$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/3aa15edc-b7c6-318d-9de6-46d235ff9320.roa File: 3aa15edc-b7c6-318d-9de6-46d235ff9320.roa (raw, json) Hash identifier: 6w2EXWD0rlLlI1G3IAw0qVMUUg2dqafRcKONMbCgE5Y= Subject key identifier: 55:23:3C:EA:F5:9F:91:BC:58:08:64:95:A1:0F:C8:DF:18:A7:35:5C Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F4328584B8EACDD7E1D8962C81640F5C0 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/3aa15edc-b7c6-318d-9de6-46d235ff9320.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 13325 IP address blocks: 136.181.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:dd:7e:1d:89:62:c8:16:40:f5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=bf1bf5f0-0160-4755-b065-40ef640712be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1f:14:38:f6:c6:34:e9:89:3d:2e:0b:b4:14: 2f:8f:80:80:a7:c9:d7:95:d1:60:6a:6e:6d:60:aa: 3d:28:df:78:6a:82:3e:26:d8:7f:ad:91:84:2d:94: 26:ed:e0:67:74:03:bd:e6:6f:4d:ce:7c:19:f2:3c: 4d:f8:e9:ad:30:43:ca:99:a8:47:f9:63:d6:dd:92: 8c:b2:63:e9:e9:e2:c5:74:bb:73:a4:4c:fa:51:f2: 67:63:5b:06:f0:9b:09:0d:0d:32:a8:da:17:63:30: f6:b3:a3:2a:4d:0f:30:98:e7:59:2a:68:c3:89:b2: ec:6a:a0:fb:49:ac:8a:27:3e:eb:7f:f5:20:a4:86: 6c:d5:69:a3:57:09:27:50:0c:79:4d:dd:fb:e0:9c: 09:a0:62:75:0a:b3:40:f4:c4:65:a1:2d:02:16:6f: 9d:1a:24:0a:a8:f4:61:24:dd:b7:57:2a:92:c7:e1: 35:3a:46:72:0d:e3:09:07:ac:fd:0c:f0:8a:16:78: 5f:fa:e6:d9:63:f7:40:c3:19:cf:56:2a:f5:06:af: 82:83:3d:7d:49:ac:46:7c:51:6e:e8:e2:46:f1:77: 84:20:2a:a1:c3:8a:20:fb:2e:23:7d:db:4a:b3:ca: b5:92:f9:1b:0a:91:36:b0:45:c6:ee:02:b7:bf:e4: 13:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:23:3C:EA:F5:9F:91:BC:58:08:64:95:A1:0F:C8:DF:18:A7:35:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/3aa15edc-b7c6-318d-9de6-46d235ff9320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 136.181.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:af:27:e9:11:6e:b2:7e:ae:68:c9:d7:60:8d:d2:a6:72:32: 59:50:b7:14:68:39:12:03:9a:97:cc:35:d9:9e:67:f1:28:57: 3b:ef:11:69:05:90:90:41:98:27:81:74:a9:03:4a:e2:24:4a: b3:55:c8:de:2d:9f:a7:4d:ec:5d:4a:14:6f:c7:a2:fd:a8:98: 60:a8:20:a6:07:fe:87:73:f8:06:a4:74:22:83:de:2f:fc:73: a5:95:ea:f5:37:43:1e:31:f2:6e:2e:7e:0b:57:40:4c:42:c9: ff:08:60:40:07:dc:2f:37:96:c8:ab:78:f2:e7:b7:b1:fc:57: ef:7e:e1:5a:4e:6f:4c:8e:45:f6:c7:9a:2d:aa:db:bd:1d:8e: ed:4c:9f:3d:33:59:96:c5:de:c3:e1:07:54:0f:e9:92:1e:fa: 0a:4a:17:6b:d7:94:ca:67:2a:d7:86:bb:9b:b0:64:9d:dd:f8: 0b:63:6a:f8:ba:96:2b:63:27:54:ad:ba:f1:a1:31:74:c1:44: 34:2f:d7:a7:ec:97:18:94:36:a3:dd:e6:40:73:3e:5f:c1:54: 55:53:4b:31:d5:52:e3:a0:f6:91:5b:74:cc:b9:6e:00:4e:b4: 31:a7:6c:98:84:95:10:f9:cd:2b:db:95:07:46:6b:f7:e7:5c: 69:da:c6:12 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuOrN1+HYliyBZA9cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk YmYxYmY1ZjAtMDE2MC00NzU1LWIwNjUtNDBlZjY0MDcxMmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjB8UOPbGNOmJPS4LtBQvj4CAp8nXldFgam5t YKo9KN94aoI+Jth/rZGELZQm7eBndAO95m9NznwZ8jxN+OmtMEPKmahH+WPW3ZKM smPp6eLFdLtzpEz6UfJnY1sG8JsJDQ0yqNoXYzD2s6MqTQ8wmOdZKmjDibLsaqD7 SayKJz7rf/UgpIZs1WmjVwknUAx5Td374JwJoGJ1CrNA9MRloS0CFm+dGiQKqPRh JN23VyqSx+E1OkZyDeMJB6z9DPCKFnhf+ubZY/dAwxnPVir1Bq+Cgz19SaxGfFFu 6OJG8XeEICqhw4og+y4jfdtKs8q1kvkbCpE2sEXG7gK3v+QTHwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFUjPOr1n5G8WAhklaEPyN8YpzVcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvM2FhMTVlZGMtYjdjNi0z MThkLTlkZTYtNDZkMjM1ZmY5MzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiLUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAB68n6RFusn6uaMnXYI3SpnIyWVC3FGg5EgOal8w12Z5n8ShXO+8RaQWQ kEGYJ4F0qQNK4iRKs1XI3i2fp03sXUoUb8ei/aiYYKggpgf+h3P4BqR0IoPeL/xz pZXq9TdDHjHybi5+C1dATELJ/whgQAfcLzeWyKt48ue3sfxX737hWk5vTI5F9sea LarbvR2O7UyfPTNZlsXew+EHVA/pkh76CkoXa9eUymcq14a7m7Bknd34C2Nq+LqW K2MnVK268aExdMFENC/Xp+yXGJQ2o93mQHM+X8FUVVNLMdVS46D2kVt0zLluAE60 MadsmISVEPnNK9uVB0Zr9+dcadrGEg== -----END CERTIFICATE-----Generated at Fri Oct 24 15:51:55 2025 by rpki-client