$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2f348aff-d1f0-3495-bcdc-90cf09c5f20c.roa File: 2f348aff-d1f0-3495-bcdc-90cf09c5f20c.roa (raw, json) Hash identifier: djyazdtJZKqJeUsspZVRJqycrjx1YdpBYBq00G1jrKQ= Subject key identifier: 77:76:CA:56:8B:1E:43:93:93:7B:02:B5:A1:FF:32:08:5F:93:3E:F0 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C9C756953AD7B71379840 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2f348aff-d1f0-3495-bcdc-90cf09c5f20c.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.61.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:9c:75:69:53:ad:7b:71:37:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=eb395055-d30f-4907-bf63-ef5ac30d804b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f4:43:29:a8:15:30:b2:25:a9:2a:bd:29:0d: 54:23:22:ec:45:e3:98:01:59:52:9e:70:eb:d3:84: b9:68:c8:e1:fd:ec:0f:04:03:29:ac:c7:2b:b8:44: e3:8e:9c:12:7f:b6:c9:8a:cb:d6:6c:e1:99:90:79: d1:1b:39:a1:73:09:59:be:55:ff:d6:ff:ca:7e:cc: 58:4c:79:9a:ad:90:9c:e2:64:fe:68:6b:f5:54:3d: f3:ad:a9:19:c8:ee:b5:07:74:ae:c5:4b:6d:7a:4a: 04:38:22:db:1f:f1:04:61:6b:67:c8:1a:91:f7:35: 55:c6:e1:b6:7d:92:05:f9:d2:60:19:65:48:5c:e8: ba:ea:a5:09:b0:b1:4b:f3:21:b9:60:32:6d:37:09: e3:93:82:6d:ca:8a:a2:1c:d8:7a:50:ef:00:c6:8d: c4:3f:67:bc:79:0b:6b:d4:d9:cc:ae:f2:5f:6a:13: 33:6b:5b:aa:dc:95:a6:9c:b5:3a:ff:93:0c:54:c2: c5:4c:c3:b4:5a:cf:66:0d:4a:5b:05:ca:2e:1e:32: 3c:5f:24:62:70:d0:09:34:81:42:09:45:88:4d:04: 61:22:99:bb:78:a8:dd:44:98:17:24:41:9a:a9:00: 19:66:ec:2d:d0:1c:30:1a:c0:96:61:78:c8:0d:bb: d6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:76:CA:56:8B:1E:43:93:93:7B:02:B5:A1:FF:32:08:5F:93:3E:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2f348aff-d1f0-3495-bcdc-90cf09c5f20c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.61.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:61:2c:cf:e4:55:5f:21:2c:80:39:14:2c:87:40:0c:e1:f6: 38:35:0c:2f:a3:77:50:e4:fd:d2:77:a7:41:c3:74:8c:02:31: ae:a1:d6:0c:bf:95:82:72:f7:9e:c6:ce:d2:7e:83:ba:12:c0: ea:4a:5c:3c:cf:8d:d4:a7:b6:59:1f:dc:73:5c:a8:15:1d:5c: 14:66:3a:34:7e:bf:d3:2f:1c:db:cd:76:db:a5:14:00:08:64: ff:27:35:aa:54:70:5a:f6:82:99:f2:5b:93:1d:75:38:cf:f0: ca:74:98:71:e3:9e:f7:1d:f2:6f:7a:e4:31:53:78:55:4d:ec: 23:d1:a7:1a:fb:76:23:5d:ad:41:e9:d0:81:59:50:51:d7:0a: 06:90:fe:c0:3c:21:1a:ba:b6:17:fc:54:5e:f9:49:42:9d:04: a8:55:33:56:59:ef:0e:62:2f:dd:96:4d:8e:7d:03:95:e1:01: b4:b4:62:07:11:a2:dc:15:04:6e:8b:29:21:6f:f1:62:fa:39: 82:08:8c:6b:5d:3d:e1:99:c0:da:18:56:17:e5:9a:a8:cf:da: a2:3d:ae:69:38:35:83:8d:18:fb:12:29:91:f4:84:86:26:58: 56:c0:7e:d6:5b:00:e0:41:b6:50:d8:e9:4d:7d:fb:95:47:cd: d8:33:6a:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTJx1aVOte3E3mEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk ZWIzOTUwNTUtZDMwZi00OTA3LWJmNjMtZWY1YWMzMGQ4MDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vRDKagVMLIlqSq9KQ1UIyLsReOYAVlSnnDr 04S5aMjh/ewPBAMprMcruETjjpwSf7bJisvWbOGZkHnRGzmhcwlZvlX/1v/KfsxY THmarZCc4mT+aGv1VD3zrakZyO61B3SuxUttekoEOCLbH/EEYWtnyBqR9zVVxuG2 fZIF+dJgGWVIXOi66qUJsLFL8yG5YDJtNwnjk4JtyoqiHNh6UO8Axo3EP2e8eQtr 1NnMrvJfahMza1uq3JWmnLU6/5MMVMLFTMO0Ws9mDUpbBcouHjI8XyRicNAJNIFC CUWITQRhIpm7eKjdRJgXJEGaqQAZZuwt0BwwGsCWYXjIDbvWAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHd2ylaLHkOTk3sCtaH/Mghfkz7wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMmYzNDhhZmYtZDFmMC0z NDk1LWJjZGMtOTBjZjA5YzVmMjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiD0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhhLM/kVV8hLIA5FCyHQAzh9jg1DC+jd1Dk/dJ3p0HDdIwCMa6h1gy/ lYJy957GztJ+g7oSwOpKXDzPjdSntlkf3HNcqBUdXBRmOjR+v9MvHNvNdtulFAAI ZP8nNapUcFr2gpnyW5MddTjP8Mp0mHHjnvcd8m965DFTeFVN7CPRpxr7diNdrUHp 0IFZUFHXCgaQ/sA8IRq6thf8VF75SUKdBKhVM1ZZ7w5iL92WTY59A5XhAbS0YgcR otwVBG6LKSFv8WL6OYIIjGtdPeGZwNoYVhflmqjP2qI9rmk4NYONGPsSKZH0hIYm WFbAftZbAOBBtlDY6U19+5VHzdgzagY= -----END CERTIFICATE-----Generated at Wed Nov 5 06:06:41 2025 by rpki-client