$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/5135d0bf-2fc2-3d54-8231-70f4574ebf28.roa File: 5135d0bf-2fc2-3d54-8231-70f4574ebf28.roa (raw, json) Hash identifier: Hkqym6zpbajWtDMYPHLaIuGUY94yvdf/5oiIUbaHdQI= Subject key identifier: 31:71:E7:E6:A0:94:F6:6C:42:F7:F6:02:42:53:76:80:93:FF:BE:C2 Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F4328584B8EACDDB3C84615333484F6A0 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/5135d0bf-2fc2-3d54-8231-70f4574ebf28.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 13325 IP address blocks: 167.240.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:dd:b3:c8:46:15:33:34:84:f6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=2136a913-c43d-4114-9ba2-668972e9f3aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e9:27:3d:ba:e0:9d:39:52:af:9f:27:4b:cd: 08:24:ea:7c:12:70:80:31:38:41:3d:4a:d7:e5:46: 42:86:26:da:db:ce:76:a7:57:ad:6f:c1:9f:48:67: 83:22:a5:a0:16:24:20:d0:fe:9a:6d:19:79:19:b0: 27:ef:6e:d7:14:54:41:a4:ef:5b:76:52:37:01:31: 5a:bd:73:49:9a:86:fe:60:48:27:af:73:2e:4f:d5: 2e:41:28:02:63:f5:b5:58:60:c6:1c:c8:a5:30:a5: 0e:a0:a2:38:e2:7a:a7:73:33:97:15:e4:ba:49:a1: 8a:40:42:bc:ed:b7:fb:e7:95:e9:0e:27:95:12:8a: 41:6e:d2:27:be:76:83:b9:58:af:3b:8e:e2:7f:e0: f5:31:44:37:72:5d:da:af:af:fa:11:d2:43:65:24: 1a:6f:ed:3f:ed:7e:4e:c7:4c:7a:a1:c5:a1:50:01: 67:bc:98:28:d4:a5:f0:11:e6:0c:ac:d0:cf:fa:b6: b2:f4:cd:74:e1:ff:33:0d:d2:92:e2:04:62:e3:c5: d1:8d:62:0a:a5:54:0c:af:75:42:de:38:64:95:d2: b8:00:fc:84:fc:41:6b:52:83:ab:01:5b:4f:88:8e: 61:24:dc:9a:ef:b3:58:a7:69:d8:51:02:8c:aa:7c: 1e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:71:E7:E6:A0:94:F6:6C:42:F7:F6:02:42:53:76:80:93:FF:BE:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/5135d0bf-2fc2-3d54-8231-70f4574ebf28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 167.240.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:66:7c:99:49:96:5f:a8:ac:b1:99:66:94:62:4b:06:e8:03: 8a:7e:6a:7a:29:78:cc:fe:d3:67:ce:79:5f:c5:a8:fc:80:82: 9e:61:ff:52:d7:a4:5e:46:f9:87:4f:28:eb:4e:9d:b4:f8:f7: 23:ab:f2:e0:46:f2:a5:54:3b:76:ca:33:85:04:b2:99:e5:c4: a2:95:78:32:da:8a:7d:cd:d3:86:e6:83:3e:b1:e7:ac:ed:ad: a6:35:0b:c0:37:91:0f:6a:1b:42:b6:b7:a5:a1:ee:89:97:eb: fa:c4:d4:f7:f5:29:5f:a0:b0:55:c5:7f:fb:a1:36:94:6c:eb: 53:95:26:5f:56:55:7a:26:6f:05:92:fb:7a:85:7b:5c:f0:15: 28:2d:d3:3a:88:57:ae:d7:f8:c9:b6:89:30:f2:2e:4b:70:eb: d2:c6:54:c1:33:40:65:6c:50:ed:07:a8:66:6b:54:90:fb:55: ca:a9:96:bd:8e:e5:7c:90:d3:50:b3:5f:d0:3c:ad:9e:15:33: 09:47:a6:f6:73:73:48:6f:fa:9e:49:71:64:df:e6:57:9b:7d: 84:c1:45:c4:df:9b:41:c7:26:e4:a5:d9:e4:63:2b:f1:b1:55: 80:3a:00:ac:5d:02:07:15:44:5d:9c:15:ab:02:13:f7:35:5b: 31:62:34:60 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuOrN2zyEYVMzSE9qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MjEzNmE5MTMtYzQzZC00MTE0LTliYTItNjY4OTcyZTlmM2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruknPbrgnTlSr58nS80IJOp8EnCAMThBPUrX 5UZChiba2852p1etb8GfSGeDIqWgFiQg0P6abRl5GbAn727XFFRBpO9bdlI3ATFa vXNJmob+YEgnr3MuT9UuQSgCY/W1WGDGHMilMKUOoKI44nqnczOXFeS6SaGKQEK8 7bf755XpDieVEopBbtInvnaDuVivO47if+D1MUQ3cl3ar6/6EdJDZSQab+0/7X5O x0x6ocWhUAFnvJgo1KXwEeYMrNDP+ray9M104f8zDdKS4gRi48XRjWIKpVQMr3VC 3jhkldK4APyE/EFrUoOrAVtPiI5hJNya77NYp2nYUQKMqnwepwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDFx5+aglPZsQvf2AkJTdoCT/77CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvNTEzNWQwYmYtMmZjMi0z ZDU0LTgyMzEtNzBmNDU3NGViZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAp/AwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAX2Z8mUmWX6issZlmlGJLBugDin5qeil4zP7TZ855X8Wo/ICCnmH/Utek Xkb5h08o606dtPj3I6vy4EbypVQ7dsozhQSymeXEopV4MtqKfc3ThuaDPrHnrO2t pjULwDeRD2obQra3paHuiZfr+sTU9/UpX6CwVcV/+6E2lGzrU5UmX1ZVeiZvBZL7 eoV7XPAVKC3TOohXrtf4ybaJMPIuS3Dr0sZUwTNAZWxQ7QeoZmtUkPtVyqmWvY7l fJDTULNf0DytnhUzCUem9nNzSG/6nklxZN/mV5t9hMFFxN+bQccm5KXZ5GMr8bFV gDoArF0CBxVEXZwVqwIT9zVbMWI0YA== -----END CERTIFICATE-----Generated at Wed Oct 22 00:44:45 2025 by rpki-client