$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2a6696a7-932c-33f0-8980-bef83d9fb70c.roa File: 2a6696a7-932c-33f0-8980-bef83d9fb70c.roa (raw, json) Hash identifier: HDcJTFknFTCVkAS0PBgJxZ3A0XufSgLejurmLGNDAuc= Subject key identifier: AD:6A:E3:72:DD:F4:B2:1D:56:D6:8B:65:CA:75:64:CF:77:47:66:95 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C9BADE4A3D5113201B4D0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2a6696a7-932c-33f0-8980-bef83d9fb70c.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.35.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:9b:ad:e4:a3:d5:11:32:01:b4:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=8e9b2a32-19c7-41d7-8d1d-b79e23fa5eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f8:06:9f:1b:dc:bf:98:35:8d:21:ab:cd:4d: 53:e6:98:72:47:e5:cd:09:cd:df:49:b3:c7:0a:6f: 60:cd:7c:f9:5a:4f:51:a5:fd:09:48:da:c1:38:d5: a8:9b:dd:9a:8f:00:d6:db:77:2a:9c:21:33:61:d9: 4e:1d:f7:f7:e4:16:75:83:81:2d:bd:c1:e6:5c:ba: fb:3f:22:89:77:fa:98:17:f9:c7:af:f1:2d:b4:1a: 75:a8:e0:a9:dc:d5:50:9c:97:54:2a:84:d7:a3:a8: 57:46:b8:41:2c:45:22:52:fd:40:49:da:35:20:12: 5c:8a:ab:e5:81:55:2b:82:4a:59:06:ed:70:85:8a: 73:5b:31:b7:ff:be:4b:eb:fc:59:4a:f0:dc:5c:22: ae:cf:7f:f2:0a:e6:b2:b7:9b:b1:cf:e1:01:7c:1e: 2a:2f:40:77:5c:67:27:be:77:ad:27:d6:63:2a:6a: a4:21:bc:bb:55:eb:91:9e:52:11:02:04:2c:f1:6d: d4:8e:52:4a:f9:fe:34:44:28:06:d8:09:f7:52:14: a5:1b:79:d6:d5:d9:05:5c:c1:48:6b:fd:12:12:93: b1:9c:4b:80:98:67:8f:88:9c:9b:f1:59:58:40:18: 28:b6:ca:5b:a3:73:2b:25:92:db:3d:0f:30:6c:c1: b6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:6A:E3:72:DD:F4:B2:1D:56:D6:8B:65:CA:75:64:CF:77:47:66:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2a6696a7-932c-33f0-8980-bef83d9fb70c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.35.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:3f:1b:e0:41:fb:3d:d2:c6:c1:59:93:3c:c2:11:4f:a8:cd: f0:f7:fb:c3:09:74:72:16:05:5d:84:2e:43:35:49:5a:e9:e4: 49:64:99:5b:53:a2:eb:5f:77:5c:f8:0e:94:fb:61:81:84:81: 65:eb:67:53:09:36:f2:8f:3b:47:8b:71:ba:a3:3a:01:01:5f: 99:fd:dc:80:87:80:c1:1c:56:06:d3:ae:97:f3:9c:51:82:2b: 5d:29:61:a0:4e:0d:bd:28:9e:66:12:98:82:15:a5:6e:4d:4e: dc:d2:0e:51:4f:f3:43:9c:40:ff:63:1c:56:94:5f:d4:c4:dd: fe:c3:d9:58:79:85:92:23:3d:34:ce:35:1d:e3:15:da:ae:3e: 5c:a1:0b:2c:92:56:82:be:74:c0:fd:d6:0f:54:4d:ff:e8:6e: db:b2:af:85:fa:30:95:0a:ba:65:a3:96:16:46:1b:82:2e:d7: a0:c9:e3:ef:b0:75:6b:d9:b7:a9:d9:fd:67:a1:4f:9d:b9:2a: 0f:48:75:4e:3e:d6:ec:88:9f:17:86:98:ce:f4:67:af:19:e0: 3f:00:1a:b2:0e:9b:e9:f1:70:4a:5b:eb:5d:b0:75:6c:98:fb: be:cf:bf:6e:53:04:40:7a:f5:ba:9d:f7:30:a9:a0:d7:88:ef: c0:ae:9f:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTJut5KPVETIBtNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk OGU5YjJhMzItMTljNy00MWQ3LThkMWQtYjc5ZTIzZmE1ZWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPgGnxvcv5g1jSGrzU1T5phyR+XNCc3fSbPH Cm9gzXz5Wk9Rpf0JSNrBONWom92ajwDW23cqnCEzYdlOHff35BZ1g4EtvcHmXLr7 PyKJd/qYF/nHr/EttBp1qOCp3NVQnJdUKoTXo6hXRrhBLEUiUv1ASdo1IBJciqvl gVUrgkpZBu1whYpzWzG3/75L6/xZSvDcXCKuz3/yCuayt5uxz+EBfB4qL0B3XGcn vnetJ9ZjKmqkIby7VeuRnlIRAgQs8W3UjlJK+f40RCgG2An3UhSlG3nW1dkFXMFI a/0SEpOxnEuAmGePiJyb8VlYQBgotspbo3MrJZLbPQ8wbMG2JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1q43Ld9LIdVtaLZcp1ZM93R2aVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMmE2Njk2YTctOTMyYy0z M2YwLTg5ODAtYmVmODNkOWZiNzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADA/G+BB+z3SxsFZkzzCEU+ozfD3+8MJdHIWBV2ELkM1SVrp5ElkmVtT outfd1z4DpT7YYGEgWXrZ1MJNvKPO0eLcbqjOgEBX5n93ICHgMEcVgbTrpfznFGC K10pYaBODb0onmYSmIIVpW5NTtzSDlFP80OcQP9jHFaUX9TE3f7D2Vh5hZIjPTTO NR3jFdquPlyhCyySVoK+dMD91g9UTf/obtuyr4X6MJUKumWjlhZGG4Iu16DJ4++w dWvZt6nZ/WehT525Kg9IdU4+1uyInxeGmM70Z68Z4D8AGrIOm+nxcEpb612wdWyY +77Pv25TBEB69bqd9zCpoNeI78Cun8E= -----END CERTIFICATE-----Generated at Wed Nov 5 06:06:55 2025 by rpki-client