$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/23d14435-ccb8-3d0a-9176-fd2283896863.roa File: 23d14435-ccb8-3d0a-9176-fd2283896863.roa (raw, json) Hash identifier: FOUJUGAKIjplb9YzC+OZNbvzWUbORvbtkflOLE1Ds9c= Subject key identifier: AE:28:11:AD:2D:8A:CA:55:19:9D:12:E0:3A:B0:0A:61:64:77:CC:CE Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C558F5925896F2DCBEC00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/23d14435-ccb8-3d0a-9176-fd2283896863.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.47.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:55:8f:59:25:89:6f:2d:cb:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=c46109bf-9fe5-465d-a49d-ae8ceac1bef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:91:45:6e:8f:12:20:96:90:2d:cf:80:92:0f: 4a:e0:70:0f:ef:09:be:ff:99:f8:e2:af:2e:ed:67: b8:8c:d5:d5:c9:c8:01:84:10:6b:a3:93:92:32:9f: 38:20:15:6f:c1:f7:a2:6c:94:26:68:ca:0b:ce:14: dd:df:20:fd:23:3f:f6:2a:bd:f3:cd:dd:8f:b9:d1: 10:ae:a5:c1:27:12:c1:6b:bc:fc:a4:20:0c:4e:ff: 40:00:ac:74:8a:1f:9d:5f:92:2a:fb:cb:9b:eb:1a: 2b:0c:9f:59:7c:a2:42:b5:fe:f7:6e:00:22:10:4d: e8:56:95:c1:9e:10:b0:f8:90:9d:88:18:5c:48:83: 74:eb:90:cc:aa:3f:16:6e:42:1d:58:38:f1:37:95: 66:d9:41:f2:0a:b4:b1:dc:d4:f8:93:59:ae:eb:71: 6e:49:37:62:50:cc:de:e4:bb:b2:61:54:5f:2b:bd: 1e:ad:8e:49:1d:bb:a1:bf:e4:1a:12:78:89:c8:23: 70:ea:1b:53:a1:c6:7c:76:0a:21:ca:59:ae:dd:40: a9:53:6e:9c:11:13:5b:b4:3d:dd:48:f8:cb:35:2d: 6e:3d:a7:36:48:c9:09:9f:c6:8b:89:73:a8:d6:ca: ad:32:0a:e7:28:ef:53:79:b4:b8:44:e6:1b:43:95: ef:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:28:11:AD:2D:8A:CA:55:19:9D:12:E0:3A:B0:0A:61:64:77:CC:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/23d14435-ccb8-3d0a-9176-fd2283896863.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.47.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:36:88:f3:d7:3e:7c:61:13:6d:82:04:21:03:a4:fa:ad:77: c7:24:3b:78:1f:a9:b0:d4:22:20:ac:12:3a:e4:a9:3e:26:6a: 84:13:7e:59:68:7e:3f:8b:a0:5c:33:71:cf:57:0a:bb:c2:8f: f7:fc:d9:87:36:30:9f:f2:52:13:f6:a5:cd:7f:d9:bb:36:51: 45:4b:cb:fb:7d:79:96:a5:44:62:bf:54:84:b0:07:6e:f3:1f: 75:5f:75:2c:a9:f8:e7:7b:72:b0:43:04:83:e0:5e:e5:f0:b2: 5d:28:e2:ff:fe:b2:56:6c:d3:0e:7a:53:af:7d:35:5a:77:3a: a6:1a:ec:a8:6c:ed:38:3e:9d:6b:3c:63:77:f0:cd:e1:9f:24: cb:21:c0:7d:e2:16:60:17:47:ba:95:f9:b3:9b:de:58:a6:dd: cf:96:3e:e8:bf:c0:33:14:df:17:91:ce:ef:e0:4b:32:9d:81: e9:79:1d:3d:64:96:91:b6:e4:da:7f:9d:87:fe:9f:ac:d1:e1: a4:96:c9:0d:16:78:76:57:5f:ba:90:5d:f7:e2:5e:23:11:d8: b1:0a:77:1d:77:62:13:1e:17:b3:e5:f1:f6:99:f2:d3:2b:55: 02:e0:37:ad:53:97:98:85:e8:04:0a:6d:58:8c:ce:3a:71:29: 81:0a:04:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTFWPWSWJby3L7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk YzQ2MTA5YmYtOWZlNS00NjVkLWE0OWQtYWU4Y2VhYzFiZWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpFFbo8SIJaQLc+Akg9K4HAP7wm+/5n44q8u 7We4jNXVycgBhBBro5OSMp84IBVvwfeibJQmaMoLzhTd3yD9Iz/2Kr3zzd2PudEQ rqXBJxLBa7z8pCAMTv9AAKx0ih+dX5Iq+8ub6xorDJ9ZfKJCtf73bgAiEE3oVpXB nhCw+JCdiBhcSIN065DMqj8WbkIdWDjxN5Vm2UHyCrSx3NT4k1mu63FuSTdiUMze 5LuyYVRfK70erY5JHbuhv+QaEniJyCNw6htTocZ8dgohylmu3UCpU26cERNbtD3d SPjLNS1uPac2SMkJn8aLiXOo1sqtMgrnKO9TebS4ROYbQ5XvEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4oEa0tispVGZ0S4DqwCmFkd8zOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMjNkMTQ0MzUtY2NiOC0z ZDBhLTkxNzYtZmQyMjgzODk2ODYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiC/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE02iPPXPnxhE22CBCEDpPqtd8ckO3gfqbDUIiCsEjrkqT4maoQTfllo fj+LoFwzcc9XCrvCj/f82Yc2MJ/yUhP2pc1/2bs2UUVLy/t9eZalRGK/VISwB27z H3VfdSyp+Od7crBDBIPgXuXwsl0o4v/+slZs0w56U699NVp3OqYa7Khs7Tg+nWs8 Y3fwzeGfJMshwH3iFmAXR7qV+bOb3lim3c+WPui/wDMU3xeRzu/gSzKdgel5HT1k lpG25Np/nYf+n6zR4aSWyQ0WeHZXX7qQXffiXiMR2LEKdx13YhMeF7Pl8faZ8tMr VQLgN61Tl5iF6AQKbViMzjpxKYEKBG8= -----END CERTIFICATE-----Generated at Wed Nov 5 06:10:47 2025 by rpki-client