$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/3aa15edc-b7c6-318d-9de6-46d235ff9320.roa File: 3aa15edc-b7c6-318d-9de6-46d235ff9320.roa (raw, json) Hash identifier: mO18yH/kTfhvMdO63v6kLqlEYbCb0PxjmLuy78ticHc= Subject key identifier: A9:C2:94:5A:72:4D:32:1C:B1:FD:6D:62:8B:DF:E8:F8:C4:63:D2:ED Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa Certificate serial: 010D0C9F4328584AADF11465F505C54ADA4F5400 Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/3aa15edc-b7c6-318d-9de6-46d235ff9320.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 13325 IP address blocks: 136.181.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:14:65:f5:05:c5:4a:da:4f:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=6c63d994-6de4-4d46-a3ce-70c3d6852cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:38:b3:00:e7:7e:87:e2:f6:d9:78:59:04:c4: 2a:36:dd:e6:34:f8:1a:d3:98:59:b0:48:26:39:cc: 26:c7:b3:d8:5b:49:e3:02:50:cc:83:d0:23:d7:27: c7:21:bb:2a:92:63:4b:0c:a1:cb:cb:39:a8:db:6a: 01:54:69:e1:50:92:80:93:aa:55:06:0d:c2:f6:06: e7:a0:9f:b6:26:ad:fc:d5:b9:0e:cd:ba:4e:b1:6f: 3d:97:d8:43:bd:a7:5e:43:1d:19:fd:b4:6f:96:5d: 0e:d5:02:8d:06:a6:57:45:12:43:49:4a:97:77:8f: ba:1d:a9:88:2a:31:5f:5f:29:a9:46:59:20:92:22: 63:1f:ed:37:81:5a:9c:e5:a3:7f:ae:0f:8f:d1:ff: 9e:0a:62:13:d5:30:04:cd:c9:be:90:ee:eb:6c:be: 1e:e0:bd:32:be:0d:52:47:1d:bc:f7:55:2a:74:bb: 29:47:f2:3d:64:34:20:ed:a9:88:7e:9a:73:43:98: 34:8e:47:ed:30:56:b1:85:28:cd:a1:4c:37:f0:8c: ac:4b:51:c8:6d:09:e1:0a:19:44:bf:ac:23:ab:76: 85:6a:70:c6:a0:25:7a:1e:74:12:17:fe:00:4d:8b: 4e:82:8a:6c:aa:d5:91:43:df:f2:14:95:7f:01:19: 2f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C2:94:5A:72:4D:32:1C:B1:FD:6D:62:8B:DF:E8:F8:C4:63:D2:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/3aa15edc-b7c6-318d-9de6-46d235ff9320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl X509v3 Authority Key Identifier: keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer sbgp-ipAddrBlock: critical IPv4: 136.181.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ba:d9:37:61:a5:fc:8c:14:05:0c:05:b8:20:25:e0:03:e2: e6:72:0c:85:cb:9c:f5:fa:39:80:2a:4a:15:42:b3:40:d4:5f: 95:5b:d7:7b:67:f5:5a:92:ff:d4:d2:2e:70:47:e1:57:ec:a4: 8d:4b:70:a3:8f:75:31:16:18:c3:a0:90:90:d5:d9:c2:46:04: 5c:9b:86:c1:0a:ab:f6:80:2d:ec:1b:ce:f5:c3:70:93:a4:35: 63:a4:f2:79:cf:68:1a:0e:5c:3a:30:6d:95:f4:73:ad:e8:f1: 59:97:62:7b:c1:ec:67:7d:c1:2d:da:e1:ed:95:80:04:b7:48: bc:32:8e:f9:16:2b:c5:1c:fc:0e:51:aa:eb:f3:5c:50:4a:c3: fd:53:6e:c4:70:5f:8c:01:02:52:76:97:5c:97:2d:a5:91:b8: 58:ba:5e:3d:ec:b7:33:61:ff:23:c6:76:ca:e2:08:b7:44:d6: bb:ee:82:6e:df:e2:f8:00:90:c8:e8:90:60:5c:30:22:f2:46: 42:a4:41:c6:81:67:52:d8:98:a5:60:6d:4d:1f:a6:0c:31:b9: 29:60:76:6d:33:81:01:78:8c:58:f6:ed:b1:b3:a1:f6:21:0d: 52:67:ed:74:23:db:86:54:82:e4:d8:bd:82:94:42:38:0b:aa: 2a:82:6b:2c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqt8RRl9QXFStpPVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJjYWU5OGUtOWEwMS00ODk4LTkwZDItMDc0Y2RlZWEy NGZhMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk NmM2M2Q5OTQtNmRlNC00ZDQ2LWEzY2UtNzBjM2Q2ODUyY2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjizAOd+h+L22XhZBMQqNt3mNPga05hZsEgm Ocwmx7PYW0njAlDMg9Aj1yfHIbsqkmNLDKHLyzmo22oBVGnhUJKAk6pVBg3C9gbn oJ+2Jq381bkOzbpOsW89l9hDvadeQx0Z/bRvll0O1QKNBqZXRRJDSUqXd4+6HamI KjFfXympRlkgkiJjH+03gVqc5aN/rg+P0f+eCmIT1TAEzcm+kO7rbL4e4L0yvg1S Rx2891UqdLspR/I9ZDQg7amIfppzQ5g0jkftMFaxhSjNoUw38IysS1HIbQnhChlE v6wjq3aFanDGoCV6HnQSF/4ATYtOgopsqtWRQ9/yFJV/ARkvKwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKnClFpyTTIcsf1tYovf6PjEY9LtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81MmNh ZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRjZGVlYTI0ZmEvM2FhMTVlZGMtYjdjNi0z MThkLTlkZTYtNDZkMjM1ZmY5MzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTJjYWU5OGUtOWEwMS00ODk4LTkw ZDItMDc0Y2RlZWEyNGZhLzUyY2FlOThlLTlhMDEtNDg5OC05MGQyLTA3NGNkZWVh MjRmYS5jcmwwHwYDVR0jBBgwFoAUBDLGlfMXIaw4FC0bNEkTmk7X/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81MmNhZTk4ZS05YTAxLTQ4OTgtOTBkMi0wNzRj ZGVlYTI0ZmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiLUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAVrrZN2Gl/IwUBQwFuCAl4APi5nIMhcuc9fo5gCpKFUKzQNRflVvXe2f1 WpL/1NIucEfhV+ykjUtwo491MRYYw6CQkNXZwkYEXJuGwQqr9oAt7BvO9cNwk6Q1 Y6Tyec9oGg5cOjBtlfRzrejxWZdie8HsZ33BLdrh7ZWABLdIvDKO+RYrxRz8DlGq 6/NcUErD/VNuxHBfjAECUnaXXJctpZG4WLpePey3M2H/I8Z2yuIIt0TWu+6Cbt/i +ACQyOiQYFwwIvJGQqRBxoFnUtiYpWBtTR+mDDG5KWB2bTOBAXiMWPbtsbOh9iEN UmftdCPbhlSC5Ni9gpRCOAuqKoJrLA== -----END CERTIFICATE-----Generated at Sat Aug 9 20:42:37 2025 by rpki-client