$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/bf158f20-c503-30b9-8360-4c308164a27f.roa File: bf158f20-c503-30b9-8360-4c308164a27f.roa (raw, json) Hash identifier: DcztOSDHSTrueAHV6lm6dCoA738tl4gKWsNVp8kUNs8= Subject key identifier: 1B:87:3A:05:10:5B:11:0B:B4:4A:9B:AF:D8:75:A5:FE:64:DB:A1:C5 Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F4328584B4081A9382BDEFC42D0B80E00 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/bf158f20-c503-30b9-8360-4c308164a27f.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 19165 IP address blocks: 136.29.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:a9:38:2b:de:fc:42:d0:b8:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=4c7c8115-7c3c-4716-8e00-8fc83f4b63b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e2:c0:bf:fc:92:fe:53:d7:e5:d1:29:be:29: f2:57:6a:02:95:e6:5f:1b:31:57:88:7b:a7:c6:e3: f9:03:6a:d8:5b:8b:2b:82:ab:3d:12:b9:91:87:b4: 29:86:5b:38:1a:01:3b:be:fb:19:17:c7:2f:55:3c: 4f:e1:cf:df:e7:f2:41:8e:13:71:da:1f:3d:0b:97: 44:2e:1f:f9:c3:96:c4:8b:58:60:c0:2d:12:11:a7: 90:07:8b:65:05:30:8a:ea:72:1f:70:8c:23:c2:46: 67:62:d4:0a:2d:29:f4:f2:60:da:74:85:08:af:89: 32:57:14:1a:74:a1:13:44:64:ec:59:31:94:7e:65: 52:93:3b:e4:c2:50:30:a7:f7:dd:18:73:6f:1e:aa: e5:a9:bc:78:54:cd:d5:32:c6:bf:1c:02:8e:12:b3: 98:89:1d:76:b3:fa:7f:85:5d:9d:1b:fd:a9:42:be: e5:e6:34:d8:95:a6:69:6f:9f:46:31:91:cc:31:ca: 34:33:79:f4:13:69:3c:ea:57:3e:66:79:39:67:ab: b3:16:af:33:72:d0:3e:16:8d:5a:a8:30:35:1b:0a: 83:ef:9c:32:75:f1:40:41:9c:49:f7:b0:ca:bb:63: 19:be:1e:a0:3c:d3:e5:46:56:f2:93:bf:fb:36:19: 24:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:87:3A:05:10:5B:11:0B:B4:4A:9B:AF:D8:75:A5:FE:64:DB:A1:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/bf158f20-c503-30b9-8360-4c308164a27f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv4: 136.29.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:74:42:23:5a:6a:47:17:e9:2d:d7:14:22:6d:6c:3c:3d:47: f6:21:2c:6d:a7:04:01:ca:14:a8:a5:a2:c4:21:a6:01:72:7e: f7:27:25:87:67:ad:8e:14:3f:3a:da:8d:fe:6f:ae:93:ff:05: 78:85:3c:7d:50:00:72:88:59:15:e2:7e:af:39:9c:fa:ef:e6: 15:69:af:fb:a6:c2:5a:73:73:96:e9:f6:aa:b3:ac:e4:50:03: a9:a2:80:52:a5:b6:6d:a2:b8:e9:92:79:fb:4b:e0:ce:8a:9d: a9:c8:43:40:3e:9e:ee:11:a0:1c:cf:47:2d:9b:b9:41:43:13: 6a:35:2a:e4:70:9d:cc:98:32:35:45:50:98:64:20:ee:ba:ba: 2d:4f:3d:11:06:32:3e:71:b0:30:25:2e:1b:1a:d3:91:fe:55: 8b:1b:91:74:66:1b:eb:a7:fc:61:00:85:f2:eb:dc:7c:6e:da: 34:76:ed:bd:c0:de:5f:b5:db:5f:59:90:84:f3:d8:4c:71:0a: 0f:65:b6:d1:b9:b3:d4:64:ed:75:63:d3:a2:71:34:cd:ef:b1: a8:3d:c8:c3:03:22:26:a4:7a:0d:6b:20:55:b8:99:95:3c:44: ac:00:90:6b:9d:8b:a5:d7:39:9f:56:fd:cb:bf:12:10:0e:1a: 26:f8:34:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgak4K978QtC4DgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk NGM3YzgxMTUtN2MzYy00NzE2LThlMDAtOGZjODNmNGI2M2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeLAv/yS/lPX5dEpvinyV2oCleZfGzFXiHun xuP5A2rYW4srgqs9ErmRh7Qphls4GgE7vvsZF8cvVTxP4c/f5/JBjhNx2h89C5dE Lh/5w5bEi1hgwC0SEaeQB4tlBTCK6nIfcIwjwkZnYtQKLSn08mDadIUIr4kyVxQa dKETRGTsWTGUfmVSkzvkwlAwp/fdGHNvHqrlqbx4VM3VMsa/HAKOErOYiR12s/p/ hV2dG/2pQr7l5jTYlaZpb59GMZHMMco0M3n0E2k86lc+Znk5Z6uzFq8zctA+Fo1a qDA1GwqD75wydfFAQZxJ97DKu2MZvh6gPNPlRlbyk7/7Nhkk9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuHOgUQWxELtEqbr9h1pf5k26HFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvYmYxNThmMjAtYzUwMy0z MGI5LTgzNjAtNGMzMDgxNjRhMjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiB3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZ0QiNaakcX6S3XFCJtbDw9R/YhLG2nBAHKFKilosQhpgFyfvcnJYdn rY4UPzrajf5vrpP/BXiFPH1QAHKIWRXifq85nPrv5hVpr/umwlpzc5bp9qqzrORQ A6migFKltm2iuOmSeftL4M6KnanIQ0A+nu4RoBzPRy2buUFDE2o1KuRwncyYMjVF UJhkIO66ui1PPREGMj5xsDAlLhsa05H+VYsbkXRmG+un/GEAhfLr3Hxu2jR27b3A 3l+1219ZkITz2ExxCg9lttG5s9Rk7XVj06JxNM3vsag9yMMDIiakeg1rIFW4mZU8 RKwAkGudi6XXOZ9W/cu/EhAOGib4NJw= -----END CERTIFICATE-----Generated at Wed Nov 5 13:17:33 2025 by rpki-client