$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/980080a2-72d2-314d-82d9-d9da50db7505.roa File: 980080a2-72d2-314d-82d9-d9da50db7505.roa (raw, json) Hash identifier: B+ZZVLnlbAvtFxfhZivIhprrBpizICJM/EwhbvT2DrM= Subject key identifier: 6E:D1:F4:31:89:01:3D:31:93:7F:16:90:82:91:36:36:27:78:74:EC Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B84E76AFE717B5FE8911139C0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/980080a2-72d2-314d-82d9-d9da50db7505.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16591 IP address blocks: 136.58.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:6a:fe:71:7b:5f:e8:91:11:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=d273d806-0a08-4a87-866b-47a6305db829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a1:e0:ac:6b:76:0b:93:27:88:ab:bc:2a:8e: 78:b6:1c:5f:1e:6a:10:3d:bf:57:35:41:9a:3a:8b: 8d:a8:7c:7d:65:dc:42:b4:d8:fb:5b:8c:b9:4d:b2: ad:5c:3c:44:02:75:af:8e:c8:31:77:b5:3c:e3:0c: 63:f0:57:95:28:63:26:03:25:de:4e:eb:51:eb:26: c1:58:95:92:76:ea:55:5f:c1:92:52:96:5c:8c:7a: 32:11:ab:fc:2b:fc:75:8d:d5:85:a3:c7:1d:a0:09: 4b:39:55:c4:54:71:22:27:c2:c9:8c:e3:53:33:15: c2:4d:4b:fb:8e:69:4b:63:8e:8c:7f:8d:df:e7:c2: c0:3b:c0:b8:eb:6b:35:49:d6:5d:cf:e5:18:eb:9f: 88:2f:d5:8f:70:a8:ff:92:52:b2:4d:f6:3c:2e:c4: 19:c6:dc:10:aa:a9:8b:6a:91:84:16:0c:4b:e0:08: c0:80:0e:41:f8:89:be:ab:f4:55:58:75:84:23:69: 27:a4:5d:d7:32:d5:85:d4:bf:b0:16:44:f5:31:0f: 3c:b0:e4:ba:a8:9d:4a:10:64:a1:cc:f3:ed:10:ae: 4a:0b:3a:0a:8a:c2:46:a0:a1:cd:dd:8c:59:bd:2a: 5e:f0:64:2a:ca:10:d9:a4:01:55:29:bd:40:20:77: 46:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D1:F4:31:89:01:3D:31:93:7F:16:90:82:91:36:36:27:78:74:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/980080a2-72d2-314d-82d9-d9da50db7505.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.58.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:55:f7:0d:8a:83:2c:ba:ed:ff:af:39:51:fc:e3:84:05:90: d0:59:00:65:20:76:65:fd:93:77:ac:5b:bf:d4:89:79:b0:23: 24:7e:14:9c:99:39:53:4f:bf:66:89:1f:43:ae:38:c8:f9:ed: ff:30:bd:cb:cb:65:ef:8d:22:b4:11:80:83:e3:35:fe:62:2f: ee:5f:2f:79:aa:28:c1:79:47:6a:8d:24:39:04:6e:aa:5c:47: 30:a4:d1:34:6a:1a:93:fa:37:9e:bb:82:f9:fb:b6:45:0f:70: 25:0b:d2:fa:ad:f5:a7:69:05:0a:5b:5b:28:1d:14:ac:22:25: 09:04:eb:a8:7e:3c:2b:27:9c:e9:ec:ac:37:b7:d4:84:a7:a5: 36:fa:3e:88:52:aa:1a:bd:53:d0:d0:0b:3f:a7:9b:ce:b8:35: a0:a8:18:0a:60:e8:7f:d6:87:73:09:3b:60:25:de:65:03:3f: 82:23:e8:b5:cf:e4:b3:a9:b8:33:65:22:e9:2c:bb:60:7d:1c: c6:f5:87:01:d0:af:b5:dd:19:99:89:fc:04:a4:33:97:cd:c3: 94:f4:51:51:21:38:5d:1e:d3:50:04:fe:95:62:08:28:83:89: c2:91:3c:d4:eb:4c:1d:6a:82:cd:c7:e6:af:25:8b:e6:af:5a: e5:9a:a9:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE52r+cXtf6JEROcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk ZDI3M2Q4MDYtMGEwOC00YTg3LTg2NmItNDdhNjMwNWRiODI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaHgrGt2C5MniKu8Ko54thxfHmoQPb9XNUGa OouNqHx9ZdxCtNj7W4y5TbKtXDxEAnWvjsgxd7U84wxj8FeVKGMmAyXeTutR6ybB WJWSdupVX8GSUpZcjHoyEav8K/x1jdWFo8cdoAlLOVXEVHEiJ8LJjONTMxXCTUv7 jmlLY46Mf43f58LAO8C462s1SdZdz+UY65+IL9WPcKj/klKyTfY8LsQZxtwQqqmL apGEFgxL4AjAgA5B+Im+q/RVWHWEI2knpF3XMtWF1L+wFkT1MQ88sOS6qJ1KEGSh zPPtEK5KCzoKisJGoKHN3YxZvSpe8GQqyhDZpAFVKb1AIHdGKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG7R9DGJAT0xk38WkIKRNjYneHTsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvOTgwMDgwYTItNzJkMi0z MTRkLTgyZDktZDlkYTUwZGI3NTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhV9w2Kgyy67f+vOVH844QFkNBZAGUgdmX9k3esW7/UiXmwIyR+FJyZ OVNPv2aJH0OuOMj57f8wvcvLZe+NIrQRgIPjNf5iL+5fL3mqKMF5R2qNJDkEbqpc RzCk0TRqGpP6N567gvn7tkUPcCUL0vqt9adpBQpbWygdFKwiJQkE66h+PCsnnOns rDe31ISnpTb6PohSqhq9U9DQCz+nm864NaCoGApg6H/Wh3MJO2Al3mUDP4Ij6LXP 5LOpuDNlIuksu2B9HMb1hwHQr7XdGZmJ/ASkM5fNw5T0UVEhOF0e01AE/pViCCiD icKRPNTrTB1qgs3H5q8li+avWuWaqRM= -----END CERTIFICATE-----Generated at Wed Nov 5 09:50:59 2025 by rpki-client