4dCD378zn7aosFdI2PtiiYzAAKgn HTMyIZcLFsYiNJhNtukwMheAXvqWCRhnjq8IjOOGDnZNw9uaC5/Xthj9pjb64s/z wmc3Nz8VVMvoSkVfLDcmNFQrK5Z26XrrfrFaBXbFHTwguXVsbF0yr9J4lksGnxo9 gvuOJ2I2E/3X8JVZYkXq4fZasCSu0NN49eHj5s3DsvgOVGVpFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDbSC0YnLMR01QW7GtI8Tk5UwRIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZmY4YTUyOTItOWYwMy0z MDQzLWI1ZjktNWE5ODhlNGVhYjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKB+vyRygtCGv5fpTtTGsmgUXlqm1erMsI9TIRQPHb/yqDZ02/w09ON T0fvndXMZ6G3NMXr6EXlzDYKom3TWZ/NcDUoiLODpqplW95dbeV5PI9r17h2o1/Y IQYRcUZRr90QDRoIMIwWyXisLKbiUH3m04vBJMPwqZFUDS7BiQo2OMAeEQTYzsQ8 WiALXMxcvT9b/u9mr7NNmXIwf8Ya3S1FL0xT2GNZ0GB/m8QZXncgEDVulJB++K/4 mVr77lKA+5tR12Rc8PrPdwxfYnb6E1dWk40TDMck90dfz5RAWMOqhh5ln5FpVo+x NBV9oKaI75dxVoagErEt5keemp7gyk0= -----END CERTIFICATE-----Generated at Wed Oct 8 23:14:45 2025 by rpki-client