$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/96c60abd-645f-326f-b5a5-66908173a9c0.roa File: 96c60abd-645f-326f-b5a5-66908173a9c0.roa (raw, json) Hash identifier: sPwP1PrKNTwWhoqrdv6zt+eiGvcVpqmBMJPOcvD5R4Q= Subject key identifier: 70:1E:49:01:86:DE:23:38:07:74:33:E9:E3:9E:7A:A0:A9:AD:74:2F Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B74274DA8F8357DE38722D900 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/96c60abd-645f-326f-b5a5-66908173a9c0.roa Signing time: Wed 08 Oct 2025 13:00:37 +0000 ROA not before: Wed 08 Oct 2025 13:00:37 +0000 ROA not after: Tue 06 Jan 2026 14:00:37 +0000 asID: 16591 IP address blocks: 136.52.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:27:4d:a8:f8:35:7d:e3:87:22:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Oct 8 13:00:37 2025 GMT Not After : Jan 6 14:00:37 2026 GMT Subject: CN=65496bcb-2955-48e4-ae69-1bcd4b893aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:27:4c:8f:f7:e6:c2:78:69:0a:4d:cd:49:0e: 91:a0:26:c4:04:84:6a:c3:08:52:78:c7:9f:39:5d: bf:54:d8:0d:68:31:2b:94:33:16:96:2e:db:5a:e2: 39:08:61:b0:b4:74:d2:2c:86:4b:ba:cb:27:7e:de: 31:a7:36:6b:62:f3:1b:f4:9b:7a:f2:bb:6e:83:f4: 4b:5a:49:e6:40:8f:66:70:5e:ab:87:41:3b:7a:f2: ac:37:ee:ea:72:8b:1e:28:b1:05:8a:84:25:f0:57: a9:74:7e:eb:e3:98:bb:5a:ef:56:ee:77:b8:0f:cc: c0:8a:e0:cd:f4:86:2b:69:c9:b3:b0:15:c3:59:84: 88:51:f8:6a:dd:89:1c:a5:fc:a0:89:33:55:96:73: 74:30:1f:4d:4e:7c:db:29:2b:54:02:30:84:3c:e1: 88:6e:a6:15:6d:25:80:f9:e5:72:b9:fa:f0:49:26: 42:91:05:e2:46:fb:0f:21:f7:07:33:9a:db:0b:b1: 34:62:0b:54:4a:7e:60:c0:7b:a7:47:a7:b4:ce:31: d5:a6:ae:87:c7:9b:74:91:4b:f2:c5:c4:b8:30:ab: 0f:3d:73:0c:d8:e5:26:62:27:e8:70:f6:7b:3c:14: 88:c4:17:2a:75:80:cd:ba:f6:dc:97:19:2e:76:28: e3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:1E:49:01:86:DE:23:38:07:74:33:E9:E3:9E:7A:A0:A9:AD:74:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/96c60abd-645f-326f-b5a5-66908173a9c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.52.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:72:02:66:c3:af:26:95:eb:6f:98:64:97:bb:c7:e4:b4:97: 0d:53:e5:a3:81:de:49:71:b0:d6:8e:7c:6b:d8:00:d6:de:e6: 57:4e:c0:7b:63:ad:bc:2f:29:f9:6c:99:70:d3:5c:27:64:3c: 4e:38:70:0b:bc:90:02:ee:6f:fb:07:f8:52:cb:ee:37:aa:4d: 60:39:f5:7b:dc:b2:0d:97:00:72:fd:6d:ac:63:4f:8b:88:9e: 91:74:1d:ca:90:ab:b2:2e:74:67:fc:c5:4b:f3:7c:a8:6d:4f: 38:35:26:80:0c:8b:72:70:bd:9c:0c:d8:77:10:b6:79:8d:92: ca:f1:dd:5e:3b:61:e7:51:30:72:34:31:3a:ad:20:d0:cd:06: 92:29:57:e9:42:ef:c9:96:ec:89:c6:85:0d:29:77:0b:84:93: c7:9b:bd:78:f7:17:af:06:30:6d:13:39:21:40:35:0a:f9:47: d3:15:4d:3b:19:4e:cd:8b:fe:ec:51:54:86:22:67:87:ba:f8: 21:f1:52:94:e1:d0:bd:46:40:6d:6f:23:32:f6:24:3c:f6:e3: 43:2a:64:fb:67:c7:ad:49:0d:f7:cc:3f:50:dc:23:44:fd:47: 51:f0:50:17:e6:e8:d7:69:82:1c:b5:be:c5:78:d4:17:ec:d7: 29:08:ed:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt0J02o+DV944ci2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MTAwODEzMDAzN1oXDTI2MDEwNjE0MDAzN1owLzEtMCsGA1UEAxMk NjU0OTZiY2ItMjk1NS00OGU0LWFlNjktMWJjZDRiODkzYWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhidMj/fmwnhpCk3NSQ6RoCbEBIRqwwhSeMef OV2/VNgNaDErlDMWli7bWuI5CGGwtHTSLIZLussnft4xpzZrYvMb9Jt68rtug/RL WknmQI9mcF6rh0E7evKsN+7qcoseKLEFioQl8FepdH7r45i7Wu9W7ne4D8zAiuDN 9IYracmzsBXDWYSIUfhq3YkcpfygiTNVlnN0MB9NTnzbKStUAjCEPOGIbqYVbSWA +eVyufrwSSZCkQXiRvsPIfcHM5rbC7E0YgtUSn5gwHunR6e0zjHVpq6Hx5t0kUvy xcS4MKsPPXMM2OUmYifocPZ7PBSIxBcqdYDNuvbclxkudijjmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAeSQGG3iM4B3Qz6eOeeqCprXQvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvOTZjNjBhYmQtNjQ1Zi0z MjZmLWI1YTUtNjY5MDgxNzNhOWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVyAmbDryaV62+YZJe7x+S0lw1T5aOB3klxsNaOfGvYANbe5ldOwHtj rbwvKflsmXDTXCdkPE44cAu8kALub/sH+FLL7jeqTWA59Xvcsg2XAHL9baxjT4uI npF0HcqQq7IudGf8xUvzfKhtTzg1JoAMi3JwvZwM2HcQtnmNksrx3V47YedRMHI0 MTqtINDNBpIpV+lC78mW7InGhQ0pdwuEk8ebvXj3F68GMG0TOSFANQr5R9MVTTsZ Ts2L/uxRVIYiZ4e6+CHxUpTh0L1GQG1vIzL2JDz240MqZPtnx61JDffMP1DcI0T9 R1HwUBfm6Ndpghy1vsV41Bfs1ykI7UE= -----END CERTIFICATE-----Generated at Wed Nov 5 09:51:26 2025 by rpki-client