$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1c56ed5e-22d7-343f-88c7-1d6d6de0f5d1.roa File: 1c56ed5e-22d7-343f-88c7-1d6d6de0f5d1.roa (raw, json) Hash identifier: +qoMTPRgmL+NoPOkO+zwAWa8RtdpIvxivTJV4YYF/Ek= Subject key identifier: 75:66:17:14:43:62:D8:A1:8C:51:C2:8E:B3:51:8A:94:91:92:B6:24 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434CA7FA6C6F5420CD3593A0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1c56ed5e-22d7-343f-88c7-1d6d6de0f5d1.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.34.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:a7:fa:6c:6f:54:20:cd:35:93:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=717108d7-1861-4400-ab30-2d4c8ae86e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cb:ca:0c:7d:1b:2e:f9:2b:7f:f2:91:e7:a3: 8b:52:be:e3:55:02:23:61:cf:04:2d:b2:3b:fd:06: 8f:8a:bf:65:b2:04:23:b0:db:d1:a9:dc:99:3d:da: 21:7b:4e:b5:13:23:90:97:23:5a:48:be:b1:2b:c3: 76:ef:4c:6b:75:d3:6e:41:5f:94:82:3c:ac:99:09: 81:3a:6d:7a:ba:b2:b0:73:25:d8:cb:ee:4d:55:60: ab:16:06:0f:46:0b:8a:8c:a7:c2:64:86:58:78:2f: 9f:19:55:29:93:63:1f:27:61:42:0b:31:61:ae:8d: 4c:59:a6:f2:7f:06:96:c1:b3:c1:1a:75:2c:23:d7: 1d:71:03:52:d1:f4:5a:d7:60:15:61:cd:da:a3:4f: 3a:91:ee:69:0b:d8:ba:c2:38:79:5e:44:34:f7:01: 48:83:fb:93:44:fd:93:55:98:4c:19:70:26:52:91: 20:75:4f:5d:92:9b:11:28:b1:42:06:14:01:e5:6d: ac:d5:7c:dd:5d:4a:56:0a:00:09:d6:13:a3:a3:33: 9b:3f:40:fe:e7:dc:2e:b4:ae:ea:62:ee:ba:d8:55: 07:07:d5:9f:cb:b9:02:b4:78:88:0f:f8:fc:3f:46: a0:11:e8:91:4d:05:20:7d:61:31:ba:ec:b4:27:df: 25:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:66:17:14:43:62:D8:A1:8C:51:C2:8E:B3:51:8A:94:91:92:B6:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1c56ed5e-22d7-343f-88c7-1d6d6de0f5d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.34.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:fa:70:03:2e:9a:e1:ea:6b:5c:65:3c:a2:e7:dc:bf:9e:87: 64:a0:75:ac:e3:3b:00:4b:1a:40:28:2d:16:16:a0:13:ee:2e: e1:85:1b:a3:6d:70:53:b9:5e:db:ab:a4:ff:0e:df:56:ac:99: 29:77:52:b2:ce:5c:5c:48:1d:4d:f2:08:f6:e2:64:cb:e6:99: e3:3f:9c:73:b7:74:6d:44:35:0e:12:65:1c:19:e5:19:9b:fb: 6b:30:88:a3:03:d8:0e:ba:3c:97:6c:6d:fb:e0:6a:26:05:b9: 54:0e:d0:ca:1e:17:45:67:c6:e3:f4:2a:7d:00:c6:77:b5:b8: d0:37:f4:ff:ff:9b:fa:bf:69:6a:ae:5b:84:c4:8d:6d:c0:d2: b5:2b:90:cd:86:32:af:79:89:49:a2:f2:03:6d:05:44:5c:42: 06:64:2a:70:fb:06:33:82:e8:ca:d4:86:2f:d8:45:f4:57:50: 8a:f9:dc:dd:4b:41:d0:b0:b9:d0:4b:fd:b8:72:07:b0:47:10: 33:39:34:ff:d7:0c:e3:82:ef:cb:a2:40:e6:6c:16:07:3d:4d: 2c:35:6c:c6:94:a2:87:c0:a9:21:d3:31:6a:09:dc:e7:a4:53: 5e:3c:76:94:cb:7a:46:83:fb:1d:9a:f6:39:d0:42:8a:6d:36: 6d:6b:31:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTKf6bG9UIM01k6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk NzE3MTA4ZDctMTg2MS00NDAwLWFiMzAtMmQ0YzhhZTg2ZTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18vKDH0bLvkrf/KR56OLUr7jVQIjYc8ELbI7 /QaPir9lsgQjsNvRqdyZPdohe061EyOQlyNaSL6xK8N270xrddNuQV+UgjysmQmB Om16urKwcyXYy+5NVWCrFgYPRguKjKfCZIZYeC+fGVUpk2MfJ2FCCzFhro1MWaby fwaWwbPBGnUsI9cdcQNS0fRa12AVYc3ao086ke5pC9i6wjh5XkQ09wFIg/uTRP2T VZhMGXAmUpEgdU9dkpsRKLFCBhQB5W2s1XzdXUpWCgAJ1hOjozObP0D+59wutK7q Yu662FUHB9Wfy7kCtHiID/j8P0agEeiRTQUgfWExuuy0J98lJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVmFxRDYtihjFHCjrNRipSRkrYkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMWM1NmVkNWUtMjJkNy0z NDNmLTg4YzctMWQ2ZDZkZTBmNWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGD6cAMumuHqa1xlPKLn3L+eh2SgdazjOwBLGkAoLRYWoBPuLuGFG6Nt cFO5XturpP8O31asmSl3UrLOXFxIHU3yCPbiZMvmmeM/nHO3dG1ENQ4SZRwZ5Rmb +2swiKMD2A66PJdsbfvgaiYFuVQO0MoeF0VnxuP0Kn0Axne1uNA39P//m/q/aWqu W4TEjW3A0rUrkM2GMq95iUmi8gNtBURcQgZkKnD7BjOC6MrUhi/YRfRXUIr53N1L QdCwudBL/bhyB7BHEDM5NP/XDOOC78uiQOZsFgc9TSw1bMaUoofAqSHTMWoJ3Oek U148dpTLekaD+x2a9jnQQoptNm1rMXg= -----END CERTIFICATE-----Generated at Wed Nov 5 06:05:12 2025 by rpki-client