$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/497d53dc-1fae-3b1d-96f4-fd0efca81ac6.roa File: 497d53dc-1fae-3b1d-96f4-fd0efca81ac6.roa (raw, json) Hash identifier: FgZ16a70ZfC4fiO2p2EZ8Mf+GLaUU9bs67Bq3V6QfTE= Subject key identifier: 1C:74:38:6B:D8:26:D0:DA:4F:08:97:E9:32:31:72:43:84:62:CD:73 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584BAD624B406912E12925BD83A0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/497d53dc-1fae-3b1d-96f4-fd0efca81ac6.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 16591 IP address blocks: 136.39.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:4b:40:69:12:e1:29:25:bd:83:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=ee9e3f63-92fe-4ec2-8cab-1007aa3fecb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:07:e6:87:e9:0e:0f:fb:68:72:b8:20:0d:77: dc:c6:41:ba:c4:63:0f:d6:59:2a:10:70:74:5b:cf: 67:e7:29:c7:74:5c:45:77:c6:cf:ff:3c:e9:3b:cb: a2:ae:19:2f:27:bf:b8:aa:79:cf:42:88:9a:16:0b: 3b:4a:c0:ec:99:81:6f:a9:c0:ef:d4:a3:6c:49:db: 9b:de:11:d1:39:d2:5a:65:d7:b2:32:fc:4c:c6:7f: 4f:e3:a9:9a:d9:70:50:8d:c9:e1:87:ec:27:57:16: 37:44:2b:29:c3:e2:8d:0e:e7:1c:8f:68:dd:44:6f: 2c:9c:a9:f9:27:f6:d4:b0:eb:71:cb:88:8d:40:bf: 87:8b:79:3b:18:ac:d7:30:d8:a8:1b:9e:f4:94:0b: 8e:d7:af:3b:a6:f8:78:7a:59:1b:77:ee:32:bf:48: a8:0a:c9:de:af:cb:04:86:5f:f1:fa:57:57:aa:e6: a3:13:98:24:1b:d0:33:d0:d5:18:f2:0a:fa:93:ba: 60:67:04:d3:4a:dd:4d:43:8e:d1:db:53:82:1d:d2: dd:2e:a9:13:b2:76:a6:fe:25:72:24:a6:d9:21:41: 9a:f7:76:63:ba:12:d1:a0:49:04:87:00:bd:5c:ef: 2a:a7:85:1c:28:88:d7:73:06:e0:b6:c6:1b:46:e1: eb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:74:38:6B:D8:26:D0:DA:4F:08:97:E9:32:31:72:43:84:62:CD:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/497d53dc-1fae-3b1d-96f4-fd0efca81ac6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.39.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:63:3f:cd:4f:0d:8d:f7:bf:03:0f:2a:26:30:51:71:ad:83: 14:b1:d5:9d:69:a1:25:20:85:28:db:b7:fc:3e:c5:28:be:ab: 90:6b:47:c2:c7:cd:f5:42:f2:98:52:03:e4:8d:bd:99:bb:5c: b9:fb:8e:41:87:8e:52:92:a4:1b:17:83:ee:f5:bc:f3:31:0e: f5:56:4f:46:3c:54:9f:f8:b0:8d:d8:a9:9d:bd:61:02:e6:cf: f1:a0:04:65:75:81:fd:09:2d:8f:2e:22:35:45:63:b3:7d:56: 3c:20:c2:5e:46:ce:01:74:21:34:05:e1:57:74:a6:81:3d:fc: ff:f2:69:55:2b:2b:da:0d:e5:36:1e:bd:f4:0a:83:8e:c5:58: 85:15:54:69:c9:23:1e:8c:80:04:b0:8c:2e:b1:52:0f:4c:15: 30:a3:c9:81:f6:83:93:7b:d0:d3:e2:64:e5:e9:bc:87:9f:b8: 88:ed:09:e1:99:67:48:4c:f8:7e:d0:0c:78:2a:31:c3:a8:3c: 67:ea:45:4d:fc:23:88:c0:e3:93:9b:93:05:a9:c9:a6:88:f4: 99:e1:d2:ee:58:be:4f:d8:2b:6d:82:60:6d:7d:35:4b:8c:23: 7e:9f:93:cb:ff:56:10:16:3c:1f:38:87:06:08:a8:9e:24:10: be:8f:97:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYktAaRLhKSW9g6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk ZWU5ZTNmNjMtOTJmZS00ZWMyLThjYWItMTAwN2FhM2ZlY2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAfmh+kOD/tocrggDXfcxkG6xGMP1lkqEHB0 W89n5ynHdFxFd8bP/zzpO8uirhkvJ7+4qnnPQoiaFgs7SsDsmYFvqcDv1KNsSdub 3hHROdJaZdeyMvxMxn9P46ma2XBQjcnhh+wnVxY3RCspw+KNDuccj2jdRG8snKn5 J/bUsOtxy4iNQL+Hi3k7GKzXMNioG570lAuO1687pvh4elkbd+4yv0ioCsner8sE hl/x+ldXquajE5gkG9Az0NUY8gr6k7pgZwTTSt1NQ47R21OCHdLdLqkTsnam/iVy JKbZIUGa93ZjuhLRoEkEhwC9XO8qp4UcKIjXcwbgtsYbRuHrMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBx0OGvYJtDaTwiX6TIxckOEYs1zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNDk3ZDUzZGMtMWZhZS0z YjFkLTk2ZjQtZmQwZWZjYTgxYWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5jP81PDY33vwMPKiYwUXGtgxSx1Z1poSUghSjbt/w+xSi+q5BrR8LH zfVC8phSA+SNvZm7XLn7jkGHjlKSpBsXg+71vPMxDvVWT0Y8VJ/4sI3YqZ29YQLm z/GgBGV1gf0JLY8uIjVFY7N9Vjwgwl5GzgF0ITQF4Vd0poE9/P/yaVUrK9oN5TYe vfQKg47FWIUVVGnJIx6MgASwjC6xUg9MFTCjyYH2g5N70NPiZOXpvIefuIjtCeGZ Z0hM+H7QDHgqMcOoPGfqRU38I4jA45ObkwWpyaaI9Jnh0u5Yvk/YK22CYG19NUuM I36fk8v/VhAWPB84hwYIqJ4kEL6Pl0Y= -----END CERTIFICATE-----Generated at Wed Nov 5 06:06:52 2025 by rpki-client